IOCReport

loading gif

Files

File Path
Type
Category
Malicious
COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx
Microsoft Word 2007+
initial sample
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Microsoft Cabinet archive data, 58596 bytes, 1 file
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
data
dropped
clean
C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\MP98E46N\www.ontario[1].xml
ASCII text, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\Q3DXH6Q1\www.youtube[1].xml
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{854E3008-9CB9-11EB-ADCF-ECF4BBB5915B}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{A66EC5B2-9CB9-11EB-ADCF-ECF4BBB5915B}.dat
Microsoft Word Document
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\lr5drzg\imagestore.dat
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\RUKONSLK.htm
HTML document, UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\api[1].js
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\app-data[1].json
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\app.min[1].js
UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\co-covid-19-icons-physical-distancing-2020-12-21[1].png
PNG image data, 104 x 96, 8-bit gray+alpha, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\co-covid-19-icons-self-assessment-2020-12-21[1].png
PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\co-covid-19-icons-stay-home-2020-12-21[1].png
PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\co-covid-19-icons-wear-a-mask-2020-12-21[1].png
PNG image data, 98 x 96, 8-bit gray+alpha, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\co-covid-vaccine-bg-light-purple-772x772-2021-03-04[1].jpg
[TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=1], baseline, precision 8, 772x772, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\co-covid-vaccine-page-intro-tall-704x1050-2020-12-24[1].jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 704x1050, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\component---src-pages-vaccine-locations-index-js-5583fc738e553f2ae798[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\component.min[1].js
UTF-8 Unicode text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\covidappbanner_240x182px[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\details.module[1].css
troff or preprocessor input, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\drupalSettingsLoader[1].js
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\effect-min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\favicon-32x32[1].png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\hidden.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\icon-alert-warning-white[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\ideas-to-combat-corona-virus[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\item-list.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\js.module[1].css
troff or preprocessor input, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\mobile-chevron-right[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\nowrap.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesite-angular-foundation.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesite-body.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesite-contact-us.min[1].js
ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesite-moment.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesite-search.min[1].js
UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesiteBreadcrumb[1].htm
HTML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesiteFootnotes[1].htm
HTML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesiteSearch[1].htm
exported SGML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesiteSearch[2].htm
exported SGML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesiteSearch[3].htm
HTML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesiteTaxonomies[1].htm
HTML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesite[1].woff
Web Open Font Format, TrueType, length 48360, version 1.0
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\ontario-a11y[1].js
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\ontario-icon-alert-warning[1].png
PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\ontario@2x[1].png
PNG image data, 360 x 91, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\open-sans-400-d0bad741aefb909e4be56d188b6f02b9[1].woff
Web Open Font Format, TrueType, length 14260, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\phone[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\phus[1].json
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\position-container.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\postalcodes[1].json
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\raleway-modified-400-79edfeb2a0670adbccb268d3b8f344f4[1].woff
Web Open Font Format, TrueType, length 18244, version 4.20
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\raleway-modified-400[1].woff
Web Open Font Format, TrueType, length 18244, version 4.20
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\report-price-gouging-during-corona-virus[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\secondary-navigation[1].js
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\splash[1].htm
HTML document, UTF-8 Unicode text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\spring-2021[1].jpg
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\template-page[1].htm
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\trillium_6[1].jpg
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 144x144, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\urlblockindex[1].bin
data
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\www-player[1].css
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\8a89caa9-511c-4568-af89-7f2174b4378c[1].json
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\PHULocator[1].png
PNG image data, 1542 x 184, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\Raleway-700[1].woff
Web Open Font Format, TrueType, length 16436, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\Z3VCRLT7.htm
HTML document, UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\ajax-progress.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\align.module[1].css
assembler source, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\analytics[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\app-a9735616a727a9b1be92[1].js
UTF-8 Unicode text, with very long lines, with NEL line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\back_to_top[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\back_to_top[1].js
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\banner-icon-alert-xsmall[1].png
PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\base[1].js
ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\book-vaccine[1].htm
HTML document, UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\co-covid-19-icons-workplace-2020-12-21[1].png
PNG image data, 101 x 101, 8-bit colormap, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\component.min[1].js
UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\covid-19-main-theme[1].css
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\favicon-32x32[1].png
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\favicon[1].ico
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\footer-default-supergraphic-logo[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\foundation-6-dropdown[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\jquery.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\libs.min[1].js
HTML document, UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\logo-serviceontario@2x[1].png
PNG image data, 314 x 76, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\logo-serviceontario@3x[1].png
PNG image data, 828 x 188, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\mainstylePHealthPortal-en[1].css
ASCII text, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\modernizr[1].js
HTML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesite-analytics.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesite-health.min[1].js
UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesite-holiday-pay-calculator.min[1].js
UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesite-live-chat.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesite-moment.min[1].js
ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesiteContentDate[1].htm
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesiteSearch[1].htm
HTML document, UTF-8 Unicode text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesiteSearch[2].htm
exported SGML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesiteSearch[3].htm
exported SGML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\ontario-header[1].js
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\ontario-icon--error[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\ontario-icon-new-window[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\open-sans-400--italic-4b52a816817a711e6971955c835ecfbb[1].woff
Web Open Font Format, TrueType, length 15076, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\open-sans-600[1].woff
Web Open Font Format, TrueType, length 24892, version 1.0
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\page-data[1].json
ASCII text, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\phulocator[1].htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\progress.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\raleway-modified-600-3728a086822b83f3645761f24e68304e[1].woff
Web Open Font Format, TrueType, length 18168, version 4.20
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\raleway-modified-600[1].woff
Web Open Font Format, TrueType, length 18168, version 4.20
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\raleway-modified-700[1].woff
Web Open Font Format, TrueType, length 18032, version 4.20
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\rendezvous-vaccin[1].htm
HTML document, UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\system-status-counter[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\system-status-report-counters[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\tools-assessment-centre[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\tools-check-results[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\tools-self-assessment[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\vaccine-banner_0[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\E73PA6oJJcj4lIMVhVoq8TDNFJPSyYzZcTIPIEc7fpc[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\api[1].js
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\api[2].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\chevron-right[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\clearfix.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\co-covid-19-icons-covid-alert-2020-12-21[1].png
PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\co-covid-19-icons-up-to-date-info-2020-12-21[1].png
PNG image data, 96 x 97, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\co-covid-vaccine-page-intro-box-702x532-2020-12-24[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 702x532, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\combined[1].css
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\container-inline.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\covid-19-vaccines-ontario[1].htm
HTML document, UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\cs4qPsP6COA[1].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\default[1].htm
UTF-8 Unicode text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\drupal.init[1].js
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\drupal[1].js
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ed270bb8-340b-41f9-a7c6-e8ef587e6d11[1].json
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\favicon[1].ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\footer-default-supergraphic-logo[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\formval[1].js
ASCII text, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\foundation-6-off-canvas[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\gtm[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\logo-main-serviceontario[1].woff
Web Open Font Format, TrueType, length 2336, version 0.0
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\logo-ontario@2x[1].png
PNG image data, 360 x 90, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesite-contact-us.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteActionBar[1].htm
HTML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteAside[1].htm
exported SGML document, UTF-8 Unicode text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteFooter[1].htm
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteHeader[1].htm
HTML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteIntro[1].htm
exported SGML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteSearch[1].htm
exported SGML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteTaxonomiesAsMenu[1].htm
HTML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteToc[1].htm
HTML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ontario-icon-breadcrumb[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ontario-icon-menu[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ontario-logo--mobile[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ontario-logo[1].png
PNG image data, 360 x 90, 8-bit/color RGBA, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ontario@2x-print[1].png
PNG image data, 637 x 162, 8-bit colormap, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ontarios-covid-19-vaccination-plan[1].htm
HTML document, UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\open-sans-400--italic[1].woff
Web Open Font Format, TrueType, length 15076, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\open-sans-400--italic[2].woff
Web Open Font Format, TrueType, length 15076, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\open-sans-400[1].woff
Web Open Font Format, TrueType, length 14260, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\open-sans-400[2].woff
Web Open Font Format, TrueType, length 14260, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\open-sans-600-19453553409b80307b0255bee10ec189[1].woff
Web Open Font Format, TrueType, length 14344, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\open-sans-600[1].woff
Web Open Font Format, TrueType, length 14344, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\raleway-modified-700-ffec5345d938424d2e531ea4eecd8d9d[1].woff
Web Open Font Format, TrueType, length 18032, version 4.20
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\raleway-modified-700[1].woff
Web Open Font Format, TrueType, length 18032, version 4.20
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\remote[1].js
ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\sddefault[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\sticky-header.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\system-status-report-general-info[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\tabledrag.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\tablesort.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\vaccine-locations[1].htm
HTML document, UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\webpack-runtime-ff3f45081dd6bd1465aa[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\www-embed-player[1].js
ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\KFOmCnqEu92Fr1Mu4mxM[1].woff
Web Open Font Format, TrueType, length 19824, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\LoginPage[1].htm
HTML document, ASCII text, with very long lines, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\Open-Sans-600[1].woff
Web Open Font Format, TrueType, length 14344, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\Open-Sans-italic[1].woff
Web Open Font Format, TrueType, length 15076, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\Open-Sans-regular[1].woff
Web Open Font Format, TrueType, length 14260, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\Raleway-regular[1].woff
Web Open Font Format, TrueType, length 23124, version 1.1
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\StyleSheet[1].css
UTF-8 Unicode (with BOM) text, with CRLF line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\YrjmP_ueahQ[1].htm
HTML document, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\about-ontario[1].htm
HTML document, UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\ad_status[1].js
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\autocomplete-loading.module[1].css
troff or preprocessor input, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\base[1].js
ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\chevron-right[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\co-covid-19-icons-find-zone-measures-2020-12-21[1].png
PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\content-type.min[1].js
UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\covid-back-to-top[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\default[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\embed[1].js
ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\embed[2].js
ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\favicon[1].ico
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\fetch-polyfill[1].js
Pascal source, ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\fieldgroup.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\foundation.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\framework-8dcecaaefd71e2213eb2[1].js
ASCII text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\government-ontario[1].htm
HTML document, UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\gtm[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\hideHeaderSearch[1].css
ASCII text, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\jquery.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\jquery.once.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\moment.min[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\on-this-page[1].js
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesite-contact-us.min[1].js
ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesite-moment.min[1].js
ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesite-search.min[1].js
UTF-8 Unicode text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesiteArchive[1].htm
exported SGML document, UTF-8 Unicode text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesiteContact[1].htm
HTML document, ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesiteNotices[1].htm
HTML document, UTF-8 Unicode text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesiteOptimizationBanner[1].htm
HTML document, UTF-8 Unicode text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesiteServiceOntarioLogo[1].htm
HTML document, ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\ontario-logo--desktop[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\ontario-material-dropdown-arrow-48px[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\ontario-together-filter-show[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\ontario@2x-print[1].png
PNG image data, 637 x 162, 8-bit colormap, non-interlaced
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\optionA[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\optionB[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\page_about-ontario[1].json
UTF-8 Unicode text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\page_about-ontario[2].json
HTML document, ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\page_government-ontario[1].json
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\populate-front-page-data[1].js
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\print[1].css
UTF-8 Unicode text, with very long lines, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\recaptcha__en[1].js
ASCII text, with very long lines
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\reset-appearance.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\resize.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\screen-before-you-go[1].svg
SVG Scalable Vector Graphics image
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\splash.min[1].js
ASCII text, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\styles-c2fe8482057191dca484[1].js
ASCII text, with no line terminators
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\tree-child.module[1].css
ASCII text
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\unnamed[1].jpg
[TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, frames 3
downloaded
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\www-embed-player[1].js
ASCII text, with very long lines
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\www-player[1].css
ASCII text, with very long lines, with no line terminators
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C045F79E.png
PNG image data, 1356 x 480, 8-bit/color RGBA, non-interlaced
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{248F44A0-30CA-4646-ACFF-79FC9E14ADCB}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Temp\Cab39F3.tmp
Microsoft Cabinet archive data, 58596 bytes, 1 file
dropped
clean
C:\Users\user\AppData\Local\Temp\Tar3A04.tmp
data
dropped
clean
C:\Users\user\AppData\Local\Temp\msoB145.tmp
GIF image data, version 89a, 15 x 15
dropped
clean
C:\Users\user\AppData\Local\Temp\~DF1CE05EB0C3EFFAB1.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DFB176579392BDA44E.TMP
data
dropped
clean
C:\Users\user\AppData\Local\Temp\~DFD4878D655EEE13E3.TMP
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).LNK
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:12 2020, mtime=Wed Aug 26 14:08:12 2020, atime=Tue Apr 13 23:36:29 2021, length=56869, window=hide
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat
ASCII text, with CRLF line terminators
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm
data
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\1I9U1RD3.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\1WIX9D2H.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\440HZ239.txt
ASCII text
downloaded
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\6G1J8JQD.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\9EAYE1UQ.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\B61YPJUS.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\BU7S6ALF.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\C81A6TXJ.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\DGJVF474.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\FI67OFMM.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\G6MNA809.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\GS98OH3Z.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\GXDP9IRM.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\HANRFQLE.txt
ASCII text
downloaded
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\HWGGUY07.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\KF47PMGD.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\L85A1YU8.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\M7NKN62F.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\N6BBHH3T.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\O8UYECUT.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\P10TD78T.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\QGL92SEJ.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\QYK7T31P.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\RWRDSMGU.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\U2PP9MVW.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\UZ55A8I8.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\WWM5HRIM.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\XIKWRY8N.txt
ASCII text
dropped
clean
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\53CZ0ZKKP2W6010M4BCE.temp
data
dropped
clean
C:\Users\user\Desktop\~$VID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx
data
dropped
clean
There are 265 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
clean
C:\Program Files\Internet Explorer\iexplore.exe
'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2616 CREDAT:275457 /prefetch:2
clean

URLs

Name
IP
Malicious
http://www.ndfht.ca
unknown
clean
https://www.ontario.ca/fr/page/accessibilite
unknown
clean
https://www.ontario.ca/page/vaccines
unknown
clean
https://covid-19.ontario.ca/get-covid-19-vaccine
unknown
clean
https://covid-19.ontario.ca/index.html
unknown
clean
https://www.ontario.ca/page/covid-19-support-people
unknown
clean
http://www.whcacovid.com
unknown
clean
https://www.Pharmachoice.com
unknown
clean
https://hopitalmontfort.com/en/second-covid-19-care-clinic-opening-ottawa-east-thursday
unknown
clean
https://covid-19.ontario.ca/c19-book-vaccine-assets/social_image_en.png
unknown
clean
http://www.stevensonhospital.ca/news/index.html?id=265
unknown
clean
https://www.womenscollegehospital.ca/assessmentcentre
unknown
clean
https://news.ontario.ca/search/en?keywords=covid19
unknown
clean
https://hpepublichealth.ca/covid-19-vaccines/
unknown
clean
https://covid-19.ontario.ca/covid-19-data/data-catalogue/ed270bb8-340b-41f9-a7c6-e8ef587e6d11.json
unknown
clean
https://one.halton.ca/vab/s/
unknown
clean
https://covid-19.ontario.ca/book-vaccine/THowohealth.ca/os-covid-19-vaccinatm/embed/YrjmP_ueahQ?cont
unknown
clean
http://www.hauserspharmacy.com
unknown
clean
http://www.bradysdrugstore.com
unknown
clean
https://www.york.ca/wps/portal/yorkhome/health/yr/covid-19/covid19vaccinationclinics
unknown
clean
https://hybridpharm.com/
unknown
clean
https://www.phdapps.health.gov.on.ca/phulocator/4Public
unknown
clean
https://CovidScreen.lacgh.napanee.on.ca)
unknown
clean
https://barriehealth.ca/
unknown
clean
https://www.rvh.on.ca/
unknown
clean
https://covid-19.ontario.ca/feedback/assessment-centre-locations
unknown
clean
https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-1
unknown
clean
https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-2
unknown
clean
https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-3
unknown
clean
https://www.youtube.com/generate_204?cpn=
unknown
clean
https://www.cmh.org/patients-visitors/service-resumption-covid-19/covid-19-testing
unknown
clean
https://covid-19.ontario.ca/covid-19-data/data-catalogue/8a89caa9-511c-4568-af89-7f2174b4378c.json
unknown
clean
https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-workplace-2020-12-21.png
unknown
clean
http://www.health.gov.on.ca/en/pro/programs/publichealth/coronavirus/docs/Guidance_for_Prioritizing_
unknown
clean
http://www.metrodrugs.ca
unknown
clean
https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-check-results.svg
unknown
clean
https://covid-19.ontario.ca/book-vaccine/
unknown
clean
https://nygh.on.ca/covid-19-updates
unknown
clean
https://www.ontario.ca/page/accessibility
unknown
clean
https://www.osmh.on.ca/covid-19/
unknown
clean
https://covid-19.ontario.ca/fr/le-plan-de-vaccination-de-lontario-contre-la-covid-19#phase-1
unknown
clean
https://www.hamilton.ca/coronavirus/covid-19-vaccine-booking
unknown
clean
https://www.phdapps.health.gov.on.ca/phulocator/riovirus)
unknown
clean
https://assessmentbooking.simplybook.plus/v2/
unknown
clean
http://www.espanolaregionalhospital.ca/covid-19
unknown
clean
https://covid-19.ontario.ca/fr/index.fr.html
unknown
clean
https://www.mahc.ca/en/services/covid19.aspx#
unknown
clean
https://api.ontario.ca/es/onesite
unknown
clean
https://portal.healthmyself.net/tehncovid/guest/#/g5x/book/type
unknown
clean
https://www.prhc.on.ca/about-us/covid-19-novel-coronavirus/
unknown
clean
https://www.ontario.ca/.ca/book-vaccine/
unknown
clean
https://covid-19.ontario.ca/vernment-ontario
unknown
clean
http://www.hwmh.ca
unknown
clean
https://covid-19.ontario.ca/
clean
https://www.ontario.ca
unknown
clean
http://www.lakeridgehealth.on.ca
unknown
clean
https://testing.getcorigan.ca/
unknown
clean
https://www.ontario.ca/page/government-ontarioDGovernment
unknown
clean
https://www.bchsys.org/en/covid-19-online-scheduling.aspx
unknown
clean
http://www.rvh.on.ca
unknown
clean
https://www.msh.on.ca/
unknown
clean
http://www.HamiltonCovidTest.ca
unknown
clean
https://youtu.be/
unknown
clean
https://gbfht.ca/cac/
unknown
clean
http://github.com/robloach/jquery-once
unknown
clean
https://www.grhosp.on.ca/
unknown
clean
https://psfdh.on.ca/2020/04/03/community-assessment-centre/
unknown
clean
https://covid-19.ontario.ca/centres-depistage/
unknown
clean
https://covid-19.ontario.ca/ontarios-covid-19-vac
unknown
clean
https://covid19results.ehealthontario.ca:4443/
unknown
clean
https://stage.api.ontariogovernment.ca
unknown
clean
https://www.ontario.ca/img/favicon.ico~
unknown
clean
https://www.phdapps.health.gov.on.ca/phulocator/
clean
https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-covid-alert-2020-12-21.png
unknown
clean
https://covid-19.ontario.ca/covid19-cms-assets/2021-03/getting-covid-vaccine-meta-1920x1080-en.jpg
unknown
clean
https://covid-19.ontario.ca/fr/zones-et-restrictions
unknown
clean
https://www.ontario.ca/page/ethical-framework-covid-19-vaccine-distribution
unknown
clean
https://www.haltonhealthcare.on.ca/covid-19-info/booking-a-test
unknown
clean
http://www.libertymarketpharmacy.com/
unknown
clean
https://slmhc.on.ca/about/covid-19-information/covid-19-assessment-centre/
unknown
clean
https://www.wdgpublichealth.ca/your-health/covid-19-information-public/covid-19-vaccine-information/
unknown
clean
http://news.ontario.ca/newsroom/en
unknown
clean
https://registration-mom.mychamp.ca/Live/Montfort/Booking/Account/BookRegister
unknown
clean
https://www.walmart.ca/en/stores-near-me/richmond-hill-south-supercentre-1116
unknown
clean
https://www.ontario.ca/page/privacy-statement
unknown
clean
https://covid-19.ontario.ca/book-vaccine/THowio.ca/ontarios-covid-19-vaccinatm/embed/YrjmP_ueahQ?con
unknown
clean
https://www.guardian-ida-pharmacies.ca/en/ontario/brampton/kennedy-medical-plex-pharmacy-ida-7027581
unknown
clean
https://www.medicineshoppe.ca/en/ontario/toronto/the-medicine-shoppe-pharmacy-134-7014226
unknown
clean
http://www.southstormontpharmacies.com
unknown
clean
https://covid-19.ontario.ca/covid-19-test-and-testing-location-information
unknown
clean
https://www.walmart.ca/en/stores-near-me/woodbridge-supercentre-1081
unknown
clean
https://www.porcupinehu.on.ca/en/your-health/infectious-diseases/novel-coronavirus/covid-assessment-
unknown
clean
https://covid-19.ontario.ca/
unknown
clean
https://southlake.ca/
unknown
clean
https://covid-19.ontario.ca/themes/custom/ds_theme/favicon.ico~&
unknown
clean
https://eohu.ca/en/covid-19-novel-coronavirus
unknown
clean
https://trilliumhealthpartners.ca/assessment
unknown
clean
https://durhamregion.vertoengage.com/engage/generic-open-clinic?key=5f58a4fe-9e22-4fb8-b49a-b8fe1ca0
unknown
clean
https://www.myvisit.cmh.org
unknown
clean
https://www.youtube.com/embed/cs4qPsP6COA
unknown
clean
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
d2khazk8e83rdv.cloudfront.net
143.204.11.64
clean
productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com
34.198.74.185
clean
googleads.g.doubleclick.net
172.217.23.34
clean
d36pom45p27o8j.cloudfront.net
13.226.169.24
clean
cdnjs.cloudflare.com
104.16.19.94
clean
i.ytimg.com
172.217.22.246
clean
photos-ugc.l.googleusercontent.com
172.217.23.33
clean
www.phdapps.health.gov.on.ca
204.41.3.217
clean
d1yhecx6e3wyn1.cloudfront.net
143.204.11.100
clean
yt3.ggpht.com
unknown
clean
www.ontario.ca
unknown
clean
cdn.jsdelivr.net
unknown
clean
covid-19.ontario.ca
unknown
clean
api.ontario.ca
unknown
clean
static.doubleclick.net
unknown
clean
covid19.ontariohealth.ca
unknown
clean
files.ontario.ca
unknown
clean
www.youtube.com
unknown
clean
There are 8 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
143.204.11.100
d1yhecx6e3wyn1.cloudfront.net
United States
clean
172.217.22.246
i.ytimg.com
United States
clean
34.198.74.185
productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com
United States
clean
172.217.23.33
photos-ugc.l.googleusercontent.com
United States
clean
13.226.169.24
d36pom45p27o8j.cloudfront.net
United States
clean
172.217.23.34
googleads.g.doubleclick.net
United States
clean
143.204.11.64
d2khazk8e83rdv.cloudfront.net
United States
clean
204.41.3.217
www.phdapps.health.gov.on.ca
Canada
clean
104.16.19.94
cdnjs.cloudflare.com
United States
clean

Registry

Path
Value
Malicious
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
t66
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
~76
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
%96
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ReviewToken
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EB2DB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
VBAFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Arial Unicode MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Batang
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@BatangChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DFKai-SB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Dotum
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@DotumChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@FangSong
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gulim
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GulimChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Gungsuh
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@GungsuhChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@KaiTi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Malgun Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Meiryo UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft JhengHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@Microsoft YaHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU_HKSCS-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS Mincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PGothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS PMincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@MS UI Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@NSimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@PMingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
@SimSun-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Agency FB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aharoni
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Algerian
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Andalus
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Angsana New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
AngsanaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Aparajita
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arabic Typesetting
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Black
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Narrow
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Rounded MT Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Arial Unicode MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Baskerville Old Face
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Batang
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BatangChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bauhaus 93
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bell MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Berlin Sans FB Demi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bernard MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Blackadder ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Black
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bodoni MT Poster Compressed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Book Antiqua
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookman Old Style
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bookshelf Symbol 7
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Bradley Hand ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Britannic Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Broadway
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Browallia New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
BrowalliaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Brush Script MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calibri Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Californian FB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Calisto MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cambria Math
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Candara
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Castellar
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Centaur
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Century Schoolbook
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Chiller
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Colonna MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Comic Sans MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Consolas
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Constantia
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cooper Black
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Copperplate Gothic Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Corbel
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Cordia New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
CordiaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Courier New
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Curlz MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DaunPenh
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
David
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DFKai-SB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DilleniaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DokChampa
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Dotum
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
DotumChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ebrima
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Edwardian Script ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Elephant
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Engravers MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Bold ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Demi ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Light ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Eras Medium ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Estrangelo Edessa
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
EucrosiaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Euphemia
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FangSong
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Felix Titling
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Footlight MT Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Forte
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Book
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Demi Cond
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Heavy
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Franklin Gothic Medium Cond
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FrankRuehl
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
FreesiaUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Freestyle Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
French Script MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gabriola
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Garamond
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gautami
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Georgia
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gigi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans MT Ext Condensed Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gill Sans Ultra Bold Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gisha
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gloucester MT Extra Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Old Style
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Goudy Stout
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gulim
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GulimChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Gungsuh
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
GungsuhChe
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Haettenschweiler
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harlow Solid Italic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Harrington
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
High Tower Text
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Impact
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Imprint MT Shadow
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Informal Roman
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
IrisUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Iskoola Pota
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
JasmineUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Jokerman
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Juice ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KaiTi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kalinga
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kartika
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Khmer UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
KodchiangUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kokila
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kristen ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Kunstler Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lao UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Latha
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Leelawadee
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Levenim MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LilyUPC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Bright
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Calligraphy
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Console
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Fax
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Handwriting
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Typewriter
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Lucida Sans Unicode
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Magneto
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Maiandra GD
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Malgun Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mangal
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Marlett
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Matura MT Script Capitals
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Meiryo UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Himalaya
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft JhengHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft New Tai Lue
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft PhagsPa
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Sans Serif
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Tai Le
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Uighur
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft YaHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Microsoft Yi Baiti
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU_HKSCS-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Miriam Fixed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mistral
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Modern No. 20
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Mongolian Baiti
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Monotype Corsiva
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MoolBoran
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Mincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Outlook
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PGothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS PMincho
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Sans Serif
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS Reference Specialty
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MS UI Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MT Extra
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MV Boli
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Narkisim
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Engraved
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Niagara Solid
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
NSimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Nyala
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
OCR A Extended
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Old English Text MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Onyx
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palace Script MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Palatino Linotype
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Papyrus
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Parchment
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Perpetua Titling MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Plantagenet Cherokee
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Playbill
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
PMingLiU-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Poor Richard
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Pristina
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Raavi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rage Italic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Ravie
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rockwell Extra Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Rod
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sakkal Majalla
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Script MT Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Print
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Light
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Semibold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Segoe UI Symbol
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shonar Bangla
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Showcard Gothic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Shruti
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimHei
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Simplified Arabic Fixed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SimSun-ExtB
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Snap ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Stencil
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Sylfaen
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Symbol
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tahoma
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tempus Sans ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Times New Roman
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Traditional Arabic
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Trebuchet MS
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tunga
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tw Cen MT Condensed Extra Bold
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Utsaah
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vani
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Verdana
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vijaya
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Viner Hand ITC
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vivaldi
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vladimir Script
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Vrinda
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Webdings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wide Latin
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 2
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings 3
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wingdings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Tahoma
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F4D27
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
LastPurgeTime
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
WORDFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_3082
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1036
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
SpellingAndGrammarFiles_1033
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
F4D27
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Settings
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ZoomApp
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ProductFiles
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTF
clean
C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
MTTA
clean
C:\Program Files\Internet Explorer\iexplore.exe
{854E3008-9CB9-11EB-ADCF-ECF4BBB5915B}
clean
C:\Program Files\Internet Explorer\iexplore.exe
ChangeNotice
clean
C:\Program Files\Internet Explorer\iexplore.exe
FaviconPath
clean
C:\Program Files\Internet Explorer\iexplore.exe
@%SystemRoot%\system32\qagentrt.dll,-10
clean
C:\Program Files\Internet Explorer\iexplore.exe
@%SystemRoot%\System32\fveui.dll,-843
clean
C:\Program Files\Internet Explorer\iexplore.exe
@%SystemRoot%\System32\fveui.dll,-844
clean
C:\Program Files\Internet Explorer\iexplore.exe
@%SystemRoot%\System32\wuaueng.dll,-400
clean
C:\Program Files\Internet Explorer\iexplore.exe
NextUpdateDate
clean
C:\Program Files\Internet Explorer\iexplore.exe
Type
clean
C:\Program Files\Internet Explorer\iexplore.exe
Flags
clean
C:\Program Files\Internet Explorer\iexplore.exe
Count
clean
C:\Program Files\Internet Explorer\iexplore.exe
Time
clean
C:\Program Files\Internet Explorer\iexplore.exe
Type
clean
C:\Program Files\Internet Explorer\iexplore.exe
Flags
clean
C:\Program Files\Internet Explorer\iexplore.exe
Count
clean
C:\Program Files\Internet Explorer\iexplore.exe
Time
clean
C:\Program Files\Internet Explorer\iexplore.exe
Type
clean
C:\Program Files\Internet Explorer\iexplore.exe
Flags
clean
C:\Program Files\Internet Explorer\iexplore.exe
Count
clean
C:\Program Files\Internet Explorer\iexplore.exe
Time
clean
C:\Program Files\Internet Explorer\iexplore.exe
Type
clean
C:\Program Files\Internet Explorer\iexplore.exe
Flags
clean
C:\Program Files\Internet Explorer\iexplore.exe
Count
clean
C:\Program Files\Internet Explorer\iexplore.exe
Time
clean
C:\Program Files\Internet Explorer\iexplore.exe
NextCheckForUpdateLowDateTime
clean
C:\Program Files\Internet Explorer\iexplore.exe
NextCheckForUpdateHighDateTime
clean
C:\Program Files\Internet Explorer\iexplore.exe
SavedLegacySettings
clean
C:\Program Files\Internet Explorer\iexplore.exe
Count
clean
C:\Program Files\Internet Explorer\iexplore.exe
Time
clean
C:\Program Files\Internet Explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\Internet Explorer\iexplore.exe
88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977
clean
C:\Program Files\Internet Explorer\iexplore.exe
2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81
clean
C:\Program Files\Internet Explorer\iexplore.exe
88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977
clean
C:\Program Files\Internet Explorer\iexplore.exe
2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81
clean
C:\Program Files\Internet Explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\Internet Explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\Internet Explorer\iexplore.exe
NextCheckForUpdateLowDateTime
clean
C:\Program Files\Internet Explorer\iexplore.exe
NextCheckForUpdateHighDateTime
clean
C:\Program Files\Internet Explorer\iexplore.exe
Count
clean
C:\Program Files\Internet Explorer\iexplore.exe
Time
clean
C:\Program Files\Internet Explorer\iexplore.exe
LoadTimeArray
clean
C:\Program Files\Internet Explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\Internet Explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\Internet Explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\Internet Explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\Internet Explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\Internet Explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\Internet Explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\Internet Explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\Internet Explorer\iexplore.exe
Count
clean
C:\Program Files\Internet Explorer\iexplore.exe
Time
clean
C:\Program Files\Internet Explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\Internet Explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\Internet Explorer\iexplore.exe
Count
clean
C:\Program Files\Internet Explorer\iexplore.exe
Time
clean
C:\Program Files\Internet Explorer\iexplore.exe
Count
clean
C:\Program Files\Internet Explorer\iexplore.exe
Time
clean
C:\Program Files\Internet Explorer\iexplore.exe
Count
clean
C:\Program Files\Internet Explorer\iexplore.exe
Time
clean
C:\Program Files\Internet Explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\Internet Explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\Internet Explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\Internet Explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\Internet Explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\Internet Explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\Internet Explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\Internet Explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\Internet Explorer\iexplore.exe
NavTimeArray
clean
C:\Program Files\Internet Explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\Internet Explorer\iexplore.exe
LastProcessed
clean
C:\Program Files\Internet Explorer\iexplore.exe
DecayDateQueue
clean
C:\Program Files\Internet Explorer\iexplore.exe
LastProcessed
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
@C:\Windows\System32\ieframe.dll,-912
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
@C:\Windows\System32\ieframe.dll,-904
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NumberOfSubdomains
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NumberOfSubdomains
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
SavedLegacySettings
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Blob
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Blob
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Blob
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Blob
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Blob
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Blob
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Blob
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Blob
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Blob
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Blob
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Blob
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Blob
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
NULL
clean
C:\Program Files (x86)\Internet Explorer\iexplore.exe
Total
clean
There are 475 hidden registries, click here to show them.

DOM / HTML

URL
Malicious
https://covid19.ontariohealth.ca/
clean
https://www.ontario.ca/page/about-ontario
clean
https://covid-19.ontario.ca/vaccine-locations
clean
https://www.ontario.ca/page/government-ontario
clean
https://covid-19.ontario.ca/ontarios-covid-19-vaccination-plan#phase-1
clean
https://www.ontario.ca/
clean
https://covid-19.ontario.ca/book-vaccine/
clean
https://covid-19.ontario.ca/book-vaccine/
clean
https://covid-19.ontario.ca/rendezvous-vaccin/
clean
https://covid-19.ontario.ca/covid-19-vaccines-ontario
clean
https://covid-19.ontario.ca/
clean
https://www.phdapps.health.gov.on.ca/phulocator/
clean
There are 2 hidden doms, click here to show them.