Play interactive tour

Edit tour

Analysis Report COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx

Overview

General Information

Sample Name:	COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx
Analysis ID:	386160
MD5:	14d9efc0e6bd70f11db15709caffe72f
SHA1:	a9d37cf22facbe7ceda7dec88b983b5092597b5f
SHA256:	cbf87430a5ac83f27e1152f1cbe3b867400ccc68895c9a596697e8e64196c0ef
Infos:
Most interesting Screenshot:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Allocates a big amount of memory (probably used for heap spraying)

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Classification

Analysis Advice

No malicious behavior found, analyze the document also on other version of Office / Acrobat

Uses HTTPS for network communication, use the 'Proxy HTTPS (port 443) to read its encrypted data' cookbook for further analysis

Startup

System is w10x64

WINWORD.EXE (PID: 5956 cmdline: 'C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE' /Automation -Embedding MD5: 0B9AB9B9C4DE429473D6450D4297A123)

iexplore.exe (PID: 5992 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 6176 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5992 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE

File opened: C:\Windows\SysWOW64\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 143.204.11.124:443 -> 192.168.2.3:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.124:443 -> 192.168.2.3:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.100:443 -> 192.168.2.3:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.100:443 -> 192.168.2.3:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.28:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.3:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.28:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.74.185:443 -> 192.168.2.3:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.74.185:443 -> 192.168.2.3:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.207.130:443 -> 192.168.2.3:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.207.130:443 -> 192.168.2.3:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.3:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.3:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.22.246:443 -> 192.168.2.3:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.22.246:443 -> 192.168.2.3:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.41.3.217:443 -> 192.168.2.3:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.41.3.217:443 -> 192.168.2.3:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.41.3.217:443 -> 192.168.2.3:49797 version: TLS 1.2

Source: winword.exe

Memory has grown: Private usage: 0MB later: 71MB

Source: Joe Sandbox View	IP Address: 104.16.19.94 104.16.19.94
Source: Joe Sandbox View	IP Address: 104.16.19.94 104.16.19.94

Source: Joe Sandbox View

JA3 fingerprint: 9e10692f1b7f78228b2d4e424db3a98c

Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: <div class="video-container"><iframe allow="encrypted-media" allowfullscreen="" class="video-sizing" frameborder="0" scrolling="no" src="https://www.youtube.com/embed/YrjmP_ueahQ?controls=0"></iframe></div> equals www.youtube.com (Youtube)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: publique d\'Ottawa","phone":"613-422-2900","website":"http://www.facebook.com/centretownpharmacy/","monday":"06:00-18:00","tuesday":"06:00-18:00","wednesday":"06:00-18:00","thursday":"06:00-18:00","friday":"06:00-18:00","saturday":"08:00-16:00","sunday":"08:00-16:00","appointments":"Yes","phone_appointments":"TRUE","walk_ins":"No","age_threshold":"5y"},{"active":"Yes","location_id":"332","pharmacy":"Yes","location_name":"MediOne Rx","operated_by":"Independent","city":"Thornhill","address":"100 Steeles Avenue West","address_fr":"100, rue Steeles Ouest","postal_code":"L4J 7Y1","province":"ON","latitude":"43.7979124","longitude":"-79.425512","phu":"York Region Public Health Services","phu_fr":"Service de sant equals www.facebook.com (Facebook)
Source: base[1].js.11.dr	String found in binary or memory: "html5_qoe_intercept"):this.Yj?(t=t.vss_host\|\|"s.youtube.com",this.Z("www_for_videostats")&&"s.youtube.com"===t&&(t=MD(this.va)\|\|"www.youtube.com")):t="video.google.com";this.Pj=t;ND(this,a,!0);this.L=new UC;g.H(this,this.L);t=b?b.innertubeApiKey:qD("",a.innertube_api_key);r=b?b.innertubeApiVersion:qD("",a.innertube_api_version);p=b?b.innertubeContextClientVersion:qD("",a.innertube_context_client_version);this.Jf={innertubeApiKey:xo("INNERTUBE_API_KEY")\|\|t,innertubeApiVersion:xo("INNERTUBE_API_VERSION")\|\| equals www.youtube.com (Youtube)
Source: app.min[1].js.11.dr	String found in binary or memory: "use strict";angular.module("onesite.filters",[]).filter("removeInjectedParagraphTag",function(){return function(r){return angular.isString(r)?r.trim().replace(/\r?\n/g,"").replace(/^<(p)[^>]*?>(.+)<\/\1>/im,"$2"):r}}).filter("formatNumber",["numberService",function(r){return r.formatNumber}]).filter("trim",["stringService",function(r){return r.trim}]).filter("slice",["listService",function(r){return r.slice}]).filter("tel",["stringService",function(r){return r.toTel}]).filter("postalCode",["stringService",function(r){return r.toPostalCode}]).filter("pick",["listService",function(r){return r.pick}]).filter("join",["stringService",function(r){return r.join}]).filter("chooseSmall",["numberService",function(r){return r.min}]).filter("localDate",[function(){return function(){return new Date}}]).filter("equals",function(){return angular.equals}).filter("isNumber",function(){return angular.isNumber}).filter("isString",function(){return angular.isString}).filter("isNonEmptyString",function(){return function(r){return angular.isString(r)&&""!==r.trim()}}).filter("socialMedia",function(){var e={facebook:function(r,t){return"//www.facebook.com/sharer.php?u=%2F%2F"+r+"&title="+t},twitter:function(r,t){return"//twitter.com/intent/tweet?url=%2F%2F"+r+"&text="+t}};return function(r,t,n){return e[r](t,n)}}).filter("strToDate",["stringService",function(t){return function(r){return angular.isString(r)?t.strToDate(r.split(" ")[0]):null}}]).filter("onesiteDateFormat",["$filter",function(t){var n={0:"janvier",1:"f equals www.facebook.com (Facebook)
Source: app.min[1].js.11.dr	String found in binary or memory: "use strict";angular.module("onesite.filters",[]).filter("removeInjectedParagraphTag",function(){return function(r){return angular.isString(r)?r.trim().replace(/\r?\n/g,"").replace(/^<(p)[^>]*?>(.+)<\/\1>/im,"$2"):r}}).filter("formatNumber",["numberService",function(r){return r.formatNumber}]).filter("trim",["stringService",function(r){return r.trim}]).filter("slice",["listService",function(r){return r.slice}]).filter("tel",["stringService",function(r){return r.toTel}]).filter("postalCode",["stringService",function(r){return r.toPostalCode}]).filter("pick",["listService",function(r){return r.pick}]).filter("join",["stringService",function(r){return r.join}]).filter("chooseSmall",["numberService",function(r){return r.min}]).filter("localDate",[function(){return function(){return new Date}}]).filter("equals",function(){return angular.equals}).filter("isNumber",function(){return angular.isNumber}).filter("isString",function(){return angular.isString}).filter("isNonEmptyString",function(){return function(r){return angular.isString(r)&&""!==r.trim()}}).filter("socialMedia",function(){var e={facebook:function(r,t){return"//www.facebook.com/sharer.php?u=%2F%2F"+r+"&title="+t},twitter:function(r,t){return"//twitter.com/intent/tweet?url=%2F%2F"+r+"&text="+t}};return function(r,t,n){return e[r](t,n)}}).filter("strToDate",["stringService",function(t){return function(r){return angular.isString(r)?t.strToDate(r.split(" ")[0]):null}}]).filter("onesiteDateFormat",["$filter",function(t){var n={0:"janvier",1:"f equals www.twitter.com (Twitter)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: ' {{time}}",medium:"{{date}}, {{time}}",short:"{{date}}, {{time}}"},defaultWidth:"full"})},formatRelative:function(e,a,t,n){return o[e]},localize:i,match:c,options:{weekStartsOn:0,firstWeekContainsDate:1}};a.a=p},ZS31:function(e,a,t){},"d+rA":function(e,a,t){"use strict";t.d(a,"k",(function(){return M})),t.d(a,"e",(function(){return O})),t.d(a,"o",(function(){return s})),t.d(a,"i",(function(){return i})),t.d(a,"m",(function(){return r})),t.d(a,"h",(function(){return d})),t.d(a,"a",(function(){return c})),t.d(a,"c",(function(){return l})),t.d(a,"d",(function(){return p})),t.d(a,"b",(function(){return u})),t.d(a,"l",(function(){return h})),t.d(a,"j",(function(){return g})),t.d(a,"n",(function(){return S})),t.d(a,"g",(function(){return P})),t.d(a,"f",(function(){return H}));var n=t("q1tI"),o=t.n(n),s={en:{title:"Share Ontario testing locations finder",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fassessment-centre-locations&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Ontario%20COVID-19%20assessment-centre-locations%3A%20https%3A//covid-19.ontario.ca/assessment-centre-locations",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/assessment-centre-locations&title=&summary=&source=",email:"mailto:?subject=Ontario%20COVID-19%20%28testing%29%20locations&body=https%3A//covid-19.ontario.ca/assessment-centre-locations"}},fr:{title:"Partager l'outil du centres de d equals www.facebook.com (Facebook)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: ' {{time}}",medium:"{{date}}, {{time}}",short:"{{date}}, {{time}}"},defaultWidth:"full"})},formatRelative:function(e,a,t,n){return o[e]},localize:i,match:c,options:{weekStartsOn:0,firstWeekContainsDate:1}};a.a=p},ZS31:function(e,a,t){},"d+rA":function(e,a,t){"use strict";t.d(a,"k",(function(){return M})),t.d(a,"e",(function(){return O})),t.d(a,"o",(function(){return s})),t.d(a,"i",(function(){return i})),t.d(a,"m",(function(){return r})),t.d(a,"h",(function(){return d})),t.d(a,"a",(function(){return c})),t.d(a,"c",(function(){return l})),t.d(a,"d",(function(){return p})),t.d(a,"b",(function(){return u})),t.d(a,"l",(function(){return h})),t.d(a,"j",(function(){return g})),t.d(a,"n",(function(){return S})),t.d(a,"g",(function(){return P})),t.d(a,"f",(function(){return H}));var n=t("q1tI"),o=t.n(n),s={en:{title:"Share Ontario testing locations finder",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fassessment-centre-locations&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Ontario%20COVID-19%20assessment-centre-locations%3A%20https%3A//covid-19.ontario.ca/assessment-centre-locations",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/assessment-centre-locations&title=&summary=&source=",email:"mailto:?subject=Ontario%20COVID-19%20%28testing%29%20locations&body=https%3A//covid-19.ontario.ca/assessment-centre-locations"}},fr:{title:"Partager l'outil du centres de d equals www.linkedin.com (Linkedin)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: ' {{time}}",medium:"{{date}}, {{time}}",short:"{{date}}, {{time}}"},defaultWidth:"full"})},formatRelative:function(e,a,t,n){return o[e]},localize:i,match:c,options:{weekStartsOn:0,firstWeekContainsDate:1}};a.a=p},ZS31:function(e,a,t){},"d+rA":function(e,a,t){"use strict";t.d(a,"k",(function(){return M})),t.d(a,"e",(function(){return O})),t.d(a,"o",(function(){return s})),t.d(a,"i",(function(){return i})),t.d(a,"m",(function(){return r})),t.d(a,"h",(function(){return d})),t.d(a,"a",(function(){return c})),t.d(a,"c",(function(){return l})),t.d(a,"d",(function(){return p})),t.d(a,"b",(function(){return u})),t.d(a,"l",(function(){return h})),t.d(a,"j",(function(){return g})),t.d(a,"n",(function(){return S})),t.d(a,"g",(function(){return P})),t.d(a,"f",(function(){return H}));var n=t("q1tI"),o=t.n(n),s={en:{title:"Share Ontario testing locations finder",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fassessment-centre-locations&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Ontario%20COVID-19%20assessment-centre-locations%3A%20https%3A//covid-19.ontario.ca/assessment-centre-locations",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/assessment-centre-locations&title=&summary=&source=",email:"mailto:?subject=Ontario%20COVID-19%20%28testing%29%20locations&body=https%3A//covid-19.ontario.ca/assessment-centre-locations"}},fr:{title:"Partager l'outil du centres de d equals www.twitter.com (Twitter)
Source: base[1].js.11.dr	String found in binary or memory: (g.Lm(b,"www.youtube.com"),c=b.toString()):c=kw(c);b=new wy(c);b.set("cmo=pf","1");d&&b.set("cmo=td","a1.googlevideo.com");return b}; equals www.youtube.com (Youtube)
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: )https://www.youtube.com/embed/cs4qPsP6COA equals www.youtube.com (Youtube)
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: 4https://www.youtube.com/embed/YrjmP_ueahQ?controls=0 equals www.youtube.com (Youtube)
Source: msapplication.xml0.10.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xd2a8dede,0x01d730c7</date><accdate>0xd2a8dede,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml0.10.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xd2a8dede,0x01d730c7</date><accdate>0xd2a8dede,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml5.10.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xd2ab4131,0x01d730c7</date><accdate>0xd2ab4131,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml5.10.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xd2ab4131,0x01d730c7</date><accdate>0xd2ada383,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml7.10.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xd2ada383,0x01d730c7</date><accdate>0xd2ada383,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: msapplication.xml7.10.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xd2ada383,0x01d730c7</date><accdate>0xd2ada383,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: QN29B4HD.htm.11.dr	String found in binary or memory: <hr aria-hidden="true" class="ontario-thick ontario-margin-bottom-40-!" /><div class="ontario-column ontario-small-12 ontario-medium-7 ontario-large-7 ontario-margin-bottom-48-!"><iframe allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" class="ontario-margin-bottom-32-!" frameborder="0" height="315" src="https://www.youtube.com/embed/cs4qPsP6COA" style="max-width:560px;" width="100%"></iframe> equals www.youtube.com (Youtube)
Source: base[1].js.11.dr	String found in binary or memory: Mga=function(a,b){if(!a.i["0"]){var c=new fB("0","fakesb",void 0,new bB(0,0,0,void 0,void 0,"auto"),null,null,1);a.i["0"]=b?new nA(new wy("http://www.youtube.com/videoplayback"),c,"fake"):new YA(new wy("http://www.youtube.com/videoplayback"),c,new Vz(0,0),new Vz(0,0),0,NaN)}}; equals www.youtube.com (Youtube)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: Ontario ",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Femplacements-pour-la-vaccination&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Emplacements%20pour%20la%20vaccination%20de%20la%20COVID-19%20de%20l%27Ontario%3A%20https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination&title=&summary=&source=",email:"mailto:?subject=Emplacements%20pour%20la%20vaccination%20de%20la%20COVID-19%20de%20l%27Ontario&body=https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination"}}},c={en:{who_title:"Who can get a vaccine",who_content:"Adults 55 and over in 2021 interested in receiving the AstraZeneca vaccine"},fr:{who_title:"Qui peut se faire vacciner",who_content:"Les adultes equals www.facebook.com (Facebook)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: Ontario ",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Femplacements-pour-la-vaccination&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Emplacements%20pour%20la%20vaccination%20de%20la%20COVID-19%20de%20l%27Ontario%3A%20https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination&title=&summary=&source=",email:"mailto:?subject=Emplacements%20pour%20la%20vaccination%20de%20la%20COVID-19%20de%20l%27Ontario&body=https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination"}}},c={en:{who_title:"Who can get a vaccine",who_content:"Adults 55 and over in 2021 interested in receiving the AstraZeneca vaccine"},fr:{who_title:"Qui peut se faire vacciner",who_content:"Les adultes equals www.linkedin.com (Linkedin)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: Ontario ",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Femplacements-pour-la-vaccination&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Emplacements%20pour%20la%20vaccination%20de%20la%20COVID-19%20de%20l%27Ontario%3A%20https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination&title=&summary=&source=",email:"mailto:?subject=Emplacements%20pour%20la%20vaccination%20de%20la%20COVID-19%20de%20l%27Ontario&body=https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination"}}},c={en:{who_title:"Who can get a vaccine",who_content:"Adults 55 and over in 2021 interested in receiving the AstraZeneca vaccine"},fr:{who_title:"Qui peut se faire vacciner",who_content:"Les adultes equals www.twitter.com (Twitter)
Source: base[1].js.11.dr	String found in binary or memory: aJ.prototype.replace=function(a,b){a=g.q(a);for(var c=a.next();!c.done;c=a.next())delete this.i[c.value.encryptedTokenJarContents];uka(this,b)};bJ.prototype.gp=function(a){var b,c,d=null===(b=a.responseContext)\|\|void 0===b?void 0:b.locationPlayabilityToken;void 0!==d&&(this.locationPlayabilityToken=d,this.i=void 0,"TVHTML5"===(null===(c=a.responseContext)\|\|void 0===c?void 0:c.clientName)?(this.localStorage=vka(this))&&this.localStorage.set("yt-location-playability-token",d,15552E3):g.po("YT_CL",JSON.stringify({y6:d}),15552E3,void 0,!0))};var eJ;g.v(dJ,Xr);dJ.prototype.Ew=function(a,b){a=Xr.prototype.Ew.call(this,a,b);return Object.assign(Object.assign({},a),this.i)};var Lka=/[&\?]action_proxy=1/,Kka=/[&\?]token=([\w-])/,Mka=/[&\?]video_id=([\w-])/,Nka=/[&\?]index=([\d-])/,Oka=/[&\?]m_pos_ms=([\d-])/,Rka=/[&\?]vvt=([\w-]*)/,Fka="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Pka="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),Hka={android:"ANDROID", equals www.youtube.com (Youtube)
Source: base[1].js.11.dr	String found in binary or memory: eha,fha);h=this.loaderUrl;var l=void 0===l?!1:l;this.gk=bw(dw(h,gha,null),h,l,"Trusted Ad Domain URL");this.Ea=T(!1,a.privembed);this.protocol=0===this.Fc.indexOf("http:")?"http":"https";this.va=fw((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|fw(this.Fc)\|\|this.protocol+"://www.youtube.com/";l=b?b.eventLabel:a.el;h="detailpage";"adunit"===l?h=this.l?"embedded":"detailpage":"embedded"===l\|\|this.u?h=oD(h,l,hha):l&&(h="embedded");this.Ca=h;aq();l=null;h=b?b.playerStyle:a.ps;var m=g.gb(uD,h);!h\|\|m&& equals www.youtube.com (Youtube)
Source: base[1].js.11.dr	String found in binary or memory: g.WD=function(a){a=MD(a.va);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: base[1].js.11.dr	String found in binary or memory: g.k.clone=function(){var a=new Pm;a.u=this.u;this.i&&(a.i=this.i.clone(),a.l=this.l);return a};var Wm="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),xda=/\bocr\b/;var yda=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var SD={k_:"LIVING_ROOM_APP_MODE_UNSPECIFIED",h_:"LIVING_ROOM_APP_MODE_MAIN",g_:"LIVING_ROOM_APP_MODE_KIDS",i_:"LIVING_ROOM_APP_MODE_MUSIC",j_:"LIVING_ROOM_APP_MODE_UNPLUGGED",f_:"LIVING_ROOM_APP_MODE_GAMING"};Zm.prototype.set=function(a,b){b=void 0===b?!0:b;0<=a&&52>a&&0===a%1&&this.i[a]!=b&&(this.i[a]=b,this.l=-1)}; equals www.youtube.com (Youtube)
Source: base[1].js.11.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.XD(this);d&&"www.youtube.com"===c?d="https://youtu.be/"+a:g.GD(this)?(d="https://"+c+"/fire",b.v=a):(d=this.protocol+"://"+c+"/watch",b.v=a,qq&&(a=to())&&(b.ebc=a));return g.Ld(d,b)}; equals www.youtube.com (Youtube)
Source: base[1].js.11.dr	String found in binary or memory: g.mE=function(a){var b=g.XD(a);!a.Z("yt_embeds_disable_new_error_lozenge_url")&&kha.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: base[1].js.11.dr	String found in binary or memory: g.oM.prototype.l=function(a){var b=this;ooa(this);var c=a.FA,d=this.api.T();"GENERIC_WITHOUT_LINK"!==c\|\|d.I?"TOO_MANY_REQUESTS"===c?(d=this.api.getVideoData(),this.cd(rM(this,"TOO_MANY_REQUESTS_WITH_LINK",d.jn(),void 0,void 0,void 0,!1))):"HTML5_NO_AVAILABLE_FORMATS_FALLBACK"!==c\|\|d.I?this.cd(g.pM(a.errorMessage)):this.cd(rM(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c= equals www.youtube.com (Youtube)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: pistage de la COVID-19 de l'Ontario",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fcentres-depistage&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=centres%20de%20d%C3%A9pistage%20de%20la%20COVID-19%20de%20l%27Ontario%3A%20https%3A//covid-19.ontario.ca/centres-depistage",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/centres-depistage&title=&summary=&source=",email:"mailto:?subject=Emplacements%20des%20centres%20de%20d equals www.facebook.com (Facebook)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: pistage de la COVID-19 de l'Ontario",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fcentres-depistage&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=centres%20de%20d%C3%A9pistage%20de%20la%20COVID-19%20de%20l%27Ontario%3A%20https%3A//covid-19.ontario.ca/centres-depistage",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/centres-depistage&title=&summary=&source=",email:"mailto:?subject=Emplacements%20des%20centres%20de%20d equals www.linkedin.com (Linkedin)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: pistage de la COVID-19 de l'Ontario",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fcentres-depistage&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=centres%20de%20d%C3%A9pistage%20de%20la%20COVID-19%20de%20l%27Ontario%3A%20https%3A//covid-19.ontario.ca/centres-depistage",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/centres-depistage&title=&summary=&source=",email:"mailto:?subject=Emplacements%20des%20centres%20de%20d equals www.twitter.com (Twitter)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: s 17 h en semaine"},test:function(e){return function(e){for(var a=n.slice(1,6),t=0;t<a.length;t++){if(e&&e[a[t]])if(i(e[a[t]].toLowerCase(),"17:01"))return!0}return!1}(e)},checked:!1},{id:"openOnWeekends",text:{en:"Open on weekends",fr:"Ouvert la fin de semaine"},test:function(e){return e.saturday\|\|e.sunday},checked:!1}]}],d={en:{title:"Share Ontario vaccine locations finder",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fvaccine-locations&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Ontario%20COVID-19%20vaccine-locations%3A%20https%3A//covid-19.ontario.ca/vaccine-locations",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/vaccine-locations&title=&summary=&source=",email:"mailto:?subject=Ontario%20COVID-19%20pharmacy%20vaccine%20locations&body=https%3A//covid-19.ontario.ca/vaccine-locations"}},fr:{title:"Partagez le localisateur de centres de vaccination de l equals www.facebook.com (Facebook)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: s 17 h en semaine"},test:function(e){return function(e){for(var a=n.slice(1,6),t=0;t<a.length;t++){if(e&&e[a[t]])if(i(e[a[t]].toLowerCase(),"17:01"))return!0}return!1}(e)},checked:!1},{id:"openOnWeekends",text:{en:"Open on weekends",fr:"Ouvert la fin de semaine"},test:function(e){return e.saturday\|\|e.sunday},checked:!1}]}],d={en:{title:"Share Ontario vaccine locations finder",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fvaccine-locations&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Ontario%20COVID-19%20vaccine-locations%3A%20https%3A//covid-19.ontario.ca/vaccine-locations",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/vaccine-locations&title=&summary=&source=",email:"mailto:?subject=Ontario%20COVID-19%20pharmacy%20vaccine%20locations&body=https%3A//covid-19.ontario.ca/vaccine-locations"}},fr:{title:"Partagez le localisateur de centres de vaccination de l equals www.linkedin.com (Linkedin)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: s 17 h en semaine"},test:function(e){return function(e){for(var a=n.slice(1,6),t=0;t<a.length;t++){if(e&&e[a[t]])if(i(e[a[t]].toLowerCase(),"17:01"))return!0}return!1}(e)},checked:!1},{id:"openOnWeekends",text:{en:"Open on weekends",fr:"Ouvert la fin de semaine"},test:function(e){return e.saturday\|\|e.sunday},checked:!1}]}],d={en:{title:"Share Ontario vaccine locations finder",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fvaccine-locations&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Ontario%20COVID-19%20vaccine-locations%3A%20https%3A//covid-19.ontario.ca/vaccine-locations",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/vaccine-locations&title=&summary=&source=",email:"mailto:?subject=Ontario%20COVID-19%20pharmacy%20vaccine%20locations&body=https%3A//covid-19.ontario.ca/vaccine-locations"}},fr:{title:"Partagez le localisateur de centres de vaccination de l equals www.twitter.com (Twitter)
Source: component.min[2].js.11.dr	String found in binary or memory: s de la Couronne.</p>",photo:{uri:"//files.ontario.ca/trillium_13.jpg"},displayName:"Gouvernement de l'Ontario",ministry:"Bureau du Conseil des ministres"}};this.$get=function(){return e}}]).provider("defaultContact",[function(){var e={en:{id:"7474",twitter:"https://twitter.com/ongov",youtube:"https://www.youtube.com/ONgov",facebook:"https://www.facebook.com/ONgov"},fr:{id:"8211",twitter:"https://twitter.com/ongouv",youtube:"https://www.youtube.com/ONgov",facebook:"https://www.facebook.com/ONgouv"}};this.$get=function(){return e}}]).provider("defaultTaxonomy",[function(){var e={3:[{language:"fr",field_global_topic:{und:[{value:1}]},name:"Affaires et equals www.facebook.com (Facebook)
Source: component.min[2].js.11.dr	String found in binary or memory: s de la Couronne.</p>",photo:{uri:"//files.ontario.ca/trillium_13.jpg"},displayName:"Gouvernement de l'Ontario",ministry:"Bureau du Conseil des ministres"}};this.$get=function(){return e}}]).provider("defaultContact",[function(){var e={en:{id:"7474",twitter:"https://twitter.com/ongov",youtube:"https://www.youtube.com/ONgov",facebook:"https://www.facebook.com/ONgov"},fr:{id:"8211",twitter:"https://twitter.com/ongouv",youtube:"https://www.youtube.com/ONgov",facebook:"https://www.facebook.com/ONgouv"}};this.$get=function(){return e}}]).provider("defaultTaxonomy",[function(){var e={3:[{language:"fr",field_global_topic:{und:[{value:1}]},name:"Affaires et equals www.twitter.com (Twitter)
Source: component.min[2].js.11.dr	String found in binary or memory: s de la Couronne.</p>",photo:{uri:"//files.ontario.ca/trillium_13.jpg"},displayName:"Gouvernement de l'Ontario",ministry:"Bureau du Conseil des ministres"}};this.$get=function(){return e}}]).provider("defaultContact",[function(){var e={en:{id:"7474",twitter:"https://twitter.com/ongov",youtube:"https://www.youtube.com/ONgov",facebook:"https://www.facebook.com/ONgov"},fr:{id:"8211",twitter:"https://twitter.com/ongouv",youtube:"https://www.youtube.com/ONgov",facebook:"https://www.facebook.com/ONgouv"}};this.$get=function(){return e}}]).provider("defaultTaxonomy",[function(){var e={3:[{language:"fr",field_global_topic:{und:[{value:1}]},name:"Affaires et equals www.youtube.com (Youtube)
Source: base[1].js.11.dr	String found in binary or memory: this.V("highrepfallback");else if(a.i){b=this.l?this.l.l.l:null;if(swa(a)&&b&&b.isLocked())var d="FORMAT_UNAVAILABLE";else if(!this.i.I&&"auth"===a.errorCode&&"429"===a.details.rc){d="TOO_MANY_REQUESTS";var e="6"}this.V("playererror",a.errorCode,d,g.EB(a.details),e)}else d=/^pp/.test(this.videoData.clientPlaybackNonce),iU(this,a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.N)(),(new pT(a, equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: clientconfig.passport.net

Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: http://covid-19.ontario.ca/covid19-cms-assets/2020-12/Covid-Vaccine_Meta_EN_V1.jpg
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: http://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-metaimage-covid-vaccination-en-2020-12-24.p
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://covidswab.lh.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://durhamcovidswab.lh.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://gbgh.on.ca/covid-19-novel-coronavirus-updates/
Source: jquery.once.min[1].js.11.dr	String found in binary or memory: http://github.com/robloach/jquery-once
Source: effect-min[1].js.11.dr	String found in binary or memory: http://jqueryui.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://myownpharmacy.ca/guardian/
Source: app.min[1].js.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://news.ontario.ca/newsroom/en
Source: app.min[1].js.11.dr	String found in binary or memory: http://news.ontario.ca/newsroom/fr
Source: clearfix.module[1].css.11.dr	String found in binary or memory: http://nicolasgallagher.com/micro-clearfix-hack
Source: jquery.once.min[1].js.11.dr	String found in binary or memory: http://opensource.org/licenses/GPL-2.0
Source: jquery.once.min[1].js.11.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://tbnplc.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://trilliumhealthpartners.ca/covid-19/A/assessment.html#starthere
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://web.lacgh.napanee.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.GBACHC.ca/COVID-19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.HamiltonCovidTest.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.akwesasne.ca/covid-19-novel-coronavirus-information/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.algomapublichealth.com/disease-and-illness/infectious-diseases/novel-coronavirus/#assessm
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.almontegeneral.com/assessmentcentre
Source: msapplication.xml.10.dr	String found in binary or memory: http://www.amazon.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.assessmentbooking.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.bradysdrugstore.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.bramptonpharmacist.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.chathamfamilypharmacy.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.cornerstonepharmacy.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.covidswab.lh.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.covidtestinglm.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.dalespharmacy.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.drhc.on.ca/dryden-regional-health-centre-opens/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.elfht.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.erincreekpharmacy.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.espanolaregionalhospital.ca/covid-19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.gbfht.ca/cac
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.geraldtondh.com/
Source: msapplication.xml1.10.dr	String found in binary or memory: http://www.google.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.hauserspharmacy.com
Source: phulocator[1].htm.11.dr	String found in binary or memory: http://www.health.gov.on.ca/en/common/default.aspx/disclaimers.html
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.health.gov.on.ca/en/common/system/services/phu/locations.aspx
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: http://www.health.gov.on.ca/en/pro/programs/publichealth/coronavirus/docs/Guidance_for_Prioritizing_
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.health.gov.on.ca/fr/common/system/services/phu/locations.aspx
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.hoganpharmacy.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.hpha.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.hwmh.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.jeancoutu.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.lakeridgehealth.on.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.lakeridgehealth.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.lancasterwellnesspharmacy.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.libertymarketpharmacy.com/
Source: msapplication.xml2.10.dr	String found in binary or memory: http://www.live.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.lwdh.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.maindrugmartcompounding.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.medionerx.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.metrodrugs.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.mhc.on.ca/covid-19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.ndfht.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.ngh.on.ca
Source: msapplication.xml3.10.dr	String found in binary or memory: http://www.nytimes.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.pharmacy101.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.pharmaessence.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.pharmorepharmacy.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.porcupinehu.on.ca/en/your-health/infectious-diseases/novel-coronavirus/covid-assessment-c
Source: msapplication.xml4.10.dr	String found in binary or memory: http://www.reddit.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.rexall.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.rvh.on.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.southstormontpharmacies.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.stevensonhospital.ca/news/index.html?id=265
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.timiskaminghu.com/90484/covid-19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.tmcpharmacy.ca
Source: msapplication.xml5.10.dr	String found in binary or memory: http://www.twitter.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.vanierpharmacy.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.walmart.ca/en/stores-near-me/morningside-scarborough-supercentre-3111
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.whcacovid.com
Source: msapplication.xml6.10.dr	String found in binary or memory: http://www.wikipedia.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: http://www.wrh.on.ca
Source: msapplication.xml7.10.dr	String found in binary or memory: http://www.youtube.com/
Source: base[1].js.11.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: base[1].js.11.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: base[1].js.11.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: base[1].js.11.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: base[1].js.11.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://CovidScreen.lacgh.napanee.on.ca)
Source: base[1].js.11.dr	String found in binary or memory: https://admin.youtube.com
Source: gtm[1].js.11.dr	String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: gtm[1].js.11.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: analytics[1].js.11.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: app.min[1].js.11.dr	String found in binary or memory: https://api.ontario.ca
Source: app.min[1].js.11.dr	String found in binary or memory: https://api.ontario.ca/api/book
Source: app.min[1].js.11.dr	String found in binary or memory: https://api.ontario.ca/es/datatable
Source: app.min[1].js.11.dr	String found in binary or memory: https://api.ontario.ca/es/onesite
Source: app.min[1].js.11.dr	String found in binary or memory: https://api.ontario.ca/es/v2/elasticsearch_index_drupal_onesite_elasticsearch_page_index
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://app.getcorigan.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://assessmentbooking.simplybook.plus/v2/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://atikokanfht.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://barriehealth.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://booking.sbghc.on.ca/
Source: gtm[1].js.11.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/foundation-sites
Source: about-ontario[1].htm.11.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://chancellorswaypharmacy.com/
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontar
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontarRoot
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.cRoot
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/BCOVID-19
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/Root
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid-19.ontario.ca/assessment-centre-locations/
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/-19-vaccination-plan#phase-1
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/19-book-vaccine-assets/favicon-32x32.png
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/Root
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THow
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THow/.ca/book-vaccine/Root
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THow/page/about-ontarioonsRoot
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THow/page/government-ontarioRoot
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowRoot
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowalth.gov.on.ca/phulocator/rioRoot
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/book-vaccine/
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/book-vaccine/Root
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/covid-19-vaccines-ontarioRoot
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/ontarios-covid-19-vaccinatm/embed/YrjmP_ueahQ?con
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/rendezvous-vaccin/Root
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/vaccine-locations/Root
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/vaccine-locationsRoot
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/vernment-ontarioRoot
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowohealth.ca/os-covid-19-vaccinatm/embed/YrjmP_ueahQ?cont
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/t
Source: imagestore.dat.11.dr	String found in binary or memory: https://covid-19.ontario.ca/c19-book-vaccine-assets/favicon-32x32.png8
Source: book-vaccine[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/c19-book-vaccine-assets/social_image_en.png
Source: rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/c19-book-vaccine-assets/social_image_fr.png
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid-19.ontario.ca/centres-depistage/
Source: imagestore.dat.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-ac-assets/favicon-32x32.png?v=95d5a2a6253850552d499cd53df6b4a28
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-data/data-catalogue/8a89caa9-511c-4568-af89-7f2174b4378c.json
Source: populate-front-page-data[1].js.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-data/data-catalogue/ed270bb8-340b-41f9-a7c6-e8ef587e6d11.json
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-sat-assets/social_image_en.jpeg
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-test-and-testing-location-information
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-test-and-testing-location-information#centres
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-test-and-testing-location-information#pharmacy
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-vaccine-safety
Source: covid-19-vaccines-ontario[1].htm.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-vaccines-ontario
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-vaccines-ontariotario.ca/themes/custom/ds_theme/favicon.ico
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-covid-alert-2020-12-21.png
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-find-zone-measures-2020-12-
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-physical-distancing-2020-12
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-self-assessment-2020-12-21.
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-stay-home-2020-12-21.png
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-up-to-date-info-2020-12-21.
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-wear-a-mask-2020-12-21.png
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-workplace-2020-12-21.png
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-vaccine-page-intro-box-702x532-2020-
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-vaccine-page-intro-tall-704x1050-202
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/vaccine-banner_0.svg
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/covidappbanner_240x182px.svg
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/phone.svg
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/report-price-gouging-during-corona-virus.svg
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/screen-before-you-go.svg
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-assessment-centre.svg
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-check-results.svg
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-self-assessment.svg
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-03/english_socialmedia_Mar29.png
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-03/getting-covid-vaccine-meta-1920x1080-en.jpg
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-03/ideas-to-combat-corona-virus.svg
Source: covid-19-vaccines-ontario[1].htm.11.dr, QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/covidalert
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/data
Source: rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/emplacements-pour-la-vaccination
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid-19.ontario.ca/feedback/assessment-centre-locations
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/fr
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/commentaires/centres-depistage
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/index.fr.html
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/information-sur-le-depistage-et-les-centres-de-depistage-de-la-covid-
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/le-plan-de-vaccination-de-lontario-contre-la-covid-19
Source: rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/le-plan-de-vaccination-de-lontario-contre-la-covid-19#phase-1
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/recevoir-un-vaccin-contre-la-covid-19
Source: covid-19-vaccines-ontario[1].htm.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/vaccins-contre-la-covid-19-en-ontario
Source: about-ontario[1].htm.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/zones-et-restrictions
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid-19.ontario.ca/get-covid-19-vaccine
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-1
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-2
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-3
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#task-force
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/index.html
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/ontarios-covid-19-vac
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid-19.ontario.ca/ontarios-covid-19-vacRoot
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/ontarios-covid-19-vaccination-plan
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/ontarios-covid-19-vaccination-plan#phase-1
Source: rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/rendezvous-vaccin/
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/rendezvous-vaccin/id-19.ontario.ca/c19-book-vaccine-assets/favicon-32x32
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/rendezvous-vaccin/~
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/self-assessment/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid-19.ontario.ca/self-assessment/.
Source: imagestore.dat.11.dr	String found in binary or memory: https://covid-19.ontario.ca/themes/custom/ds_theme/favicon.ico
Source: imagestore.dat.11.dr	String found in binary or memory: https://covid-19.ontario.ca/themes/custom/ds_theme/favicon.ico~
Source: imagestore.dat.11.dr	String found in binary or memory: https://covid-19.ontario.ca/themes/custom/ds_theme/favicon.ico~&
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/vaccine-locations
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/vaccine-locations/
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/vaccine-locationsFCOVID-19
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/vaccine-locationss://covid-19.ontario.ca/vaccine-locations
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/vernment-ontario
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid-19.ontario.ca/vernment-ontariotheme/favicon.ico
Source: about-ontario[1].htm.11.dr, covid-19-vaccines-ontario[1].htm.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, QN29B4HD.htm.11.dr	String found in binary or memory: https://covid-19.ontario.ca/zones-and-restrictions
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://covid19.ontari
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid19.ontariohealth.ca/
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid19.ontariohealth.ca/os-covid-19-vaccination-plan#phase-1
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://covid19.ontariohealth.ca/os-covid-19-vaccination-plan#phase-1d
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid19.smgh.ca:4433/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covid19.smgh.ca:4433/.
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://covid19results.ehealthontario.ca:4443/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covidbooking.sunnybrook.ca/appointment/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covidtestinglm.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://covidtestregistration.grhosp.on.ca/
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://covidvaccine.sunnybrook.ca/covid-vaccine/gp/self-schedule
Source: app.min[1].js.11.dr	String found in binary or memory: https://data.211support.org/api/v1/detail
Source: ed270bb8-340b-41f9-a7c6-e8ef587e6d11[1].json.11.dr, 8a89caa9-511c-4568-af89-7f2174b4378c[1].json.11.dr	String found in binary or memory: https://data.ontario.ca/api/3/action/help_show?name=datastore_search
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://data.ontario.ca/dataset/covid-19-vaccine-data-in-ontario
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://data.ontario.ca/dataset?keywords_en=COVID-19
Source: recaptcha__en[1].js.11.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: recaptcha__en[1].js.11.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: recaptcha__en[1].js.11.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: base[1].js.11.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: onesite-health.min[1].js.11.dr	String found in binary or memory: https://drhd.icon.ehealthontario.ca
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://durhamregion.vertoengage.com/engage/generic-open-clinic?key=5f58a4fe-9e22-4fb8
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://durhamregion.vertoengage.com/engage/generic-open-clinic?key=5f58a4fe-9e22-4fb8-b49a-b8fe1ca0
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://eohu.ca/en/covid-19-novel-coronavirus
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://eohu.ca/en/covid/covid-19-testing-assessment-centres
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://eohu.ca/fr/covid/covid-19-testing-assessment-centres
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://epicapps.toh.ca/mychart/openscheduling
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://epicapps.toh.ca/mychart/openscheduling?lang=canadianenglish
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://eshc.simplybook.me/v2/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://ethp.ca/main/covid19-testing
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://extra-mile-pharmacy-medical-centre.business.site/
Source: about-ontario[1].htm.11.dr	String found in binary or memory: https://files.ontario.ca/banner-icon-alert-xsmall.png
Source: covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://files.ontario.ca/moh-covid-19-vaccines-fact-sheet-en-2021-02-05.pdf
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://forms.office.com/Pages/ResponsePage.aspx?id=S9Av_mSBdEqx7DvOSbCZil70dO3WbMJGjFAvNoHxeT5UQ1ZD
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://gbachc.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://gbfht.ca/cac/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://gbhs.simplybook.me/v2/
Source: modernizr[1].js.11.dr	String found in binary or memory: https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js
Source: moment.min[1].js.11.dr	String found in binary or memory: https://github.com/moment/moment/issues/1779
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://glencadepharmacy.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://hdh.appointlet.com/s/assessment
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://hopitalmontfort.com/en/second-covid-19-care-clinic-opening-ottawa-east-thursday
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://hpepublichealth.ca/covid-19-vaccines/
Source: onesite-health.min[1].js.11.dr	String found in binary or memory: https://hrhd.icon.ehealthontario.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://hybridpharm.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://keeleandfinchpharmasave.medmeapp.ca/schedule
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://kingstonhsc.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://kingstonhsc.ca/patients-families-and-visitors/covid-19-information/community-assessment-cent
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://lambtonpublichealth.ca/2019-novel-coronavirus/testing-criteria/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://loyalist.medmeapp.com/schedule
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://lwha.ca/covidbooking/
Source: onesite-body.min[1].js.11.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?v=3&key=
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://medpluspharmacy.medmeapp.com/schedule/
Source: book-vaccine[1].htm.11.dr, ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://news.ontario.ca/newsroom/en
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://news.ontario.ca/newsroom/fr
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://news.ontario.ca/search/en?keywords=covid19
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://news.ontario.ca/search/en?keywords=vaccine
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://nhappointmentscheduler.powerappsportals.com/
Source: onesite-health.min[1].js.11.dr	String found in binary or memory: https://nrph.icon.ehealthontario.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://nygh.on.ca/covid-19-updates
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://nygh.on.ca/patients-and-visitors/covid-19-updates/assessment-centres
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://one.halton.ca/vab/s/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://ottawa.ca/en/recreation-and-parks/recreation-facilities/facility-listing/ray-friel-recreatio
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://outlook.office365.com/owa/calendar/COVIDAssessment
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://outlook.office365.com/owa/calendar/HPHA1
Source: gtm[1].js.11.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: base[1].js.11.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/osd.js
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://pharmasave.com/barrie-marsellus-drive/prescriptions/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://pharmasave.com/store/pharmasave-eagle-manor/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://pharmasave.com/store/pharmasave-huron-street/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://pharmasave.com/store/pharmasave-morrison-pharmacy/
Source: recaptcha__en[1].js.11.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://portal.healthmyself.net/hrhcovidtest/guest/#/nae/book/type
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://portal.healthmyself.net/tehncovid/guest/#/g5x/book/type
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://psfdh.on.ca/2020/04/03/community-assessment-centre/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://rcvtac.ca/
Source: base[1].js.11.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://registration-mom.mychamp.ca/Live/Montfort/Booking/Account/BookRegister
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://s-ca.chkmkt.com/?e=210138&h=71305F7BD7FC4D6&l=en
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://saversdrugmart.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://secure.hsnsudbury.ca/COVID19AppointmentRequest
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://shn.ca/cold-flu-covid19-clinic/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://simpsonspharmacy.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://slmhc.on.ca/about/covid-19-information/covid-19-assessment-centre/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://southlake.ca/
Source: app.min[1].js.11.dr	String found in binary or memory: https://stage.api.ontariogovernment.ca
Source: analytics[1].js.11.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://sunnybrook.ca/content/?page=novel-coronavirus-covid-19-assessment-centre
Source: recaptcha__en[1].js.11.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: recaptcha__en[1].js.11.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: recaptcha__en[1].js.11.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: recaptcha__en[1].js.11.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: base[1].js.11.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: base[1].js.11.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: base[1].js.11.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: base[1].js.11.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: remote[1].js.11.dr	String found in binary or memory: https://support.google.com/youtube/answer/7640706
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://survey123.arcgis.com/share/4f76dd7a66b6438196b0de3869cf136f
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://surveys.savience.com/s/LACOVIDPUBLIC/
Source: analytics[1].js.11.dr	String found in binary or memory: https://tagassistant.google.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://temiskaming-hospital.com/tem/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://testing.getcorigan.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://trilliumhealthpartners.ca/assessment
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://trilliumhealthpartners.ca/covid-19/A/assessment.html#starthere
Source: component.min[2].js.11.dr	String found in binary or memory: https://twitter.com/ongov
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://uht-public.vertoengage.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://unityhealth.to/assessment-centres/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://v2.waitwhile.com/book/barriecovidtesting
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://vaccineto.ca/sites
Source: base[1].js.11.dr	String found in binary or memory: https://viacon.corp.google.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://wholehealthcooksville.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.Pharmachoice.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.bchsys.org/en/covid-19-online-scheduling.aspx
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.bchu.org/ServicesWeProvide/InfectiousDiseases/Pages/COVID-19-Vaccine-Clinic-Appointments
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.bchu.org/ServicesWeProvide/InfectiousDiseases/Pages/COVID-19-Vaccines.aspx
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.brockvillegeneralhospital.ca/en/patient-care/covid-19-coronavirus.aspx#
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://www.canada.ca/en/public-health/services/diseases/2019-novel-coronavirus-infection/awareness-
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://www.canada.ca/en/public-health/services/immunization/national-advisory-committee-on-immuniza
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.cmh.org/patients-visitors/service-resumption-covid-19/covid-19-testing
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.crfht.ca/en/our-clinic/covid-19-updates
Source: drupalSettingsLoader[1].js.11.dr	String found in binary or memory: https://www.drupal.org/node/2815083
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.durhamvaccinebooking.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.dynacare.ca/covidtestingontario.aspx
Source: analytics[1].js.11.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: analytics[1].js.11.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.11.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: gtm[1].js.11.dr	String found in binary or memory: https://www.google.com
Source: recaptcha__en[1].js.11.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.google.com/maps/search/?api=1&query=
Source: about-ontario[1].htm.11.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=explicit
Source: recaptcha__en[1].js.11.dr, api[1].js0.11.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: base[1].js.11.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: gtm[1].js.11.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.11.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: book-vaccine[1].htm.11.dr, ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: book-vaccine[1].htm.11.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5G4CS4L
Source: about-ontario[1].htm.11.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-T7V5LF
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.grhosp.on.ca/
Source: remote[1].js.11.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: api[1].js0.11.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/mrdLhN7MywkJAAbzddTIjTaM/recaptcha__en.js
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.guardian-ida-pharmacies.ca/en/ontario/brampton/kennedy-medical-plex-pharmacy-ida-7027581
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.guardian-ida-pharmacies.ca/en/ontario/london/london-medical-plex-pharmacy-7027570
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.guardian-ida-pharmacies.ca/en/ontario/london/medpoint-care-pharmacy-7015702
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.guardian-ida-pharmacies.ca/en/ontario/scarborough/village-square-pharmacy-7005106
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.haliburtoncares.ca/
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.halton.ca/For-Residents/Immunizations-Preventable-Disease/Diseases-Infections/New-Corona
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.halton.ca/For-Residents/New-Coronavirus/COVID-19-Vaccines/COVID-19-Vaccination-Clinics
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.halton.ca/For-Residents/New-Coronavirus/COVID-19-Vaccines/COVID-19-Vaccination-Clinics#l
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.haltonhealthcare.on.ca/covid-19-info/booking-a-test
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.haltonhealthcare.on.ca/covid-19-info/covid-19-testing
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.hamilton.ca/coronavirus/assessment-centres
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.hamilton.ca/coronavirus/covid-19-vaccine-booking
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.hanoverhospital.on.ca/news.php?pgid=121
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.headwatershealth.ca/
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://www.health.gov.on.ca/en/pro/programs/publichealth/coronavirus/docs/vaccine/COVID-19_Phase_2_
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.hpph.ca/en/news/coronavirus-covid19-update.aspx#Testing-tracing-and-results-for-COVID-19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.hrh.ca/covid-19/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.hsnsudbury.ca/portalen/Patients-and-Visitors/COVID-19/COVID-19-Assessment-Centre
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.josephbranthospital.ca/en/redevelopment-expansion/covid-19-assessment-testing.asp?_mid_=
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.junctionchemist.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.lakeridgehealth.on.ca/en/patientsandvisitors/novel-coronavirus-2019-ncov.asp
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.ldhc.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.lifelabs.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.lifelabs.com/book-an-appointment/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.mackenziehealth.ca/en/about-us/get-the-latest-information-on-covid-19.aspx
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.mahc.ca/en/services/covid19.aspx#
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.mahc.ca/en/services/muskoka-assessment-centre.aspx
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.mattawahealth.ca/News/mattawa-assessment-centre
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.medicineshoppe.ca/en/ontario/caledonia/the-medicine-shoppe-pharmacy-210-7003593
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.medicineshoppe.ca/en/ontario/london/the-medicine-shoppe-pharmacy-190-7016244
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.medicineshoppe.ca/en/ontario/ottawa/the-medicine-shoppe-pharmacy-143-7009763
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.medicineshoppe.ca/en/ontario/ottawa/the-medicine-shoppe-pharmacy-271-7021282
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.medicineshoppe.ca/en/ontario/toronto/the-medicine-shoppe-pharmacy-134-7014226
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.msh.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.msh.on.ca/clinics-departments/covid-19-assessment-centre#registration
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.myhealthunit.ca/en/health-topics/coronavirus.asp
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.myvisit.cmh.org
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.niagarahealth.on.ca/centres
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.niagararegion.ca/health/covid-19/vaccination/appointment-booking.aspx
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.niagararegion.ca/health/covid-19/vaccination/clinic-schedule.aspx
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.nshn.care/covid19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.nwhu.on.ca/covid19/Pages/self-assessment.aspx
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.nygh.on.ca/covid19vaccination
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://www.ontario.ca
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://www.ontario.ca/
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://www.ontario.ca/.ca/book-vaccine/
Source: book-vaccine[1].htm.11.dr, ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/feedback/contact-us?id=25811&nid=130423
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/form/report-price-gouging-related-covid-19
Source: rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/fr/commentaires/pour-nous-joindre?id=25812&nid=130424
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/fr/page/accessibilite
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/fr/page/conditions-dutilisation
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/fr/page/declaration-concernant-la-protection-de-la-vie-privee
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/fr/page/droits-dauteur-imprimeur-de-la-reine-pour-lontarioc
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/fr/page/gouvernement-de-lontario
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/fr/page/lontario-en-bref
Source: imagestore.dat.11.dr	String found in binary or memory: https://www.ontario.ca/img/favicon.ico
Source: imagestore.dat.11.dr	String found in binary or memory: https://www.ontario.ca/img/favicon.ico~
Source: imagestore.dat.11.dr	String found in binary or memory: https://www.ontario.ca/img/favicon.ico~&
Source: ~DF7AEF20D2E45A483C.TMP.10.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.ontario.ca/page/about-ontario
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://www.ontario.ca/page/about-ontario4About
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://www.ontario.ca/page/about-ontarioonst
Source: book-vaccine[1].htm.11.dr, ontarios-covid-19-vaccination-plan[1].htm.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.ontario.ca/page/accessibility
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/businesses-get-help-covid-19-costs
Source: book-vaccine[1].htm.11.dr, ontarios-covid-19-vaccination-plan[1].htm.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.ontario.ca/page/copyright-information-c-queens-printer-ontario
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-cases-schools-and-child-care-centres
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-communication-resources#staying-safe
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-communication-resources#vaccine-facts
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-stop-spread
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr, covid-19-vaccines-ontario[1].htm.11.dr, QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-stop-spread#physical-distancing
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-stop-spread#section-0
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-stop-spread#section-6
Source: covid-19-vaccines-ontario[1].htm.11.dr, QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-stop-spread#stay-home
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-stop-spread#wash-hands
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-support-people
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-support-people#section-4
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-support-students-and-parents
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-support-workers
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-variants
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/ethical-framework-covid-19-vaccine-distribution
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr, covid-19-vaccines-ontario[1].htm.11.dr, QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/face-coverings-and-face-masks
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.ontario.ca/page/government-ontario
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://www.ontario.ca/page/government-ontarioDGovernment
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://www.ontario.ca/page/government-ontario~
Source: book-vaccine[1].htm.11.dr, ontarios-covid-19-vaccination-plan[1].htm.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.ontario.ca/page/privacy-statement
Source: covid-19-vaccines-ontario[1].htm.11.dr, QN29B4HD.htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/resources-prevent-covid-19-workplace
Source: book-vaccine[1].htm.11.dr, ontarios-covid-19-vaccination-plan[1].htm.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.ontario.ca/page/terms-use
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/page/vaccines
Source: ontarios-covid-19-vaccination-plan[1].htm.11.dr	String found in binary or memory: https://www.ontario.ca/search/search-results
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://www.ontario.caio.ca/book-vaccine/t
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.osmh.on.ca/covid-19/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.ottawapublichealth.ca/en/shared-content/assessment-centres.aspx
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.ottawapublichealth.ca/en/shared-content/assessment-centres.aspx#Click-here-to-learn-more
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.peelregion.ca/coronavirus/vaccine/book-appointment/
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.peelregion.ca/coronavirus/vaccine/book-appointment/#clinics
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.pharmasavebramcity.com
Source: {F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	String found in binary or memory: https://www.phdapps.he
Source: ~DF7AEF20D2E45A483C.TMP.10.dr, QN29B4HD.htm.11.dr	String found in binary or memory: https://www.phdapps.health.gov.on.ca/phulocator/
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://www.phdapps.health.gov.on.ca/phulocator/4Public
Source: rendezvous-vaccin[1].htm.11.dr	String found in binary or memory: https://www.phdapps.health.gov.on.ca/phulocator/fr/Default.aspx
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://www.phdapps.health.gov.on.ca/phulocator/rio
Source: ~DF7AEF20D2E45A483C.TMP.10.dr	String found in binary or memory: https://www.phdapps.health.gov.on.ca/phulocator/riotario.ca/themes/custom/ds_theme/favicon.ico
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.porcupinehu.on.ca/en/your-health/infectious-diseases/novel-coronavirus/covid-assessment-
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.prhc.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.prhc.on.ca/about-us/covid-19-novel-coronavirus/
Source: QN29B4HD.htm.11.dr	String found in binary or memory: https://www.publichealthontario.ca/en/diseases-and-conditions/infectious-diseases/respiratory-diseas
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.qhc.on.ca/covid-19.php
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.regionofwaterloo.ca/en/health-and-wellness/covid-19-vaccination-clinics-in-waterloo-regi
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.rexall.ca/storelocator/store/0869/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.rexall.ca/storelocator/store/109
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.rexall.ca/storelocator/store/3012/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.rexall.ca/storelocator/store/6933
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.rexall.ca/storelocator/store/95
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.rexall.ca/storelocator/store/980
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.riversidehealthcare.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.rmh.org/covid-19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.rvh.on.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.rvh.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.sbghc.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.shn.ca/covid19-assess/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.simcoemuskokahealth.org/Topics/COVID-19/AssessmentCentresandTesting
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.simcoemuskokahealth.org/Topics/COVID-19/Vaccine-and-Immunization
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.simcoemuskokahealth.org/Topics/COVID-19/Vaccine-and-Immunization#c11dec2d-91db-41b0-bd35
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.sinaihealth.ca/covid19/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.sinaihealth.ca/covid19/covid-19-assessment-centre/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.smgh.ca/covid-19-testing-available-for-k-w-residents-with-symptoms-starting-may-16/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.sschs.ca/general/home.html
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.stegh.on.ca/node/626
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.stjoes.ca/coronavirus/covid-19-test-home
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.tbdhu.com/coronavirus
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.tehn.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.tehn.ca/programs-services/covid-19-assessment-centre
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.thfht.com/wp-content/uploads/2020/05/PRESS-RELEASE-May-25-2020-AC-Final.pdf
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.tillsonburghospital.on.ca/about-tdmh/covid-19/
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.toronto.ca/home/covid-19/
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.toronto.ca/home/covid-19/covid-19-protect-yourself-others/covid-19-vaccines/covid-19-how
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.uhn.ca/Covid19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.uhn.ca/Covid19#
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.uhn.ca/covid19_vaccine
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.villagesquaremedical.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.waha.ca/covid-19/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.walmart.ca/en/stores-near-me/mississauga-dixie-supercentre-1126
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.walmart.ca/en/stores-near-me/richmond-hill-south-supercentre-1116
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.walmart.ca/en/stores-near-me/richmond-hill-supercentre-3195
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.walmart.ca/en/stores-near-me/woodbridge-supercentre-1081
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.wdgpublichealth.ca/your-health/covid-19-information-public/assessment-centres-wdg
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.wdgpublichealth.ca/your-health/covid-19-information-public/covid-19-vaccine-information/
Source: onesite-live-chat.min[1].js.11.dr	String found in binary or memory: https://www.webchat.ccm2.gov.on.ca/EO_Webchat/iceMessagingWeb/Chat.html?destinationURI=sip:im_990a_s
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.wgh.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.whcacovid.com/harriston-assessment-centre
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.whgh.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.williamoslerhs.ca/coronavirus
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.williamoslerhs.ca/patients-and-families/preparing-for-your-visit-or-stay/coronavirus-inf
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.womenscollegehospital.ca/assessmentcentre
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.womenscollegehospital.ca/covid19-tool/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.wrh.on.ca/COVID19AssessmentCentre
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	String found in binary or memory: https://www.wrh.on.ca/OnlineBooking
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.york.ca/wps/portal/yorkhome/health/yr/covid-19/covid19vaccinationclinics
Source: ~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	String found in binary or memory: https://www.york.ca/wps/portal/yorkhome/health/yr/covid-19/covid19vaccinationclinics/04covid19vaccin
Source: component.min[2].js.11.dr	String found in binary or memory: https://www.youtube.com/ONgov
Source: ~DF7AEF20D2E45A483C.TMP.10.dr, covid-19-vaccines-ontario[1].htm.11.dr	String found in binary or memory: https://www.youtube.com/embed/YrjmP_ueahQ?controls=0
Source: ~DF7AEF20D2E45A483C.TMP.10.dr, QN29B4HD.htm.11.dr	String found in binary or memory: https://www.youtube.com/embed/cs4qPsP6COA
Source: base[1].js.11.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: base[1].js.11.dr	String found in binary or memory: https://youtu.be/
Source: base[1].js.11.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: base[1].js.11.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: base[1].js.11.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 143.204.11.124:443 -> 192.168.2.3:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.124:443 -> 192.168.2.3:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.100:443 -> 192.168.2.3:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.100:443 -> 192.168.2.3:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.28:443 -> 192.168.2.3:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.3:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.28:443 -> 192.168.2.3:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.3:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.74.185:443 -> 192.168.2.3:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.74.185:443 -> 192.168.2.3:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.207.130:443 -> 192.168.2.3:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.207.130:443 -> 192.168.2.3:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.3:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.65:443 -> 192.168.2.3:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.22.246:443 -> 192.168.2.3:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.22.246:443 -> 192.168.2.3:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.41.3.217:443 -> 192.168.2.3:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.41.3.217:443 -> 192.168.2.3:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.41.3.217:443 -> 192.168.2.3:49797 version: TLS 1.2

Source: classification engine

Classification label: clean1.winDOCX@4/245@15/9

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Temp\{D63A0268-7FAD-4C24-9B3F-14C3E2894C13} - OProcSessId.dat

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE 'C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE' /Automation -Embedding
Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5992 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5992 CREDAT:17410 /prefetch:2	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx	Initial sample: OLE zip file path = word/_rels/header2.xml.rels
Source: COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx	Initial sample: OLE zip file path = docProps/custom.xml

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE

File opened: C:\Windows\SysWOW64\MSVCR100.dll

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Extra Window Memory Injection1	Process Injection1	LSASS Memory	System Information Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Extra Window Memory Injection1	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx	0%	Virustotal		Browse

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.ndfht.ca	0%	Avira URL Cloud	safe
http://www.whcacovid.com	0%	Avira URL Cloud	safe
https://www.Pharmachoice.com	0%	Avira URL Cloud	safe
https://hopitalmontfort.com/en/second-covid-19-care-clinic-opening-ottawa-east-thursday	0%	Avira URL Cloud	safe
http://www.stevensonhospital.ca/news/index.html?id=265	0%	Avira URL Cloud	safe
https://www.womenscollegehospital.ca/assessmentcentre	0%	Avira URL Cloud	safe
https://hpepublichealth.ca/covid-19-vaccines/	0%	Avira URL Cloud	safe
http://www.hauserspharmacy.com	0%	Avira URL Cloud	safe
http://www.bradysdrugstore.com	0%	Avira URL Cloud	safe
https://hybridpharm.com/	0%	Avira URL Cloud	safe
https://www.phdapps.health.gov.on.ca/phulocator/4Public	0%	Avira URL Cloud	safe
https://CovidScreen.lacgh.napanee.on.ca)	0%	Avira URL Cloud	safe
https://barriehealth.ca/	0%	Avira URL Cloud	safe
https://www.rvh.on.ca/	0%	Avira URL Cloud	safe
https://www.cmh.org/patients-visitors/service-resumption-covid-19/covid-19-testing	0%	Avira URL Cloud	safe
http://www.health.gov.on.ca/en/pro/programs/publichealth/coronavirus/docs/Guidance_for_Prioritizing_	0%	Avira URL Cloud	safe
http://www.metrodrugs.ca	0%	Avira URL Cloud	safe
https://nygh.on.ca/covid-19-updates	0%	Avira URL Cloud	safe
https://www.osmh.on.ca/covid-19/	0%	Avira URL Cloud	safe
https://assessmentbooking.simplybook.plus/v2/	0%	Avira URL Cloud	safe
http://www.espanolaregionalhospital.ca/covid-19	0%	Avira URL Cloud	safe
https://www.mahc.ca/en/services/covid19.aspx#	0%	Avira URL Cloud	safe
https://portal.healthmyself.net/tehncovid/guest/#/g5x/book/type	0%	Avira URL Cloud	safe
https://www.prhc.on.ca/about-us/covid-19-novel-coronavirus/	0%	Avira URL Cloud	safe
http://www.hwmh.ca	0%	Avira URL Cloud	safe
http://www.lakeridgehealth.on.ca	0%	Avira URL Cloud	safe
https://testing.getcorigan.ca/	0%	Avira URL Cloud	safe
http://www.rvh.on.ca	0%	Avira URL Cloud	safe
https://www.msh.on.ca/	0%	Avira URL Cloud	safe
http://www.HamiltonCovidTest.ca	0%	Avira URL Cloud	safe
https://gbfht.ca/cac/	0%	Avira URL Cloud	safe
https://www.grhosp.on.ca/	0%	Avira URL Cloud	safe
https://psfdh.on.ca/2020/04/03/community-assessment-centre/	0%	Avira URL Cloud	safe
https://stage.api.ontariogovernment.ca	0%	Avira URL Cloud	safe
https://www.haltonhealthcare.on.ca/covid-19-info/booking-a-test	0%	Avira URL Cloud	safe
http://www.libertymarketpharmacy.com/	0%	Avira URL Cloud	safe
https://slmhc.on.ca/about/covid-19-information/covid-19-assessment-centre/	0%	Avira URL Cloud	safe
https://www.wdgpublichealth.ca/your-health/covid-19-information-public/covid-19-vaccine-information/	0%	Avira URL Cloud	safe
https://registration-mom.mychamp.ca/Live/Montfort/Booking/Account/BookRegister	0%	Avira URL Cloud	safe
https://www.guardian-ida-pharmacies.ca/en/ontario/brampton/kennedy-medical-plex-pharmacy-ida-7027581	0%	Avira URL Cloud	safe
https://www.medicineshoppe.ca/en/ontario/toronto/the-medicine-shoppe-pharmacy-134-7014226	0%	Avira URL Cloud	safe
http://www.southstormontpharmacies.com	0%	Avira URL Cloud	safe
https://www.porcupinehu.on.ca/en/your-health/infectious-diseases/novel-coronavirus/covid-assessment-	0%	Avira URL Cloud	safe
https://southlake.ca/	0%	Avira URL Cloud	safe
https://eohu.ca/en/covid-19-novel-coronavirus	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d2khazk8e83rdv.cloudfront.net	143.204.11.28	true	false	high
productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com	34.198.74.185	true	false	high
googleads.g.doubleclick.net	216.58.207.130	true	false	high
d36pom45p27o8j.cloudfront.net	13.226.169.100	true	false	high
cdnjs.cloudflare.com	104.16.19.94	true	false	high
i.ytimg.com	172.217.22.246	true	false	high
photos-ugc.l.googleusercontent.com	142.250.185.65	true	false	high
www.phdapps.health.gov.on.ca	204.41.3.217	true	false	unknown
d1yhecx6e3wyn1.cloudfront.net	143.204.11.124	true	false	high
yt3.ggpht.com	unknown	unknown	false	high
www.ontario.ca	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
covid-19.ontario.ca	unknown	unknown	false	high
api.ontario.ca	unknown	unknown	false	high
static.doubleclick.net	unknown	unknown	false	high
clientconfig.passport.net	unknown	unknown	false	unknown
covid19.ontariohealth.ca	unknown	unknown	false	unknown
files.ontario.ca	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://covid-19.ontario.ca/	false		high
https://www.phdapps.health.gov.on.ca/phulocator/	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.ndfht.ca	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.ontario.ca/fr/page/accessibilite	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, rendezvous-vaccin[1].htm.11.dr	false		high
https://www.ontario.ca/page/vaccines	ontarios-covid-19-vaccination-plan[1].htm.11.dr	false		high
https://covid-19.ontario.ca/get-covid-19-vaccine	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false		high
https://covid-19.ontario.ca/index.html	QN29B4HD.htm.11.dr	false		high
https://www.ontario.ca/page/covid-19-support-people	ontarios-covid-19-vaccination-plan[1].htm.11.dr	false		high
http://www.whcacovid.com	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.Pharmachoice.com	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://hopitalmontfort.com/en/second-covid-19-care-clinic-opening-ottawa-east-thursday	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/c19-book-vaccine-assets/social_image_en.png	book-vaccine[1].htm.11.dr	false		high
http://www.stevensonhospital.ca/news/index.html?id=265	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.womenscollegehospital.ca/assessmentcentre	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://news.ontario.ca/search/en?keywords=covid19	QN29B4HD.htm.11.dr	false		high
https://hpepublichealth.ca/covid-19-vaccines/	~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/covid-19-data/data-catalogue/ed270bb8-340b-41f9-a7c6-e8ef587e6d11.json	populate-front-page-data[1].js.11.dr	false		high
https://one.halton.ca/vab/s/	~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	false		high
https://covid-19.ontario.ca/book-vaccine/THowohealth.ca/os-covid-19-vaccinatm/embed/YrjmP_ueahQ?cont	{F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	false		high
http://www.hauserspharmacy.com	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
http://www.bradysdrugstore.com	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.york.ca/wps/portal/yorkhome/health/yr/covid-19/covid19vaccinationclinics	~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	false		high
https://hybridpharm.com/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.phdapps.health.gov.on.ca/phulocator/4Public	~DF7AEF20D2E45A483C.TMP.10.dr	false	Avira URL Cloud: safe	unknown
https://CovidScreen.lacgh.napanee.on.ca)	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	low
https://barriehealth.ca/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
http://www.reddit.com/	msapplication.xml4.10.dr	false		high
https://www.rvh.on.ca/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/feedback/assessment-centre-locations	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false		high
https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-1	covid-19-vaccines-ontario[1].htm.11.dr	false		high
https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-2	covid-19-vaccines-ontario[1].htm.11.dr	false		high
https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-3	covid-19-vaccines-ontario[1].htm.11.dr	false		high
https://www.youtube.com/generate_204?cpn=	base[1].js.11.dr	false		high
https://www.cmh.org/patients-visitors/service-resumption-covid-19/covid-19-testing	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/covid-19-data/data-catalogue/8a89caa9-511c-4568-af89-7f2174b4378c.json	covid-19-vaccines-ontario[1].htm.11.dr	false		high
https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-workplace-2020-12-21.png	covid-19-vaccines-ontario[1].htm.11.dr	false		high
http://www.health.gov.on.ca/en/pro/programs/publichealth/coronavirus/docs/Guidance_for_Prioritizing_	ontarios-covid-19-vaccination-plan[1].htm.11.dr	false	Avira URL Cloud: safe	unknown
http://www.metrodrugs.ca	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-check-results.svg	QN29B4HD.htm.11.dr	false		high
https://covid-19.ontario.ca/book-vaccine/	~DF7AEF20D2E45A483C.TMP.10.dr	false		high
https://nygh.on.ca/covid-19-updates	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.ontario.ca/page/accessibility	book-vaccine[1].htm.11.dr, ontarios-covid-19-vaccination-plan[1].htm.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false		high
https://www.osmh.on.ca/covid-19/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/fr/le-plan-de-vaccination-de-lontario-contre-la-covid-19#phase-1	rendezvous-vaccin[1].htm.11.dr	false		high
https://www.hamilton.ca/coronavirus/covid-19-vaccine-booking	~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	false		high
https://assessmentbooking.simplybook.plus/v2/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
http://www.espanolaregionalhospital.ca/covid-19	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.ontario.ca/page/about-ontarioonst	~DF7AEF20D2E45A483C.TMP.10.dr	false		high
https://covid-19.ontario.ca/fr/index.fr.html	QN29B4HD.htm.11.dr	false		high
https://www.mahc.ca/en/services/covid19.aspx#	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://api.ontario.ca/es/onesite	app.min[1].js.11.dr	false		high
https://portal.healthmyself.net/tehncovid/guest/#/g5x/book/type	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.prhc.on.ca/about-us/covid-19-novel-coronavirus/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.ontario.ca/.ca/book-vaccine/	~DF7AEF20D2E45A483C.TMP.10.dr	false		high
https://covid-19.ontario.ca/vernment-ontario	~DF7AEF20D2E45A483C.TMP.10.dr	false		high
http://www.hwmh.ca	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.ontario.ca	{F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	false		high
http://www.lakeridgehealth.on.ca	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://testing.getcorigan.ca/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.ontario.ca/page/government-ontarioDGovernment	~DF7AEF20D2E45A483C.TMP.10.dr	false		high
https://www.bchsys.org/en/covid-19-online-scheduling.aspx	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false		high
http://www.rvh.on.ca	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
http://www.twitter.com/	msapplication.xml5.10.dr	false		high
https://www.msh.on.ca/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
http://www.HamiltonCovidTest.ca	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://youtu.be/	base[1].js.11.dr	false		high
https://gbfht.ca/cac/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
http://github.com/robloach/jquery-once	jquery.once.min[1].js.11.dr	false		high
https://www.grhosp.on.ca/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://psfdh.on.ca/2020/04/03/community-assessment-centre/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/centres-depistage/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false		high
https://covid-19.ontario.ca/ontarios-covid-19-vac	{F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	false		high
https://covid19results.ehealthontario.ca:4443/	QN29B4HD.htm.11.dr	false		high
https://stage.api.ontariogovernment.ca	app.min[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.ontario.ca/img/favicon.ico~	imagestore.dat.11.dr	false		high
https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-covid-alert-2020-12-21.png	covid-19-vaccines-ontario[1].htm.11.dr	false		high
https://covid-19.ontario.ca/covid19-cms-assets/2021-03/getting-covid-vaccine-meta-1920x1080-en.jpg	ontarios-covid-19-vaccination-plan[1].htm.11.dr	false		high
https://covid-19.ontario.ca/fr/zones-et-restrictions	about-ontario[1].htm.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false		high
http://www.nytimes.com/	msapplication.xml3.10.dr	false		high
https://www.ontario.ca/page/ethical-framework-covid-19-vaccine-distribution	ontarios-covid-19-vaccination-plan[1].htm.11.dr	false		high
https://www.haltonhealthcare.on.ca/covid-19-info/booking-a-test	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
http://www.libertymarketpharmacy.com/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://slmhc.on.ca/about/covid-19-information/covid-19-assessment-centre/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.wdgpublichealth.ca/your-health/covid-19-information-public/covid-19-vaccine-information/	~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp.0.dr	false	Avira URL Cloud: safe	unknown
http://news.ontario.ca/newsroom/en	app.min[1].js.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false		high
https://registration-mom.mychamp.ca/Live/Montfort/Booking/Account/BookRegister	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.walmart.ca/en/stores-near-me/richmond-hill-south-supercentre-1116	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false		high
https://www.ontario.ca/page/privacy-statement	book-vaccine[1].htm.11.dr, ontarios-covid-19-vaccination-plan[1].htm.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false		high
https://covid-19.ontario.ca/book-vaccine/THowio.ca/ontarios-covid-19-vaccinatm/embed/YrjmP_ueahQ?con	{F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat.10.dr	false		high
https://www.guardian-ida-pharmacies.ca/en/ontario/brampton/kennedy-medical-plex-pharmacy-ida-7027581	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://www.medicineshoppe.ca/en/ontario/toronto/the-medicine-shoppe-pharmacy-134-7014226	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
http://www.southstormontpharmacies.com	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/covid-19-test-and-testing-location-information	ontarios-covid-19-vaccination-plan[1].htm.11.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr, QN29B4HD.htm.11.dr	false		high
https://www.walmart.ca/en/stores-near-me/woodbridge-supercentre-1081	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false		high
https://www.porcupinehu.on.ca/en/your-health/infectious-diseases/novel-coronavirus/covid-assessment-	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/	QN29B4HD.htm.11.dr	false		high
https://southlake.ca/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/themes/custom/ds_theme/favicon.ico~&	imagestore.dat.11.dr	false		high
https://eohu.ca/en/covid-19-novel-coronavirus	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false	Avira URL Cloud: safe	unknown
https://trilliumhealthpartners.ca/assessment	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.11.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
143.204.11.124	d1yhecx6e3wyn1.cloudfront.net	United States	16509	AMAZON-02US	false
13.226.169.100	d36pom45p27o8j.cloudfront.net	United States	16509	AMAZON-02US	false
172.217.22.246	i.ytimg.com	United States	15169	GOOGLEUS	false
34.198.74.185	productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
143.204.11.28	d2khazk8e83rdv.cloudfront.net	United States	16509	AMAZON-02US	false
216.58.207.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
204.41.3.217	www.phdapps.health.gov.on.ca	Canada	808	GONET-ASN-1CA	false
104.16.19.94	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.65	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	386160
Start date:	13.04.2021
Start time:	17:46:03
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 9m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	40
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.winDOCX@4/245@15/9
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .docx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Browse link: https://covid-19.ontario.ca/book-vaccine/ Scroll down Close Viewer Browsing link: https://www.ontario.ca/ Browsing link: https://covid-19.ontario.ca/rendezvous-vaccin Browsing link: https://www.ontario.ca/page/government-ontario Browsing link: https://covid-19.ontario.ca/ Browsing link: https://covid-19.ontario.ca/covid-19-vaccines-ontario Browsing link: https://www.phdapps.health.gov.on.ca/phulocator/ Browsing link: https://covid-19.ontario.ca/ontarios-covid-19-vaccination-plan#phase-1 Browsing link: https://covid19.ontariohealth.ca/ Browsing link: https://covid-19.ontario.ca/book-vaccine/ Browsing link: https://covid-19.ontario.ca/vaccine-locations Browsing link: https://www.ontario.ca/page/about-ontario
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, MpCmdRun.exe, BackgroundTransferHost.exe, HxTsr.exe, ielowutil.exe, RuntimeBroker.exe, WMIADAP.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe, UsoClient.exe Excluded IPs from analysis (whitelisted): 52.147.198.201, 13.64.90.137, 104.43.139.144, 104.42.151.234, 2.17.179.193, 84.53.167.113, 20.190.160.135, 20.190.160.68, 20.190.160.3, 20.190.160.133, 20.190.160.1, 20.190.160.9, 20.190.160.7, 20.190.160.130, 93.184.220.29, 20.190.160.75, 20.190.160.67, 20.190.160.71, 20.190.160.4, 20.190.160.134, 20.190.160.8, 20.190.160.136, 20.190.160.129, 88.221.62.148, 92.123.150.225, 184.30.25.218, 131.253.33.200, 13.107.22.200, 20.82.210.154, 184.30.24.56, 142.250.185.232, 172.217.23.46, 8.248.139.254, 8.248.149.254, 8.248.113.254, 8.253.207.121, 67.26.137.254, 2.20.142.209, 2.20.142.210, 152.199.19.161, 92.122.145.220, 23.32.238.234, 23.32.238.177, 216.58.207.164, 216.58.207.131, 104.16.88.20, 104.16.85.20, 104.16.86.20, 104.16.87.20, 104.16.89.20, 172.217.22.206, 172.217.22.238, 216.58.207.174, 172.217.20.238, 216.58.207.134, 172.217.23.67, 13.107.253.19, 20.54.26.129, 52.155.217.156 Excluded domains from analysis (whitelisted): gstaticadssl.l.google.com, cs9.wac.phicdn.net, arc.msn.com.nsatc.net, www.tm.lg.prod.aadmsa.akadns.net, fs-wildcard.microsoft.com.edgekey.net, cdn.onenote.net.edgekey.net, www.tm.a.prd.aadg.trafficmanager.net, e11290.dspg.akamaiedge.net, e13551.dscg.akamaiedge.net, ocsp.digicert.com, wildcard.weather.microsoft.com.edgekey.net, login.live.com, star-azurefd-prod.trafficmanager.net, www-bing-com.dual-a-0001.a-msedge.net, audownload.windowsupdate.nsatc.net, www.google.com, watson.telemetry.microsoft.com, www.gstatic.com, au-bg-shim.trafficmanager.net, www.google-analytics.com, www.bing.com, fs.microsoft.com, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, ris-prod.trafficmanager.net, displaycatalog.md.mp.microsoft.com.akadns.net, skypedataprdcolcus16.cloudapp.net, www.tm.a.prd.aadg.akadns.net, storeedgefd.dsx.mp.microsoft.com.edgekey.net, dual-a-0001.dc-msedge.net, ris.api.iris.microsoft.com, youtube-ui.l.google.com, store-images.s-microsoft.com, blobcollector.events.data.trafficmanager.net, t-0009.fb-t-msedge.net, e1553.dspg.akamaiedge.net, www.tm.lg.prod.aadmsa.trafficmanager.net, cs9.wpc.v0cdn.net, storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net, au.download.windowsupdate.com.edgesuite.net, cdn.jsdelivr.net.cdn.cloudflare.net, store-images.s-microsoft.com-c.edgekey.net, e15275.g.akamaiedge.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, storeedgefd.xbetservices.akadns.net, arc.msn.com, consumerrp-displaycatalog-aks2eap-europe.md.mp.microsoft.com.akadns.net, iecvlist.microsoft.com, db5eap.displaycatalog.md.mp.microsoft.com.akadns.net, msagfx.live.com-6.edgekey.net, e12564.dspb.akamaiedge.net, authgfx.msa.akadns6.net, go.microsoft.com, www.googletagmanager.com, dual.t-0009.t-msedge.net, arc.trafficmanager.net, displaycatalog.mp.microsoft.com, auto.au.download.windowsupdate.com.c.footprint.net, img-prod-cms-rt-microsoft-com.akamaized.net, cdn.onenote.net, prod.fs.microsoft.com.akadns.net, consumerrp-displaycatalog-aks2eap.md.mp.microsoft.com.akadns.net, storeedgefd.dsx.mp.microsoft.com, displaycatalog-europeeap.md.mp.microsoft.com.akadns.net, skypedataprdcolwus17.cloudapp.net, www-google-analytics.l.google.com, ie9comview.vo.msecnd.net, fonts.gstatic.com, www-googletagmanager.l.google.com, tile-service.weather.microsoft.com, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, a767.dscg3.akamai.net, login.msa.msidentity.com, static-doubleclick-net.l.google.com, skypedataprdcoleus16.cloudapp.net, a-0001.a-afdentry.net.trafficmanager.net, go.microsoft.com.edgekey.net, e16646.dscg.akamaiedge.net, skypedataprdcolwus16.cloudapp.net, displaycatalog-rp.md.mp.microsoft.com.akadns.net Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtQueryAttributesFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
143.204.11.124	scan-100218.docm	Get hash	malicious	Browse
143.204.11.28	http://coronavirus-map.com	Get hash	malicious	Browse
13.226.169.100	FileZilla_3.53.1_win64_sponsored-setup.exe	Get hash	malicious	Browse
	http://www.yumpu.com/en/document/read/64496860/new-fax-received-1	Get hash	malicious	Browse
	https://www.yumpu.com/xx/document/read/64471512/you-have-fax-message-2	Get hash	malicious	Browse
104.16.19.94	https://bit.ly/3hDDoTm	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
	http://ninjutsu.4ryu.com/.well-known/pki-validation/zombaiogw_1_1/print_recipe.php?living=ytpr1h11zw0qw0&south=difference&slide=during	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
	https://surl.me/vy4l	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
	https://u15974653.ct.sendgrid.net/ls/click?upn=sKo8P2XHLOhqpgLcALrpHsAMymMPQ9pJ-2BnCP9l5luXmX2tau-2FkmeQME9D69RU7ffQBYwWBrDSW94kS5u6ig5BmkhgBhgQJfm-2BsLwvjPlmdPdsXD4ILOaqVNEwgY7GAZQPkafmgyIOS5FU-2B6124ooi1O-2FMB47qUlmVhTTnK6qV5fGlsBAy7itOSHfP1wikhvsiyeK_Y89n8cg5DiKkjVvtw-2FYSjk3JbqBqCNqd4QE5c0z9p4IJ6aN66chjxOUHcribC2kbrQ6ua83fMfn3Hnb3TofbErA9L2X-2BpZpbvzOnYxCl6WSRvjbd6cnTXhRnH1-2Btzg-2FEpNckJ170lMbhRvVxgpvwWV6rRyYLwNDxpt3Im1lgyNi-2B-2B86Pp03BP8O3y-2Bw2BSUYNj8fK3irR9dYwZuWCkvZJ3fJURjdr0uD0itVZut-2BhVs-3D	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/4.1.0/fonts/fontawesome-webfont.eot?
	https://j.mp/38NwiZZ	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
	http://lokalny-biznes.eu/modules/mod_simplefileuploadv1.3/elements/reactivation/indextest.php?youll=enwht11p10sc0&picture=call&please=gave	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
	https://pinpoint-insights.com/interx/tracker?op=click&id=107b4.3e3b&url=https%3A%2F%2Fpinpoint-insights.com%2Finterx%2Funsubscribe%3Fid%3D107b4.3e3b%26type%3Dnormal&_hC=D7C07475	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/flickity/1.0.0/flickity.min.css
	https://pinpoint-insights.com/interx/tracker?op=click&id=107b4.3e3b&url=https%3A%2F%2Fpinpoint-insights.com%2Finterx%2Funsubscribe%3Fid%3D107b4.3e3b%26type%3Dnormal&_hC=D7C07475	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/flickity/1.0.0/flickity.min.css

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
cdnjs.cloudflare.com	Ug6Q3IejBj.exe	Get hash	malicious	Browse	104.16.19.94
	Mike-voip-18388.htm	Get hash	malicious	Browse	104.16.19.94
	V3kT2daGkz.exe	Get hash	malicious	Browse	104.16.19.94
	setupapp.exe	Get hash	malicious	Browse	104.16.18.94
	C++ Dropper.exe	Get hash	malicious	Browse	104.16.18.94
	setup-1.exe	Get hash	malicious	Browse	104.16.19.94
	Five.exe	Get hash	malicious	Browse	104.16.19.94
	6BympvyPAv.exe	Get hash	malicious	Browse	104.16.18.94
	#Ud83d#Udcde.htm	Get hash	malicious	Browse	104.16.18.94
	#Ud83d#Udcde973.htm	Get hash	malicious	Browse	104.16.18.94
	Open Invoice & Statements.htm	Get hash	malicious	Browse	104.16.18.94
	securedmessage.htm	Get hash	malicious	Browse	104.16.18.94
	Three.exe	Get hash	malicious	Browse	104.16.18.94
	One.exe	Get hash	malicious	Browse	104.16.19.94
	Five.exe	Get hash	malicious	Browse	104.16.19.94
	Two.exe	Get hash	malicious	Browse	104.16.19.94
	nicoleta.fagaras-DHL_TRACKING_1394942.html	Get hash	malicious	Browse	104.16.18.94
	PaymentAdvice-copy.htm	Get hash	malicious	Browse	104.16.18.94
	FARASIS.xlsx	Get hash	malicious	Browse	104.16.18.94
	FARASIS.xlsx	Get hash	malicious	Browse	104.16.19.94

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
AMAZON-02US	D@136.exe	Get hash	malicious	Browse	3.23.250.40
	bd.exe	Get hash	malicious	Browse	99.86.154.99
	bee.exe	Get hash	malicious	Browse	99.86.154.178
	oEWV80rj6fgwF5i.exe	Get hash	malicious	Browse	52.58.78.16
	presupuesto.xlsx	Get hash	malicious	Browse	18.184.197.212
	ghnrope2.dll	Get hash	malicious	Browse	13.225.75.73
	scan_745.htm	Get hash	malicious	Browse	52.219.98.146
	ntpxrxZCfL.exe	Get hash	malicious	Browse	3.13.255.157
	Ug6Q3IejBj.exe	Get hash	malicious	Browse	52.84.150.39
	OrSxEMsYDA.exe	Get hash	malicious	Browse	3.13.255.157
	Shipping-Documents.xlsx	Get hash	malicious	Browse	52.59.165.42
	shipping documents. CI PL.xlsx	Get hash	malicious	Browse	52.59.165.42
	Original Invoice-COAU7229898130.xlsx	Get hash	malicious	Browse	18.184.197.212
	NEW ORDER.xlsx	Get hash	malicious	Browse	18.184.197.212
	INV#609-005.PDF.exe	Get hash	malicious	Browse	52.221.6.123
	swift note.xlsx	Get hash	malicious	Browse	52.59.165.42
	RFQ3936.xlsx	Get hash	malicious	Browse	52.59.165.42
	Invoice-SRP0047459188e.xlsx	Get hash	malicious	Browse	52.59.165.42
	BANKINV28032021VBNSINO.xlsx	Get hash	malicious	Browse	52.59.165.42
	tmkfdBpwAx.exe	Get hash	malicious	Browse	3.22.15.135
AMAZON-AESUS	0413_7089427210993.doc	Get hash	malicious	Browse	50.19.96.218
	inv_397145572_1781481758.xls	Get hash	malicious	Browse	50.17.5.224
	inv_397145572_1781481758.xls	Get hash	malicious	Browse	50.17.5.224
	P.O 0000237701.exe	Get hash	malicious	Browse	18.235.92.123
	oEWV80rj6fgwF5i.exe	Get hash	malicious	Browse	3.223.115.185
	EUR 11,464.00 955PLA3210970613.PDF.exe	Get hash	malicious	Browse	50.17.5.224
	1koFD7T3Tv.exe	Get hash	malicious	Browse	100.24.251.71
	Ug6Q3IejBj.exe	Get hash	malicious	Browse	54.227.172.114
	Quot_466378-09.exe	Get hash	malicious	Browse	54.225.165.85
	Product_Samples.xlsx	Get hash	malicious	Browse	54.198.222.183
	MTCC169.DLL	Get hash	malicious	Browse	54.225.222.160
	originfile8.doc	Get hash	malicious	Browse	23.20.114.125
	yHm3PFVYHK.exe	Get hash	malicious	Browse	54.221.253.252
	commercial invoice & packing list doc.exe	Get hash	malicious	Browse	52.20.197.7
	V3kT2daGkz.exe	Get hash	malicious	Browse	34.238.79.100
	Bank Details.xlsx	Get hash	malicious	Browse	3.230.51.235
	s6G3ZtvHZg.exe	Get hash	malicious	Browse	52.206.71.220
	IntegraL.exe	Get hash	malicious	Browse	23.21.252.4
	CIVIP-8287377.exe	Get hash	malicious	Browse	54.165.198.12
	remittance info.xlsx	Get hash	malicious	Browse	3.223.115.185
AMAZON-02US	D@136.exe	Get hash	malicious	Browse	3.23.250.40
	bd.exe	Get hash	malicious	Browse	99.86.154.99
	bee.exe	Get hash	malicious	Browse	99.86.154.178
	oEWV80rj6fgwF5i.exe	Get hash	malicious	Browse	52.58.78.16
	presupuesto.xlsx	Get hash	malicious	Browse	18.184.197.212
	ghnrope2.dll	Get hash	malicious	Browse	13.225.75.73
	scan_745.htm	Get hash	malicious	Browse	52.219.98.146
	ntpxrxZCfL.exe	Get hash	malicious	Browse	3.13.255.157
	Ug6Q3IejBj.exe	Get hash	malicious	Browse	52.84.150.39
	OrSxEMsYDA.exe	Get hash	malicious	Browse	3.13.255.157
	Shipping-Documents.xlsx	Get hash	malicious	Browse	52.59.165.42
	shipping documents. CI PL.xlsx	Get hash	malicious	Browse	52.59.165.42
	Original Invoice-COAU7229898130.xlsx	Get hash	malicious	Browse	18.184.197.212
	NEW ORDER.xlsx	Get hash	malicious	Browse	18.184.197.212
	INV#609-005.PDF.exe	Get hash	malicious	Browse	52.221.6.123
	swift note.xlsx	Get hash	malicious	Browse	52.59.165.42
	RFQ3936.xlsx	Get hash	malicious	Browse	52.59.165.42
	Invoice-SRP0047459188e.xlsx	Get hash	malicious	Browse	52.59.165.42
	BANKINV28032021VBNSINO.xlsx	Get hash	malicious	Browse	52.59.165.42
	tmkfdBpwAx.exe	Get hash	malicious	Browse	3.22.15.135

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
9e10692f1b7f78228b2d4e424db3a98c	pasteCounterArray.dll	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	plumbus.rik.dll	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	D@136.exe	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	1.dll	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	bd.exe	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	2OydfS8DYe.dll	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	ghnrope2.dll	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	398473874.html	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	80000.dll	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	80000.dll	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	arts@kpu.ca DHKRWMSXHJAZRQW.html	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	CdwYZt1E5r.exe	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	V3kT2daGkz.exe	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	mfalomirm@gentalia.eu.HTM	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	RemitSwift119353 xlsx.htm	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	Miral-Purushotham.verra.htm	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	IJht2pqbVh.exe	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	782kQ15aYm.dll	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	$108,459.00.html	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65
	Alexandra38.docx	Get hash	malicious	Browse	143.204.11.124 143.204.11.28 13.226.169.100 216.58.207.130 172.217.22.246 34.198.74.185 204.41.3.217 104.16.19.94 142.250.185.65

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\QNRO3D54\www.ontario[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	235
Entropy (8bit):	3.847243218456103
Encrypted:	false
SSDEEP:	6:JFK1rUFSC5EJVqGCj5WPQ8F8u1rFK1rFK1rFK1rFK1rFK1rFK1rFK1rFK1rFK1rS:JsrU775WPQ8rsrsrsrsrsrsrsrsrsrS
MD5:	87AFE2176CEBD4BB2451D4198A761241
SHA1:	350C2CD4F57593C39512BE89108FBBC8B0330FDC
SHA-256:	F3347EB05F339979A2B457984ABF8EF778E6B161F940F53683D360C7625B1039
SHA-512:	ECBDFFE5D325378AE80E0EAE9BE20F7843D1D9B255A37713F98000D66A6105CF00F9C48FFE80666E7B868735AF5E700FD83E696811E570FA6E66E5D403AA7A05
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="modernizr" value="modernizr" ltime="3971465872" htime="30879943" /></root><root></root><root></root><root></root><root></root><root></root><root></root><root></root><root></root><root></root><root></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\VC30GTYF\www.youtube[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	29981
Entropy (8bit):	5.025982393061229
Encrypted:	false
SSDEEP:	96:PQgQWQMQDQjE0C7CLAgpGz/Q0RtHz/Q0Ri1yz/Q0Rfrz/Q0RfSGrz/Q0RipWz/Qq:qgkgYgkgcgk2iG22S
MD5:	46C6CE05F44E86054AC94F16946405E2
SHA1:	72EE9E61A87E4669FF0EC063176BE63B7A259C99
SHA-256:	CA653A6DCAD8A6FFBFEA26C8DD8E5D75C77A4040F7B04F926D432904041D0759
SHA-512:	00724EA02D761D6AA20EE72B829DA1411AE36C8E7E17F3FA989ABE7E3A9EFE5D67777E92F658D7C65B4785EDDC6F16290C1759C57681DE28904E20D38CA5D7AF
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="__sak" value="1" ltime="4060095872" htime="30879943" /></root><root></root><root><item name="__sak" value="1" ltime="4086255872" htime="30879943" /></root><root></root><root><item name="__sak" value="1" ltime="4197735872" htime="30879943" /></root><root></root><root><item name="yt.innertube::nextId" value="{"data":2,"expiration":1618447748678,"creation":1618361348686}" ltime="4199855872" htime="30879943" /></root><root><item name="yt.innertube::nextId" value="{"data":2,"expiration":1618447748678,"creation":1618361348686}" ltime="4199855872" htime="30879943" /><item name="yt.innertube::requests" value="{"data":{"1":{"method":"log_event","request":{"context":{"client":{"hl":"en","gl":"DE","clientName":56,"clientVersion":"1.20210411.0.0","configInfo":{

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{F74D3048-9CBA-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	33368
Entropy (8bit):	1.868509103704077
Encrypted:	false
SSDEEP:	96:rBZiZZ2EW//5t//wf//axM/YL/Lk/K4/Kyt/KZS3:rBZiZZ2EWX5tXwfXaxMALDkC4CytCZS3
MD5:	037760A442392689638605218FCDCBEF
SHA1:	2BB1A9568FBA82797469C401D78CE076900AC6FB
SHA-256:	8D53644C44CF179212F35DFC0CBCC5240E6872FEB0DFCFDA67F43676E8315FA7
SHA-512:	F6C0008FAAF5BCB19F42C55A2D986575717D18C38AD90CB954D0EA789FF0DAD90CAEF2E0082F9945DA1C3967BCA93554CB29C66D2760E53FBA3B238C5CEE49FE
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{17007D6D-9CBB-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.564208243721203
Encrypted:	false
SSDEEP:	48:IwSGcprHGwpawG4pQhGrapbSSGQpKpG7HpRoTGIpG:rmZRQw6xBS6AITsA
MD5:	BA02EB632E37F2F0948E434557D46EFD
SHA1:	DB1B0F97108688ECADF0308ACD076DCFEE922DEC
SHA-256:	1B058F725470749AD46CF0FE22AF4D2BAFC580975239C18AC1C8F6C60CFD12F4
SHA-512:	B975997B86617A91CA2A99F9CC5D8798B17F364081A17380C585F2760B129FE08649EB0AB625E22D00F20F9E7483F8DB6E18C7384B8882D5C7DED68065435D81
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{F74D304A-9CBA-11EB-90E4-ECF4BB862DED}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	508562
Entropy (8bit):	3.794281851156473
Encrypted:	false
SSDEEP:	6144:S3Uydh3qiRwxQU3MzqzUL8a3Uydh3qiRwxQU3MzqzUL84:St3HRwH3Muzjat3HRwH3Muzj4
MD5:	874485B2B757F608A4C4687DE4210735
SHA1:	3C666301DDA55F9E1FD8A432E1A4F79C21AB4F44
SHA-256:	D6A4BEEC86979298182FD81C651A2191AB202AB13EF727749838E36D38E7EB6B
SHA-512:	6200FB72AF6593748766242BE7E7F333301BE00B398709BD18CE42540D95FEE6702D330F7FE7371C5AF8DE7CEF7B0B396F8D745383517838A0AF5AC93991E466
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.070779031386027
Encrypted:	false
SSDEEP:	12:TMHdNMNxOESK9Kj4nWimI002EtM3MHdNMNxOESKO3j4nWimI00ObVbkEtMb:2d6NxOeUj4SZHKd6NxOe4j4SZ76b
MD5:	209CC4A147E7739775DDCA47A159F399
SHA1:	B9CEE23243C3E6DFE3E76AEE180C85D2910F11D3
SHA-256:	590D712FB262BA2FC327E74E6E2D48858B99A391520984FFDDF103C910CBB1FB
SHA-512:	4FCAD6C3FC9A6AFCC240404A7D4D359CAAA97A1AE94BFE3244BD135D0460F8D15D1A2F028D45A6BDC9D05622920F0CC184C6D7E1B1B680F4EBF7C949806CD580
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xd2ab4131,0x01d730c7</date><accdate>0xd2ab4131,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xd2ab4131,0x01d730c7</date><accdate>0xd2ada383,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	653
Entropy (8bit):	5.090871178037377
Encrypted:	false
SSDEEP:	12:TMHdNMNxe2kcpj4nWimI002EtM3MHdNMNxe2kcpj4nWimI00Obkak6EtMb:2d6Nxrjpj4SZHKd6Nxrjpj4SZ7Aa7b
MD5:	92AF544096787653C1401E2C0A02F479
SHA1:	2B4DC40F7E9C5CC7BA0FC9E6F8A27D8EF405DB5D
SHA-256:	BB540F2F194440BF2C82886833E3BAAB9EAF7279F5805A96DD6C90AA8213AF44
SHA-512:	963CEC852D8057E453AF469C077663B46214FEADD88766840C36B0FB116C3D2E0C3608C23C4FF8A491F6B420CEE40687DBEC0502C92115C603111649CA876EB7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.amazon.com/"/><date>0xd2a67c75,0x01d730c7</date><accdate>0xd2a67c75,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.amazon.com/"/><date>0xd2a67c75,0x01d730c7</date><accdate>0xd2a67c75,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Amazon.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	662
Entropy (8bit):	5.064091678404534
Encrypted:	false
SSDEEP:	12:TMHdNMNxvLN3O3j4nWimI002EtM3MHdNMNxvLN3O3j4nWimI00ObmZEtMb:2d6NxvJ4j4SZHKd6NxvJ4j4SZ7mb
MD5:	61B9E3AC42101EE30EAE310848EFB153
SHA1:	F4824D2F04CFB3FF541957641B37F6756E757504
SHA-256:	F93763F520C2A1710A0B0EFFB7B8255D0DA1E2F761FB0ABF429E2A824B82DEC9
SHA-512:	6375A18B321F4B03FF37E2C82088A00D5E75DE1A7E357D5A57D8EF668B95EDB93022488B3726CC8446B52A8C2BE6F21C2A58F088C43473126F478470E7CF8982
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.wikipedia.com/"/><date>0xd2ada383,0x01d730c7</date><accdate>0xd2ada383,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.wikipedia.com/"/><date>0xd2ada383,0x01d730c7</date><accdate>0xd2ada383,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Wikipedia.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	647
Entropy (8bit):	5.0878818286127725
Encrypted:	false
SSDEEP:	12:TMHdNMNxiSK9Kj4nWimI002EtM3MHdNMNxiSK9Kj4nWimI00Obd5EtMb:2d6NxcUj4SZHKd6NxcUj4SZ7Jjb
MD5:	8301F8E8CB675E4AC3C5E9F04349D003
SHA1:	E0EB0BFD7122FBD617FF5C23399122E4CB90E9CC
SHA-256:	2CEF3850D8FB62F7895EE8A20D8B2FB05476604B0BFAC5916C238B6CC47DEDDC
SHA-512:	4FCDA282FA8162ED683FBBCAFD275FBD3F5B52CB0CE38438DD4295CD0D303E1FD701F25714FAAD3ACDA6C8728CC33C83ECDE34C9956DC5C9F41644BB6DA768FA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.live.com/"/><date>0xd2ab4131,0x01d730c7</date><accdate>0xd2ab4131,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.live.com/"/><date>0xd2ab4131,0x01d730c7</date><accdate>0xd2ab4131,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Live.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.082398181810961
Encrypted:	false
SSDEEP:	12:TMHdNMNxhGwN3O3j4nWimI002EtM3MHdNMNxhGwN3O3j4nWimI00Ob8K075EtMb:2d6NxQm4j4SZHKd6NxQm4j4SZ7YKajb
MD5:	B7B8CB5B0925907D9A1ACA652AF56977
SHA1:	C774CB572FFD554FD4C6B42E2A778B1BCBFCA3CD
SHA-256:	FDD5D2F27D0FE8CAEF8CD35A600B14E5D874C438EF760964192B3B112F9B6095
SHA-512:	7AAFC1E7FFEEA5C36055731E208BD88824A3EE3290E79039512C02731239EEEAB757033DE8E90628A1BB2EBFCA69F03F532F4F47CE2EB654CA3573E8A4D4E374
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xd2ada383,0x01d730c7</date><accdate>0xd2ada383,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xd2ada383,0x01d730c7</date><accdate>0xd2ada383,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	653
Entropy (8bit):	5.073065512568651
Encrypted:	false
SSDEEP:	12:TMHdNMNx0nSK9Kj4nWimI002EtM3MHdNMNx0nSK9Kj4nWimI00ObxEtMb:2d6Nx09Uj4SZHKd6Nx09Uj4SZ7nb
MD5:	F3F5F7AD5AC485A1762E678ED7E468BE
SHA1:	F81EDFDC6B85E6B3112D59C20AD169A5063AEB68
SHA-256:	7024A8DA0D66A531F321F74FBDD874D927D3A1B3CD295D547128A2AB12C9F55F
SHA-512:	EFB50732B290E210004BD8859058C1FCBD6AF9236359C05CCDC8BA2E8E652B4B51F9AB3EA2AB4E9B9DF16C39EEAB64C719A48CBFFB61B9C203C49E7AFB22DA8E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.reddit.com/"/><date>0xd2ab4131,0x01d730c7</date><accdate>0xd2ab4131,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.reddit.com/"/><date>0xd2ab4131,0x01d730c7</date><accdate>0xd2ab4131,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Reddit.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	656
Entropy (8bit):	5.11285129954918
Encrypted:	false
SSDEEP:	12:TMHdNMNxxSK9Kj4nWimI002EtM3MHdNMNxxSK9Kj4nWimI00Ob6Kq5EtMb:2d6NxPUj4SZHKd6NxPUj4SZ7ob
MD5:	69013183B7E6C700DE923A23A1F1F7B0
SHA1:	5DF31F1E177047EB3FEA1464A6893151DC2C98EA
SHA-256:	3D9419C1706EEE5B7DEF54D8B08A9BE54181CE1582D1BE04EC9AEC6F1469BE6F
SHA-512:	E4B8F40E11A3C6C841658CB3DAC6D36C7AEBF785007A2711AC4ABB50506C281003E3FD158B9A85E081E5BF2ECD67F98CF7285B9F5F94D897881504B5768B3A44
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.nytimes.com/"/><date>0xd2ab4131,0x01d730c7</date><accdate>0xd2ab4131,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.nytimes.com/"/><date>0xd2ab4131,0x01d730c7</date><accdate>0xd2ab4131,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\NYTimes.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	659
Entropy (8bit):	5.0518100523851786
Encrypted:	false
SSDEEP:	12:TMHdNMNxcw9j4nWimI002EtM3MHdNMNxcw9j4nWimI00ObVEtMb:2d6Nx/9j4SZHKd6Nx/9j4SZ7Db
MD5:	7A4FB687C64DD0BC28D902D5B3A6E2DE
SHA1:	7E887FB71CFF3A6B5DF84A7B94C40D62E8FAA153
SHA-256:	4C2A39C749736201B15117241C50CE177C4FDB464769015D4E107A6166E367F6
SHA-512:	7267946C8EC891C3DB47D8BD6AEAADF9B87F01173E1E902DD13ADCBC4742969DB2F129D516E57F6BA680D4AEDF9AC07AE0BE8AA7C2A4A94FFB8FB74617C4DB6C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xd2a8dede,0x01d730c7</date><accdate>0xd2a8dede,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xd2a8dede,0x01d730c7</date><accdate>0xd2a8dede,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	653
Entropy (8bit):	5.032766700451652
Encrypted:	false
SSDEEP:	12:TMHdNMNxfnw9j4nWimI002EtM3MHdNMNxfnw9j4nWimI00Obe5EtMb:2d6NxY9j4SZHKd6NxY9j4SZ7ijb
MD5:	7666B27086A75461EBAD303D87EF7F4D
SHA1:	32D8E2EBC4E82C527B1E211ADBA3D9EF8773BD3B
SHA-256:	CCFA41CFFB94ADB3D4B501445D932FE1A54DB0306AAAD3494EAD48E22A152275
SHA-512:	F57BB04DC93C2DF13D3FCA031444934B29D5A878861301A16E1F793AF7B5A47C9DB36858496C9271C152FE03D1C6D878A898D9A17C014C56059C4A9CC2647336
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.google.com/"/><date>0xd2a8dede,0x01d730c7</date><accdate>0xd2a8dede,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.google.com/"/><date>0xd2a8dede,0x01d730c7</date><accdate>0xd2a8dede,0x01d730c7</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Google.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	34748
Entropy (8bit):	2.990091873532854
Encrypted:	false
SSDEEP:	192:c/pSGvHjgDb3XHQfYsynyaNsC4GnNq3XHQfYsynAaNsC44nN0pSGvHjgDy:wCvXmYsyJNb0XmYsy/Np2Ce
MD5:	8067FC78F78A7A2B09A0D51ABFAF98CC
SHA1:	DFA0F434DFC9EF4FFA9F48FA7E8DF0CA0D087215
SHA-256:	00A6732E86824EC93C626109D74382470AC8CA9B2727A0B430B3E13E0F3092A6
SHA-512:	19DC2B52CC46C4C3FF55E78734EFC04BC91BDECED3E20AB3E978A7C73AAA83895F0D5530DC60BB23DF3A2C848A18432EED53B0B10DC0E70F33DD7E40B4B091DB
Malicious:	false
Preview:	E.h.t.t.p.s.:././.c.o.v.i.d.-.1.9...o.n.t.a.r.i.o...c.a./.c.1.9.-.b.o.o.k.-.v.a.c.c.i.n.e.-.a.s.s.e.t.s./.f.a.v.i.c.o.n.-.3.2.x.3.2...p.n.g.8....PNG........IHDR... ... .....szz.....pHYs...........~.....IDATX.W[(.Y..{....f\2n..7..(3[<.... .h<)e.<y..@.x@).9..a.t..(N....1..Y.j}.......\|....}.o}.f3&..;....g.1.m.G...d..a......k.3M..........Vb&.-`4.7.{..t..%.D...r.3..Ka.V.U........wK...K..ma....B.$7...aW....l.Y.O.BoU!<..;...n.....p...7b(...gH..{..j.P....%.=<<4.b..5..$.....).~~~...............t:!66Vc.#00....................BP<..".........r.....'P...........3......v....#......EHKK.1aH..I.,.s6.........`kk....auu....uB...........666`nn.....z...2r.....>(@..{....*....kHf......\.....{....cn.$.[...........S,Pl.C...1..&......oFw........M....................4'.....&j....f}}}\|........1:.........v.!++....../.,.#....p1H....l.b.A7-JHH...s~...8xzz..8..............&f...iff.....I..[.q.....i.........-88."##u....4.GGG....j/...7.....z.....{rr..Abb"...r. ...IM`....T.B&..fZ.H.,(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\ED54AF49.png Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	PNG image data, 1356 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25735
Entropy (8bit):	7.786197036789187
Encrypted:	false
SSDEEP:	384:/ZFnIkmEzarZkigwxQaCoboRqW17CcXNJ/pAXivP5cRX/2orhF6UBIkLalAcjIve:bI5FrZkiHQsoRb1ZXz/pPOrr2Upa9ie
MD5:	03C4647851435FE2872ED8ED182D9E0D
SHA1:	31BCB340514DD940F505C4F72CD39B12F5D8E882
SHA-256:	ADF2B57042FCBF156E3061DCA52CFAE0801212AAEBC481F4B5BCCB542FB5D088
SHA-512:	0AE5851E6B62693C5F478DD943F659022D5FC0EE3421C87EDBCE1CA69A9213AF159EFE7D09B9E0F51889DD035DFABC61E740EBFAD9A48B3BE941025106E768C6
Malicious:	false
Preview:	.PNG........IHDR...L.........~i'H.. .IDATx...Mr.G....:<...T4..K..vi..V...&W@r........W...#.+.:...w.~...!5?P@.Nf../......&..u......?.....@...}'.^Rc.eH.I...Y....Tu.^.\.{.,.z.t.^...`.~........K..=S,....2......:..R..[....[/g..!0..L......I].W.....h#.f...Y.AY....E........F...Uu.(.K=ua..b)].8........l...+...)v.R.A'U...W..$]..S.`.....0.F.....h..U.`..e...8.........\|K#..X.$.D..]Uu;..(_.....K1.:L.....f...V....f..][.@Y....C......0..n'...x.[).TC..:I#...&.Q.....+..p..)....`PU.)v.y:.i.xX..;......Q0......"...J..G..F.P.........6.V.]..8...`.....89.#.O.#.+. (......b)].0G......pRU.^(v.z.H1:K].W.......ld..).....$R..^.F.7.]..:......u..bW)..!+.L........Q,.2R...i...z9....<..).....WU....H..G..C.,..{...:...F.(......z.H1.?.].A.XJ.6.F......p..n..#..?w..;Q.A'U.^+....].(..S............... (KU...R.....`......P.4R.Y...A.....ua...b.B.G..(..............k..(K...45.2$..Q4............6.V....%.N.Ah..&.Q.....+....(.......R..b....N.....vB'ta..`.....x.....r........^......Y0...).....Ei.x._..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{2BC4B282-2D2D-481B-89EF-D0F816722558}.tmp Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	4.119545031742994
Encrypted:	false
SSDEEP:	768:1j+0AhmaO20H/dT/3R3tg0WVTD0FD5Nb46+V2WL0AlcZLxAQCeWJ4y3:1jsmaCGcZU22
MD5:	C1FA906EFBCD01779CB4A226C86A2CCF
SHA1:	28DC3609D852FBE1848AEB1E871570D65B707FD0
SHA-256:	99F24C2A807816E8C6B50F2CA85FE79E28108BFE2616D15954D0A3F8F78B2EB9
SHA-512:	2B79BF5F47CB0597BD9DE9245EEE5BB3D7717C59F440D7685384DE43219A4564F3998857D07FE5C91FBFC2F6A5B338D0CCA068451BF77582B705CDC438DAA891
Malicious:	false
Preview:	................................................................ .!.".#.$.%.&.'.(.).*.+.,.-.../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>...................L.a.s.t. .U.p.d.a.t.e.d.:. .A.p.r.i.l. .1.2.,. .2.0.2.1.......C.O.V.I.D.-.1.9. .V.a.c.c.i.n.a.t.i.o.n. .C.l.i.n.i.c. .L.o.c.a.t.i.o.n.s. .a.n.d. .B.o.o.k.i.n.g. .S.i.t.e.s.....Y.o.u. .m.a.y. .b.e. .a.b.l.e. .t.o. .e.n.t.e.r. .y.o.u.r. .i.n.f.o.r.m.a.t.i.o.n. .i.n.t.o. .t.h.e. .f.o.l.l.o.w.i.n.g. ...............................................................................................................................>...@...\...l..................................................................................................................................................................................................................................................gd....l........... .................]...^...gd....l........... ...............h.........-D..M............[$.\$.]...^.h.gd..F......$.a$.gd..F.....&d....7$.8$.H$.P..........gd.56.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{DFB95272-FC68-47E2-9D22-66F342B72D55}.tmp Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	0.05390218305374581
Encrypted:	false
SSDEEP:	3:ol3lYdn:4Wn
MD5:	5D4D94EE7E06BBB0AF9584119797B23A
SHA1:	DBB111419C704F116EFA8E72471DD83E86E49677
SHA-256:	4826C0D860AF884D3343CA6460B0006A7A2CE7DBCCC4D743208585D997CC5FD1
SHA-512:	95F83AE84CAFCCED5EAF504546725C34D5F9710E5CA2D11761486970F2FBECCB25F9CF50BBFC272BD75E1A66A18B7783F09E1C1454AFDA519624BC2BB2F28BA4
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\KEH8VBZL.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	8405
Entropy (8bit):	5.0746341151683
Encrypted:	false
SSDEEP:	96:EGsHG+NLuC/XnuEsejOfrBsrbCspsrbp4IpwVS70qXVTdyrNGz7TzvBAkbfNMhjs:EGsH3IC/XnL8M8uIzybI8jSVg2O+S43
MD5:	0953A2B6FB1D331EFA2AAD3FF8E2DC99
SHA1:	33D9EA08EEFB81ABE8934754EA434A33437B227C
SHA-256:	38BF2EB71CE159B99E4A9C680FED3427D8193EB5DC44CE8A75A684EB00A9F820
SHA-512:	4EDECE89518BDEF904871B360E510F6645E631F1FBF9BE5BC4883131827E4F3B7D1169754E73FC1E27526D78378CB3E37D495B7E3DE7F7280F4D6DE908EB5082
Malicious:	false
IE Cache URL:	https://www.ontario.ca/
Preview:	<!doctype html> <html class="no-js" lang="en"> <head> <meta charset="utf-8"> <meta content="width=device-width,initial-scale=1" name="viewport"> <meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta name="sha" content="d43396df38048fbb44731befe641f3dfc221eaf3"> <title></title> <base href="/"> <link href="/css/combined.css" media="screen" rel="stylesheet"> <link href="/css/print.css" media="print" rel="stylesheet"> <script src="/vendor/modernizr/modernizr.js"></script> <script>!function(a,e,o,n,c,i,t){a.GoogleAnalyticsObject=c,a.ga=a.ga\|\|function(){(a.ga.q=a.ga.q\|\|[]).push(arguments)},a.ga.l=1*new Date,i=e.createElement(o),t=e.getElementsByTagName(o)[0],i.async=1,i.src="//www.google-analytics.com/analytics.js",t.parentNode.insertBefore(i,t)}(window,document,"script",0,"ga"),ga("create","UA-21003310-6",{cookieDomain:"auto",allowLinker:!0}),ga("create","UA-48649528-1",{cookieDomain:"auto",allowLinker:!0,name:"ServiceOntario"}),ga("require","linker"),ga("linker:autoLink",["serviceont

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Open-Sans-regular[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14260, version 1.1
Category:	downloaded
Size (bytes):	14260
Entropy (8bit):	7.955023552448444
Encrypted:	false
SSDEEP:	384:V0ZkWiwHBFDPthd/jO+yk0iwCebLvVgYGpn/qZOSO7O7RWf5z4Oc:V0hRbVFykgNSnSsSSSRWR8/
MD5:	D0BAD741AEFB909E4BE56D188B6F02B9
SHA1:	1547224E0A0BE06E5178815718797BD6607169A4
SHA-256:	4194A431CCA6678145F2C4D7D2E597087E2A76A4878C26B66315B2BA4F4EA393
SHA-512:	33FB0A386FD3ED97ADA0A6612D818530FED61E8688A0C38BCE29031076430C7FC2AA075C5AA8003E2E091D80C64602FE7A8D7F3B7380601EFB3CEC20285B50D5
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/Open-Sans-regular/Open-Sans-regular.woff
Preview:	wOFF......7.......^L........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2......._...`.>..cmap...8...........gasp...............#glyf......$Y..3..~.head..'<...6...6...=hhea..'t.......$....hmtx..'........l..Y.kern..)............loca..3.........C.O.maxp..5`... ... .d..name..5........2../Jpost..6,.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f..8.....u..1...<.f....................{...h..... 0t.vf.....&.O.....)B..q>H..u..R``.....9.x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..z.\S...=so.j.......R.!......V..RDDZ...J.E....H.R.j...R.^k...Z[...W.$.w......~.~...9..9.r...8.....9..9...F\|..#M.f....Y....}.g...\qf.......^..J...;.'..~.h..P?.@..4..........2r.....^./..'....!.1?!..s.H.8.3..U..\g.eP./=/.\@.....^...W...W.-...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\PHULocator[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1542 x 184, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	36711
Entropy (8bit):	7.9276537058951995
Encrypted:	false
SSDEEP:	768:nx/NXRsI7/eGgiR/lVc8DcztTx/3TrjoY0vJJpo0MC:nzwliR/lcpTVPtipo0R
MD5:	7EAF9A26FEC2DF8ED8E036759D405A54
SHA1:	7749C2328B8EB5EA92631BA23B2CE43FEE866CB5
SHA-256:	34E31E2B94ABB45BBBFE70B2678D14A61E78C19E7D5960F97306106FA3E1DB4C
SHA-512:	7343664D9AD88C32B5148BBE2652E483EF67BDD053F21573EDDA406731CB02A8BF239F849619D05E0EF592749629ECFCF1ABAEB9C2C297569A1678439660B1B1
Malicious:	false
IE Cache URL:	https://www.phdapps.health.gov.on.ca/phulocator/images/PHULocator.PNG
Preview:	.PNG........IHDR.............(.W.....sRGB.........gAMA......a.....pHYs.................IDATx^....S.....tN..8.&t".].S...D.tQ#tE.t.DM..I....!MQ.!..B..!.....R.......>...Z{}.g...\|.w..}=..../..}....uY..!..B.!..B.!..b. ..B.!..B.!..B.1..c@.!..B.!..B.!..A.1 ..B.!..B.!..B. ...B.!..B.!..B.!f.r..!..B.!..B.!..3.Z.....-^.s7o.n.....Ork.q.{..t..v.$I.$I.$I.$I.$I.$I.aG..]..:vv.............e....$I.$I.$I.$I.$I.$.wa..._.}9..8...:_L&T.$I.$I.$I.$I.$I....=..\|....8...7\.L.$I.$I.$I.$I.$I.$I...<v.^)v...E.H.$I.$I.$I.$I.$I.48a..l.....m....K.$I.$I.$I.$I.$I.4xa..~_B.c...W..6:9..$I.$I.$I.$I.$I.$I.'......w..c.O....$I.$I.$I.$I.$I.4....{..h........w..c@..I.$I.$I.$I.$I.$I.p...j.m...jY.;..1...%I.$I.$I.$I.$I.$i8.:.L..sx.._M.c.~...$I.$I.$I.$I.$I.$i..r...:..?M.c`...N.....f.>..t.e..nsw.y.{...k.*..B.!..B.!..B.......c_.....NN...s[..I:..8....v......-Z..E.!..B.!..B.!.......{h....0.q..Z.L%..Xg./N..n..=.......Z!.!..B.!..B.!..._..c......@..V.S...8..N..6.Wi..=.B.!..B.!..B.!.....t).@'.z...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\QN29B4HD.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	59312
Entropy (8bit):	4.696571424764276
Encrypted:	false
SSDEEP:	1536:jqn2E24AmTI/Diz0/7hcKsKZEO7+bYyc0fwVgFY72sn0KcLuUvwHCsYHKrjAz1Pq:Gn2eDucPMAz1PJlb93m6hL2h
MD5:	88DD819218D5F34C26C4785C363759DE
SHA1:	62959AA53A4696D10A8AB5721059247C4DA8F801
SHA-256:	B07620CAD28717FD7064196B485143A7A8A100F041F0B5BF74A88BCB0F401819
SHA-512:	1CADBBD4CF8E384E9BA5AAC0C90C3622FB40A7C28EFA37B31F20E5B102DE54118C3F02B9E355C862BD934F7731990BD285844A23517FB217EDE96F952680C7EB
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/
Preview:	<!DOCTYPE html>.<html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. Google Tag Manager -->. <script>. dataLayer = [];. (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-5G4CS4L');. </script>. End Google Tag Manager -->. <meta http-equiv="Content-Type" content="text/html;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\StyleSheet[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	365
Entropy (8bit):	4.369578807143019
Encrypted:	false
SSDEEP:	6:vwJAICvFNz31qCsF8W1oyyWfLFh3Ndq5ZlqsFq/FGsS9:YJApvF531pW1RygFh3NdWU/FGj9
MD5:	CE8A1243377C52E18BD2EBAE83FC9526
SHA1:	F5DB0349AC56CC13A73F8F388D0E41477BD60B34
SHA-256:	377FF0000A1D592CCA8E326D57E7B4E75B1BDD1B08A24B291C6E939D28F63855
SHA-512:	8DB913A472910AA2CA499570A3410189502AC75B9739A00127415FD946BC184742B7AE7F5EC557A7F4C55A11BC3BA835B9C7DA04452A07567D68012A172ED46E
Malicious:	false
IE Cache URL:	https://www.phdapps.health.gov.on.ca/phulocator/Style/StyleSheet.css
Preview:	..hidden-element {.. clip: rect(1px, 1px, 1px, 1px);.. height: 1px;.. overflow: hidden;.. position: absolute !important;.. width: 1px;..}.....visuallyhidden {.. border: 0;.. clip: rect(0 0 0 0);.. height: 1px;.. margin: -1px;.. overflow: hidden;.. padding: 0;.. position: absolute;.. width: 1px;..}..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ad_status[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
IE Cache URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ajax-progress.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1035
Entropy (8bit):	5.00154723082934
Encrypted:	false
SSDEEP:	24:0wn7OrsH9HAxr4TAkZxrh794kRxr3yp3XrFgAn6Umey52M9Y:0/MHA94TAE9x94kR9i1FS52+Y
MD5:	C39F9F1EBB648940FC7C7C78FD171595
SHA1:	6BE470262F71975CF7E01C209ADF412B0E43721E
SHA-256:	018BC192232B968B662399F1CB800C44EE22B64285A6334366C667F7EBFEA058
SHA-512:	E0DBB0F400C2D82DF607987057DE053AA74791367BB633CE39FE07F944429F6125FE5A5DF44A3AA3C6DBF29407B39ABFC44AE7911410DB73793241E87862552E
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/ajax-progress.module.css?qrgttk
Preview:	/*. @file. * Throbber.. /...ajax-progress {. display: inline-block;. padding: 1px 5px 2px 5px;.}.[dir="rtl"] .ajax-progress {. float: right;.}..ajax-progress-throbber .throbber {. display: inline;. padding: 1px 5px 2px;. background: transparent url(../../../images/core/throbber-active.gif) no-repeat 0 center;.}..ajax-progress-throbber .message {. display: inline;. padding: 1px 5px 2px;.}.tr .ajax-progress-throbber .throbber {. margin: 0 2px;.}..ajax-progress-bar {. width: 16em;.}../ Full screen throbber /..ajax-progress-fullscreen {. position: fixed;. z-index: 1000;. top: 48.5%;. / Can't do center:50% middle: 50%, so approximate it for a typical window size. /. left: 49%; / LTR */. width: 24px;. height: 24px;. padding: 4px;. opacity: 0.9;. border-radius: 7px;. background-color: #232323;. background-image: url(../../../images/core/loading-small.gif);. background-repeat: no-repeat;. background-position: center center;.}.[dir="rtl"] .ajax-progress-fullscre

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\api[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	852
Entropy (8bit):	5.518736472579191
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZy+KVCetE31tEsLqo40RWUnYN:VKEcixKoe21tFLrwUnG
MD5:	647F2FC22BA401C8613B8A168C02DB1A
SHA1:	CFF6FD91F3B18BC776591420B9B09C321ADA4406
SHA-256:	FE81E776D459F15B4DAEF2EA548D3150A761C08D33C3013DF60D929775548092
SHA-512:	AC598D3755CA8AD371AA8D42AA7DCC53EBC91AA206E80ADC6713ADF09B29EEF31A92CC39218D509FBE0C9274C51DE499B63E6A88A0D6B4CDD049BCF2B3AF6B36
Malicious:	false
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;po.src='https://www.gstatic.com/recaptcha/releases/mrdLhN7MywkJAAbzddTIjTaM/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-zy6MpaK2q7ThL2mDEY0TbyvBJDr6lKK9SPTRcXRLbNIBZDn1zpbOT7nMFdXz9mci';var e=d.querySelector('script[nonce]'),n=e&&(e['nonce']\|\|e.getAttribute('nonce'));if(n){po.setAttribute('nonce',n);}var s=d.getElementsByTagName('script')[0];s.parentNode.insertBefore(po, s);})();

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\api[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	852
Entropy (8bit):	5.518736472579191
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZy+KVCetE31tEsLqo40RWUnYN:VKEcixKoe21tFLrwUnG
MD5:	647F2FC22BA401C8613B8A168C02DB1A
SHA1:	CFF6FD91F3B18BC776591420B9B09C321ADA4406
SHA-256:	FE81E776D459F15B4DAEF2EA548D3150A761C08D33C3013DF60D929775548092
SHA-512:	AC598D3755CA8AD371AA8D42AA7DCC53EBC91AA206E80ADC6713ADF09B29EEF31A92CC39218D509FBE0C9274C51DE499B63E6A88A0D6B4CDD049BCF2B3AF6B36
Malicious:	false
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;po.src='https://www.gstatic.com/recaptcha/releases/mrdLhN7MywkJAAbzddTIjTaM/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-zy6MpaK2q7ThL2mDEY0TbyvBJDr6lKK9SPTRcXRLbNIBZDn1zpbOT7nMFdXz9mci';var e=d.querySelector('script[nonce]'),n=e&&(e['nonce']\|\|e.getAttribute('nonce'));if(n){po.setAttribute('nonce',n);}var s=d.getElementsByTagName('script')[0];s.parentNode.insertBefore(po, s);})();

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\app-a9735616a727a9b1be92[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with NEL line terminators
Category:	downloaded
Size (bytes):	145914
Entropy (8bit):	5.33693860599627
Encrypted:	false
SSDEEP:	1536:OA6yRUvHc0r8JZafx/UmLOCQ+mmwZaNbdKibCrPqKO6:jUv8qfx/1OJmlEibCzn
MD5:	6FA4401E25B9F872925DF833A0AEFB2A
SHA1:	2DC0549BC5570185ED5BF734298C22EE71DE9430
SHA-256:	0667759FF26F12E1E7B6594C495B4FA16A3A03A2954078728C489F093E767183
SHA-512:	20F7BA8AC3E044E18F6E98178C50C1C0E2E92572DF95188129D2FEACBE937F73D63B7B42003507F1F474520729C7A7F096B039B18FBEC95C47B2615D3ACA6846
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/app-a9735616a727a9b1be92.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"+VNo":function(t,e){t.exports="\t\n\v\f\r .................\u2028\u2029\ufeff"},"+ZDr":function(t,e,n){"use strict";n("n7j8"),n("OeI1"),n("JHok"),n("WevN"),n("TAD1"),n("sC2a");var r=n("TqRt");e.__esModule=!0,e.withPrefix=d,e.withAssetPrefix=function(t){return d(t,"/covid-19-ac-assets")},e.navigateTo=e.replace=e.push=e.navigate=e.default=void 0;var o=r(n("8OQS")),i=r(n("pVnL")),a=r(n("PJYZ")),u=r(n("VbXa")),c=r(n("17x9")),s=r(n("q1tI")),l=n("YwZP"),f=n("LYrO"),p=n("cu4x");e.parsePath=p.parsePath;var h=function(t){return null==t?void 0:t.startsWith("/")};function d(t,e){var n,r;if(void 0===e&&(e=""),!v(t))return t;if(t.startsWith("./")\|\|t.startsWith("../"))return t;var o=null!==(n=null!==(r=e)&&void 0!==r?r:"/covid-19-ac-assets")&&void 0!==n?n:"/";return""+((null==o?void 0:o.endsWith("/"))?o.slice(0,-1):o)+(t.startsWith("/")?t:"/"+t)}var v=function(t){return t&&!t.startsWith("http://")&&!t.startsWi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\autocomplete-loading.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	troff or preprocessor input, ASCII text
Category:	downloaded
Size (bytes):	611
Entropy (8bit):	4.896700024326516
Encrypted:	false
SSDEEP:	12:U5iyFWHeGeyXGRL7r5/9lms77usaRLI3Mr5ANUmsI3M7usv:IiykHeoXGL5/C7V15+VO
MD5:	655F22AE0B9C622DFE2ED7B80CFF2317
SHA1:	95412E0F07B21DB6AD752CEB72B5B63B98AD26EB
SHA-256:	F5AC9ECF677F9A456C8FAF304F9CD9A6DEB61B2F7CAD70BAC84C63428BC7DBE3
SHA-512:	078851755AB36957614B03549F78C4BD486C75800A2DAE810FEAE9C4DF0363AB4C54687B82A3997F3ECBBC570685FC27501BABBCBA4474BDC340F3EFF32ED83D
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/autocomplete-loading.module.css?qrgttk
Preview:	/*. @file. * Visual styles for animated throbber.. . @see autocomplete.js. /...js input.form-autocomplete {. background-image: url(../../../images/core/throbber-inactive.png);. background-repeat: no-repeat;. background-position: 100% center; / LTR /.}..js[dir="rtl"] input.form-autocomplete {. background-position: 0% center;.}..js input.form-autocomplete.ui-autocomplete-loading {. background-image: url(../../../images/core/throbber-active.gif);. background-position: 100% center; / LTR */.}..js[dir="rtl"] input.form-autocomplete.ui-autocomplete-loading {. background-position: 0% center;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\chevron-right[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	5.0198476251156805
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5zMcBH8+hHiATcvXjXRHoNcHRQag2CiY9uvAZe+H4VNX1X3MHq0Y:tI9mc4slzXdhC/O4RPgVh9SMSmK0Y
MD5:	B6B6C4DB699010301B02593710377F70
SHA1:	DEFACACF10E081BFAD75FF96CD9032C00EFE4339
SHA-256:	8BC3003A5FCE0C51EF013C99396F5168BCE06B077E556E80726CB98871AEEC45
SHA-512:	FD96FF1543B9DA27591AB2DBC9D88DE64BEC0580D992507D510C64F8CB47188F0B57D4660E9D7E3C530C473D7636F522A316D724D67B25C7E7B70C01E83F8D5C
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/images/chevron-right.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M10 6L8.59 7.41 13.17 12l-4.58 4.59L10 18l6-6z"/><path d="M0 0h24v24H0z" fill="none"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\co-homepage-supergraphic[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	501
Entropy (8bit):	4.568738900196077
Encrypted:	false
SSDEEP:	12:trApWvuCoSdaVV3sBRFHOehjXbsF4mU7jIwSvBXAW:tcpSuiocRHOehn1IJWW
MD5:	8A9CD83CFF9BF86CAA150B3594235C95
SHA1:	BC0E0DA6A092B58985AFA89D3756CD35AE0F1136
SHA-256:	4D1029EF52959B492F3CF44A914CF3088AB409A7EF5B48B2B5036717FBC8A433
SHA-512:	B908CFEC67B5A1BC6EED93A24EAECB4F6829486E9216E79AD083CE7D7CE2E4E6B5E91F6B8BD9224A875820578F42902F100EC109C3654E0E25A9E02FEFB54EAA
Malicious:	false
IE Cache URL:	https://files.ontario.ca/co-homepage-supergraphic.svg
Preview:	<svg width="323" height="197" viewBox="0 0 323 197" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M157.25 194.195C103.249 157.724 57.6646 108.628 25.4047 52.5192C15.7415 35.5177 7.2655 17.9687 0 0H117.028C120.025 4.95854 123.075 9.73092 126.216 14.3662C132.418 23.4575 139.12 32.2245 146.099 40.5341C151.069 46.3899 156.343 52.1701 162.013 58C169.178 50.8333 187.805 29.2 205 0H205.024H323C291.64 77.3542 237.863 144.875 165.665 194.195L161.458 197L157.25 194.195Z" fill="#FCAF17"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\component.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	53285
Entropy (8bit):	5.169887911708994
Encrypted:	false
SSDEEP:	768:sy+ta8OMxBTedmgGhnAuhxrZJCGGVbmY2O4BfwPZnuj8VddPm0PjXKYhAClg:LqlRoZjddOiXKYhACO
MD5:	31F620E726F456732B9A64BBE2BE7A40
SHA1:	517BE2F6D5C0537E1B1485803A280F232683D709
SHA-256:	5083CBFC6D40E35C5A2D800E0B1B0A0F624AF5E842D23C0985B4225011A26421
SHA-512:	209977E8F2F413322C62F85F0DA680D821D111DB59DFE90EEFB19E40DC12B39B18EB29C04F31ED6DCF7F7CD18EA1BCF780C43249440E20B992D46884CD996785
Malicious:	false
Preview:	"use strict";angular.module("onesite.component.directives",[]).directive("onesiteHeader",["$filter","$timeout","languageService","routeService","redirectService",function(e,n,i,o,a){var l={en:"page/government-ontario",fr:"fr/page/gouvernement-de-lontario"};return{scope:{contentNode:"=",search:"=",update:"="},restrict:"E",replace:!0,transclude:!0,templateUrl:"/core_modules/component/partials/onesiteHeader.html",link:function(r,t){r.pathLogoHeader="/img/logo-ontario@2x.png",r.pathLogoPrint="/img/ontario@2x-print.png",o.regulateRedirect(t),r.altLang=i.alternativeLanguage(r.contentNode.lang),r.update.header=function(e){r.altLang=i.alternativeLanguage(e.lang),angular.isFunction(r.update.taxonomies)&&r.update.taxonomies(e.taxonomies),function(){var t=this;n(function(){t.click();var e=t.find("p.show-for-sr")[0];e&&angular.isFunction(e.focus)&&e.focus()},0,!1)}.call(t)},r.headerlogoAliasCollection=l,r.aliasToPath=a.aliasToPath,r.changeLangOnly=function(e,t,n){return function(e,t,n){var r=this;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\component.min[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	53285
Entropy (8bit):	5.169887911708994
Encrypted:	false
SSDEEP:	768:sy+ta8OMxBTedmgGhnAuhxrZJCGGVbmY2O4BfwPZnuj8VddPm0PjXKYhAClg:LqlRoZjddOiXKYhACO
MD5:	31F620E726F456732B9A64BBE2BE7A40
SHA1:	517BE2F6D5C0537E1B1485803A280F232683D709
SHA-256:	5083CBFC6D40E35C5A2D800E0B1B0A0F624AF5E842D23C0985B4225011A26421
SHA-512:	209977E8F2F413322C62F85F0DA680D821D111DB59DFE90EEFB19E40DC12B39B18EB29C04F31ED6DCF7F7CD18EA1BCF780C43249440E20B992D46884CD996785
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/component.min.js
Preview:	"use strict";angular.module("onesite.component.directives",[]).directive("onesiteHeader",["$filter","$timeout","languageService","routeService","redirectService",function(e,n,i,o,a){var l={en:"page/government-ontario",fr:"fr/page/gouvernement-de-lontario"};return{scope:{contentNode:"=",search:"=",update:"="},restrict:"E",replace:!0,transclude:!0,templateUrl:"/core_modules/component/partials/onesiteHeader.html",link:function(r,t){r.pathLogoHeader="/img/logo-ontario@2x.png",r.pathLogoPrint="/img/ontario@2x-print.png",o.regulateRedirect(t),r.altLang=i.alternativeLanguage(r.contentNode.lang),r.update.header=function(e){r.altLang=i.alternativeLanguage(e.lang),angular.isFunction(r.update.taxonomies)&&r.update.taxonomies(e.taxonomies),function(){var t=this;n(function(){t.click();var e=t.find("p.show-for-sr")[0];e&&angular.isFunction(e.focus)&&e.focus()},0,!1)}.call(t)},r.headerlogoAliasCollection=l,r.aliasToPath=a.aliasToPath,r.changeLangOnly=function(e,t,n){return function(e,t,n){var r=this;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\container-inline.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	222
Entropy (8bit):	4.423208034323215
Encrypted:	false
SSDEEP:	6:U/RGETTJjD3H3QK+i5MdeBlEmtvlHkw/3jfK:U/RpHX1+i5eefEmBdkw3jfK
MD5:	6B29A6EC09E466ADF3C0B39A630506AF
SHA1:	F08FD80247FE0BAFFA97DA5C13E6D67D2F10645F
SHA-256:	C5730D19F43F160FAA47AF29F7E1DC2BAFC393BE75AA71D21DC93C775A1833C0
SHA-512:	F1924412B734E9A06B17DEA262158A35FDB35D277FB7AE95BAFD55BBD0E83BB2565BA65302A571D92032BAEBCA51111BED90A1BB8D6C26B27A7331D893142AED
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/container-inline.module.css?qrgttk
Preview:	/*. @file. * Inline items.. /...container-inline div,..container-inline label {. display: inline;.}./ Details contents always need to be rendered as block. */..container-inline .details-wrapper {. display: block;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\details.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	troff or preprocessor input, ASCII text
Category:	downloaded
Size (bytes):	127
Entropy (8bit):	4.461489457578185
Encrypted:	false
SSDEEP:	3:UV9iSKVaJMJMvnFlHg1AoA7PC0lJYuN+KVuBgRllHkw/9V00eK:U/YJuH7llJzNzlHkw/3TeK
MD5:	A3D07AF30E7DC57B0647E417E27AC938
SHA1:	2EEB4A7E1DC2E86A6A0664BD6FC2FE7BA3009BAA
SHA-256:	F31746CBB75773ACC9358471805E24D2F80184A9686F2E4DFBF57530C3A583C0
SHA-512:	BF68F4D01D054F05E1B116CEC941C2B77662C8E950BC0961D256A88D55C39A9627BAE4355A3FDED12DCC4B155A8C89A232FFDF60D18EA7FE62114DB78053A073
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/details.module.css?qrgttk
Preview:	/*. @file. * Collapsible details.. . @see collapse.js. */...js details:not([open]) .details-wrapper {. display: none;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\drupalSettingsLoader[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	519
Entropy (8bit):	5.161310412773144
Encrypted:	false
SSDEEP:	6:Uwq4VCi+5cGMKN0fGLB0PQwPoj/LR7nadOXCuhtdz2mySYuhtdz2myGy5mpq3Wja:UkaFN0fw0PKjNWdAbZbomvNXmirN5fgn
MD5:	49DBE4BAC61E9CA48A5951BCBE0D03E9
SHA1:	020EFEBBF1F6E97D39DDCDDC5262F34C1DB7807F
SHA-256:	5F8F69EC521F7998AF455985A8EDE6D8DCF3527B43795FE3D26F1F1B57A5A554
SHA-512:	C184CC753599864802BC90582698CF0D66E2E782D34ACD2E1EE26CA3F03BBA8C9D4FB2DB40E9B13FE0568DD9ABFE147EDC8A86FDD1B8EB5483AFA867C039C375
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/misc/drupalSettingsLoader.js?v=8.9.13
Preview:	/*. DO NOT EDIT THIS FILE..* See the following change record for more information,.* https://www.drupal.org/node/2815083.* @preserve.**/..(function () {. var settingsElement = document.querySelector('head > script[type="application/json"][data-drupal-selector="drupal-settings-json"], body > script[type="application/json"][data-drupal-selector="drupal-settings-json"]');.. window.drupalSettings = {};.. if (settingsElement !== null) {. window.drupalSettings = JSON.parse(settingsElement.textContent);. }.})();

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\effect-min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	16816
Entropy (8bit):	5.357184455434572
Encrypted:	false
SSDEEP:	192:5vTeXBVAInxCBhjX2sjhlStCsbiXcWzNvwu2LqQ6uZWs74:5vKXBVAWxC3jmQCCsbQ5IdGs74
MD5:	86F1E6B37CFAF2786F58619B88778717
SHA1:	96975EB34AA586AD9FA48C6F994A4AD2D87A0C60
SHA-256:	252B076ABB37EC8CEE93AA75EE776C45E01515D8361A9BAE2341EDFE02D875F7
SHA-512:	756F0D67A468BA5DAF96420DCFE493383A26833A392336180C1D2194190E995C409AD778A87429E0C84C41F77968852A4C0B0A239B473EF77A9BDEF03BDB1891
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/assets/vendor/jquery.ui/ui/effect-min.js?v=1.12.1
Preview:	/! jQuery UI - v1.12.1 - 2017-03-31. http://jqueryui.com.* Copyright jQuery Foundation and other contributors; Licensed /.!function(a){"function"==typeof define&&define.amd?define(["jquery","./version"],a):a(jQuery)}(function(a){var b="ui-effects-",c="ui-effects-style",d="ui-effects-animated",e=a;return a.effects={effect:{}},function(a,b){function c(a,b,c){var d=l[b.type]\|\|{};return null==a?c\|\|!b.def?null:b.def:(a=d.floor?~~a:parseFloat(a),isNaN(a)?b.def:d.mod?(a+d.mod)%d.mod:0>a?0:d.max<a?d.max:a)}function d(b){var c=j(),d=c._rgba=[];return b=b.toLowerCase(),o(i,function(a,e){var f,g=e.re.exec(b),h=g&&e.parse(g),i=e.space\|\|"rgba";if(h)return f=c[i](h),c[k[i].cache]=f[k[i].cache],d=c._rgba=f._rgba,!1}),d.length?("0,0,0,0"===d.join()&&a.extend(d,f.transparent),c):f[b]}function e(a,b,c){return c=(c+1)%1,6c<1?a+(b-a)c6:2c<1?b:3c<2?a+(b-a)(2/3-c)6:a}var f,g="backgroundColor borderBottomColor borderLeftColor borderRightColor borderTopColor color columnRuleColor outlineColor textD

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\favicon-32x32[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1336
Entropy (8bit):	7.776296896714416
Encrypted:	false
SSDEEP:	24:2ELyu9N214knvN7rkS5PA3uEJHg1zTX6M4iQ7VfEVWnGrgbmVs/1:2Ee/ik17bZA3uEJA1zTXH4xEVWnMgya1
MD5:	BB3DEBD3FE12736EE94C99D20D42FFD3
SHA1:	C2C87994245FDAE0B3093B80614B202F90099D27
SHA-256:	EE877BF7E33D22CD354278EDBA7FB9DADCAAB3FABEA37CD8E3AFCA2FD824503D
SHA-512:	02AE48449B746503D22940E24F2796E44E14D52870B82C36DC3F7F902EBBA3D012DF9605BFB7083ABE1212452DEB82D89FFAF9220057A8BEDC2662ABC19D37DA
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~.....IDATX.W[(.Y..{....f\2n..7..(3[<.... .h<)e.<y..@.x@).9..a.t..(N....1..Y.j}.......\|....}.o}.f3&..;....g.1.m.G...d..a......k.3M..........Vb&.-`4.7.{..t..%.D...r.3..Ka.V.U........wK...K..ma....B.$7...aW....l.Y.O.BoU!<..;...n.....p...7b(...gH..{..j.P....%.=<<4.b..5..$.....).~~~...............t:!66Vc.#00....................BP<..".........r.....'P...........3......v....#......EHKK.1aH..I.,.s6.........`kk....auu....uB...........666`nn.....z...2r.....>(@..{....*....kHf......\.....{....cn.$.[...........S,Pl.C...1..&......oFw........M....................4'.....&j....f}}}\|........1:.........v.!++....../.,.#....p1H....l.b.A7-JHH...s~...8xzz..8..............&f...iff.....I..[.q.....i.........-88."##u....4.GGG....j/...7.....z.....{rr..Abb"...r. ...IM`....T.B&..fZ.H.,(.9........4....)....b......!!...`}}.3hmm.......,PH....+..1pj..........Cjii..c@bL .........N.R..SWLLLp&...:.0...S..0.....?I.X.BWW.V.e&.l......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\favicon-32x32[2].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1336
Entropy (8bit):	7.776296896714416
Encrypted:	false
SSDEEP:	24:2ELyu9N214knvN7rkS5PA3uEJHg1zTX6M4iQ7VfEVWnGrgbmVs/1:2Ee/ik17bZA3uEJA1zTXH4xEVWnMgya1
MD5:	BB3DEBD3FE12736EE94C99D20D42FFD3
SHA1:	C2C87994245FDAE0B3093B80614B202F90099D27
SHA-256:	EE877BF7E33D22CD354278EDBA7FB9DADCAAB3FABEA37CD8E3AFCA2FD824503D
SHA-512:	02AE48449B746503D22940E24F2796E44E14D52870B82C36DC3F7F902EBBA3D012DF9605BFB7083ABE1212452DEB82D89FFAF9220057A8BEDC2662ABC19D37DA
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/favicon-32x32.png?v=95d5a2a6253850552d499cd53df6b4a2
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~.....IDATX.W[(.Y..{....f\2n..7..(3[<.... .h<)e.<y..@.x@).9..a.t..(N....1..Y.j}.......\|....}.o}.f3&..;....g.1.m.G...d..a......k.3M..........Vb&.-`4.7.{..t..%.D...r.3..Ka.V.U........wK...K..ma....B.$7...aW....l.Y.O.BoU!<..;...n.....p...7b(...gH..{..j.P....%.=<<4.b..5..$.....).~~~...............t:!66Vc.#00....................BP<..".........r.....'P...........3......v....#......EHKK.1aH..I.,.s6.........`kk....auu....uB...........666`nn.....z...2r.....>(@..{....*....kHf......\.....{....cn.$.[...........S,Pl.C...1..&......oFw........M....................4'.....&j....f}}}\|........1:.........v.!++....../.,.#....p1H....l.b.A7-JHH...s~...8xzz..8..............&f...iff.....I..[.q.....i.........-88."##u....4.GGG....j/...7.....z.....{rr..Abb"...r. ...IM`....T.B&..fZ.H.,(.9........4....)....b......!!...`}}.3hmm.......,PH....+..1pj..........Cjii..c@bL .........N.R..SWLLLp&...:.0...S..0.....?I.X.BWW.V.e&.l......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\fieldgroup.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.41963781106399
Encrypted:	false
SSDEEP:	3:UV9nM3KQNVQWAtNMDBJBTQ4W62nwFHKNJrnd:UfM7/QWyNMjBcvQyB
MD5:	0B9CB6DC1250D392805B4E6797327401
SHA1:	311744F30B9293DF13CEA1AFC41456CEA5FC449F
SHA-256:	C799EC87FB8A6E52BD93A883ABDC71EEF0DEC77D2365CE4C2F46178A3E0909FD
SHA-512:	27A0AE332E2A138D821B2438BA1E8E3428A04F6583DC3BCCD8C3F1AF1936D4D5AF81DF191E49C5B6269186580542B48892FC0ACA176DF2EB26267AC8668D6062
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/fieldgroup.module.css?qrgttk
Preview:	/*. @file. * Fieldgroup border reset.. */...fieldgroup {. padding: 0;. border-width: 0;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\footer-default-supergraphic-logo[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	655
Entropy (8bit):	5.4192569642679995
Encrypted:	false
SSDEEP:	12:TMHdPhGi/nzVJ/KYf3nwnTDHLdudmT6vb7bULtsXKX:2dMATLf3wnTDrtCg2KX
MD5:	A5F24D16C913DF02269E8AA8515411FB
SHA1:	230ADB5E203A9DDFB0847640A73CCB37A28D4BE9
SHA-256:	CBF618B92A9CDFBC7A976BA731D29E190E08C1F98C4D8A315EFE6F946FEB02FF
SHA-512:	C61FD75534E3D7ACCF1B060E5A1BD50BA61C478E008939AC6FF451D8C814329CCF37924D7A54B6B62BBC89D0D33EB659EE5D86A8379E6FD65D4E207699B43848
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/logos/footer-default-supergraphic-logo.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 4410 4093" xml:space="preserve" height="4093" width="4410">.<style type="text/css">...st0{fill:#1A1A1A;}.</style>.<path class="st0" d="M2494.4,0C1689.4,0,805.7,218.5,0,772.3l362,856.2c590-449.3,1330.4-725.9,2131.5-725.9..c299.5,0,601.5,45.4,880.6,118.1c-227.9,821.4-749.4,1560.5-1556.8,2054l99,1017.9c1586.7-773,2382.7-2252,2493.7-3652..C3831.3,161.3,3177.6,0,2494.4,0z"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\hidden.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1359
Entropy (8bit):	4.625282671725046
Encrypted:	false
SSDEEP:	24:swlJfLWtQ6fATZXTSVEdOWcv3A5NxVKqMmd4lMO+GWNA3sEdy66gmNen:swlJfKt1fA1XWud6v3INxVWmClnHjdmI
MD5:	A40F4B74BED5FC5D74DF3DA6FDCAEE26
SHA1:	2B8F20E668877C8BB4203CE1506753570523734C
SHA-256:	144C2B996574A2F16003848858DE86DC5AD3486FB4FE14A5D5A79D134086E763
SHA-512:	9AA15667D962B0F618DE9C3B080059B49749C0440DAF47E6E1A267F2EE4CE8C3990BF6EF2820E55A29B7419C6625C84DE99439FDAFF1798BB88B30C04C98A18B
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/hidden.module.css?qrgttk
Preview:	/*. @file. * Utility classes to hide elements in different ways.. /../. Hide elements from all users.. . Used for elements which should not be immediately displayed to any user. An. * example would be collapsible details that will be expanded with a click. * from a user. The effect of this class can be toggled with the jQuery show(). * and hide() functions.. /..hidden {. display: none;.}../. Hide elements visually, but keep them available for screen readers.. . Used for information required for screen reader users to understand and use. * the site where visual display is undesirable. Information provided in this. * manner should be kept concise, to avoid unnecessary burden on the user.. * "!important" is used to prevent unintentional overrides.. /..visually-hidden {. position: absolute !important;. overflow: hidden;. clip: rect(1px, 1px, 1px, 1px);. width: 1px;. height: 1px;. word-wrap: normal;.}../. The .focusable class extends the .visually-hidden class

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\logo-main-serviceontario[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 2336, version 0.0
Category:	downloaded
Size (bytes):	2336
Entropy (8bit):	5.517220988183171
Encrypted:	false
SSDEEP:	48:upM4GSrh87Dj1vkV9qZYX4ReIKX42Y9vezWPbp2Dil:UPGSrh8D1cV864oNXWlPV2DG
MD5:	B119953440B3784AFA76EA69EE86F1AA
SHA1:	75D53F6E9EA142DC6E0B405909C88A9902A509E0
SHA-256:	5DB5E464735C8B3469B62E9F9E785B3A89FCEC6037AA39738303628BD37B15CD
SHA-512:	376BCE067846D9EC610CDB17F32A4BDDBD9D496501C7DE84B71EC0B80F19B0DD416801A156742188F0968AF7152794C71617C8347ADA8B8011143F9FB5C15107
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/logo-main-serviceontario.woff?fvweqx
Preview:	wOFF....... ................................OS/2.......`...`...~cmap...h...T...T.V.gasp................glyf.............z..head.......6...6.>.Yhhea.......$...$....hmtx.......P...P..y.loca...,..........maxp...X... ... ...;name...x.........J..post....... ... .......E.......................3...................................@.........@...@............... .................................8............. ........... ................................................79..................79..................79...........9.......!.!..9..........%...,........#"&'5..32654&'..54632.....#"............A#.8..7..,...8=/O2.5..1..(9D9........C.........%366..?....."&7/.'....O...W........%"&54632.....#..3267...#."..34&#..HUKA)=....../.-..7.....h. .TI@Y)).,.+(..7....2..2.......E......."...#.3.>.32.....#.$.$.OO./!............&8.#..G.....\..........%#.3.73..MqTQR6..&.................%"&54632.....#"....3267...#..FRVG.*..'.)%(,.%.....UFJQ..:..>$)=..6.......@...G........%"&54632.....#..3267...#."..3..#..IV

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mobile-chevron-right[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	191
Entropy (8bit):	5.03255814455634
Encrypted:	false
SSDEEP:	3:tRBRNqAR+4FcvW/D7SLvDmJS4RKb58ZSFuHEX7UL30eXFPQ8XX5CKOAwRAHFWFAy:tnrqlW/Dumc4slvIY7y0w3XX5lkAHw6y
MD5:	DB64144AF6DBB1EAF2ABE0E6272B2EFE
SHA1:	A0B6A72117F230E0515F97FD49DE956395F0179E
SHA-256:	6671A41C7316A80D630EF62A72BFD0D67EFD252F2D71D57412A016D7520758A6
SHA-512:	F0550C5AAE74BE35B075DB37C0196211976F3AF3B3176A012569801DA12039477213AD78E3D9C8C8FFA5E83558E9C6DF984BDC680F059B8EFFDC4BD31FD99079
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/images/mobile-chevron-right.svg
Preview:	<svg width="35" height="36" viewBox="0 0 35 36" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M16 33.3359L31.4485 17.6725L15.7851 2.22398" stroke="white" stroke-width="5"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onesite-angular-foundation.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	12118
Entropy (8bit):	5.139938442037991
Encrypted:	false
SSDEEP:	192:3NS2OSk1uTnbLykBo1kBo4OAdqzPKThxbMgfkBhcqj+/ggF:3kTSk8H2rNBAOPKTfMgsgggF
MD5:	A428F97770D2F8A1B1A002108F94EF4A
SHA1:	A2A5474D67225963FF8461867EC939FD5BF6949F
SHA-256:	BF9AC2D327C40986A4837C865C29A8F08B37107A94B1F1C4DB4489FF2CB6480B
SHA-512:	A59DD0018A893AC8B7CC27259B0599E493AE605ABFC68E76A509F5A0D1B314E0BA150F66F83BCADE6B29382FD36682F4D70F5CB5AB4E15B70A26821FADAA168C
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-angular-foundation/onesite-angular-foundation.min.js
Preview:	"use strict";angular.module("onesite.angular.foundation",["onesite.angular.foundation.directives","onesite.angular.foundation.controllers","onesite.angular.foundation.services","onesite.angular.foundation.filters"]);."use strict";angular.module("onesite.angular.foundation.directives",[]).directive("onesiteAccordion",[function(){return{scope:!1,restrict:"A",replace:!0,transclude:!0,template:'<ul ng-transclude class="accordion"></ul>',controller:["$scope","$attrs",function(e,n){this.broadcast=function(){e.$broadcast("true"===n.oneOpen?"oneOpen":"multiOpen")}}]}}]).directive("onesiteAccordionGroup",["$compile","onesiteFoundationService","analyticsEventService","analyticsTypeaheadService",function(e,u,d,f){var a;return{scope:{heading:"@",isOpen:"@",toggleOpen:"@",templateUrl:"=",analytics:"=",data1:"@",data2:"@"},restrict:"A",replace:!0,require:"^onesiteAccordion",transclude:!0,templateUrl:(a=/^'(.*)'$/,function(e,n){var t=angular.isString(n.templateUrl)&&""!==n.templateUrl.trim()?n.templa

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onesite-contact-us.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	4213
Entropy (8bit):	5.0419075599097765
Encrypted:	false
SSDEEP:	96:KTfORuzFDubr04doJaveTCzll8Tt90Sh1:KjQyJD0M37
MD5:	2E45C11110BE0B34805211925E828627
SHA1:	473DDAE6DFEA23DB1B1866EAF15F29432BE38F9B
SHA-256:	9EEE3D778CD03BAD9DEA05343FD1DB44AE38D1802EB1D72B5F6B5F57F8E45C3D
SHA-512:	B097225C21F436CADD4C709FFE151A2F92F57D46AB784E3436D3A8F28D783EED0ADD60A5A3589805D777407284199D0033DF687A29EA3362DF6F166EA6166CE0
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-contact-us/onesite-contact-us.min.js
Preview:	"use strict";angular.module("onesite.contact.us.services",[]).factory("contactUsService",["remoteStorageService","sessionService","dataBindingService","apiEndpointConfig","componentApiService","redirectService","$q","$parse",function(a,e,t,c,s,d,u,l){var r={};return r.getContactNode=function(r,n,e){var i="/"+c["onesite.app"].apiService,o=c["onesite.app"].apiServiceCrossDomain,a=u.defer();return function(e,t){var r="/"+c["onesite.app"].apiService,n=c["onesite.app"].apiServiceCrossDomain,i=u.defer();return s.getEntity({url:d.respectProtocol(t.useRelativeUrl?r:n+r)+"/url/"+e,method:"GET",withCredentials:t.withCredentials}).then(function(e){var t=angular.isArray(e)?l("und[0].id")({und:e}):e.id;t?i.resolve(t):i.reject()},function(){i.reject()}),i.promise}(e,n).then(function(t){if(angular.isString(t)&&""!==t.trim()){var e=encodeURIComponent(t);s.getEntity({url:d.respectProtocol(n.useRelativeUrl?i:o+i)+"/"+e+"?fields="+r,method:"GET",withCredentials:n.withCredentials}).then(function(e){a.reso

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onesite-health.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	2716
Entropy (8bit):	5.191556252285694
Encrypted:	false
SSDEEP:	48:/0MiqXssrzHoSbzpDlDvpcijZiWU2LLafkI1HbZ8GVLMDyOlnbxN09Xp2fn:/WszFbzNlDvv02LL211GGV/Olnb052f
MD5:	9CD27F9A2902AC378467C824DB978A5B
SHA1:	05D4E5D36B35783E034ACC6A5268D28E2E69082C
SHA-256:	EC78B2DC4F57E8D83AE6244B7C6DECD315C0544811D137F3D96D92C842F0B845
SHA-512:	EB25B8A78245E0DD88B4A9918CE7BCD4BC9F79DC61D4DF6FE7607D083FBBA0C77182E563F4968C56E55E86D0C8C8AC3CD35C40D79464DC71DA64FE5155B4B50E
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-health/yellowCard/onesite-health.min.js
Preview:	"use strict";angular.module("onesite.health.yellowCard",[]);."use strict";!function(){function e(o,n,r){var t=this;t.component="phuForm",t.phuInfo={},t.errorMessage="",t.errorOccurred=!1,t.iconAvailable=!0,t.setComponent=function(e){t.component=e},t.getHealthUnit=function(e){return l(),e=n.transformPostalCode(e),n.validatePostalCode(e)?n.queryForPHU(e).then(u).catch(h):(i(a),o.resolve(!1))},t._setError=i,t._clearError=l,t._formatPostalCode=c,t._isOnIcon=s,t._handleResponse=u,t._handleAPIError=h;var a="We couldn.t find that postal code in Ontario. Please use one of these formats: M5V 3Y3 or M5V3Y3.";function c(e){return e.slice(0,3)+" "+e.slice(3,6)}function i(e){var o=e!==a?"api":"malformed";window.ga&&ga("send","event",{eventCategory:"icon-lookup",eventAction:"error",eventLabel:o}),t.errorMessage=e,t.errorOccurred=!0}function l(){t.errorOccurred=!1,t.errorMessage=""}function s(e){switch(e){case"https://drhd.icon.ehealthontario.ca":case"https://hrhd.icon.ehealthontario.ca":case"https

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onesite-live-chat.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2509
Entropy (8bit):	5.094125766726055
Encrypted:	false
SSDEEP:	48:d/fhCajQVjQVsyKIcOtqEL2tQp4ojMDkeNzBIVTRAm+/9Rf35z8xLu:dnrj2jHyJcIjrVT45z3
MD5:	9E632AD1FEA5C87150A0EB8734EBF28C
SHA1:	C8F783A25FD2BFB5F73BBAE5FBB96B638DA21245
SHA-256:	4114DD2B4A8CA98EB097AFD2D5673D0FBE89BE50E54DAED20490646D9127D32F
SHA-512:	2180583E252D4707362003EE94125739016D0C99A7AE403004249EC42CC806D6082F3444C3FBBB99FE07D8407AA1E59F711B477E21A3B969737EBE89E08109E4
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-live-chat/onesite-live-chat.min.js
Preview:	"use strict";angular.module("onesite.live.chat",["onesite.live.chat.directives","onesite.live.chat.services"]);."use strict";angular.module("onesite.live.chat.directives",[]).directive("onesiteLiveChat",["redirectService","liveChatService","scopeService","stringService","$parse",function(a,i,n,l,e){var o=e("node.content.id"),r=e("node.content.lang"),s={en:"https://www.webchat.ccm2.gov.on.ca/EO_Webchat/iceMessagingWeb/Chat.html?destinationURI=sip:im_990a_sw03@ccm2.gov.on.ca&lang=en-CA",fr:"https://www.webchat.ccm2.gov.on.ca/EO_Webchat/iceMessagingWeb/Chat.html?destinationURI=sip:im_990a_sw03@ccm2.gov.on.ca&lang=fr-CA"},c={en:"page/employment-ontario-live-chat",fr:"fr/page/clavardage-avec-emploi-ontario"},u=["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"];return{restrict:"E",transclude:!0,scope:{title:"@"},replace:!0,templateUrl:function(e,t){var a=angular.isString(t.type)?angular.lowercase(t.type.trim()):null;return"body"===a?"/onesite_modules/onesite-live-chat/p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onesite-moment.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	37842
Entropy (8bit):	5.1828626911292055
Encrypted:	false
SSDEEP:	768:OuZRcpHR4O+v8Sfcc/2TEpfuZRcpHR4O+v8Sfcc/2TEpK:JZ2HRy0pZ2HRy0H
MD5:	0B9D0DF510796BAB9F7AB9793CE13BB3
SHA1:	1ADBFCE8CE7C1182FAC0AE00A17B790529458019
SHA-256:	04A65AD90AA9CC71303E1669D067D31D8928B995FEF3A5C7B2EDC6F02987E6C4
SHA-512:	F57D5CCCFD5458678E9EBB6F16CB8B90C27FCC27067ACC4043A520FEC1237C1771AAD288DD803ADABE619A7FB37D44FB964E234A373E25196F4AA081052F0604
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-moment/onesite-moment.min.js
Preview:	"use strict";angular.module("onesite.moment",["onesite.moment.services","onesite.moment.controllers","onesite.moment.factories","onesite.moment.directives"]);."use strict";angular.module("onesite.moment.controllers",[]).controller("OnesiteDateAddImpl",["stringService","timeService",function(i,u){var o=this;o.add=function(n,t,r,e){var a=i.strToDate(n);angular.isNumber(t)&&(a=u.addYear.call(a,t)),angular.isNumber(r)&&(a=u.addMonth.call(a,r)),angular.isNumber(e)&&(a=u.addDay.call(a,e)),o.date=a}}]).controller("OnesiteDateSelectorImpl",["stringService","timeService",function(i,n){function c(n){return angular.isNumber(n)&&!isNaN(n)}var h=this;h.stringToInteger=function(n){var t=(n=angular.isString(n)?n.trim():null)&&""!==n?parseInt(n):null;return c(t)?t:null},h.daysInMonth=n.daysInMonth,h.monthCollection=i.monthCollection,h.dateExists=function(n,t,r){return r<=h.daysInMonth(n,t)},h.updateModel=function(){var n=h.validateYear(h.year),t=h.validateMonth(h.month),r=h.validateDay(h.day),e=angula

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onesiteContact[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	675
Entropy (8bit):	4.53603734486637
Encrypted:	false
SSDEEP:	12:zuftNU6hGileQ1I6RA5/eEBnB14VrTfNndmNl+5G7N96CleQknB:zuft1hGd04tRj4VrTfN8W19v
MD5:	DBC9BBF6BF8E264CF2726A4FD6E2F206
SHA1:	E8AD714B633C86D1A654F19470F27993029E78BC
SHA-256:	E06FF5F0D2733C7BAFD3722A608A6A8B70CD443BD8CC4868EEDCBF737338734B
SHA-512:	BA8206A565B2E29DFB2EB45807F7FBAF6637A2345F568CC1CDACEC94B18DD915DE0EF9786E2F3A4552449CDAA89ED8886C0742C128350CCD3415619941B900A8
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteContact.html
Preview:	<div>. <ul class="no-bullet">.. <li ng-show="mainController.node.contact.contactUs">. <h2 class="h4">{{ 'Contact Us' \| translate }}</h2>. </li>. <li ng-show="mainController.node.contact.contactUs" target="_self">. <a href="{{ ::mainController.node.contact.contactUs }}". analytics-on. analytics-category="Footer". analytics-event="{{ '' \| analyticsEvent }}". analytics-label="contact us">. <span class="iconWrapperLong">. <span class="icon-contactLong" aria-hidden="true"></span>. <span class="show-for-sr">{{ 'Contact Us' \| translate }}</span>. </span>. </a>. </li>.. </ul>.</div>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onesiteHeader[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	7035
Entropy (8bit):	4.263274724098631
Encrypted:	false
SSDEEP:	96:zNLLKr1TqSaYhSrzjKVNfBSr1ffmfBSr1ffO0idqr1LxZZ8Sr1Cf60xZNLrSrzkM:S2BXdbJ70xPUX
MD5:	79294BCADECFA768064D62D929CCA8EE
SHA1:	5FB29C02EBB7F13E9D1D19746B384643F45DD163
SHA-256:	49171957780877832549B43ECBE43324548D9872C2EFE995B83E45203458A32D
SHA-512:	D4AB923234C56DF80166D5D879C5C1A62EE5DCAF2C7685B736F2010243D5A03B8DD750080B1CE5159F92FC0CA427F8FFC1DBF545CF652DE7BEFC165C3EA9F009
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteHeader.html
Preview:	<header ng-class="default">. <div class="row">. Note: class site-logo-print--wrapper is used to display the logo when printing -->.. Logo -->. <div onesite-header-logo. class="small-5 medium-4 large-3 columns site-logo-print--wrapper">. <div class="site-logo-print--wrapper">. <a href="{{ aliasToPath(headerlogoAliasCollection[contentNode.lang ]) }}". analytics-on. analytics-category="Header". analytics-event="{{ contentNode.ministry \| analyticsEvent}}". analytics-label="logo">. <span class="iconWrapperLongNoBg iconLogoHeader">. <img class="site-logo". ng-src="{{ pathLogoHeader }}". alt="{{ 'Government of Ontario' \| translate }}">. </span>. </a>. <img class="site-logo-print". ng-src="{{ pathLogoPrint }}". alt="{{ 'Government of Ontario' \| translate }}">. </div>. </div>.. <div class="medium-5 large-6 c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onesiteIntro[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	2165
Entropy (8bit):	4.501592986180701
Encrypted:	false
SSDEEP:	48:vSSX0nJFOpkYQDv5lUPflRMYobf5ls28o4ZTlxYobf5lsQo:sKGMNGriy
MD5:	A71DB86CD98A06AC64AB437E44B30C0F
SHA1:	EE5F0C974A40E6BEFF37FC7BDD6442338CE1543E
SHA-256:	051DD761C86E94ACD1DF924BB3CEE772B17A05055AFF1E29ABD2AF9529C69FF5
SHA-512:	5B8BE982D87CD8329E4DC28ED4D9ADEB9D8A56F77CDF1F60455C970949BE4E2707736BE85087D153B426167C08F189977E6C0B9B6EC722A8DE66A34B3FDAF028
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteIntro.html
Preview:	<div>. <div. ng-include="'/core_modules/component/partials/onesiteServiceOntarioLogo.html'">. </div>. <div ng-switch="mainController.node.content.banner.type">.. if banner -->. <div ng-switch-when="marketing" class="marketing-banner">. <img. data-interchange="{{ mainController.node.content.banner \| onesiteBannerDataInterchange }}". alt="" />. <div class="row intro">. <div class="small-12 custom-size columns">. <span ng-if="mainController.node.content.tags.breadcrumb">. <onesite-breadcrumb. breadcrumb="mainController.node.content.tags.breadcrumb">. </onesite-breadcrumb>. </span>. <h1 ng-bind-html="mainController.node.content.title"></h1>. <compile-html html="mainController.node.content.intro">. </compile-html>. </div>. </div>. </div>.. if thumbnail -->. <div ng-switch-when="thumbnail" class="row intro">. <div class="small-12 mediu

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onesiteNotices[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text
Category:	downloaded
Size (bytes):	1802
Entropy (8bit):	4.66716881607702
Encrypted:	false
SSDEEP:	48:pEBOFnPrUr6fN64s5KBnPrUr6fNL0lHjUr6fN8lA:JFPrUr6fNtsQPrUr6fNL0pjUr6fNz
MD5:	76E352610F5A694BAA6BB68DE15FA70D
SHA1:	252E12B2BEB0B1DD9755FBE0CC0FC313ADE6A164
SHA-256:	49211795EB28AE73184062709F468C4795644BC2AC37FBEB730056DEC684D0CA
SHA-512:	77F195733A82CC072405DA0A49E107B340EDFCB3D8DB5E7AF10A494CB0FF401AAE21EA6A020A6DBD4CDA54EED163A7C867B8253A9DD0EE7C6760D6634744C86A
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteNotices.html
Preview:	<div class="small-12 columns">. <ul ng-hide="copyRightOnly". role="navigation". aria-label="{{ 'Secondary navigation' \| translate }}". class="show-for-medium-up inline-list small top-margin-double no-bottom-margin">. <li ng-repeat="(title, url) in ::noticeLinks[language]". ng-hide="title === 'copyright'">. <a href="{{ ::url }}". analytics-on analytics-category="Footer". analytics-event="{{ ::ministry \| analyticsEvent }}". analytics-label="{{ ::title }}">. {{ ::title }}. </a>. </li>. </ul>. <ul ng-hide="copyRightOnly". role="navigation". aria-label="{{ 'Secondary navigation' \| translate }}". class="show-for-small-only no-bullet small no-bottom-margin">. <li ng-repeat="(title, url) in ::noticeLinks[language]". ng-hide="title === 'copyright'". class="no-margin">. <a href="{{ ::url }}". analytics-on analytics-category="Footer". analytics-event="{{ ::ministry \| anal

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onesiteOptimizationBanner[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text
Category:	downloaded
Size (bytes):	1242
Entropy (8bit):	4.678377974832088
Encrypted:	false
SSDEEP:	24:OEYJITEPpnj4Iso4FKVb84PLTIIJgeIRqacu2krJmjvyMR:pYmY5/L8vMLZkcjKy
MD5:	ABB299DA5FE3601755DD2EDAC5B54906
SHA1:	63EB4839BE901A81D64A210451660622E9F541B6
SHA-256:	901AF253707FFEFBA1A64DE1FFB22F8F68A4032592AA30BDE48884A6482FA89E
SHA-512:	D9A741FBA8C3EE7F48D6139C9E33EFF3FAB88AD660174FF7A4817A0A180604AF79A83089D55BF786351DF58EC77A9613E4133C2971E00B55B7B71F277CF8123B
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteOptimizationBanner.html
Preview:	<div ng-switch="mainController.node.content.lang">. <div class="alert-box--notification". ng-if="mainController.node.content.optimization_banner === '1'">.. <div class="row">. <div class="small-12 columns">. <div class="alert__header">. <div class="alert__header-icon">. <div class="alert-box--notification-icon"> </div>. </div>. <h2 class="alert__header-title h4 no-top-margin" ng-switch-when="fr">La pr.sente page fait partie d.un projet de migration</h2>. <h2 class="alert__header-title h4 no-top-margin" ng-switch-default>This page is part of a migration project</h2>. </div>. <div class="alert__body">. <p ng-switch-when="fr">Nous transf.rons le contenu d.un site Web du gouvernement plus ancien. Dans le cadre des prochaines mises . jour, nous harmoniserons cette page avec le <a href="/fr/page/ontarioca-guide-redaction">Guide de r.daction pour ontario.ca</a>.</p>. <p ng-switch-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\onesiteServiceOntarioLogo[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1413
Entropy (8bit):	4.627527993884887
Encrypted:	false
SSDEEP:	24:ERtEFWcBxEF6jqroEotrsyw6IF2RXebQdq0hUhS5J8zmIH+ozmha2tiMZ:ER+szF6jqrPGrsyplRubQdq0+s5J8zmT
MD5:	C0A61C83E136AA2BCF37B27260F59B8D
SHA1:	AB9A27C71A87615A8AA43859EF2BC4356734046D
SHA-256:	8AD42DEB65D5CF8528134BE2ADD7E5A98A8B83AA77AA647C9634BF46E5D96A73
SHA-512:	05F208E37ACCE9DAB99479B0221EED658C168017B2152263AAEE897232F0CF3F925C00210F62D3AC62C8CA98FA898F4EA55A4ADECB17AC77366BCD449F2AE6DB
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteServiceOntarioLogo.html
Preview:	Service Ontario Logo -->.<div class="site-logo-print--wrapper serviceontario-bg">. <div class="row bottom-margin serviceontario-row". ng-show="mainController.node.content.headerType === 'serviceontario'">. <div>. <a href="{{ aliasToPath(serviceontarioAliasCollection[mainController.node.content.lang ]) }}". class="hide-for-print". analytics-on. analytics-category="Header". analytics-event="{{ mainController.node.content.ministry \| analyticsEvent}}". analytics-label="service-ontario-logo">. <span class="ico-logo-serviceontario">. leave this commented out for now. did not display properly in the tablet. <span class="path1"></span><span class="path2"></span><span class="path3"></span><span class="path4"></span><span class="path5"></span><span class="path6"></span><span class="path7"></span><span class="path8"></span><span class="path9"></span><span class="path10"></span><span class="path11"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ontario-icon-menu[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	151
Entropy (8bit):	5.0696140584923
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5zMcBH8+hHSKlkcHCUdE3VtGRI3VvTdahdHqGrqLW:tI9mc4slzXdhyKjCUdezGRI3xTdfw
MD5:	6527BD8C3CC6C6CC92B96721F92A8985
SHA1:	646DB6DCC17B5F62D394DAE3B015CD92036E4048
SHA-256:	F3EFFE3F60382E0D0B5495838FE968CECE0EDE8878F41AC1BA1FCE19E92346C5
SHA-512:	03A2C4BCDE0C57D5952DE018F1DA9B0092DEF78308D84AEDADCDE6E63D669023D0CD58DBDAB972DF5A80D43D8C40EC4500FEE470F330C8CF3BD0486407597826
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/design-system-assets/icons/ontario-icon-menu.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none"><path d="M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z" fill="#fff"/></svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ontario-logo--mobile[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1549
Entropy (8bit):	4.32114655075787
Encrypted:	false
SSDEEP:	24:tI61lCpcmBQzb/gM/J606LKmSzrRrhy9QzYajdQl0nG02BcromgZLlhmVNc41llC:lUBQdJ6X8iQzYaI0nGfchghmVND1lx2
MD5:	8605E4FB97DA8B6A1DC5DF2D7C5BFB4A
SHA1:	085EB70255E3793E4FAF8ACC3F2E912FCFD57A92
SHA-256:	09E16128E7AB76EA7C9248B87FB4265B5D779904A1728BD021D88AFC43DEEB39
SHA-512:	6EDD2753E23B7DA754D0938441AE04E299A75D00BCCFB0C8532CEF49564028BAAE5969ACA8FC45FD085357B14628CC7296B749B2C7B532EE7D230F16D5D45DC4
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/logos/ontario-logo--mobile.svg
Preview:	<svg width="46" height="46" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46 46" fill="none" xmlns:v="https://vecta.io/nano" tabindex="0">. <path d="M23 0C7.36 0 0 7.36 0 23s7.36 23 23 23 23-7.36 23-23S38.64 0 23 0" fill="#fff" />. <path fill-rule="evenodd". d="M23 13.223c4.728-3.178 10.58-3.613 15.69-1.153l.18.128-.026.18a16.08 16.08 0 0 1-2.07 6.765c-1.405 2.41-3.4 4.408-5.8 5.79h-.025a15.71 15.71 0 0 0-.365.191c-.188.1-.38.203-.58.296.383 5.69-2.172 10.994-6.85 14.197L23 39.72l-.153-.102a15.76 15.76 0 0 1-4.805-5.176 16.12 16.12 0 0 1-2.095-7.944v-.026c0-.333.025-.692.05-1.05-5.086-2.51-8.382-7.38-8.817-13.043l-.026-.18.153-.077c2.147-1.05 4.523-1.59 6.874-1.59 2.786 0 5.494.743 7.897 2.127h.026a17.21 17.21 0 0 1 .895.564zm5.93 8.56c1.763-1.025 3.27-2.46 4.37-4.33.51-.897.894-1.82 1.176-2.69-2.888-.666-5.8-.23-8.433 1.204.23.307.383.64.537 1.076s.18 1.025.05 1.512c-.05.205-.153.4-.256.615h0c-.51.87-1.584 1.512-2.913 1.922.51-1.59-.307-2.998-1.33-3.895-.51-.46-1.1-.846

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ontario-logo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 360 x 90, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6685
Entropy (8bit):	7.944455102549109
Encrypted:	false
SSDEEP:	192:2984aRNVS4C+7a2qyRFgge3JhPXtkTnMcN6gmzcNUpEFmMPL:qjqbSe22Dpe3JhPXOXxJNUpjMPL
MD5:	E8A33EC19FDD1999B72BD5068A48E25E
SHA1:	1199C2514782D560AC625C49F7D342A2D863544F
SHA-256:	3716D8CA38EA99B178CC68FDA173E98D05210C126B602B67F0D8B3F130DFD4A2
SHA-512:	5D214AABE15D2850E72C400D828B479C7CD80DE64F7760C21601DD58992C0811E7985F16905FE17F57CE941EE348E71DD11CD54A83057A868A4273098239B5B8
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario-logo.png
Preview:	.PNG........IHDR...h...Z...... ......IDATx.....]A...g.m..qR.m.Qm.W.m.Nm.k.\|'<....RJyb..P!jH.i..U.....:.t.v.j.G..35...\.......T...J:..w.....I.4.""@0......=2SoB..h..%.i"=.....P....x.Rd..v..k.E......"..@{2.IM.....h..4..;..@..'.N..{.(..ZD.U~z....ZD.MQ./..@...(E..h.E..J@....h.q..t..O....h.q.uP..B..h.q..P..<...8K!..VO.-".`..hg)@.-"......i.E..P.v..i..AD..N].\|.{v...+.h...=......%K.q.F..f<......{0..X.v-..X...c..=s&.-].-.7...Sx..%.T/..#...Vf8d..Q..Qc.....'A..p.......Y...."V..H.:..)..-Zb....u.&l..X.p!.n..<;m...5.B..~x.!..... N\d...k......u...x..Vv."k..ID*.o....8.0...................uww...K..........g..wv.{.B.;.WK.I..av.,....h.IT.R...../.....%]05.?..J..).31.Ed..?/.\(........#..4m4.C.J..?..}[......_.P.....K..\.-....Lzq.)^....L.n%...ZQ.'."..3...}/...j......q....p..V.;{N.\........7...9r....J%...?/.....{)..N......>~E...7.B.:U..(..y.L.....0ZM..B!.6.......5"12.>d..>}...+W....(.#u.{.b....g..6....H...l.......+,......@(.F .f..S8.tQb...5.=.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ontario-together-filter-show[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	243
Entropy (8bit):	4.975899971540984
Encrypted:	false
SSDEEP:	6:tnr2lfE4YRumc4slvIbp/Ud3LTcQ7tHxP8IXWIzD9AHKb2:trAfbouCVURvPCGDiHA2
MD5:	C52ED9DF864EC0EDDDC37BA0252BD213
SHA1:	7C63B24F056670F0338A75306EC2CF0DF4AB85F3
SHA-256:	A8DD19C8C4747B5CD0B128395EA0C18CBE7DE46E140B8369930D6D64D82014E7
SHA-512:	631BBD594BC68BD8250FF80065F09687923DCF8EC2CD46F720F244F74F3FE4F01FE5084EDA55304E69F478C90CF72E9EB1D8F43DB1E8049B3DFFC3D87CB0EB33
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/images/ontario-together-filter-show.svg
Preview:	<svg width="22" height="23" viewBox="0 0 22 23" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M8.92242 13.4004H0.371641V9.57617H8.92242V0.810547H12.7896V9.57617H21.3619V13.4004H12.7896V22.123H8.92242V13.4004Z" fill="white"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ontario@2x-print[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 637 x 162, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4233
Entropy (8bit):	7.890440885738752
Encrypted:	false
SSDEEP:	96:dn8r57dOJ3d9P56ef0wc54KE1aE4W6lizEm2wbZLxAvqOFc:duI3dr6eY4AExzEBMpKvqOFc
MD5:	F4DC8A52B36FCE82D8E252233967B942
SHA1:	0739463222FBE6D07057AD44293778D7DACCE5D4
SHA-256:	5118D295C9B133CA1E0511029D25E93E94EF3C4AC165822DD3D070A3A7996AF5
SHA-512:	6FEBE50A98484B7F57FDB39EBDF23506547525540BDBDD2A973047A7210D71A86B48C38AF80BAAD3CFDD4EAAB47AC9C7E4FC090FF91B00FFE2E0CE83C91464BD
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario@2x-print.png
Preview:	.PNG........IHDR...}..........Z.,...cPLTE......................................................@@@ppp.................. 000......PPP```....^......tRNS..@ ....P0..`...p.......IDATx......!..a..,-....W....0.0\|...7`Nn!..^K)...?...[....P...._[...X....j....Wo?..c..m...K.y....[.:.>.B...<....C.$z..............C..../..9vg.3.k.....Q35..]s.g.._4...\.C..a}\|W....-...w^.....nh.._....3.......tC.)...h.V?......e.b..E...:...'.2...J4....a. ...........t}.3Q....(`..c.....Oy'...Nd..v{..R.TM.X..i.lw...x...p8.........R...I(..=.N...n.....Y...kI.........c.1......;...H.a..94....a.R$~.c..N..wC...t...S........B..... X...d..v..}...a...V.D.Y.m.....>x.O.<...k...r..x.....&p.......V.H.........._.]u.R.}Rp....s<-.3.,...$]^...k..\|...p..v..3*.<..[..u.......b.$.j..>..{.>o..;hc.j..wO..a.H..F,.T..}..._w$F.p.......wj..A...R.v.\'.\|O...0....>...W...V...A.7.\.}.>.c.....Q.o.....^yf.^ &......zq.h.....o$.WX`R.k./.ga........v.`.....Q$.B.c.A..[~.A...a...}..).T..6...K.).g..2....@.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\open-sans-600-19453553409b80307b0255bee10ec189[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14344, version 1.1
Category:	downloaded
Size (bytes):	14344
Entropy (8bit):	7.957145836515912
Encrypted:	false
SSDEEP:	384:dFhWFP62nFfi/zfl8RNuqIS4icin/qZOSO7O7RWfJjgGc:nhh2Fq/h8RNuqY6nSsSSSRWxS
MD5:	19453553409B80307B0255BEE10EC189
SHA1:	2482CA1307C1099B935E8B12B2703ECBC0692632
SHA-256:	5A5C13D56F3D40CBCC0DD9F8954737C2E1446CC3E0ACBFA3B1671427331A4DC5
SHA-512:	310EDA49A6468496B61ED08D231D0E008042D3FB018D9E3950F60960B7A2FC9BF0F2E0108009A7BBD3A3F15E68EFC959379F8529E39AB019A8131289FC70E1D5
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/static/open-sans-600-19453553409b80307b0255bee10ec189.woff
Preview:	wOFF......8......._.........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`....cmap...8...........gasp................glyf......$...4rE.R4head..'t...6...6...Ghhea..'........$....hmtx..'........l..S3kern..)............loca..3.........K.W.maxp..5.... ... .Y..name..5........h..52post..6........(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`fy.......:....Q.B3_dHc.................B4.......:.;.).......0.p.2E(00.....n..10........x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.............x..Z.@L....73..M..Z...o-.if6.@5..h.6.....I.6IB....6.mccI,..k.c......[3....^....}...M..{........2..IR...a.Tr..\..h.8.l.T...qw..2..6..-.2..Y.x...J.T.....<A...1.......UlK......C..l1z.>...;. ....(.\|I-O...H[7"S.. ....mUJ..AM/..AE.-......\|..]...W.e.-.._.K

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\open-sans-600[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14344, version 1.1
Category:	downloaded
Size (bytes):	14344
Entropy (8bit):	7.957145836515912
Encrypted:	false
SSDEEP:	384:dFhWFP62nFfi/zfl8RNuqIS4icin/qZOSO7O7RWfJjgGc:nhh2Fq/h8RNuqY6nSsSSSRWxS
MD5:	19453553409B80307B0255BEE10EC189
SHA1:	2482CA1307C1099B935E8B12B2703ECBC0692632
SHA-256:	5A5C13D56F3D40CBCC0DD9F8954737C2E1446CC3E0ACBFA3B1671427331A4DC5
SHA-512:	310EDA49A6468496B61ED08D231D0E008042D3FB018D9E3950F60960B7A2FC9BF0F2E0108009A7BBD3A3F15E68EFC959379F8529E39AB019A8131289FC70E1D5
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/fonts/open-sans-600/open-sans-600.woff
Preview:	wOFF......8......._.........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`....cmap...8...........gasp................glyf......$...4rE.R4head..'t...6...6...Ghhea..'........$....hmtx..'........l..S3kern..)............loca..3.........K.W.maxp..5.... ... .Y..name..5........h..52post..6........(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`fy.......:....Q.B3_dHc.................B4.......:.;.).......0.p.2E(00.....n..10........x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.............x..Z.@L....73..M..Z...o-.if6.@5..h.6.....I.6IB....6.mccI,..k.c......[3....^....}...M..{........2..IR...a.Tr..\..h.8.l.T...qw..2..6..-.2..Y.x...J.T.....<A...1.......UlK......C..l1z.>...;. ....(.\|I-O...H[7"S.. ....mUJ..AM/..AE.-......\|..]...W.e.-.._.K

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\page_about-ontario[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	42046
Entropy (8bit):	4.849044882484116
Encrypted:	false
SSDEEP:	768:4CjESE2VF8CvyNCENHbFXU/B/O9yKjEhE2VFuNvyNC4NHbFXUwB/O9yE:J42J6NC27qcQKt2O6NCS7qbQE
MD5:	9400BBD4BBE0ABC28480B6F20F157019
SHA1:	4CDA5DC1E5E61AE48F9B38C90BF2281E86C4A607
SHA-256:	2F0942F79780F0F596614A7561A72D733D50E06648FAC5BFDAC1AE4985EC8341
SHA-512:	C56807D0EEA28FAF4A6A9152185396E2EC5AC3861ECA1EE8F40790C9D3670EF72D7F19034E50CFE405239717AAF46E1B9053C66B283156D2F74D801597D49BC1
Malicious:	false
Preview:	{"_id":"5f9ee688c41bf77d89e4d617","language":"en","nid":"7583","private":0,"status":1,"body":{"und":[{"safe_value":"<h2 id=\"section-0\">Key facts</h2>\n\n<p>Ontario is a study in contrasts. The varied landscape includes the vast, rocky and mineral-rich Canadian Shield, which separates the fertile farmland in the south and the grassy lowlands of the north.</p>\n\n<p>Here are some key facts about Ontario:</p>\n\n<ul><li>Ontario’s more than 250,000 lakes contain about one-fifth of the world's fresh water</li>\n\t<li>in summer, temperatures can soar above 30°<abbr title=\"Celsius\">C</abbr> (86°<abbr title=\"Fahrenheit\">F</abbr>), while in winter they can drop below -40°<abbr title=\"Celsius\">C</abbr> (-40°<abbr title=\"Fahrenheit\">F</abbr>)</li>\n\t<li>Ontario's industries range from cultivating crops, to mining minerals, to manufacturing automobiles, to designing software and leading-edge technology</li>\n\t<li>cultures from around the world thriv

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\page_government-ontario[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	17443
Entropy (8bit):	4.977811239080808
Encrypted:	false
SSDEEP:	96:hsROi1JfcMXd8dMnED+Y2BWmPUrGz9yPjCi0bTvTst7rqOi1JfcMXd8dMnED+Y23:hsbfcMy2Mu8gfcMy2Mu8u
MD5:	E0E9713BFD919C3F72CC96AC08E26EE6
SHA1:	FC19A47A448A56D9FB9FFA9419A904D4A9D60AF1
SHA-256:	849562BB2DCC256267A38F3D890596111203C77541FA336D6C787B4EA503418C
SHA-512:	A847BAF7AB52DA8D2CC7863AA4ED5E40F1C3F30F2E1D0BA2371CC049B092A08D1CDDD87F4C7AA3CCD57A5E895F8167911ADE017684CB78031B11A5CA01E10DEF
Malicious:	false
Preview:	{"_id":"60707288fb20fe08ca834930","language":"en","nid":"53967","private":0,"status":1,"body":{"und":[{"safe_value":"<div class=\"alert-box\">\n<h2 class=\"h4\"><span aria-hidden=\"true\" class=\"no-wrap\">COVID-19</span><span class=\"show-for-sr\">covid 19</span></h2>\n\n<p><a href=\"https://covid-19.ontario.ca/book-vaccine/\">Learn how to schedule an appointment</a> for a <span aria-hidden=\"true\" class=\"no-wrap\">COVID-19</span><span class=\"show-for-sr\">covid 19</span> vaccine.</p>\n\n<p><strong>If you are aged 18-49 and live in a designated hot spot, <a href=\"https://www.phdapps.health.gov.on.ca/phulocator/\">find your public health unit</a> and check their website for details about vaccination in your area.</strong></p>\n\n<p>Get the <a href=\"https://covid-19.ontario.ca/\">latest updates about <span aria-hidden=\"true\" class=\"no-wrap\">COVID-19</span><span class=\"show-for-sr\">covid 19</span></a> in Ontario and <a href=\"https://covid-19.ontario.ca/covid-19-help-busi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\phulocator[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	163253
Entropy (8bit):	5.849588667600356
Encrypted:	false
SSDEEP:	3072:G5UJZI5GyGcZkosVNfGLGqbx5dneiGxaByGkdgjecuuMk3LI:G5UlypZZsVNfGdRpGxAy4e23LI
MD5:	F7A61175656B05725C4CB95E2A6379C9
SHA1:	54434BBA2594661B01195E279C0D65D515D549EF
SHA-256:	E89C6213DF66F1E575112C6EE1798C602E4C741577A5D4CAC070B8951AC087E0
SHA-512:	BF27D1B5E6C6384E72F573B0DEF96814BD320C31C779F218C8C9B7AA96E1C3C23EA9CD3F5088EDD499BAD88D62152C3643EA3E82379158FACB83368C433869BA
Malicious:	false
IE Cache URL:	https://www.phdapps.health.gov.on.ca/phulocator/
Preview:	....<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">....<head>.. <meta charset="UTF-8">.. <title>Public Health Unit Locator</title>.. <link type="text/css" href="Style/mainstylePHealthPortal-en.css" rel="StyleSheet" />.. <script language="JavaScript" type="text/javascript" src="js/formval.js"></script>.. <link href="Style/StyleSheet.css" rel="stylesheet" type="text/css" />....</head>..<body style="color: #FFFFFF; text-align: center;">.. <main>...... <a id="lnkSwitchLanguage" href="fr/Default.aspx">Passer au fran.ais</a>.. <br />.. <img src="images/PHULocator.PNG" width="980px" alt="Ontario Logo. Public Health Unit Locator. Ministry of Health." />.. <br /><br />.. <h1 style="font-family: Verdana, Helvetica, sans-serif; font-style: normal; text-transform: none; font-size: 1.0em; background-color: #FFFFFF; color: #0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\raleway-modified-400-79edfeb2a0670adbccb268d3b8f344f4[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18244, version 4.20
Category:	downloaded
Size (bytes):	18244
Entropy (8bit):	7.979202840632488
Encrypted:	false
SSDEEP:	384:glcBMfNkCPEVHO5tI+gJqVZ2TlPdIKoJ06nrKJ/mHf5F5gpynNYoe:gy3HP+gJUo5PSKoC6nLHf5fgMnyn
MD5:	79EDFEB2A0670ADBCCB268D3B8F344F4
SHA1:	1D164B4EA5D0CF0747934A42A3C0207EAD3A0404
SHA-256:	7CBDEB6D81C204683D29DACDE6CD1DE7C0B50B2389EAEC166B046A8FABC89067
SHA-512:	E493E91346A3829EDA94541AB2982CE694D85B43AD4361AD108B7D4F1D6437AEAF7D376580A85CBAD3A05E5D4E8F405E0FC67CE4F523973EDC77005CA7E37CD3
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/static/raleway-modified-400-79edfeb2a0670adbccb268d3b8f344f4.woff
Preview:	wOFF......GD................................FFTM...0.........$/.GDEF...L....... ."..OS/2...l...I...`..p.cmap...........bd..xgasp................glyf......6c..nx..D{head..:....1...6....hhea..:D... ...$.\..hmtx..:d........._,.loca..<.........5bQ.maxp..>........ ....name..>....s........post..Ed.........Ldnx.c```d..3.....n.0..H..V..x.c`d``..b...`b`../@...1.....'..x.c`b..8.......i..>C.............0"s.2.R.....R....d``>.....I..:.R``.........x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..}.\|[...eY{\.....-o[...$...NH .B.e'.....(-m...-.P..>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\raleway-modified-400[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18244, version 4.20
Category:	downloaded
Size (bytes):	18244
Entropy (8bit):	7.979202840632488
Encrypted:	false
SSDEEP:	384:glcBMfNkCPEVHO5tI+gJqVZ2TlPdIKoJ06nrKJ/mHf5F5gpynNYoe:gy3HP+gJUo5PSKoC6nLHf5fgMnyn
MD5:	79EDFEB2A0670ADBCCB268D3B8F344F4
SHA1:	1D164B4EA5D0CF0747934A42A3C0207EAD3A0404
SHA-256:	7CBDEB6D81C204683D29DACDE6CD1DE7C0B50B2389EAEC166B046A8FABC89067
SHA-512:	E493E91346A3829EDA94541AB2982CE694D85B43AD4361AD108B7D4F1D6437AEAF7D376580A85CBAD3A05E5D4E8F405E0FC67CE4F523973EDC77005CA7E37CD3
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/fonts/raleway-modified-400/raleway-modified-400.woff
Preview:	wOFF......GD................................FFTM...0.........$/.GDEF...L....... ."..OS/2...l...I...`..p.cmap...........bd..xgasp................glyf......6c..nx..D{head..:....1...6....hhea..:D... ...$.\..hmtx..:d........._,.loca..<.........5bQ.maxp..>........ ....name..>....s........post..Ed.........Ldnx.c```d..3.....n.0..H..V..x.c`d``..b...`b`../@...1.....'..x.c`b..8.......i..>C.............0"s.2.R.....R....d``>.....I..:.R``.........x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..}.\|[...eY{\.....-o[...$...NH .B.e'.....(-m...-.P..>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\remote[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	99101
Entropy (8bit):	5.449684214425236
Encrypted:	false
SSDEEP:	3072:fYjXm4iEdKWvGnDusHYy4ygw0vyhD19xR90+2YDSTv:Gm4iEdKWunDusHYy4ygw0vyhD19xR903
MD5:	84F5DA8C439AA470BFE96AD5159A4F84
SHA1:	CAB4E9AF5E02109299BF1F029912271C434AA00D
SHA-256:	EC6FF1EA69B3A469ABF3AA04FC67782BBEDFFF4553BFAEEC5AB17534D1F12403
SHA-512:	0FF368F9196EE1B130F6F795F1E48660D17759A2EF47DF7375703F3418E536DB6FDFD2B5E3DA1C20174D675F5084868786A01F951CF07EC070DABA18A51D9943
Malicious:	false
IE Cache URL:	https://www.youtube.com/s/player/2cea24bf/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var mJa=function(a,b){return g.Nb(a,b)},j4=function(a,b,c){a.l.set(b,c)},k4=function(a){j4(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.Ta()).toString(36));.return a},l4=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.Vm(a.l,b,c)},nJa=function(a,b){var c=[];.g.Si(b,function(d){try{var e=g.Jn.prototype.l.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?c.push(d):g.In(e)&&c.push(d)},a);.return c},oJa=function(a,b){b=nJa(a,b);.g.Bb(b,function(c){g.Jn.prototype.remove.call(this,c)},a)},pJa=function(a){if(a.W){if(a.W.locationOverrideToken)return{locationOverrideToken:a.W.locationOverrideToken};.if(null!=a.W.latitudeE7&&null!=a.W.longitudeE7)return{latitudeE7:a.W.latitudeE7,longitudeE7:a.W.longitudeE7}}return null},qJa=function(a,b){g.gb(a,b)\|\|a.push(b)},m4=function(a){var b=0,c;.for(c in a)b++;return b},rJa=function(a,b){b=b instanceof

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\rendezvous-vaccin[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	121982
Entropy (8bit):	4.917868835985533
Encrypted:	false
SSDEEP:	1536:RXxvybGD6OnQD1g/RFwnmlqfF9HhpX7dRvyV1y1yNEHP:RXtb//RSmlSHv5G6KEv
MD5:	6602DC66F94577404D11F10E9A144E2D
SHA1:	9C34B60FFBB13818108508928D003030E94D8C21
SHA-256:	DF123058A78F422944CCA53A861E34DF06508EC865C28020E92559FB33FB0131
SHA-512:	37419D189AA67C6F47E059777F909259F4B0CD477D7D9148F6258010E598921A692E0C4C64F0BE5D4B2833C3BD7BC4A9AE8381CE500A0AE7E39C9B5B6E303D79
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/rendezvous-vaccin/
Preview:	<!DOCTYPE html>.<html lang="fr">. <head>. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta name="description" content="Entrez quelques renseignements ci-dessous pour d.couvrir comment vous pouvez prendre des rendez-vous pour les vaccins.">. <meta property="og:locale" content="fr-CA">. <meta property="og:site_name" content="@ONThealth">. <meta property="og:title" content="Comment prendre un rendez-vous pour les vaccins contre la COVID-19">. <meta property="og:url" content="https://covid-19.ontario.ca/rendezvous-vaccin/">. <meta property="og:type" content="website">. <meta property="og:description" content="Entrez quelques renseignements ci-dessous pour d.couvrir comment vous pouvez prendre des rendez-vous pour les vaccins.">. <meta property="og:image:url" content="https://covid-19.ontario.ca/c19-book-vaccine-assets/social_image_fr.png">. <met

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\sddefault[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, frames 3
Category:	downloaded
Size (bytes):	22598
Entropy (8bit):	7.88700795949574
Encrypted:	false
SSDEEP:	384:vfnkKdi5ZqOGuogFif91QNI4k34nz15zaznbkk1wQfZOPXwImnWzRszK8MUVomu:vfkKw8OLogFifHQNI4Lnz0nbNw4e0C9J
MD5:	76BE5EFEC5A2DAE287717D6CB046E887
SHA1:	EAA78B0439D81D3D24D0259609D30E8109CBCF26
SHA-256:	72CAC192E205E81DDD0D49C84E720F0EAD39C4DD69C73D6620D9978331186A7D
SHA-512:	0D91B7F7C162F7A31B8B49DE954CAB4043B8B3DBD248C457791A9030B92A0F56D1F82F194820AE9FCE2BAF69EDB71B29B45CDAC4171702859AA517177343ECE3
Malicious:	false
IE Cache URL:	https://i.ytimg.com/vi/cs4qPsP6COA/sddefault.jpg
Preview:	......JFIF...........................................................................................................................................................".........................................T........................!..1AQaq..".............2Bbd.#DRc......er....CES...$4T..3U...............................0........................!.1.AQ.."Ra..2.q.B...#............?............................................................................................................................................................................................................................................................................................................................................................................F.d....m.......p~M...[.U...J......)?#..Z^H/...>..../...o..&.....b.....K..^...5.b......[..w..........Z..}...m-.v.....Y..j.......1.<%.....Fx.?%.....{..%.S.....N..\|....+.............!a........\|......Y...........\|Cr.d0&\|.....!....r.!.7.......?k...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\splash[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text
Category:	downloaded
Size (bytes):	1316
Entropy (8bit):	4.734902870803483
Encrypted:	false
SSDEEP:	24:icZ9fY0mIwC4HheXxvG6wiwkHJ9V9KACYgdZ8hgYnJMH:VmIUH0BtX9QdKhJJu
MD5:	E2F448F78AD6C5A64571929FCEA5E8F7
SHA1:	C0AA5F6FE4D7506432FA9086264BE09D671C60BF
SHA-256:	50DAD750CA6081A33EF23150705E86E1D4B319CB76416FFE0BC1AA88385865ED
SHA-512:	06BE9EC4B56BC1B9E6B404F5BE69246DB0BC353445E27187B91CC0242EB6D5AE615235BE47601F3B76C527F1D31D1ED5A7721F2E4B77E1780C1B1704606EA35E
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/content-type/partials/dashboard/splash.html
Preview:	<style>. body {. background: url("/img/assets/splash/spring-2021.jpg") no-repeat center;. background-size: cover;. height: auto;. }.. .top-margin-6x {. margin-top: 6rem !important;. }.. .site-logo {. width: 315px;. height: auto;. }.. @media screen and (min-width: 64em) {. .panel--semitransparent .button {. min-width: 9.5rem;. }. }.. @media only screen and (max-width: 40em) {. .top-margin-6x {. margin-top: 3rem !important;. }.. .button {. margin-right: 0;. }. }.. @media print {. .text-center {. text-align: center;. }. }.</style>..<main>. <div class="row top-margin-6x">. <div class="small-centered small-10 medium-6 column end no-border panel--semitransparent">.. <div class="row">. <div class="small-12 column text-center top-padding bottom-padding-double">. <img alt="Government of Ontario \| Gouvernement de l.Ontario" src="/img/ontario@2x.png" class="site-logo">. </div>. </div>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\tabledrag.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1840
Entropy (8bit):	4.979542674814808
Encrypted:	false
SSDEEP:	48:02cxDZDI4f1Ba4fgwrE3QA1R53934s44XG4046XfX0u:02cxe4Xa4brE3r1L3t4j4W4046vku
MD5:	E5C74E1C6FD604D03DC784CF615E849B
SHA1:	A2F9F7270EA674F70A6702F5CE4201106EF398D9
SHA-256:	8188BAD0F77AAF0E06C5D199B36C85263048A4AC6361BED201939FDAB3DD196F
SHA-512:	4B47BF98B65F151AA42628A3E3BC69770AF9BD684900971F329059B396AFA83F549FD345D94BA2F1C6DE3726A8B9B21BCCB4399AD1A330903613A9417AB864CF
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/tabledrag.module.css?qrgttk
Preview:	/*. @file. * Table drag behavior.. . @see tabledrag.js. /..body.drag {. cursor: move;.}.tr.region-title {. font-weight: bold;.}.tr.region-message {. color: #999;.}.tr.region-populated {. display: none;.}.tr.add-new .tabledrag-changed {. display: none;.}..draggable a.tabledrag-handle {. float: left; / LTR /. overflow: hidden;. height: 1.7em;. margin-left: -1em; / LTR */. cursor: move;. text-decoration: none;.}.[dir="rtl"] .draggable a.tabledrag-handle {. float: right;. margin-right: -1em;. margin-left: 0;.}.a.tabledrag-handle:hover {. text-decoration: none;.}.a.tabledrag-handle .handle {. width: 14px;. height: 14px;. margin: -0.4em 0.5em 0;. padding: 0.42em 0.5em;. background: url(../../../images/core/icons/787878/move.svg) no-repeat 6px 7px;.}.a.tabledrag-handle:hover .handle,.a.tabledrag-handle:focus .handle {. background-image: url(../../../images/core/icons/000000/move.svg);.}..touchevents .draggable td {. padding: 0 10px;.}..touchevents .draggable .m

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\unnamed[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, frames 3
Category:	downloaded
Size (bytes):	3084
Entropy (8bit):	7.826928404670665
Encrypted:	false
SSDEEP:	96:jdUfcQ0dqMC3p3rl5k8/+RsyzEG9aUJgiHwNcp3:hUfcKpQ8WNaUuVk
MD5:	E7AC718A8D4C0BBBAF5F3E383D798C1E
SHA1:	BA95184899792B6FF746D7322722EC196373ED5D
SHA-256:	315D25EFCAF6BC2E461FAD136E8CDC94E8BECCD3D64F42791D54616AF8C0C7BE
SHA-512:	1E699C4E7216A3DF722BBCBF1D0F781596C112C430668AA1AA3BEABDB9220196C33058E89D264231882D53D26BB818524ACDEBB9A0A4E40632B1D0D88835AB82
Malicious:	false
IE Cache URL:	https://yt3.ggpht.com/ytc/AAUvwnhEgNdkVX5kapxPL376C_73Lo89AbNUECRSSAimWA=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................D.D............................................=..........................!.1Q."Aaq.2Br#Rb.$3s.........Cc..................................7.......................!1..AQq."2a..B......#Rbr...$..............?..S.I/3....L....#..^......(....=.....1.'.{......\&r...)?Z.h...L2/..@z..O.q.....).G&w~~/..t.;.....MNo1.......\|.?......W.I.x..n...#!au$3en.CJL.[xkm>.IS.0.....+...z.oP..8hJ>..{.H...."x.........e.8.Qv.x.mH.o1.u.....O#.p.e;hU....g....."...;..E.dSUEU...]...j.0r.....S..n..c.q2..'".....A.8.._2H.lb.....G..... 5=sa..u2.6.R...N$.i......8.U.. ....E..e%....h^.....c!..RE<<...<q1s..2...>..C.....6V.u.........j9..8q..7_..i..H.D.n...`..1v...G._.i.s....=.......)m.S..7.{..u...*.oH}.w.2...#...x..F...`mek..+.Zn6....R.N$2.9."....c...9..F5..)...."=1..].....[.c`b)#.....O.JZy...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\KFOmCnqEu92Fr1Mu4mxM[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 19824, version 1.1
Category:	downloaded
Size (bytes):	19824
Entropy (8bit):	7.970306766642997
Encrypted:	false
SSDEEP:	384:ozNCb8EbW9Wg166uwroOp/taiap3K6MC4fsPPuzt+7NCXzS65XZELt:K4zbWcDVwt230hfs+x+Bb65X2
MD5:	BAFB105BAEB22D965C70FE52BA6B49D9
SHA1:	934014CC9BBE5883542BE756B3146C05844B254F
SHA-256:	1570F866BF6EAE82041E407280894A86AD2B8B275E01908AE156914DC693A4ED
SHA-512:	85A91773B0283E3B2400C773527542228478CC1B9E8AD8EA62435D705E98702A40BEDF26CB5B0900DD8FECC79F802B8C1839184E787D9416886DBC73DFF22A64
Malicious:	false
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff
Preview:	wOFF......Mp.......P........................GDEF.......G...d....GPOS...............hGSUB............7b..OS/2.......R...`tq#.cmap...........L....cvt .......T...T+...fpgm.......5....w.`.gasp...@............glyf...L..:+..j.....hdmx..Fx...g........head..F....6...6.j.zhhea..G........$....hmtx..G8...]......Vlloca..I.........?.#.maxp..Kt... ... ....name..K........t.U9.post..Ld....... .m.dprep..Lx.......I.f..x...1..P......PB..U.=l.@..B)..w.......Y.e.u.m.C.s...x.h.~R....R.....2.x.....[....#N..m.m.m.mfm....SP..NuM..9]..=.U..!...[........w...\|......^p....H......;...)..........;..EoDo....E.E.D...`.0.GG.aA.H.V.Mx\xA....../..d3.Eb_.J...R.^v........\^ob.}.z..k.x).v$f$..O)+.2..*....y}6`C6b.6cs...l...........!.........<..\|.\|..\|..\|..\|.\|....o....I%.4.L.SI.&C.6..!`...{...c..\.J.(.2.C....V.A..?.M<nG......v..m.;..R.C..aj.H...=..{.>.:.....}i_Y......:....o.&k..KY.2..6k....i]..{,.p}../.....VO3.o].fJ....R-TZ..;...RN..&V...C...3.?.......&..z.s&.D....r,.I...t.R..a$k..Mm..Y.U...+b.%kQ..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\Open-Sans-600[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14344, version 1.1
Category:	downloaded
Size (bytes):	14344
Entropy (8bit):	7.957145836515912
Encrypted:	false
SSDEEP:	384:dFhWFP62nFfi/zfl8RNuqIS4icin/qZOSO7O7RWfJjgGc:nhh2Fq/h8RNuqY6nSsSSSRWxS
MD5:	19453553409B80307B0255BEE10EC189
SHA1:	2482CA1307C1099B935E8B12B2703ECBC0692632
SHA-256:	5A5C13D56F3D40CBCC0DD9F8954737C2E1446CC3E0ACBFA3B1671427331A4DC5
SHA-512:	310EDA49A6468496B61ED08D231D0E008042D3FB018D9E3950F60960B7A2FC9BF0F2E0108009A7BBD3A3F15E68EFC959379F8529E39AB019A8131289FC70E1D5
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/Open-Sans-600/Open-Sans-600.woff
Preview:	wOFF......8......._.........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`....cmap...8...........gasp................glyf......$...4rE.R4head..'t...6...6...Ghhea..'........$....hmtx..'........l..S3kern..)............loca..3.........K.W.maxp..5.... ... .Y..name..5........h..52post..6........(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`fy.......:....Q.B3_dHc.................B4.......:.;.).......0.p.2E(00.....n..10........x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.............x..Z.@L....73..M..Z...o-.if6.@5..h.6.....I.6IB....6.mccI,..k.c......[3....^....}...M..{........2..IR...a.Tr..\..h.8.l.T...qw..2..6..-.2..Y.x...J.T.....<A...1.......UlK......C..l1z.>...;. ....(.\|I-O...H[7"S.. ....mUJ..AM/..AE.-......\|..]...W.e.-.._.K

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\Open-Sans-italic[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 15076, version 1.1
Category:	downloaded
Size (bytes):	15076
Entropy (8bit):	7.960536136856118
Encrypted:	false
SSDEEP:	384:ihKnWsY3Y02JQ9zxRm7TR7NA0tXn/qZOSO7O7RWf5v1X:e2WPp2J2Ct7TXnSsSSSRWhl
MD5:	4B52A816817A711E6971955C835ECFBB
SHA1:	051C5829D5DF0558FC4C8CE02149FB703EA763CA
SHA-256:	14B889CE4EB170C9DEDE3907438E89A1C43E7A8C3E7F3DEB8FB280042CF57BF1
SHA-512:	2D44B2BBB0A66C162ED206CE58BE93F738E45938D41E497E8C3E525A0E06225F64CD335F1854F2475A9664C31127BEF7ECCD2FF630FBF6888C29EA48E55FC541
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/Open-Sans-italic/Open-Sans-italic.woff
Preview:	wOFF......:.......c4........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`.M.=cmap...8...........gasp...............#glyf......'b..8..O..head..D...6...6..'nhhea..\|..."...$...Khmtx..........l.v>xkern..,............loca..6..........t.Kmaxp..8.... ... .d.Ename..8........l.n5.post..9\.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f.f......:....Q.B3_dHcb```.fccfeabby....A!.(..................ah..e.P``...c.`.............x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..{.\S.....7..R.@..C.DT.... ."""....l.....#".....Z..)...-".n./.j.Uk}.Z...U.]..d...7.....m.?1..;g.9s.;g...3.g)jeXF.0..>r5\|.......P*j}..........;..1.......y.(...b...v'?/..+.F.F.z.E..."%~.r[x..'(.............=.>?...1?T.jx......g..Xxw..H.K...AD..d....?.^I.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\app-data[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.828758439731455
Encrypted:	false
SSDEEP:	3:YSAjKv8Lt/1QRc3en:YSAjKvax18cu
MD5:	EF2C86230634867F37EA2E4C6778CB2D
SHA1:	2A24277E89F9498B378A63D141A1F6AF3E085733
SHA-256:	B84C538D7F3BE14E5F46BCE49268C34F4479B22FD9997BAA7E6F4C74E177C2CC
SHA-512:	55DEC0004F8D95D4296ED5EEFC5FC5A929EF4F3F3F22FEAD7D552DE7E9C671B3362DE50885FFFB8EC0C4AF7EA5F4FD8B74CE874F34D8E7FAE56236ACC521136F
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/page-data/app-data.json
Preview:	{"webpackCompilationHash":"192fd53b9f665082e06a"}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\co-covid-19-icons-find-zone-measures-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	2676
Entropy (8bit):	7.886452581502459
Encrypted:	false
SSDEEP:	48:pJsSyytBDsbZwrsZi2Kvm+jdXjSWtbwb8YRvbYIklf2j6r+qdQM:Pp1KZwrljvmYdmWlwHRTYhlM4dQM
MD5:	3583AD9104F497B624FBA67E7806E98E
SHA1:	F6B0C507C7A61F244AECB8318BD189995328FE34
SHA-256:	82B4F6002CC3723973CFE31501B19563EBD061BE909206A896146A4B34A4702C
SHA-512:	F73723F41510AFF57DFB5F2CFAFB2AA06B025FC7AD573AF1BF10BA06DC96394B653F8E0850A2492B0FF2102E63977FA8D27911542A951A5E6B8178AE2CE99E88
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-find-zone-measures-2020-12-21.png
Preview:	.PNG........IHDR...`...`.....H.......bKGD........-IDATx..{pT....B.P.AG#N..;.ZG..:...."...i.Z.S[T......x.QZA.T@.U.6V..0\MHb.H".d....^.....?.l.${.~.M......e.<.w..~.{.....i*...a..2Sm..!s.f.1.L..6efItndfS.9:..4...]m.i..X.9sc.c..xs....x.Q....I..>z.)6mY...m.8zQ...\.-.:..Q..v.....f{..O.m.......Q../.1.N...E...s...'..3++........'........c.>1...yt...Iek..9A....q.KF1..WX.2.f)+.;.T.. .>5.....M..K...y\|.<.f..].D.....j...O.1..0c...>.q....G....Us./.9..X......SB)o...3..sB........O........<..X.....gt....G..1...O.A..r..Hu.~.g.r.p..c.{i..:1....w...~..v.}!..=.fV8s?.e.O3.nv.u...^{..3....k.A......>i...@....{.4.;L9`..n...I...>..B...Z[..6.r..E..#<...W..0....q9..R....?.t.nX+.... ..:......t..O.[..W6Q..cM....0.!...C.5M...n.......O..S..L.......d...!... {....q..c...s./...-. FRc....+.{.....Q.{0.........x&.....Z....1..y.J....V........?.6..A./..9.....4..(.SO.w9..j)........!.X......I......n.....CL...:J..@.c......tI...RE=.......O......!.......E....!~...[...,e_.U.B...b"{\).#..";>>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\co-covid-19-icons-physical-distancing-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 104 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	1948
Entropy (8bit):	7.847009055709759
Encrypted:	false
SSDEEP:	48:Dx9KT/TK/8Ku9aRuwUPQA0XI59CLojba8PsAPBj9+5fOndMk:DKT/TfLaAjPam9wyba8PZv+qdj
MD5:	D06B5237DBB17375F1AD6E49BAF608F3
SHA1:	BBBF067097F5C188FA5A7D3895EA7381F01255D6
SHA-256:	4C7BACBC7729E1F782FD8A14409006E54AFB7F6EB29A1D6C18B6358D7ED0AE11
SHA-512:	789450AD63B4BBD499A088A1CA028435614718FFCD38530DB2E8F6C301FC7029AF74DB0D8E4DA5A999BA3106816FCCEC66D1AB4507AE1B1397E81C1859F4F7E9
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-physical-distancing-2020-12-21.png
Preview:	.PNG........IHDR...h...`.....[F.G....bKGD........UIDATx...{pT........1ND..jLl.)eI.X......Va..N;(......V.#.t..5@........8.........".J1(M..$\..h...?v...M.].=K.=..o.>..d.9{.y..J.Yp..9..w.5f..gZ...c."z...j...f...Y..C...kJ\..!..%:\O.Em...."...!...W].c.q.6..7b.o..F.l.1."..S\|c.k.mGVG...U.7Z\.Q...2+M.-..f...(r...m.ot..FN0^U.n........9.=.&I...z]....-.p9?rt.s.I.&V...r...W.Ni^X....i..d#.B8bH..P..:.s........B']....0.w..g.L........z.XxV....T%.\|>.N1.Q..P)bf@=..B.B..!....#&..t5.!..'.....tZt.$x....P..=.....S!.:.........j.:..h.h.H..1%&...u.<.....B..8..".c.Z...`..1;..... ..k..d.b,.bx.~...Q~........b6.08y.B.(......&....[.uVh@7.v.Zk0..{..X.....C..~.\..".5..{...\C:.L...b.1..S...Ig.Kx... .g76.E"^...ZGu.\|z..iK.Nv..c.=R...U.AK.]z...=H..b.r...j=:.re.r&.".........[....^....q5..B<.U.1...y...b*+C.....I....zL..A....~.!....!..........u...3...]~..C{.9GHA.8.znC..%K9B..`-B.D...!....'.].T(...lA...6.y.Q. .....3.k#.cjh.ZO.5\|<<.9...M....l.U#.......t/"9h.d....G8...@..%@#...H...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\co-covid-19-icons-self-assessment-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	1777
Entropy (8bit):	7.779993403442084
Encrypted:	false
SSDEEP:	48:VKbm+NSVrllm8qP5oU1Yb5mj5qUTc1rZvhklfGy:QNS5Pq51ub8EUA1NvuZ
MD5:	3C19B7F5C2929C2FD3EFFD65F53370F7
SHA1:	95702B5DED97EB44842748ADCA5FA953EC59DBEF
SHA-256:	DDDC4D69E737AA49AEC21E18FB0C50C59DEC5E7127F32577328177D2AFDA4691
SHA-512:	B3F063B3CE5F533609A4FEF34B765CE1CABE7B18332CFACC178F3DCF0EEA9DC2CE8DE2F35553FA8EB3846F08443948E119CEAF57E0636BF2571EC6F317059E13
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-self-assessment-2020-12-21.png
Preview:	.PNG........IHDR...`...`.....H.......bKGD.........IDATx..kl.U...-H1$\..D.../j.X#Q.R.piQj"........_.&RD.Xl..T4j.4.A.T,...c.%...f..rQ.....;.33;;......y.3..\|........+.Kk.....[..{....nn.fn..y.T...C.-..\!..vE.F....r.lX.....i..uJz.c.c..i\.T.~...U....zyZ..K3......:.{qL...g...T.U....TCI.....ZC...J.........o.V..t.N..Gy..~#.TW..@x..u...B..s."..:`...!....P....(....+A...w..Nv....) L...#A(.<.>..7vU.!0.....f...@@.....(.&.8...>......P......a..@-H.L30...$....i.>.p0....(.....P.].z..\..k..e... ...m..(...h..w......../..G...&.........2.........".a.G....<>U...CO........}E..\|.t.~.........={.O=....@{...r..y.H....{.+..[.Z...X....y.H.@qn...?T..{...<...........E...`...G'. .No........D..C:...+...p..K..w'.r.5...........o....X...~..a.......p}j...w.G.`.(.!.>.L..X,..J.....).........,Z....q...$.q..$...a..8."...x..U;D.).........G.B. .`.}..^..!v...z..'...%U..!......%....'...z...$....q. 0..5v......3G..U$...... ..9..[......?.....L.b. .2.....}@>I\|N..0f.+..O...p?....>....g..D..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\co-covid-19-icons-stay-home-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	2224
Entropy (8bit):	7.854566193026311
Encrypted:	false
SSDEEP:	48:542YEZxCrZXskgX9nTjrfS3y7E+WY/zJQdCSzcjhdb2Vf6RdCEgr:7YUEZckgZTgxkACSIjfbIylgr
MD5:	F90F5AF067A6638975D2480687329F91
SHA1:	107E1F4FA829FF14E50AF3B5E2678E71F0F8F1FE
SHA-256:	C41DB7A0402949CC5A46A292469CF5C94AE97A95639AA6808F9F05C2731C5B1B
SHA-512:	5142B81B10D03B927FBB44E42A427B3D38F1D2683511889D71BD1EF8794D8BCED22CFF291D4913FD16E219562349A9A28F94E1C9F45BF0CD3A2FAC8ADF0F05D1
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-stay-home-2020-12-21.png
Preview:	.PNG........IHDR...`...`.....H.......bKGD........iIDATx..{p.....Mx..GB..\|.JgbG...c. E..h.Z.u....R.b...!.v....%..8."..#..F.#.. .(x.7.P..HH..?.&.$.........'.f..~~.....H...h.Ql..E.I.....z%...q=..I..3..h!.i.#:P'.+.&.\'.3W......C'....]....&.M..7.M.e.m..7...J5.y#...{.._.vg.n...=...,..\|Ve..]..\|....{t.P~.z....>...h\|..!.2.u\|......8...1....Y........y.P.tc......Zy~.x.AX.(......sV..e2u...V#....x.A....u^..!z..Z....:.........K..[)..d.k9.......w....S./..Nm..n<.7...zWW!z..7.v...,.r.%9.........Mo.y.@..A.W...ez.3. dS.......E\k.f.7.4.hE..9q.t.p..0..$.m."...+........bj.1....a..S....B..g...9......"\..[..}r...7.s..F...z... .............#.O=.......R....a.... ...z.@_J5.o.N..l...kB6.W........"..%.....r......+..5I.......!a....K..9...#...O}..m..BI......?4L.G.0+.....r..... ...@...w.y..[. \|..@CB*L..S.2..+u...........tB..}#k.....p...B..3..f@\|.'.)....+..hK..w!V.'.....r....q."...rF"......."r..oS.y.y,.C.....X@1.......R&.h...~...;.k.oN..~.... 6J..~...A6.j>...5/..(.s..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\co-covid-19-icons-wear-a-mask-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 98 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	3127
Entropy (8bit):	7.89265984599944
Encrypted:	false
SSDEEP:	96:P9RABuo2YCs4zoTCtNDiNICK5nty2H5mdgv3IS:PMuobyzoTCtNxn82H5wgv4S
MD5:	34C99D948AD789EDE4BE64F085FDE6FA
SHA1:	DF33A0C82B3A9D157C594CAF167F506313E5F6F2
SHA-256:	75FEDC6E4C13AE69F86749B351ACDF08D70120F6EE1A1A9B7830532D5FE38BE7
SHA-512:	E91DBF47105B2DEBE4C38A5CCC2D22872534195CC63C8B5283E88B8622FF2C78512F9724F6E0D335D7A352C4D59770B80C77D72B4EBB7447670E13C3EF8D387C
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-wear-a-mask-2020-12-21.png
Preview:	.PNG........IHDR...b...`.....Ldo.....bKGD.........IDATx..yT.u...@...S!u.B.X......T......m.1.qh&S.-s.4i,......4n.oh......w....5...q_.w..}..s.\|...z..{..=.+R. ;.4...Z..V.LU.n\.MU.2..k..<.48;...\|d...<..\.j5:...R?T.V{.+.(.M.....9V..[.F.Dn.4sl..0=h._...J.y._wJn7u..J..>....Q...B..V+...LA=..T....WC.....=U\..,.r.F9P.PG+..E..,.2.R....$Wu..}....M...d3..(....CFga..at..x..i.X..=.A.Q.7..c..A...D...m%...3F....^.`.B2.....I2...M.0.....L..g_S]\|;..m.,.5E..."..N<..B/.ch..>...0v.^.......P...1..$..J).N.B4...\...y...&.B........v.!..\....#.].4B.o...C{!Q.p...A..5.a.w.2.9.,..YU...P.o....Bh.. .Hmc/...f...Ah.1.~#.!..Fh\|....<....X.@v.W.Sh$..6u...DhL6.9."4'..xK<...../....<. L... ..).`1..d.DQn7.1...O...(`;.....j.+..:mIE .q....x....QX. L...B=..p.&....`..0.........Ew.:....E.........mZ#4.#...y...c..y.E.........H..Q.a...J.!....}.b..!M.a....%.;m..P.G?V#...\.c}J]:...X.i}4....8.....3.]....EtDh@..{.p......6s.c..!......x.8.;..L[.2....ziG.~.i7../#.O0...q...=..zw'.d{.....".1..v..EWF...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\co-covid-19-icons-workplace-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 101 x 101, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1734
Entropy (8bit):	7.135004662670737
Encrypted:	false
SSDEEP:	48:4NkKoAuPnrPTrurr+iDobpMPuBLSqS05znEH+SoH:4BD0TLSqfpnp7H
MD5:	630DC64C876E8AA078295DD8B9CEB640
SHA1:	5455A8DB103AF0DE27ADF7825EA0ADDE32D94BFC
SHA-256:	A3ABD4483DE4E1B314DDBB09DCBCB7A8DF8716E2F6A098994AD710682D055D7C
SHA-512:	06D674A9D10261FBCE64C121A2A7BF8E23E6F847CBA4BFAF6FE76E97FC7C34F7EAFA1EEACC7B27FF0C86428285B380395DEE74E5E75702E13703F6D9D31175FB
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-workplace-2020-12-21.png
Preview:	.PNG........IHDR...e...e.....c......(PLTE...................................................................................................................................................................................................................................................................................................................................................................................................................................................$$$)))...333666???BBBEEEHHHMMMRRRSSSUUUVVV\\\fffkkkpppwww.............................................................`".....tRNS.................. "#$%)+,-./0123789:;<=>BDFGHIJKLMNabdefjloprstuvw....................................................................M.......bKGD...;g....IDATh...WW.A...E.T.Gl.P........F..j.@@.$HI.D...HGQ@..DQ..O.{^.-.$[f....sv..........T".i..j...+.Y...[i..<.&%..x.9.T.JbcJ.HHM....";H..0F..s.d..lc.9.a.<._...../.I4......w..t..KBB*@U.......2..^...:..w.[.CZ.<....%..= ;..)/..P.`K}..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\co-covid-vaccine-page-intro-tall-704x1050-2020-12-24[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 704x1050, frames 3
Category:	downloaded
Size (bytes):	161050
Entropy (8bit):	7.94871675359959
Encrypted:	false
SSDEEP:	3072:bUnhvJHJ2qPGy0Vm0KRFiM16F4M0dg7p1X7faexTjpo+PFMN5FwW:AnhRHINaWM16FXsM1zPxRoOMuW
MD5:	120B3F99A74158F0128A3922B9E7CB08
SHA1:	17DAE2F38E08B0DE5336CADE57EA7B72D916E1D4
SHA-256:	4A1544507FF1E0A23A5D401CA13AD666748F15402D203BDB8E3EE6DAE4B4047D
SHA-512:	EB1C845358DBF652BE5C1AEF47DA578526901F7BCEBBE7337F77D1D31A6313D3C81E8B31759F87B1AC5FD3BA6B2A5FB0A06E76FC095EBB631EA4504945C3E96D
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-vaccine-page-intro-tall-704x1050-2020-12-24.jpg
Preview:	......JFIF.....d.d......Ducky.......d......Adobe.d................................................................................................................................................................................................................................................!.1..AQ.a"q.....2..B...R#..b3..r..S$45..C%...cs.Dd6..7....TtEeu&.8.....................!.1.Aa..Qq...."2......B#3..Rb..r..$..S4%..Ccs.T56............?..2.......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(..........8...dd;.g5.@.f........d`W..?..>v..5J.....X..)..P.L.C...B....E^.+.1m..'.n..;'..m...........J.L8..t.l.1q..&...rm.\.\!....!..9s``;.wY...A^....Z.+.....r.L,f\..dG.s...z9....+,.4...u.)...8.+.$l...j.l....p.[r..-......-_.+G...8......Yl....L...~...F.%."...N.v.,..$.8/..q..`. ..Ms2.$..9.$..p.B....^..r..c..M..A.!r..r'..>8.lNpYb?VW......;}V..l..d\..'.....v...-.Y...ij...W...6..(.x..y..?.I\2...U..r..k.....Z..%..c_..4$9.C...D..l

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\covid-19-main-theme[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	144817
Entropy (8bit):	4.993832219720816
Encrypted:	false
SSDEEP:	768:r8/jk31n3cumEPWbhJKTpydeEFNV5n9fXboaGoswm4lHgKGYsjh+cefR8i:Abssur1EFNVHnGoswm4lHgKGYsjh+cs
MD5:	085E2441EC091BAD5A18860D5762DD73
SHA1:	5544BC5CE438A323882B2C25C9203504F72EED1C
SHA-256:	C4A3F28EAF72B342036F69183E0DE6D708B31F19154ABE583BEE35540D673CB9
SHA-512:	B00D40DC553146187923A461F2816FE3E5DD1EDEE5B1E125A9A8BCD385F85683B5168EC08121F7026099FFE99BC96B23AEC23BC89F78F862584ED01B5B61ECA1
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/refactored-css/covid-19-main-theme.css?qrgttk
Preview:	.ontario-button:active,.ontario-button:focus,.ontario-header-button:focus,.ontario-input:active,.ontario-input:focus{box-shadow:0 0 0 4px #009adb;outline:4px solid transparent;-webkit-transition:box-shadow .1s ease-in-out;transition:box-shadow .1s ease-in-out}.ontario-h1,.ontario-h2,.ontario-h3,.ontario-h4,.ontario-h5,.ontario-h6,.ontario-sidebar--left>ul>li>a:first-of-type,h1,h2,h3,h4,h5,h6{font-style:normal;font-weight:700;text-rendering:optimizeLegibility;margin-bottom:1rem;-webkit-font-feature-settings:normal;font-feature-settings:normal;font-family:Raleway,Open Sans,Helvetica Neue,Helvetica,Arial,sans-serif}.ontario-h1,h1{font-size:2rem;letter-spacing:.04rem;line-height:1.2;margin:2.25rem 0 1.5rem}@media screen and (min-width:40em){.ontario-h1,h1{font-size:2.5rem;letter-spacing:.04rem;line-height:1.29}}.ontario-h2,h2{font-size:1.6875rem;letter-spacing:.03rem;line-height:1.33;margin:0 0 .75rem}@media screen and (min-width:40em){.ontario-h2,h2{font-size:2.0625rem;letter-spacing:.02r

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\cs4qPsP6COA[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	49614
Entropy (8bit):	5.826822827784725
Encrypted:	false
SSDEEP:	768:++Kj+ozhE/w4breex1VgJR+fBYypiEsbtOLsmiNrCmfi5FHVVI4d:f/N1K+JblshNecg
MD5:	131136842ECB8DB3C473034DA86CB695
SHA1:	295329BE6D20BCB59F9D9C2D590F4326A3C41404
SHA-256:	E278EB66951F1BCB468E9854E8E1C92572C73F439FF172178909790E082C7637
SHA-512:	E6263A9F9252FA498400DEB1E36078F0D143B94F9E2D185FCE947DB0CEC03E958147CFC98A0C8DD0CDD621FAC308CBFC54BC7A8B4247FD4CEDC39A36A21D7FF8
Malicious:	false
Preview:	<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><style name="www-roboto" nonce="VbVk8S4HN0yErY3H6opzYw">@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}</style><script name="www-roboto" nonce="VbVk8S4HN0yErY3H6opzYw">if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "E"); document.fonts.load("500 10pt Roboto", "E");}</script><link rel="stylesheet" href="/s/player/2cea24bf/www-player.css" name="www-player" nonce="VbVk8S4HN0yErY3H6opzYw"><style nonce="VbVk8S4HN0yErY3H6opzYw">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100%;}h1 {text-align: center; color: #fff;}h3 {margin-top: 6px; margi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\embed[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	25011
Entropy (8bit):	5.503692508203638
Encrypted:	false
SSDEEP:	384:/YRgyq+e8VeRAyB7awN0omIC9Er+aNLoVjVYeboerv9ct2SrfSCPBwd0gQbog7c:j+1VeJ8AD1CYyVpzk2JQ+
MD5:	2FB173E42F7DA8F4328480CC641E19EB
SHA1:	9EB4D8993777666C6D4D281673F94ED6E62B3953
SHA-256:	62462D078B1E218B56F3714D205BA24A790D66E331BA8D918B459DB4E4F8F5E0
SHA-512:	FC5CEA83545DF598487ECBB3FB0486001384F11FDDD597DC0B5B7786AAB770323E10A6D980A950E5E63A66870AD522DDD23C7D112C62E68C37A060B14D66732F
Malicious:	false
IE Cache URL:	https://www.youtube.com/s/player/2cea24bf/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;'use strict';var mIa=function(a,b){var c=(b-a.i)/(a.l-a.i);if(0>=c)return 0;if(1<=c)return 1;for(var d=0,e=1,f=0,h=0;8>h;h++){f=g.wn(a,c);var l=(g.wn(a,c+1E-6)-f)/1E-6;if(1E-6>Math.abs(f-b))return c;if(1E-6>Math.abs(l))break;else f<b?d=c:e=c,c-=(f-b)/l}for(h=0;1E-6<Math.abs(f-b)&&8>h;h++)f<b?(d=c,c=(c+e)/2):(e=c,c=(c+d)/2),f=g.wn(a,c);return c},T2=function(){return{D:"svg",.U:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},S:[{D:"path",Mb:!0,K:"ytp-svg-fill",U:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\footer-default-supergraphic-logo[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	655
Entropy (8bit):	5.4192569642679995
Encrypted:	false
SSDEEP:	12:TMHdPhGi/nzVJ/KYf3nwnTDHLdudmT6vb7bULtsXKX:2dMATLf3wnTDrtCg2KX
MD5:	A5F24D16C913DF02269E8AA8515411FB
SHA1:	230ADB5E203A9DDFB0847640A73CCB37A28D4BE9
SHA-256:	CBF618B92A9CDFBC7A976BA731D29E190E08C1F98C4D8A315EFE6F946FEB02FF
SHA-512:	C61FD75534E3D7ACCF1B060E5A1BD50BA61C478E008939AC6FF451D8C814329CCF37924D7A54B6B62BBC89D0D33EB659EE5D86A8379E6FD65D4E207699B43848
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/footer-default-supergraphic-logo.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 4410 4093" xml:space="preserve" height="4093" width="4410">.<style type="text/css">...st0{fill:#1A1A1A;}.</style>.<path class="st0" d="M2494.4,0C1689.4,0,805.7,218.5,0,772.3l362,856.2c590-449.3,1330.4-725.9,2131.5-725.9..c299.5,0,601.5,45.4,880.6,118.1c-227.9,821.4-749.4,1560.5-1556.8,2054l99,1017.9c1586.7-773,2382.7-2252,2493.7-3652..C3831.3,161.3,3177.6,0,2494.4,0z"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\foundation-6-dropdown[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1646
Entropy (8bit):	4.864857788902514
Encrypted:	false
SSDEEP:	24:SUkoiiJBoVwvR1E1ioJfFAjNAEGZr18ApxlQS9EQyKFWaEEd:NiiJNvEtJiuEGZr18ApxlQvQyKFWaEEd
MD5:	1997E1D1A551670EF3A501A65AFAEA60
SHA1:	52B6AE1D335EC323A267A9C0573CC0AE1CDEDA89
SHA-256:	31763C3827BF8E1BA940B539BBD396D090D39BD6BEFB4A01F663BBC5E8770924
SHA-512:	5BB67346AD6A57179ECC8FC158ED2681894FF65A7656E03AC8E1D430C2ECA931BFC6C6CC87568BDB0E6D550DB5FBE9E5EB34852DAA220BADF40E9ADFE6A9FE03
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/vendor-assets/styles/foundation-6-dropdown.css?qrgttk
Preview:	@charset "UTF-8";./*. Foundation for Sites by ZURB. * Version 6.6.1. * foundation.zurb.com. * Licensed under MIT Open Source. */....button.dropdown::after {. display: block;. width: 0;. height: 0;. border: inset 0.4em;. content: '';. border-bottom-width: 0;. border-top-style: solid;. border-color: #fefefe transparent transparent;. position: relative;. top: 0.4em;. display: inline-block;. float: right;. margin-left: 1em;.}...button.dropdown.hollow::after,..button.dropdown.clear::after {. border-top-color: #1779ba;.}...button.dropdown.hollow.primary::after,..button.dropdown.clear.primary::after {. border-top-color: #1779ba;.}...button.dropdown.hollow.secondary::after,..button.dropdown.clear.secondary::after {. border-top-color: #767676;.}...button.dropdown.hollow.success::after,..button.dropdown.clear.success::after {. border-top-color: #3adb76;.}...button.dropdown.hollow.warning::after,..button.dropdown.clear.warning::after {. border-top-color: #ffae00;.}...button.d

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\foundation.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	182077
Entropy (8bit):	5.16707718160483
Encrypted:	false
SSDEEP:	3072:iIhP/kNVJcrH8Ol6466PPpoIVQDLB979XlcR7PZiS:fkNVJJE166PPpoCeLB9hChZx
MD5:	666766D3B3722F17DCABA4AE76498167
SHA1:	A4B8D20D8925098A1CD4C69F72AE58C217C74096
SHA-256:	A51177CE27C9440F635C6BFEF9BD3AAB0B52A97D5BC8540E2E3A9AD8F4C46F6A
SHA-512:	F5C5E6BE62B58080F0DD3A25E9783FD52525B3F0AF04C81E76ED5A0E34F9D7DB10CF2EE393E2E87B3C90AA5CC2956D8B817C30E31132BAAB687E0ECFB56B5E2D
Malicious:	false
IE Cache URL:	https://cdn.jsdelivr.net/npm/foundation-sites@6.6.3/dist/js/foundation.min.js
Preview:	!function(t,e){if("object"==typeof exports&&"object"==typeof module)module.exports=e(require("jquery"));else if("function"==typeof define&&define.amd)define(["jquery"],e);else{var n="object"==typeof exports?e(require("jquery")):e(t.jQuery);for(var i in n)("object"==typeof exports?exports:t)[i]=n[i]}}(window,function(n){return s={},o.m=i={"./js/entries/foundation.js":function(t,e,n){"use strict";n.r(e);var i=n("jquery"),o=n.n(i),s=n("./js/foundation.core.js");n.d(e,"Foundation",function(){return s.Foundation});var a=n("./js/foundation.core.utils.js");n.d(e,"CoreUtils",function(){return a});var r=n("./js/foundation.util.box.js");n.d(e,"Box",function(){return r.Box});var l=n("./js/foundation.util.imageLoader.js");n.d(e,"onImagesLoaded",function(){return l.onImagesLoaded});var u=n("./js/foundation.util.keyboard.js");n.d(e,"Keyboard",function(){return u.Keyboard});var c=n("./js/foundation.util.mediaQuery.js");n.d(e,"MediaQuery",function(){return c.MediaQuery});var h=n("./js/foundation.util.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\government-ontario[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	8405
Entropy (8bit):	5.0746341151683
Encrypted:	false
SSDEEP:	96:EGsHG+NLuC/XnuEsejOfrBsrbCspsrbp4IpwVS70qXVTdyrNGz7TzvBAkbfNMhjs:EGsH3IC/XnL8M8uIzybI8jSVg2O+S43
MD5:	0953A2B6FB1D331EFA2AAD3FF8E2DC99
SHA1:	33D9EA08EEFB81ABE8934754EA434A33437B227C
SHA-256:	38BF2EB71CE159B99E4A9C680FED3427D8193EB5DC44CE8A75A684EB00A9F820
SHA-512:	4EDECE89518BDEF904871B360E510F6645E631F1FBF9BE5BC4883131827E4F3B7D1169754E73FC1E27526D78378CB3E37D495B7E3DE7F7280F4D6DE908EB5082
Malicious:	false
IE Cache URL:	https://www.ontario.ca/page/government-ontario
Preview:	<!doctype html> <html class="no-js" lang="en"> <head> <meta charset="utf-8"> <meta content="width=device-width,initial-scale=1" name="viewport"> <meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta name="sha" content="d43396df38048fbb44731befe641f3dfc221eaf3"> <title></title> <base href="/"> <link href="/css/combined.css" media="screen" rel="stylesheet"> <link href="/css/print.css" media="print" rel="stylesheet"> <script src="/vendor/modernizr/modernizr.js"></script> <script>!function(a,e,o,n,c,i,t){a.GoogleAnalyticsObject=c,a.ga=a.ga\|\|function(){(a.ga.q=a.ga.q\|\|[]).push(arguments)},a.ga.l=1*new Date,i=e.createElement(o),t=e.getElementsByTagName(o)[0],i.async=1,i.src="//www.google-analytics.com/analytics.js",t.parentNode.insertBefore(i,t)}(window,document,"script",0,"ga"),ga("create","UA-21003310-6",{cookieDomain:"auto",allowLinker:!0}),ga("create","UA-48649528-1",{cookieDomain:"auto",allowLinker:!0,name:"ServiceOntario"}),ga("require","linker"),ga("linker:autoLink",["serviceont

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\hideHeaderSearch[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	39
Entropy (8bit):	4.355539077670187
Encrypted:	false
SSDEEP:	3:gipat:gis
MD5:	1361C995AB423206242459132C66F9E8
SHA1:	71B09D40D8F105C4DDDA009A5C0F7068A98F38F1
SHA-256:	9E3FF1684A130C8CF1B9835AC9CA55AF9EC38534439DB9BDCD82604F711D1BB8
SHA-512:	CA8DB59A7F0FE539C11EC33B2FA3B31632DDD254E62737B9129C6612D1B8310D7A42FCC658F41FBD7C36671A6115F6B6AB042BE7BFDD805CEE80C40E099CA936
Malicious:	false
IE Cache URL:	https://www.ontario.ca/css/hideHeaderSearch.css
Preview:	header .search-input-form{display:none}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\icon-alert-warning-white[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	205
Entropy (8bit):	4.780609430792005
Encrypted:	false
SSDEEP:	6:tI9mc4slzXdhyKjUhOqNsN6JASqrNPXA38:t4BdEKjUvGVLrBwM
MD5:	15B5EB20A77A2A1C3CA4CF355CFD49E9
SHA1:	D5F5C8F78E0450E145B7634A1AF79B51C406788E
SHA-256:	F9C8F16E9D72FDBF6555471BCB15D747C4802491D18938726E7B571CD9DDBD27
SHA-512:	916DE3E70C182BFFEF206547A22C140E10EBD3A76D4BBF7CF6ED36BF72569BD78A22EC8DEA00ADBD2CA282666C1A418F6D0A366BDBA043AB76F4BD7CD1A63663
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/assets/icon-alert-warning-white.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none"><path d="M1 21h22L12 2 1 21zm12-3h-2v-2h2v2zm0-4h-2v-4h2v4z" fill="#fff"/><path d="M11 10h2v4h-2zm0 6h2v2h-2z" fill="#000"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\jquery.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/assets/vendor/jquery/jquery.min.js?v=3.5.1
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\libs.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	415978
Entropy (8bit):	5.237457563501528
Encrypted:	false
SSDEEP:	6144:NO16SvjX9kv4VgkVr/H+Ef0/W9sY6pNaZLutgUJ:NVYtkA3jPsYDyiUJ
MD5:	49763D93C2BABB3D39CF2FECC55E651F
SHA1:	F9CCC005BC35C2DD1ED7D116C2DC9811B3BAD4CA
SHA-256:	6875D73440C8B7D1F3CC68CE7AF3BEBAE7A5F87424D704608FD1CF2899A53AB6
SHA-512:	6B59C94425CEC12FC1B4D4135E707968B416E3237F713B198616DE279BBCDA35BFF220A23B16664351EC75D6A9E2A85DF1B3B2B8963916B1858B726D8087B457
Malicious:	false
IE Cache URL:	https://www.ontario.ca/js/libs.min.js
Preview:	"use strict";var _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t};!function(c,l,n,a){var t,e;t=["foundation-mq-small","foundation-mq-small-only","foundation-mq-medium","foundation-mq-medium-only","foundation-mq-large","foundation-mq-large-only","foundation-mq-xlarge","foundation-mq-xlarge-only","foundation-mq-xxlarge","foundation-data-attribute-namespace"],(e=c("head")).prepend(c.map(t,function(t){if(0===e.has("."+t).length)return'<meta class="'+t+'" />'})),c(function(){"undefined"!=typeof FastClick&&void 0!==n.body&&FastClick.attach(n.body)});function d(t,e){if("string"!=typeof t)return c(t,e);if(e){var i;if(e.jquery){if(!(i=e[0]))return e}else i=e;return c(i.querySelectorAll(t))}return c(n.querySelectorAll(t))}function i(t){var e=[];return t\|\|e.push("data"),0<this.namespace.length&&e.push(this.namespace),e.push(this.name),e.j

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\modernizr[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	51351
Entropy (8bit):	4.6306630219418095
Encrypted:	false
SSDEEP:	1536:9RCJ6/KpVsnUMxvXmET56JYFE7qbe/7Y8fjWWy+4GrkfwuXxJ44ipW/VPRLq277a:9j/FjzarzCT71Pts
MD5:	C1FF1650BBA6E39089834E708129D723
SHA1:	7D1CEA058027485E9CCF1A92E38823ACB05C0659
SHA-256:	7DFC3EF73C1284C7AFF3C5CDAC3812D212C8B899037D7860C8BA20A1DEFB9A7F
SHA-512:	94EB43018F4A313D561FD171E894AE64B1F18C2F30988071B0D14BEA024F686EEC2C856848EF720AB6963B0A8B2D7FADC6C3B0D21D9C1EF71426524FBCC968B7
Malicious:	false
IE Cache URL:	https://www.ontario.ca/vendor/modernizr/modernizr.js
Preview:	/!. Modernizr v2.8.3. * www.modernizr.com. . Copyright (c) Faruk Ates, Paul Irish, Alex Sexton. * Available under the BSD and MIT licenses: www.modernizr.com/license/. /../. * Modernizr tests which native CSS3 and HTML5 features are available in. * the current UA and makes the results available to you in two ways:. * as properties on a global Modernizr object, and as classes on the. * <html> element. This information allows you to progressively enhance. * your pages with a granular level of control over the experience.. . Modernizr has an optional (not included) conditional resource loader. * called Modernizr.load(), based on Yepnope.js (yepnopejs.com).. * To get a build that includes Modernizr.load(), as well as choosing. * which tests to include, go to www.modernizr.com/download/. . Authors Faruk Ates, Paul Irish, Alex Sexton. * Contributors Ryan Seddon, Ben Alman. */..window.Modernizr = (function( window, document, undefined ) {.. var version = '2.8.3',..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\moment.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	35415
Entropy (8bit):	5.527657870558738
Encrypted:	false
SSDEEP:	384:bPMjSZibdDdUlPnax4qAsLHQ34AHZMAOQUOBNeTjNplDec4McOyo4VGJbYW9X2b8:QIHtaSZ5MrQ8/5TwtW9XRizm6gamn
MD5:	8C2DEF395D7E125976EA5FAF56596AA9
SHA1:	CE4FA351A2E62ACCF7FAD77110FA4DDB09A324BF
SHA-256:	800C7773F0574B5B5573BD89AF3CC8B0FC6BB368D6FBDE8F7CCF97C30BDBF699
SHA-512:	99F359C7F8E7F6C752B9967E9D26BC70015B37D5C0CA9091EFEB60CF375D6D1638BCE6ADD4AC4F87A566596A0B5DABF897F6D13A72060311BBB6AF5FAA6577C2
Malicious:	false
IE Cache URL:	https://www.ontario.ca/vendor/moment/min/moment.min.js
Preview:	//! moment.js.//! version : 2.10.6.//! authors : Tim Wood, Iskren Chernev, Moment.js contributors.//! license : MIT.//! momentjs.com.!function(a,b){"object"==typeof exports&&"undefined"!=typeof module?module.exports=b():"function"==typeof define&&define.amd?define(b):a.moment=b()}(this,function(){"use strict";function a(){return Hc.apply(null,arguments)}function b(a){Hc=a}function c(a){return"[object Array]"===Object.prototype.toString.call(a)}function d(a){return a instanceof Date\|\|"[object Date]"===Object.prototype.toString.call(a)}function e(a,b){var c,d=[];for(c=0;c<a.length;++c)d.push(b(a[c],c));return d}function f(a,b){return Object.prototype.hasOwnProperty.call(a,b)}function g(a,b){for(var c in b)f(b,c)&&(a[c]=b[c]);return f(b,"toString")&&(a.toString=b.toString),f(b,"valueOf")&&(a.valueOf=b.valueOf),a}function h(a,b,c,d){return Ca(a,b,c,d,!0).utc()}function i(){return{empty:!1,unusedTokens:[],unusedInput:[],overflow:-2,charsLeftOver:0,nullInput:!1,invalidMonth:null,invalidForma

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\nowrap.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	4.428008466328818
Encrypted:	false
SSDEEP:	3:UV90vEW5jRP8mqy7LJMm/DPxJUH:UqE4znZ/rTi
MD5:	02DE344715C6EC9A3745FF2186D32B9D
SHA1:	F2F39B2CA9E9397B53AB76A7B3938EDC138A24CF
SHA-256:	4A4FA2A793D87C88F1509F370DBC40B6DEEC2188B6A918F92365F873B7BC566D
SHA-512:	F4146E324FCB514AD4658FF912B8DB937B61F5C4F438BBB9F136709CFD17EECCD2B91FE7B8BFDA3F6D0CA44DCC3E65C6931EE8FC464A2316919146AE1A3C19D8
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/nowrap.module.css?qrgttk
Preview:	/*. @file. * Utility class to prevent text wrapping.. */...nowrap {. white-space: nowrap;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\onesite-analytics.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3387
Entropy (8bit):	5.059305558706283
Encrypted:	false
SSDEEP:	96:N/vaLKsMcz+O7ExvPw9DNLPcjPiB99fkMD5Cp5mCqI+durVi:NkMQuE1oi
MD5:	C39507E3A4CDA01C1BD9B02103241886
SHA1:	828E2A9DCE54355640A572487982A171CA367B45
SHA-256:	91AD764A124D3068A6656221CCE93607FAB7D3C51B4126344D6707F18F228C58
SHA-512:	F3BE53E35E97BBECD2663D6A6BB0F5C58186E979A1B8198994BCC33D547A023EE5542E5D530C299E9F45119F92F157F8A4C9986952DDAE8249CD43210420C5FA
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-analytics/onesite-analytics.min.js
Preview:	"use strict";angular.module("onesite.analytics",["angulartics","angulartics.google.tagmanager","onesite.analytics.directives","onesite.analytics.filters","onesite.analytics.services"]).config(["$analyticsProvider",function(e){e.settings.trackRelativePath=!0,e.registerEventTrack(function(e,t){if(t.category=t.category\|\|"missing-category",t.value){var n=parseInt(t.value,10);t.value=isNaN(n)?0:n}if(window.ga){for(var i={eventCategory:t.category,eventAction:e\|\|null,eventLabel:t.label\|\|null,eventValue:0===t.value?0:t.value\|\|null,nonInteraction:t.noninteraction\|\|null},a=1;a<=20;a++)t["dimension"+a.toString()]&&(i["dimension"+a.toString()]=t["dimension"+a.toString()]),t["metric"+a.toString()]&&(i["metric"+a.toString()]=t["metric"+a.toString()]);ga("send","event",i)}})}]);."use strict";angular.module("onesite.analytics.directives",[]).directive("scrollToBottom",["$window","analyticsTypeaheadService","analyticsEventService",function(n,c,t){return{restrict:"E",scope:!0,template:['<div ng-init="si

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\onesite-moment.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	18921
Entropy (8bit):	5.1828626911292055
Encrypted:	false
SSDEEP:	384:Ak1AdDaYLsp6fL8Ra1p5OZBmf54OMpUgv8SfcBY2Q/VsOgEpK:OuZRcpHR4O+v8Sfcc/2TEpK
MD5:	F4C2C7DCE7F310308F3202F7672E0FBC
SHA1:	3B9A391C9B34E13A9323895F27E30C6C58D803C4
SHA-256:	F9D8A28DA9F0AF8B8BADA0B6CF7A09141E58302062FDA2FD047B2280B10567F5
SHA-512:	44BB499A1905FC467DBDD678598631C71E8E1B00A8680150BEBBDC6CDC85EEB1D932B75D9C0E9764353DF2AFE9918FBB850AEA60BA7675CFBCBAB45ACE0A1147
Malicious:	false
Preview:	"use strict";angular.module("onesite.moment",["onesite.moment.services","onesite.moment.controllers","onesite.moment.factories","onesite.moment.directives"]);."use strict";angular.module("onesite.moment.controllers",[]).controller("OnesiteDateAddImpl",["stringService","timeService",function(i,u){var o=this;o.add=function(n,t,r,e){var a=i.strToDate(n);angular.isNumber(t)&&(a=u.addYear.call(a,t)),angular.isNumber(r)&&(a=u.addMonth.call(a,r)),angular.isNumber(e)&&(a=u.addDay.call(a,e)),o.date=a}}]).controller("OnesiteDateSelectorImpl",["stringService","timeService",function(i,n){function c(n){return angular.isNumber(n)&&!isNaN(n)}var h=this;h.stringToInteger=function(n){var t=(n=angular.isString(n)?n.trim():null)&&""!==n?parseInt(n):null;return c(t)?t:null},h.daysInMonth=n.daysInMonth,h.monthCollection=i.monthCollection,h.dateExists=function(n,t,r){return r<=h.daysInMonth(n,t)},h.updateModel=function(){var n=h.validateYear(h.year),t=h.validateMonth(h.month),r=h.validateDay(h.day),e=angula

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\onesite-search.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	46362
Entropy (8bit):	5.079097575525367
Encrypted:	false
SSDEEP:	768:8aWN6+8H8Jaav94am51J829kaRbY85YEOHI5Y1Or4GbOnsQ+zcHmzn46SOtVO9Uo:rWNi39kah5n15y6bPQbp6TO9Us0qoFD6
MD5:	9565D9F801992F78AF690B0818F049CD
SHA1:	95DD71F0064D3D10F9D06B19FAF312DB5AD477BD
SHA-256:	5037C5517FB4B285AA35D13EF405625BDDC6D0DA4FC0DA8D1D027BB735973086
SHA-512:	BABEF137038286D66F6A546A3184594F3F2F347CC43938FD139DDE2435EC6F92904F0B7E986CF2025F880193839777E1337B81913E746E110265D5A03CB8C16D
Malicious:	false
Preview:	"use strict";angular.module("onesite.search",["onesite.search.services","onesite.search.factories","onesite.search.directives","onesite.search.controllers","mm.foundation"]);."use strict";angular.module("onesite.search.factories",[]).directive("onesiteSearch",[function(){return{restrict:"E",scope:{type:"@",lang:"@",title:"@",search:"=",internalTagList:"=",nodeId:"@",resultStatus:"="},replace:!1,template:['<onesite-search-impl ng-switch="type">','<div ng-switch-when="search-result">','<onesite-search-main ng-switch="subType">','<onesite-search-main-tag ng-switch-when="tag"></onesite-search-main-tag>','<onesite-search-main-external-tag ng-switch-when="externalTag"></onesite-search-main-external-tag>',"<onesite-search-main-default ng-switch-default></onesite-search-main-default>","</onesite-search-main>","</div>",'<onesite-search-gazette ng-switch-when="ontario-gazette"></onesite-search-gazette>','<onesite-search-land-registration ng-switch-when="land_registration_all">',"</onesite-search

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\onesiteBreadcrumb[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	375
Entropy (8bit):	4.393870368051338
Encrypted:	false
SSDEEP:	6:G4dRWV63KlRjHUF21Q6AoWSEVjeFvvB1vivkL+nXNvvgY+je/EKAM4qv:G4/WV6KlRjHc3oWRVjanB1qrXNnd+a/H
MD5:	89C524074C61840A965E575AE45D8B0E
SHA1:	5DE067E7A4E8FDE9C4A08CFB16D533111EAF6B5D
SHA-256:	AA2A2EFEF33D1B542AA54E40B7A5404FD65432374F85115DBD9C05F06ADD2986
SHA-512:	EBD12E60F0444888A828F89F0069D4D1EC07CC34AB6881C671D8F80923B0AF35282FD0BB53F26A11638C7671C2D03780294DE3D13F98B6EF1665DB9D50D27CB3
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteBreadcrumb.html
Preview:	<ul class="breadcrumbs breadcrumbs-ul-no-padding" aria-label="breadcrumbs">. <li ng-repeat="crumb in breadcrumb" class="breadcrumbs-font-size">. <a href="{{ crumb.path }}". analytics-on. analytics-category="Header". analytics-event="breadcrumbs". analytics-label="{{ crumb.name }}">. {{ crumb.name }}. </a>. </li>.</ul>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\onesiteFooter[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2553
Entropy (8bit):	4.485231880884312
Encrypted:	false
SSDEEP:	48:52mfrkySSFuheMPVWDoc22rErTfV96Ls83355UFGjXd:7S4oNYDZrErTfVA9UFe
MD5:	36335616D43F1683539C44D8A43F1D9C
SHA1:	8F26F28D75CA2D0EC80B428ACCC39956E6D3410F
SHA-256:	D8E329F006CFF8C329A67726A542EF2A2E18F23613208085A1EB64DB1651FDF4
SHA-512:	E3176CD90CB4168569BFDD38D222961335411E65112365AF3060F73B0B034A9386E0B0C4C5C68EF8E742C50AB495D1481E127DF660D5FCFF02C990ACCB7E93B3
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteFooter.html
Preview:	<footer>. <div class="row" data-equalizer>. <onesite-taxonomies lang="{{ ::mainController.node.content.lang }}". ministry="{{ ::mainController.node.ministerFooter.ministry }}". taxonomies="mainController.node.content.taxonomies". class="show-for-medium-up large-3 medium-4 columns topics" data-equalizer-watch>. </onesite-taxonomies>.. <onesite-contact class="small-5 medium-3 large-2 columns contact" data-equalizer-watch>. </onesite-contact>.. <div class="small-7 medium-5 large-7 columns owner-branding" data-equalizer-watch>.. <div class="row">. <div class="small-12 large-8 medium-12 columns">. <h2 class="h3">. <a ng-if="mainController.node.ministerFooter.ministerExternalLink". href="{{ ::mainController.node.ministerFooter.ministerExternalLink }}". analytics-on analytics-category="Footer". analytics-event="{{ '' \| analyticsEvent }}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\onesiteSearch[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	333
Entropy (8bit):	4.292135598475572
Encrypted:	false
SSDEEP:	6:5FerD32ojlPjNxxyrNR7vvice7j6F9ARFMGNOiCNdyQBM4y:5EDNpc37vacCj6fTyUMZ
MD5:	D21119BBF53EDDD0B161E0CB6B36B55C
SHA1:	EC84961ACCD9E40FFDD6CBD69C43F55293845E4A
SHA-256:	7215874B4614124BC03966527E0A3167BFC507AD3E97E9A5234F86E5F8F6465C
SHA-512:	91E7F133E1221C11E4AB2778489BB67D4D5BC7D98BB14AAC81412CD07F053E929CC06FF89EF23627EAE4E6041CC556406B95AB6B8EF6E9D6CA68247B8EB88EE1
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/gazette/onesiteSearch.html
Preview:	<div class="row". ng-init=". last = {};. selected = {. result: []. };. current = {. keyword: null. };. ". scroll-to-detail="true">.. Search Filter -->. <div ng-include="'/onesite_modules/onesite-search/partials/gazette/filters/control.html'">. </div>..</div>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\onesiteSearch[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	1046
Entropy (8bit):	4.767655045044842
Encrypted:	false
SSDEEP:	24:hSk2vEu874Qn6WnFXKM0Nr1iFXByxT0JkFX1NnFXBIMv6F:huEN74XKaz1CW+gV0
MD5:	85A46B07F39569490C6F241998C2D57C
SHA1:	830063ABC7535A4ACCCE58C5F766B5DC639BCED6
SHA-256:	8D3F2276D6BABD9F5CC64F8BF7B9A1CBA1125603DF96C189154DC4981ABFD165
SHA-512:	398C297448116031EB815B2FD382A4012A84AB5091EDFEC85739E7E2DC95C7B04884EBA55FA4F5E86D8BA555ACA43181FFEC11B7F13486A655D9264D4CF4D19A
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/openData/onesiteSearch.html
Preview:	<form name="filterForm". ng-submit=". onesiteSearchImpl.filterHandler.dirty = true;. init(true).then(focusOnSearchButton);. ">.. <link rel="stylesheet" href="/css/hideHeaderSearch.css">.. Keyword Input -->. <div class="row">. <div class="small-12 columns". ng-include="'/onesite_modules/onesite-search/partials/openData/searchInput.html'">. </div>. </div>.. <div class="row". ng-init="last={}">.. Search Filter -->. <div class="small-11 end medium-12 large-4 columns". ng-include="'/onesite_modules/onesite-search/partials/openData/filters/control.html'">. </div>.. Result List View -->. <div class="small-12 medium-12 large-8 columns". ng-include="'/onesite_modules/onesite-search/partials/openData/result/listView.html'">. </div>.. Related Links -->. <hr class="thick">. <div class="small-12 columns". ng-include="'/onesite_modules/onesite-search/partials/openData/filters/relat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\onesiteTaxonomies[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	583
Entropy (8bit):	4.565084925266924
Encrypted:	false
SSDEEP:	12:xZ94poJ2q+W/jftNEG0MAyguNhA5LlBN4trTo+QfNPd+Gun/CTfQo:xdJ2PWLftJthwL4trUtflkZI
MD5:	65CC91DF803A37DAD0C9E92C3E1AE3F2
SHA1:	180937AA316F515034DD3F579B8075CE2D5C5135
SHA-256:	CA370086F2C8F70B93FA5C36D0C928374E40C7A3E34F6E99D007F71ECCDC567C
SHA-512:	1B2474D84B29C01E514C05B72B84D838361316F4A8B5B6D7BF2148563D6345E65FED576F26BA15E47EB28DF84DA924180A504008960B994261B3028D98CE773A
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteTaxonomies.html
Preview:	<div>. <h2 class="h4" id="menu-jump" ng-show="vocabularyList[0]">. {{ 'Topics' \| translate }}. </h2>. <nav role="navigation" aria-label="{{ 'Primary navigation' \| translate }}">. <ul class="no-bullet">. <li ng-repeat="vocabulary in vocabularyList">. <a href="{{ ::vocabulary.url }}" target="_self". analytics-on. analytics-category="Footer". analytics-event="{{ ::ministry \| analyticsEvent }}". analytics-label="{{ ::vocabulary.name }}">. {{ ::vocabulary.name }}. </a>. </li>. </ul>. </nav>.</div>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\onesiteToc[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	974
Entropy (8bit):	4.709345214631061
Encrypted:	false
SSDEEP:	24:jZ/3gISo5uBtp+iFh78C6S2LqwrUtflkmROQdgM2k:jlSLv+i77T6S2Lqwr6fljOQdgZk
MD5:	016696ADFEFB395A356F39DB591DE886
SHA1:	C5FB5C7420DD2205670C82643F3686B616FE3C53
SHA-256:	89171A2636AE700EC35E25C39EA3A1238D48BCDB27EE9AC03096DF2746439ABC
SHA-512:	F28A1DDCCE55D41D64460B060C1A0EF1B055ACB8DC12C99AC2833146E02133A83D4250EB23D0351FCCCEC266580FE507CCDD780518ADDF7462A1532EF0857C35
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteToc.html
Preview:	<div ng-show="tocList && tocList[0]" class="row collapse">. <h2 class="toc--header small">. {{ 'On this page' \| translate }}. <a class="show-on-focus text-right smaller indent" href="#toc-end">{{ 'Skip this page navigation' \| translate }}</a>. </h2>. <div id="toc" class="small-12 column">. <ol class="cols" ng-class="{'columns-x-large': tocList.length > SPLIT_THRESHOLD}">. <li ng-repeat="toc in tocList". ng-show="!toc.type \|\| (toc.type === 'faqs' && includeFaq)". ng-class="{'hidden-for-large-up' : toc.section.id === 'section-related'}">. <a href="{{ path }}#{{ toc.section.id }}". data-anchor="{{ toc.section.id }}". analytics-on. analytics-category="page-contents". analytics-event="{{ ::ministry \| analyticsEvent }}". analytics-label="{{ toc.title }}". ng-bind-html="toc.title">. </a>. </li>. </ol>. </div>.. <hr class="thick" id="toc-end">.</div>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ontario-icon-alert-warning[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1033
Entropy (8bit):	7.530310454588132
Encrypted:	false
SSDEEP:	24:sbFhgwnhbRnrAiH7Kf5k8K3pNIlMqAnfVG5gCrKNp:14h9rAiHefk3pShA9G5Rw
MD5:	8A54B1F276942D771612AFC3902789BC
SHA1:	F0DDA961C0ED6EA32B936F688B8350BD1C1459F1
SHA-256:	3D831607D0E657E0D4A5C445914645678E92592038FECCBDF66B84ECE56EC281
SHA-512:	BAD13771BFBBFF0F7385BAE0E40C80853DF3AA04A2FFF5D4AFBD1046724AF3B4F6A7CF09A14652437DFC4BE41EF68DD2F82BC3CCF7FC12B45816FB34AF18F853
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario-icon-alert-warning.png
Preview:	.PNG........IHDR...`...`......w8....pHYs..,K..,K..=......sRGB.........gAMA......a.....IDATx...m.@.E...o. .'....A.:.;p:p.)!. ..@^.q....fI..`....!....K.../.j.%"EQ.EQ.EQ.At.}..iH0.$....O......l....1).@B.H .c...}..p.~.Uu.>.0d&.6.../~.v..@.%`8.k.5~#.Vo..!/.5}......Q..k..u=s....#A.J.......ijKB.3..G.r....%..D,...8}-.1..##...sk.'<...'....f.....Z.?....iC@-e=..v.,..4.1X/.lOA#.=...'....^..-.Z.2.....1.O....@.l.....n....=.../.%.Y./......iF....l.....Z.'....+}."...i}R..D<.PG....d.....4#....\|.J....e..8kF.?P^_.[..,...........E....Q...e.O.5cGAT....M.......Rf....hF.E.e..../oQ~....M@:."...6...'...VC.v..\|.......2.....E6}.'..?8.K_....(2.K.....s.........\|...\_..p.r{...rA.%..fD.,.....(`........H_&.@q.../...F..Er}.6.B.0...2Y.XjF...e..l.T;m$,.I..X3.H./.OA./+.F......_3.H./.....i'..q.......B9..[.$..$P3....k...{B..A....QD.K....(......kF.A..k...(..._....Qx...7b.....G...Wo...wuO..Nw<.......Qx.K.)H.{.q...,_3.p...X.fDa...X.fDa)/..X.fD1./GOA+.(&..x...QL...h..2./......./.U.E

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ontario-icon-new-window[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	202
Entropy (8bit):	6.420930108593124
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lP3g9xdd2jFf9RmeLwscX1K8NEnIGFFRF8uvJ2L+JTyj4DoWM:6v/lhPwA5fucHUA7FFRF8uMLQP0Wep
MD5:	496D69FC15BAB1E622274C3F25A82E8D
SHA1:	C6C709EEAD93871857DFBBA3915B31E5741BB627
SHA-256:	C6B27AE847797E0F975DF87449A5AC6390A626BBD678F73C13F27C51E31B1549
SHA-512:	ED8AE5979F3A197E10FB0EA586714C59DE193543CB6395ED2C33BDC27B0A34F06BC6C4C2A2919AD5CA416E676AA02CCE06FFD2F66897FBA329A9B0F24E72FCC6
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario-icon-new-window.png
Preview:	.PNG........IHDR................a....pHYs...........~....\|IDAT8...... .D.'`......&:.!j.V/...G..$#.B9mO.V.......d0.[.`..Wp..G......e.&..Q....W0.....V..)....N.....6....u2z..Z.YJ!.w...2.3PI....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ontario-material-dropdown-arrow-48px[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	4.850775631794524
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbyJAjmzJpF/W4dXppfJtD9+:t4pbaAjwJ64dv3s
MD5:	D438476AB51C80D2302784E51178F159
SHA1:	E4F2F45F256FC7584B76D660BC49B110B3800250
SHA-256:	5BE7428F1AC9BDC765C5D3B95B084B760BB400821A6676453A1AD308CAD15CAA
SHA-512:	4D465060FFE3EC01805F1AAB561EFE370F9796076E3E5388ECB7C7B76234DF21C6A433A770605B998BE033AAC4E5F1EB5A5D2D019EEA93F71EC2721BB1C57283
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario-material-dropdown-arrow-48px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" fill="none"><path d="M15.93 20a.8.8 0 0 0-.566 1.366l8.07 8.07a.8.8 0 0 0 1.131 0l8.07-8.07A.8.8 0 0 0 32.069 20H15.93z" fill="#1a1a1a"/></svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\ontario@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 360 x 91, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6667
Entropy (8bit):	7.942048147330949
Encrypted:	false
SSDEEP:	192:EiBKxzrvo5MCO922wdtBDRYMJvVHbU76yFYO89VqniGGdk:EiKPo5M922qBDR1L7jyyFGirk
MD5:	46718AF8157A5B51C395EEC77FB087E3
SHA1:	3DBC339CF8F44B8C87A0426911F3075AFB1CB464
SHA-256:	F9B9CFB8AFA75DB50F7544B8FF0510B8385FCB0BB83C8BEF5A2688F9FA74E6DF
SHA-512:	3399BE3B0A97D5BA3C4EBBED9E74B52C63880F0F8A56D5B2E855AB8F298AF57B128EFEAA95C6C065C459B77D45933C83D82C9CFC5892F9B5FBA5F74518C42DB8
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/ontario@2x.png
Preview:	.PNG........IHDR...h...[.....^\|.b....IDATx.....^......l...^.m.62.0..qV..l.ii6..c.....s.\|..r.c..VZX.(.K..%3d....r@N.99/.>.sr\...Y'.d.....D..mo?...b..L..rN....#9&.e.T.P...E@...=.T...M2T2.)...%#...).%9P...5e...[/..h......6)&...@....`......Y....[R.@.:.a.G,.-%..@.\..bG%.@......1........T..b.....ho.PI.p[...7...+b_......l...."..`...Cs....j....L.......4.pg..`..~Y]...]...."..........tK.....p.u.s.#!...j..1...b.9.n.eYQ...ciI....e.O.pI....K.O...L+./.S.oK...iG~5.i......o..+X....c...k7...u...Z6}..]@Gum..?. .....B..........]q.....^...P.......>.?wr...Cr.Z.b3..._N...H....E.B..W^x..Lh......#..@.O.n.M.....t...?@.:..}?.>.H9d.0....{..._[.l}N.?.QK.5i....z:.v...k....5.T./.[4iJ...w.~....h.".y.$....[>.5K.y.a9s.....r....-+.....k...\|1(....Z.....\x.....O..~++W..d.~.z.={....r..7.....n=}=.H.ea3...Fa...8..."..2J.By....s...5k$....r..7h.z..`T...N]..{n..;.@..;...~.0j.%..c...SO...1F.y....K]@..q....C.V@a..r......%..#.....p..L8j07..k0....'.(.\|............:5k.....hx.'

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\open-sans-400--italic[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 15076, version 1.1
Category:	downloaded
Size (bytes):	15076
Entropy (8bit):	7.960536136856118
Encrypted:	false
SSDEEP:	384:ihKnWsY3Y02JQ9zxRm7TR7NA0tXn/qZOSO7O7RWf5v1X:e2WPp2J2Ct7TXnSsSSSRWhl
MD5:	4B52A816817A711E6971955C835ECFBB
SHA1:	051C5829D5DF0558FC4C8CE02149FB703EA763CA
SHA-256:	14B889CE4EB170C9DEDE3907438E89A1C43E7A8C3E7F3DEB8FB280042CF57BF1
SHA-512:	2D44B2BBB0A66C162ED206CE58BE93F738E45938D41E497E8C3E525A0E06225F64CD335F1854F2475A9664C31127BEF7ECCD2FF630FBF6888C29EA48E55FC541
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/fonts/open-sans-400--italic/open-sans-400--italic.woff
Preview:	wOFF......:.......c4........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`.M.=cmap...8...........gasp...............#glyf......'b..8..O..head..D...6...6..'nhhea..\|..."...$...Khmtx..........l.v>xkern..,............loca..6..........t.Kmaxp..8.... ... .d.Ename..8........l.n5.post..9\.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f.f......:....Q.B3_dHcb```.fccfeabby....A!.(..................ah..e.P``...c.`.............x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..{.\S.....7..R.@..C.DT.... ."""....l.....#".....Z..)...-".n./.j.Uk}.Z...U.]..d...7.....m.?1..;g.9s.;g...3.g)jeXF.0..>r5\|.......P*j}..........;..1.......y.(...b...v'?/..+.F.F.z.E..."%~.r[x..'(.............=.>?...1?T.jx......g..Xxw..H.K...AD..d....?.^I.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\open-sans-400-d0bad741aefb909e4be56d188b6f02b9[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14260, version 1.1
Category:	downloaded
Size (bytes):	14260
Entropy (8bit):	7.955023552448444
Encrypted:	false
SSDEEP:	384:V0ZkWiwHBFDPthd/jO+yk0iwCebLvVgYGpn/qZOSO7O7RWf5z4Oc:V0hRbVFykgNSnSsSSSRWR8/
MD5:	D0BAD741AEFB909E4BE56D188B6F02B9
SHA1:	1547224E0A0BE06E5178815718797BD6607169A4
SHA-256:	4194A431CCA6678145F2C4D7D2E597087E2A76A4878C26B66315B2BA4F4EA393
SHA-512:	33FB0A386FD3ED97ADA0A6612D818530FED61E8688A0C38BCE29031076430C7FC2AA075C5AA8003E2E091D80C64602FE7A8D7F3B7380601EFB3CEC20285B50D5
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/static/open-sans-400-d0bad741aefb909e4be56d188b6f02b9.woff
Preview:	wOFF......7.......^L........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2......._...`.>..cmap...8...........gasp...............#glyf......$Y..3..~.head..'<...6...6...=hhea..'t.......$....hmtx..'........l..Y.kern..)............loca..3.........C.O.maxp..5`... ... .d..name..5........2../Jpost..6,.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f..8.....u..1...<.f....................{...h..... 0t.vf.....&.O.....)B..q>H..u..R``.....9.x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..z.\S...=so.j.......R.!......V..RDDZ...J.E....H.R.j...R.^k...Z[...W.$.w......~.~...9..9.r...8.....9..9...F\|..#M.f....Y....}.g...\qf.......^..J...;.'..~.h..P?.@..4..........2r.....^./..'....!.1?!..s.H.8.3..U..\g.eP./=/.\@.....^...W...W.-...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\open-sans-400[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14260, version 1.1
Category:	downloaded
Size (bytes):	14260
Entropy (8bit):	7.955023552448444
Encrypted:	false
SSDEEP:	384:V0ZkWiwHBFDPthd/jO+yk0iwCebLvVgYGpn/qZOSO7O7RWf5z4Oc:V0hRbVFykgNSnSsSSSRWR8/
MD5:	D0BAD741AEFB909E4BE56D188B6F02B9
SHA1:	1547224E0A0BE06E5178815718797BD6607169A4
SHA-256:	4194A431CCA6678145F2C4D7D2E597087E2A76A4878C26B66315B2BA4F4EA393
SHA-512:	33FB0A386FD3ED97ADA0A6612D818530FED61E8688A0C38BCE29031076430C7FC2AA075C5AA8003E2E091D80C64602FE7A8D7F3B7380601EFB3CEC20285B50D5
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/fonts/open-sans-400/open-sans-400.woff
Preview:	wOFF......7.......^L........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2......._...`.>..cmap...8...........gasp...............#glyf......$Y..3..~.head..'<...6...6...=hhea..'t.......$....hmtx..'........l..Y.kern..)............loca..3.........C.O.maxp..5`... ... .d..name..5........2../Jpost..6,.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f..8.....u..1...<.f....................{...h..... 0t.vf.....&.O.....)B..q>H..u..R``.....9.x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..z.\S...=so.j.......R.!......V..RDDZ...J.E....H.R.j...R.^k...Z[...W.$.w......~.~...9..9.r...8.....9..9...F\|..#M.f....Y....}.g...\qf.......^..J...;.'..~.h..P?.@..4..........2r.....^./..'....!.1?!..s.H.8.3..U..\g.eP./=/.\@.....^...W...W.-...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\open-sans-600[2].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 24892, version 1.0
Category:	downloaded
Size (bytes):	24892
Entropy (8bit):	7.980207470715338
Encrypted:	false
SSDEEP:	768:vf5xgpxSPojJurx8g6QGrIGQHgBjHBlBU:Xa6WekIGQABjHB4
MD5:	D1EB144B85E1CCF3C660398D393B9A70
SHA1:	C1710C29F77F73F763CD650F4CC09C7B3B316491
SHA-256:	CBBE982CD6E1A0038E47DD30180F9C3358AACEFB1C85FAC5835E3486839445C1
SHA-512:	6D4336191329D53E6CBD0531ABB273E7FA40B8863F99A08200AF81B4FDA6A9A8B94F7B90567CA82DFE28DB848490610BC013B73A886FA4AA413DECF2C0E50E5F
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/fonts/open-sans-600/open-sans-600.woff
Preview:	wOFF......a<.......8........................FFTM............e..GDEF........... ....GPOS............,..XGSUB.............]..OS/2......._...`...cmap...l.........k.cvt .......:...:....fpgm...,.......eS./.gasp................glyf......M4....f..fhead..X ...4...6....hhea..XT.......$.y.&hmtx..Xt...9......R#loca..Z.........C4h.maxp..\\|... ... ....name..\.........Xt..post..^..........meprep..`...........B.webf..a4..........T=.........=.......L.}.....c5]x.c`d``..b...`b`...@...1...B....x..KlTU...3.a.......26....I..j.Z..i.......BBcHL.....0!.+9<j.L..Y.R..2LW,..im...IW..!..s.).H..\|...9......=s..T.n}.HK..z...zw....;U../wk."..X...7..;zw+.."..c\.xo.].t+t84...w..p....s....}0..)r/r/....-t8.L.6......wm..X..'c{.I..oD.....4........)Y.....IOx::O.w.....T..G.zUM..f=..b^....:..u.fH.....q....8...d. ..A...{......`...9..y...0..`....L...\.kp...M.?.u...)..A=....7....KB3\|.......{8....{.N.I...&.S.!....%f%.p....g.g.\|Mx%a!.%.%.%.%.%.%W)..bO..,<.*...D..@4G4........... ...P....i...`.R........u.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\page-data[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	129
Entropy (8bit):	4.455962451056319
Encrypted:	false
SSDEEP:	3:YGKoVhLET7rWwEdNjupORVSCWdpwvHfeALqQY1:YGKosrWvdN60VSddpM/fL4
MD5:	4A83A91FA24B408D32572A252DE93DAD
SHA1:	A17F9F790C599B645591175B92F9F87B10F52583
SHA-256:	A9908382FEFD57FCD11FBA110E53E925F896C82029239B16B919C8A609174C87
SHA-512:	9620A1D0B364A6E4FB6AC40F66CDD75F56F6B61589A4AE697990337F79198F04FB7C3258B2614DEABEDC1AC2F4CD49C7074185339E8D26DEAD7E8ED99CB33AE8
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/page-data/vaccine-locations/page-data.json
Preview:	{"componentChunkName":"component---src-pages-vaccine-locations-index-js","path":"/vaccine-locations","result":{"pageContext":{}}}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\page_about-ontario[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	12205
Entropy (8bit):	5.096844686386595
Encrypted:	false
SSDEEP:	192:4JHVYEF8tViNpVfdWVqCwsSls6pfnZD1KuVIx9u7FriWGZEM6Ix9ux7vFiSFrEOW:48EqtViN/fdWVqCwvls6LskF9FxFpgMA
MD5:	9D40F2B0023B0C94033133ADD067ADF4
SHA1:	40FB0161FC4CDDFB77FAF2D366716238FCAE7014
SHA-256:	F2AB5C03F703707D20B56CA7EB9EFFF4A61F2B2C3E069D3E5C2AD57FAD7A8DC9
SHA-512:	2BDAF71F613909F6295D88DF89B201EFC66EB9E804B58702F7B6FFC357CA95E37F2421C8FF6B18C27EA5ED9F1568F837FD8050D64DF4477007B3671731F76357
Malicious:	false
Preview:	{"_id":"5f9ee688c41bf77d89e4d617","changed":1551992531,"language":"en","nid":"7583","private":0,"published_at":"1346789393","status":1,"title":"About Ontario","translations":{"fr":"page/lontario-en-bref"},"type":"page","metatags":{"title":{"#attached":{"metatag_set_preprocess_variable":[["html","head_title","About Ontario \| Ontario.ca"],["html","head_array",{"title":"About Ontario \| Ontario.ca"}]]}},"description":{"#attached":{"drupal_add_html_head":[[{"#weight":57.5,"#value":"Ontario's vibrant multiculturalism and varied landscapes make this a great place to live and to visit. Find out more about Ontario.s people, places, and history.","#name":"description","#id":"metatag_description_0","#tag":"meta","#theme":"metatag"},"metatag_description_0"]]}},"canonical":{"#attached":{"drupal_add_html_head":[[{"#attached":{"drupal_add_http_header":[["Link","<https://www.ontario.ca/page/about-ontario>; rel=\"canonical\"",true]]},"#weight":21.4,"#value":"https://www.ontario.ca/page/about-ontario"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\populate-front-page-data[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2082
Entropy (8bit):	4.990449066877906
Encrypted:	false
SSDEEP:	48:UyrOvYRPkKdKFY9TZUJPdigXQDQIBbuMMDuLGSoedigQIE:brOvYRMksMTZUJ1ieC0qFiqE
MD5:	2D83C3EBADC547295393DD43C6CDBB8E
SHA1:	7CAD8CB449AA7E6B39AB6DBF124F5493F983830B
SHA-256:	C31F371654FFCA2E8C831CF7377510B77CDCFD4E7782DD68F2934890EC2EA3CB
SHA-512:	AB50C8E6CEA9BB3C065C8EC9AA4B1B73EEEE705B41B07E7F1CD1B0358816CC02B5585924A4C2E26F06FC869FF6C60FA806C0E95987A2CF39C9F0404CB4620305
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/modules/custom/c19_front_page/js/populate-front-page-data.js?v=8.9.13
Preview:	(function () {. //# sourceURL=simpleInject.js. var lang = "en-CA";.. // HACK: Our firewall seems to prevent Drupal.t from working.. // Using if statement to determine language here.. if (drupalSettings.path.currentLanguage === 'fr') {. lang = "fr-CA";. }.. var keys = [. "Total Cases",. "Resolved",. "Deaths",. "Number of patients hospitalized with COVID-19",. "Number of patients in ICU due to COVID-19",. "Number of patients in ICU on a ventilator due to COVID-19". ];.. function formatNumber(value) {. value = Number(value).toLocaleString();. return (lang === "fr-CA" ? value.replace(",", " ") : value);. };.. function injectData(data) {. if (. !data[keys[0]] \|\|. !data[keys[1]] \|\|. !data[keys[2]] \|\|. !data[keys[3]] \|\|. !data[keys[4]] \|\|. !data[keys[5]]. ) {. document.getElementById('covid-numbers-section').style.display = "none";. console.error("Missing data", data);. };.. var dateString = new Date(dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\raleway-modified-600-3728a086822b83f3645761f24e68304e[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18168, version 4.20
Category:	downloaded
Size (bytes):	18168
Entropy (8bit):	7.977253386250338
Encrypted:	false
SSDEEP:	384:vBMf8sp4+DJG/v0OgOB+KGObHZLizn1yJd0TZUzj2m99LABAMZsIU/oe:vw6k80OLB9GObHZk0JCN4j2ftU/n
MD5:	3728A086822B83F3645761F24E68304E
SHA1:	245CD1E474602F32EFBE80DD395380EA07AAB1F5
SHA-256:	E07887EC590222EA2E0D3B5655FD6C1FD0275B5AC50175CC67C2AB2E78FECA90
SHA-512:	137B1FAA689E391BA2B8C03DC043DEE8519D0B6FEAF1F011509028D7C739F56423D0EA314B07D50708AE6EF69DA7963D2F278D12676A780077C55AEC0DEDF7FA
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/static/raleway-modified-600-3728a086822b83f3645761f24e68304e.woff
Preview:	wOFF......F.................................FFTM...0........./..GDEF...L....... ."..OS/2...l...N...`.Qp.cmap...........bd..xgasp................glyf......5...k...@.head..9....1...6...chhea..9.... ...$.>..hmtx..:.........."'vloca..<............Tmaxp..>\|....... ...wname..>...........post..E..........Ldnx.c```d..3........h.S9.L..x.c`d``..b...`b`../@...1.....'..x.c`b\|..........A...D..a\|.`......9N.E)....J....000.f..`...._.Y.L.J.....#....x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..}.x#.....^f$.H.uY..-Y.lK...[l..-..+....Y:.B.K.%..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\raleway-modified-600[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18168, version 4.20
Category:	downloaded
Size (bytes):	18168
Entropy (8bit):	7.977253386250338
Encrypted:	false
SSDEEP:	384:vBMf8sp4+DJG/v0OgOB+KGObHZLizn1yJd0TZUzj2m99LABAMZsIU/oe:vw6k80OLB9GObHZk0JCN4j2ftU/n
MD5:	3728A086822B83F3645761F24E68304E
SHA1:	245CD1E474602F32EFBE80DD395380EA07AAB1F5
SHA-256:	E07887EC590222EA2E0D3B5655FD6C1FD0275B5AC50175CC67C2AB2E78FECA90
SHA-512:	137B1FAA689E391BA2B8C03DC043DEE8519D0B6FEAF1F011509028D7C739F56423D0EA314B07D50708AE6EF69DA7963D2F278D12676A780077C55AEC0DEDF7FA
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/fonts/raleway-modified-600/raleway-modified-600.woff
Preview:	wOFF......F.................................FFTM...0........./..GDEF...L....... ."..OS/2...l...N...`.Qp.cmap...........bd..xgasp................glyf......5...k...@.head..9....1...6...chhea..9.... ...$.>..hmtx..:.........."'vloca..<............Tmaxp..>\|....... ...wname..>...........post..E..........Ldnx.c```d..3........h.S9.L..x.c`d``..b...`b`../@...1.....'..x.c`b\|..........A...D..a\|.`......9N.E)....J....000.f..`...._.Y.L.J.....#....x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..}.x#.....^f$.H.uY..-Y.lK...[l..-..+....Y:.B.K.%..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\resize.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	270
Entropy (8bit):	4.586341818312339
Encrypted:	false
SSDEEP:	6:ULArZhH2wz6tLARtXAjrtUmUREjrIWIorRE1RtXAjri:Ui7H2J0bQ93UREjiorRE1bQS
MD5:	26AC1F67997C5AE18FF630469D2C7D41
SHA1:	041BEF3A4DF746F4130EE5D825FB067A5B791764
SHA-256:	299064CF3027C5EFAB4AB6DF345DE1302DFA562DB83ECA51965371938480F56C
SHA-512:	3C459189901692E534E5488FF621FF71F6D57CC16F8AB4832042079658806C987052805DE9097F1A1A2C1C1806DF0151DB2AD7E5B5F979F02D57CB49DC47EF3E
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/resize.module.css?qrgttk
Preview:	/*. @file. * Resizable textareas.. */...resize-none {. resize: none;.}..resize-vertical {. min-height: 2em;. resize: vertical;.}..resize-horizontal {. max-width: 100%;. resize: horizontal;.}..resize-both {. max-width: 100%;. min-height: 2em;. resize: both;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\screen-before-you-go[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1893
Entropy (8bit):	4.7296897972735925
Encrypted:	false
SSDEEP:	48:Jd189Ya9/gs/hI9O95sA9AE+vbVRUB6lZOUD82JRgAtI8RwXNI9M:5Ygs/hI9RA9AXGB6lZ82JRgAtI84
MD5:	E1843F0B5A4428F70E47B6B0EFDBC000
SHA1:	3CBA633F948525231EDBCD5E5F0D7BB70C4DB4E9
SHA-256:	CF64F613F139DC2BFF2B3C09B5F3118D1044577BA5E84D5E6070EE6C8B70F653
SHA-512:	406BEAE23A7A0FDAAC4C9C3A1C767EFFBD739B5E99780277CB2075DE20D658DF733F8A1DFFC515F93E57FB19E4875FF09F16B7AE53C88CD8B1646EF8EAF30B0A
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/screen-before-you-go.svg
Preview:	<svg width="138" height="125" viewBox="0 0 138 125" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M136 111.234L102.67 121.997V2.83765L136 10.3331V111.234Z" stroke="black" stroke-width="3" stroke-miterlimit="10"/>.<path d="M113.498 36.8556H108.527V80.291H113.498V36.8556Z" fill="#1A1A1A"/>.<path d="M95.8118 10.3332H56.0474V111.234H95.8118V10.3332Z" stroke="black" stroke-width="3" stroke-miterlimit="10"/>.<path d="M91.1493 39.9692H86.1787V75.9476H91.1493V39.9692Z" fill="#1A1A1A"/>.<path d="M29.8075 42.0398C33.5315 42.0398 36.5505 39.0282 36.5505 35.3131C36.5505 31.598 33.5315 28.5864 29.8075 28.5864C26.0834 28.5864 23.0645 31.598 23.0645 35.3131C23.0645 39.0282 26.0834 42.0398 29.8075 42.0398Z" stroke="black" stroke-width="3" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M27.0717 45.4608C30.1156 46.0759 33.9303 51.2266 33.9303 51.2266L45.1429 62.9888C45.1429 62.9888 47.3777 66.9479 45.1429 68.2164C42.9081 69.4849 39.9026 68.8699 38.3999 66.909

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\sticky-header.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	163
Entropy (8bit):	4.711564923747027
Encrypted:	false
SSDEEP:	3:UV91G2AVgULbvlFPFlHgQEBYPiK0EcIAFwF0Sf4IAwHEZCXLFSKPxC:UNGgiqBYqKhgwF0SwIjlhRw
MD5:	47DD1A9AB77932B92B6C8E68B9B41E77
SHA1:	EE55F889A03FDCF021FA916B6B7CFED8DB417249
SHA-256:	0B61E01FA0FA02EBA3C6A074427DDF2A6CF98C01727B2796309B2B5B005FAC70
SHA-512:	29F9277A71D16CAF1EC6EA5E70963D8F98EFCFCC92F34EDDDD1F6697532553865088113A66B22BE830DE6EF534128527AB18400C9ACF34BA031EA6FEF82FB570
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/sticky-header.module.css?qrgttk
Preview:	/*. @file. * Table header behavior.. . @see tableheader.js. */..table.sticky-header {. z-index: 500;. top: 0;. margin-top: 0;. background-color: #fff;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\system-status-counter[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	742
Entropy (8bit):	4.922535861642357
Encrypted:	false
SSDEEP:	12:Uuaq7R14dbbDQyXjf4Gl9DyYEFr5imFr5oE0Fr5QF4M:97MdPDQiO5iq5+5Q7
MD5:	6FA54C62F3ACAD64A789E2AC504E2CE5
SHA1:	27B83D0C19933B2810E0B68038B63B1B45211C34
SHA-256:	6F0160C0D198D260E42D1394B516E5495EE57C204E41CD2147E4026110843D54
SHA-512:	C94E1340C19FF2F5A25C90B053776AE1342B20E80F83FEAE0C0CF2DBA247C545A402B9F15BFD79B7D68CAFAD5DB97EDCEBA17F65B0120A05291B4456A5EF3737
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/system-status-counter.css?qrgttk
Preview:	/*. @file. * Styles for the system status counter component.. */...system-status-counter__status-icon {. display: inline-block;. width: 25px;. height: 25px;. vertical-align: middle;.}..system-status-counter__status-icon:before {. display: block;. content: "";. background-repeat: no-repeat;. background-position: center 2px;. background-size: 20px;.}...system-status-counter__status-icon--error:before {. background-image: url(../../../images/core/icons/e32700/error.svg);.}..system-status-counter__status-icon--warning:before {. background-image: url(../../../images/core/icons/e29700/warning.svg);.}..system-status-counter__status-icon--checked:before {. background-image: url(../../../images/core/icons/73b355/check.svg);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\system-status-report-counters[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	557
Entropy (8bit):	4.7908473761985215
Encrypted:	false
SSDEEP:	6:UuXyCSKvWexHHd9mHoXrnT9hRXt7fVPpxtvnveUY429GK67xaDIuxNE:UuKyf1Hd9mIXrnhVPrfvh29GK67WA
MD5:	F9C2D6EED3C4ED85C9B6D0AF5A61FF8A
SHA1:	67F7744D5EB28BAB1DEBCEC6F8BEB10262C8A816
SHA-256:	DA6360A75AAC69BE7076B4A5A4A2D0BFBD3BC4A674BBA2E7A9CB698035719159
SHA-512:	32FCAC745E14DA2E9EE1BCFE22544864C03FC7978EAF8E897BC0203DAB6163C81ABD62A667B2B3EF00B696FEB4248D49A55DAD28877C2E1D1BF7D7CA995CB479
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/system-status-report-counters.css?qrgttk
Preview:	/*. @file. * Styles for the system status report counters.. */...system-status-report-counters__item {. width: 100%;. margin-bottom: 0.5em;. padding: 0.5em 0;. text-align: center;. white-space: nowrap;. background-color: rgba(0, 0, 0, 0.063);.}..@media screen and (min-width: 60em) {. .system-status-report-counters {. display: flex;. flex-wrap: wrap;. justify-content: space-between;. }. .system-status-report-counters__item--half-width {. width: 49%;. }. .system-status-report-counters__item--third-width {. width: 33%;. }.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\template-page[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2725
Entropy (8bit):	4.41239041853077
Encrypted:	false
SSDEEP:	48:/bhS6xLzOoTMEffMqMRZvLUCwqJWd/MhPV1NQzMqz2zR4u5GUE:NHoEJ4/q/SR/GUE
MD5:	76EBE1801AC566AF044887388AFF2DB6
SHA1:	4A6337C7C3238DA616CB64F8C0B775F483C1BCB4
SHA-256:	66A139CB816CE3D4FE46B69B4BA5B77A01234198C56009DEA8048A3C02E1402C
SHA-512:	D27AA8C429282AF84ECAD3E66D266E37BFE7E4152C39C1A90BEDA3DFA4D83D0E7434FCB74FD780286E5E6AAAAAECDC4530F239866F232836BF59830744A09B8A
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/content-type/partials/page/template-page.html
Preview:	<main>.. <onesite-optimization-banner>. </onesite-optimization-banner>.. <onesite-archive>. </onesite-archive>.. <onesite-intro>. </onesite-intro>.. <div class="row" ng-show="mainController.node.content.greyBox">. <div class="small-12 columns">. <div class="panel">. <compile-html html="mainController.node.content.greyBox">. </compile-html>. </div>. </div>. </div>.. <div class="row". ng-init=". asideEnabled = mainController.node.content.right \|\| mainController.node.content.archive_status === 'associated';. resultStatus = {};. ">. <div class="main-content". ng-class="{'large-8 medium-12 columns': asideEnabled, 'small-12 columns': !asideEnabled}">.. <onesite-toc toc-style="mainController.node.content.tocStyle". toc-list="mainController.node.content.toc". include-faq="resultStatus.total > 0". alias="mainController.node.content.params.alias">. </on

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\www-embed-player[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	188279
Entropy (8bit):	5.603499513857841
Encrypted:	false
SSDEEP:	3072:lWkDbAK3HmUrgO7S3uKlQGW4f1exHWBDmzlr4h3bC:FiUrv7S3uItf1ex29mzlL
MD5:	092015B896FFE2E69A18D2CAE63E3A25
SHA1:	E4F74658E3CE9903F9A6869C25529481AE6424AB
SHA-256:	3E7878E1663715360661D68893E34F41B705C615C3A5594D37C2E685DBF13360
SHA-512:	086FF88EF8DC06B9E7FD25E93D8B5D2310F9A6C03DC475190E2FAB87DF97F1855A9B0308430C5410A9FC7C553AFD4ED814742C78020280DBDF933D0C20705E2D
Malicious:	false
IE Cache URL:	https://www.youtube.com/s/player/2cea24bf/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var m;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var ea=da(this);function t(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(e){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c("jscomp_symbol_"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\www-player[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	365477
Entropy (8bit):	5.242167915306127
Encrypted:	false
SSDEEP:	1536:BDQI0irpHrpj/fn8Mq5G04XGqUDrzltPljuvEMFfyUOP5FRrDJciM/ByDN4A6D65:TijDrzxCQgayRsLb
MD5:	2D4D90F855A60199EE25043D26066129
SHA1:	3E62A44ACF2768ABCCCE8ECCD1736C2D6F67AFFE
SHA-256:	E76089910B3A72BB157C377AF94E140AA5BA385BE2DAD47D13D5E80F3F3C5100
SHA-512:	37F74371CC28C1584DF9A3F308CBF97810CE5D77C7C1624CD9538D274B240ED36D927962E76FEBB30443D8040CF9084790C282D169A139B402F72AFE14305CAD
Malicious:	false
IE Cache URL:	https://www.youtube.com/s/player/2cea24bf/www-player.css
Preview:	.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation;-ms-high-contrast-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode,.html5-video-player.ytp-fullscreen{background-color:#000}.ytp-big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color:inherit;text-decoration:none;-moz-transition:color .1s cubic-bezier(0.0,0.0,0.2,1);-webkit-transition:color .1s cubic-bezier(0.0,0.0,0.2,1);transition:color .1s cubic-bezier(0.0,0.0,0.2,1);outline:0}.html5-video-player a:hover{color:#fff;-moz-transition:color .1s cubic-bezier(0.4,0.0,1,1);-webkit-transition:color .1s cubic-bezier(0.4,0.0,1,1);transition:co

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\E73PA6oJJcj4lIMVhVoq8TDNFJPSyYzZcTIPIEc7fpc[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	36241
Entropy (8bit):	5.64378921765415
Encrypted:	false
SSDEEP:	384:vrIa8HalNqqDziAvOwL0rklN7mjpXDDedhm0aOQIIKUHTC1GXvVj/ZJyPw5UHJpb:MTaBP2NXnmm0aHk12rmpkRPXwl
MD5:	F14C1DB1CC510B61D5C0BB7F64F672E4
SHA1:	C75D3457B6D744934473597A2E1DA1A52475134A
SHA-256:	13BDCF03AA0925C8F8948315855A2AF130CD1493D2C98CD971320F20473B7E97
SHA-512:	B28EE652214FFDEEDCCEBC25571C06E0ECDF8A434441C860C30BA41926DB0C837A86BB4BC29AF3D594F1E49591B100C3AD3E551056A804E31C7316473D0E5F75
Malicious:	false
IE Cache URL:	https://www.google.com/js/th/E73PA6oJJcj4lIMVhVoq8TDNFJPSyYzZcTIPIEc7fpc.js
Preview:	(function(){var V=function(c,m,k,X,S){if(!(X=(S=u.trustedTypes,k),S)\|\|!S.createPolicy)return X;try{X=S.createPolicy(m,{createHTML:d,createScript:d,createScriptURL:d})}catch(Q){if(u.console)u.console[c](Q.message)}return X},u=this\|\|self,d=function(c){return c};(0,eval)(function(c,m){return(m=V("error","ad",null))&&1===c.eval(m.createScript("1"))?function(k){return m.createScript(k)}:function(k){return""+k}}(u)(Array(7824Math.random()\|0).join("\n")+'(function(){var D=function(m,c,S,X,u,d,k,Q,V,C,f,z,v,I,F,l){if(!(((m>>2)%131\|\|(d=S,d=(u=d<<13,(d\|u)+~(d\|u)-(~d^u)),d^=d>>17,d^=d<<5,(d=(X\|0)-2~d+2~(d\|X)+(~d&X))\|\|(d=1),l=c^d),m\|8)%63)){for(S=[];c--;)S.push(255Math.random()\|0);l=S}if(!((m+7)%((m-9)%160\|\|(u=c&4,d=c&3,X=R(this),S=R(this),k=Y(this,X),u&&(k=ce(10,(""+k).replace(/\\r\\n/g,"\\n"),-64)),d&&O(this,S,J(k.length,2)),O(this,S,k)),103)))if(C=X.v.j[String(d)]){for(V=(z=(C=C.concat(),0),c);z<C.length;++z)(k=C[z])&&!k.P&&k.capture==S&&(Q=k.listener,f=k.B\|\|k.src,k.l&&D(267,0,k,X.v),V=fals

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\LoginPage[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	16398
Entropy (8bit):	4.925632999755716
Encrypted:	false
SSDEEP:	192:GkoY5qWBUcbXhcnQzTiKbiiO7kolO1iOWLkB7Mcw9IljOF7aLlyN31lOcs:GOUEXhcnQzhbiiO7kolO1iOWLsyIlhgQ
MD5:	18431EAA2FE6A86BB56494349FC1E82F
SHA1:	F6AC9F77A285FA55A189B6DDDD454CA3DE2B2A82
SHA-256:	C2048C079C2AD8E5FBAD997189292D9F35F1601C18FFEC33C3937AEB45F2CA1B
SHA-512:	2335925C4329FC09E6DCFB85A96B3CB37890AD35C880458C30451DC840804441B5EB6BFB7186F0D1B31B1B9ACE5C3D48E6A26AFC6CA1761AB1E652DE71CF9CBA
Malicious:	false
IE Cache URL:	https://www.phdapps.health.gov.on.ca/LoginPage.aspx?ReturnUrl=%2ffavicon.ico
Preview:	....<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">..<head id="Head1"><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /><title>...PHDApps - Home and Login Page..</title><link href="App_Themes/app_main.css" rel="stylesheet" type="text/css" /><link href="App_Themes/StyleSheet.css" rel="stylesheet" type="text/css" /><link href="App_Themes/AjaxCalendar/Calendar.css" rel="stylesheet" type="text/css" />..<style type="text/css">.. .IE8Fix {z-index: 100; }.... .MainContentToSkipClass {.. visibility:hidden.. }....a.skip-main {.. left:-999px;.. position:absolute;.. top:auto;.. width:1px;.. height:1px;.. overflow:hidden;.. z-index:-999;..}..a.skip-main:focus, a.skip-main:active {.. color: #fff;.. background-color:#000;.. left: auto;.. top: auto;.. width: 30%;.. height: auto;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\about-ontario[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	8405
Entropy (8bit):	5.0746341151683
Encrypted:	false
SSDEEP:	96:EGsHG+NLuC/XnuEsejOfrBsrbCspsrbp4IpwVS70qXVTdyrNGz7TzvBAkbfNMhjs:EGsH3IC/XnL8M8uIzybI8jSVg2O+S43
MD5:	0953A2B6FB1D331EFA2AAD3FF8E2DC99
SHA1:	33D9EA08EEFB81ABE8934754EA434A33437B227C
SHA-256:	38BF2EB71CE159B99E4A9C680FED3427D8193EB5DC44CE8A75A684EB00A9F820
SHA-512:	4EDECE89518BDEF904871B360E510F6645E631F1FBF9BE5BC4883131827E4F3B7D1169754E73FC1E27526D78378CB3E37D495B7E3DE7F7280F4D6DE908EB5082
Malicious:	false
IE Cache URL:	https://www.ontario.ca/page/about-ontario
Preview:	<!doctype html> <html class="no-js" lang="en"> <head> <meta charset="utf-8"> <meta content="width=device-width,initial-scale=1" name="viewport"> <meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta name="sha" content="d43396df38048fbb44731befe641f3dfc221eaf3"> <title></title> <base href="/"> <link href="/css/combined.css" media="screen" rel="stylesheet"> <link href="/css/print.css" media="print" rel="stylesheet"> <script src="/vendor/modernizr/modernizr.js"></script> <script>!function(a,e,o,n,c,i,t){a.GoogleAnalyticsObject=c,a.ga=a.ga\|\|function(){(a.ga.q=a.ga.q\|\|[]).push(arguments)},a.ga.l=1*new Date,i=e.createElement(o),t=e.getElementsByTagName(o)[0],i.async=1,i.src="//www.google-analytics.com/analytics.js",t.parentNode.insertBefore(i,t)}(window,document,"script",0,"ga"),ga("create","UA-21003310-6",{cookieDomain:"auto",allowLinker:!0}),ga("create","UA-48649528-1",{cookieDomain:"auto",allowLinker:!0,name:"ServiceOntario"}),ga("require","linker"),ga("linker:autoLink",["serviceont

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\align.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	484
Entropy (8bit):	4.609557654572897
Encrypted:	false
SSDEEP:	12:Uo/uby0Ehl5oXozfz03jKqKfvXkICf8y53jfZT:AW0EDm+A3jKvUIEvL
MD5:	8628052440E532F890CFC00D4A682FA6
SHA1:	E52C3AF92E150EACDA721A2343791BA41535781F
SHA-256:	97FE5992208187911C3DAFF7FE8556EE254CA0A340AB9AF0E3BA04CE7E40E2E3
SHA-512:	95ED5289C7BB858F837CCB83018D3DA5F6577AE027689DE8503FE934B097E818ADE79CC7EB89742C93859BB64BA4984F52BFB16D5210D3E757614FF7FD01A677
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/align.module.css?qrgttk
Preview:	/*. @file. * Alignment classes for text and block level elements.. /...text-align-left {. text-align: left;.}..text-align-right {. text-align: right;.}..text-align-center {. text-align: center;.}..text-align-justify {. text-align: justify;.}../. Alignment classes for block level elements (images, videos, blockquotes, etc.). */..align-left {. float: left;.}..align-right {. float: right;.}..align-center {. display: block;. margin-right: auto;. margin-left: auto;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\app.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	54690
Entropy (8bit):	5.4361647031728735
Encrypted:	false
SSDEEP:	768:3z5xKen7+bC2L1L+LDLvvPdQ60v0X9H48RQ+Y1r4lumyOS5SIQ/WuQ5+hXt/Vs:+b71gXvve6z9LR3lumyOSsNbQ0Ft/Vs
MD5:	90AE69F345F32CEE774C6033DAB3E6AE
SHA1:	DBEA9776D4E0AEFCAE87268E73922C03061DDEBE
SHA-256:	4E8EED0EBB68E95AB82B239AA510F85431D3EE6D0EF444EF1C1AF102BFC232A9
SHA-512:	F1711AE874F4129B617ACEC8997F1D68F6D3F7934C83457817AF6D77BF420303F6586A05C1FDE9F7611AA9CA61B5CBFFC2605FF0FB6E6875D0B983A3756805BC
Malicious:	false
IE Cache URL:	https://www.ontario.ca/js/app.min.js
Preview:	"use strict";!function(c){c(function(){function e(e){var t,a,i="tabindex",n=c("#"+e.attr("data-dropdown")),o=c(s,n);o&&(a=(t=o.eq(0)).attr(i),o.attr(i,"0"===a?"-1":"0"),"0"!==a&&t.focus()),"1"!==n.attr("data-accessibility-processed")&&(c(document).click(function(e){e.target!==n.get(0)&&!1===c(d,n).is(":focus")&&o.attr(i,"-1")}),n.attr("data-accessibility-processed","1"))}var s=["a[href]","area[href]","a.close-reveal-modal","input:not([disabled])","select:not([disabled])","textarea:not([disabled])","button:not([disabled])","iframe","object","embed","[tabindex]","[contenteditable]"].join(","),d=c(".f-dropdown").find(s).attr("tabindex","-1"),a="aria-expanded";c("a[data-dropdown]").on("click",function(){e(c(this))});function t(e){(e=e.find("h1:first-of-type")).length&&(e.is(":focusable")\|\|e.attr("tabindex",-1).on("focusout",function(){c(this).removeAttr("tabindex"),"#ng-view"===window.location.hash&&(window.location.hash="")}),e.focus())}c(".reveal-modal").find(s).attr("tabindex","-1").e

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\back_to_top[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	529
Entropy (8bit):	4.819517992623224
Encrypted:	false
SSDEEP:	12:wm5GQ1j4R3NTDhuyguA2sGjFr1HHL1YsWp8m5GW1u86rHL:56/Dn1ACF1Hr1HWjKrr
MD5:	1539CD1795DA850B1FE05E3D979DFDD3
SHA1:	92DCA6BE12A6906FBEECF2955C731807565CBBA1
SHA-256:	AD501F10C168FD148081CD3533E3C621FCAC63CBB32E36CBE832655C541996C1
SHA-512:	81BBE4965F472A7D22D3823785D1E9A62619EC61507D2ADBA762E5531AEBE645B14D8B233DD26B8DD5621282BAD1F72FCDCDA1F97E091D502806579EF2E853DB
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/modules/contrib/back_to_top/css/back_to_top.css?qrgttk
Preview:	#backtotop {. background: url(../backtotop.png) no-repeat center center;. border: 0;. bottom: 20px;. cursor: pointer;. display: none;. height: 70px;. position: fixed;. right: 20px;. text-indent: -9999px;. width: 70px;. z-index: 300;.}..#backtotop:hover {. opacity: 0.8;.}..#backtotop:focus {. opacity: 0.6;. outline: none;.}..@media (-webkit-min-device-pixel-ratio: 2),.(min-resolution: 192dpi) {. #backtotop {. background: url(../backtotop2x.png) no-repeat center center;. background-size: 70px 70px;. }.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\back_to_top[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1237
Entropy (8bit):	4.59414829644007
Encrypted:	false
SSDEEP:	24:2v/WFCy5VKm2WNcklMHdl2W9cnxcm4LAwEM8ecnxcmqS/cuDlPWSlFGlxqaunv:F5MmOka9nKd4EwrfKdX/pdPGyaG
MD5:	919FAD4E6F86603BBAF5A7606E8F6D02
SHA1:	7A3EF573004FF5DD49BD15DAFC2776066DEC009C
SHA-256:	34FE1A9D6C921F918BC8D1D37913A4DEBE03BF81F2A01CDBFA7897565E819794
SHA-512:	C8F9EF62C17F717C70484D58ECF7CA0049C9BD662C175379F7965B75ACB8E8016A97D50529CBE9AB39AFE4FB1F91E8D7256D5F9952B3BD3355B616935365306E
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/modules/contrib/back_to_top/js/back_to_top.js?v=8.9.13
Preview:	(function ($) {. Drupal.behaviors.backtotop = {. attach: function (context, settings) {. var exist = $('#backtotop').length;. if (exist == 0) {. $("body", context).once('backtotop').each(function () {. $('body').append("<button id='backtotop'>" + settings.back_to_top.back_to_top_button_text + "</button>");. });. }.. backToTop();. $(window).scroll(function () {. backToTop();. });.. $('#backtotop', context).once('backtotop').each(function () {. $(this).click(function () {. $("html, body").bind("scroll mousedown DOMMouseScroll mousewheel keyup", function () {. $('html, body').stop();. });. $('html,body').animate({scrollTop: 0}, 1200, 'easeOutQuart', function () {. $("html, body").unbind("scroll mousedown DOMMouseScroll mousewheel keyup");. });. return false;. });. });.. /*. Hide show back to top links.. */. func

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\banner-icon-alert-xsmall[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	684
Entropy (8bit):	7.561648097484827
Encrypted:	false
SSDEEP:	12:6v/7sYYX5dVmWzel3kMAvpK2Wm3G8Swqf3lOy39rIlh7fnRb:JYU5dVteSZ7q8SwMl9BIX5b
MD5:	9C107EF16D799B14DF23AC4F2BAC0820
SHA1:	F6D0961B1AE9086F3682CC9A302E4B197D150B3B
SHA-256:	B0ED8B23CF003933CA5E0D8C1A7254FAEF9C16458BE3BCEBE1E094CC1E240603
SHA-512:	903BAF4D512B792034E8D50216B24BE15E232686E228A13C1E4D41179E1B6F76EF2F605B35CEB90D9159DFE31E2FAD6AE04E6D4B178929F405BDF59CE09E8980
Malicious:	false
IE Cache URL:	https://files.ontario.ca/banner-icon-alert-xsmall.png
Preview:	.PNG........IHDR...#...#.......Y....pHYs...........~....^IDATX..1h.P....AC.\.A..... ....t..sp.D.4..v..w..(....p..."q...]qh..).!.%..;..K....n....../..^%.".J5.%.......#..\..z..u.J...4.)@...7..zNG.F5.&`...k...J.....Q..q.KJ........jX.`D}.YbY]Y...].m...;\.\|!+.#.Z.0".n..x..&../...._...jX.4g.y.Y]Y.z^.q)od-..4.jX&...U...r..\|T.F......w...?e...4....`..'Ea6T.Z....px.......pF26S..o!..~.>..ZY>..Nd~.K...6.....Y..[]..2.\.^...."J..d.....[......\|.....Q......`M_....;.Q..2......`:.W.......s\..g..=.m..n.i;O5Y.......`M_...kE].N..w>.!";..n..4....1..=..... /'..SC...2..z.zN.t. 5.8T.H.D9..w. .Y .0.@:...b.x.z.-{%b...(r...H+..@.~&6...v....n..Eg.i.x..s..xX.ToI.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\co-covid-19-icons-covid-alert-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4807
Entropy (8bit):	7.914134596874224
Encrypted:	false
SSDEEP:	96:GvNghka0vvdPddKhLRBFu5+tG2O9Ah/mO+qugCaNkNx72uWFQZHxEqTl551:Glunqv5d2L9+KhRjNY7pWcaqTl1
MD5:	11F49C0A92F2E810542EF292EE385099
SHA1:	DAA818B09696AEEA9E8A9A815B5DB5751FC5A9E9
SHA-256:	9C082AB8DD991EEF26304DFE38BD3D84165FFF70C61CA616724D5F0EA8D66587
SHA-512:	5E3F16CACD69C33D55FCAF31CDCAA92B1934F1A0BF82CB8697FC304787B88F42C1F2F97DEC19AC6A911555F45BE3A41740E13B68FF11D54CF627E3D4F4E90040
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-covid-alert-2020-12-21.png
Preview:	.PNG........IHDR...`...`......w8....bKGD.............\|IDATx..].t.....XP..P.<)"]z.E:...rPQ.P...R...GQ.-.....I..AB.=.....@..$.7.Y...........'.vvf...._g..+.<W.^-{....7n......K)...Ja..)%S"&)9....:P.<.6.WN.n.Y.2.'e.r.7R..V..J.(u.}).#.~...`:.`.0.N..1..Q$.1...Ft.....dB.......wv`.7e..,.t...Y...+.1.....,.x{.G.O.L........S(.d#.3J.4..1S2?22.']. ."..6.0........>BH..4..S.N...Z_.RH.b..l(....iX.v.j.f..$].v........;Z.:{.,...%t....B..... .X"k.NA2..\|.uk...\.rYJ.=..y.....]....68.x".M.w..x....I..-g..\|\|\|\2+..;F...O.+G&L.@N.>.0........=.Jc...#E..q...U.R.r.f.a.F......N....b-......>J#./^$....M..iC._O.?O...,!...g.e.......%K..F.......{.:R.U.B1...<P......n..I.&.W>))).k.6m...[....___R.lY..4w.\B.[_.xg...W.....Kj.;u.D..<\|...SGm.}......."?...y.'..z...l.g...W.y.f....?..w=X.X........*V....I...."e1#........>._~.E..+..B..PG........u..'N..;.mV.\....IE..r.Q.kU8p.@.3.......O?.....:.X..e...0,{..e..?..B].k.L{....E.......)Z.(...[..R..}...L.8Q..g.!C..Ql...}.'O&.=...].

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\co-covid-19-icons-up-to-date-info-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 96 x 97, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5264
Entropy (8bit):	7.944383415148047
Encrypted:	false
SSDEEP:	96:1SQGnvZaiNcJJdFysW/KwEuKTNgfkjKtMYryBQzGirw7rIM0iYGg:1SQ/J4sCKyKGOKeYlM0XGg
MD5:	B64C42F6D7EF81363A6505B82E7BE92F
SHA1:	2B2BE9F45CD8982469B79F212D56F132E5CBD935
SHA-256:	5CAC6D18EE7BDC1ADCD63B39AE38970C4981A16ECAC8D67EDCC3FA5273E6D5D1
SHA-512:	EF53B698C657285B0553B457B92400A619BB0AF70D67F2D7CABBFE476EE589A1811358CFAC704F5F0E6EA42E6A07F6415382BBE28D0FF622A56A0F50BD44D242
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-up-to-date-info-2020-12-21.png
Preview:	.PNG........IHDR...`...a.....)......bKGD.............EIDATx.....E....#)YA%...9.J.,Q."`&.H"." .A....'9(Q.0....fQ$..(....._{5.......l..z..........z&)).e...%........w..n.Cl..#}..}&.'.e.=.....t....T..}o.X....S.7.\|.S....g..GT<......t}N-.R)Yy.W..;V...o..i..9..\...k..8........\..l.R...u.P..V..f.F...kY}.K....4V./..R&....).....j..c...q..f.K....+....^.Q..J...".K;.']..).t.ObTfT..;.O>.j.../.Z.l.....o..s.....m......^]\|.......>}.....q.`yu[.YM...n.~.E..7.\|S}..j...g.G..j.%...l.}.........Z.Y..s.N.'O.......(.`.....;Fr..?..C.h.....s3.....O../..B.....W..).......;!.#.m....8p.@...3f...[n..c..u......n.F.M.6U:.U.O.V...\..y....~..._..;;.o...S.5KM.8Q._.>.~.Y...,h..3.8...U.V~....Q.G.\|.....S.?...z.'.J.Ee.M.v.mj...a..q.F.E..?.~.W.2e..O?.v.......}...r...G.(...aCu.7.3.<..Y.H.6.e.h_.p..8...s..J+R.......$.......>....x.86.%3."+.........1T(..P".8..%cv.2x.`..C.=....b./^lVQ....xM..K.N......cvD..9b.).`.)i".G.}T.(P ..S.v.(..>.@..7N..;.."@...9.aoQ/.sD"-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\co-covid-vaccine-page-intro-box-702x532-2020-12-24[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 702x532, frames 3
Category:	downloaded
Size (bytes):	37295
Entropy (8bit):	7.945453291962927
Encrypted:	false
SSDEEP:	768:Yg8pQSWxP6k8dABRng831zf8zk9vazE3hY23JY8y//ZXAHSmL1ePVVAlcKxS:YgkWxesg8eziL5jHT1eP3x
MD5:	848746B35A4F74578A7246BD164EC2A8
SHA1:	374CB0A270BAD9DCCB806DEA2259043BC14D6E8C
SHA-256:	16641E5E391A08E69DB73BFC0727919414FA9D98C3FC53EFCC2A034A8EDF33B3
SHA-512:	A084A8F9CEC359C1AA2060F13726FFE26B6490047B97A35997397DB1B044747EC3C001A51DF07BFCA882486DCBC908B7DCA3E59760C352A8246B38847ED5C6E9
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-vaccine-page-intro-box-702x532-2020-12-24.jpg
Preview:	......JFIF.............C.....................................'!..%..."."%()+,+. /3/2'+...C..............*************************************************...........................................................................................o0........Jh..UX...dz...............................3:...S....d................................u...dX..&.gf.h............................'......ar.U.mK.7.L............................[....hQ8....6U...a.@............SQ.Yu...............R.\....1..X..0%....d&............b9..6..F.................IC.@....34...&uD.4n-......P........9.y.y..q.jt.1..&.ds5....W.JB..........(..keo3OLT.BUK.....eu.?..............>W.......C...U.wd.1+.......S`..........^F]2.F....4.oOk.......mKN.S..$........8..9....l..B..%yfZ..qmg.5..ww3(.........i"/7/..,+..`bT-L... ..4..}O\..d.........9.<c.Q].:....j$..3t....M.e.^P............[.elZUNT.+.^j.\K:....:._U..............:.6:w.`..IT.&i....H.4.g[s.jd..........iy.v.Ej..I...fs........>..L..g@...........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\combined[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	217501
Entropy (8bit):	5.245126202176088
Encrypted:	false
SSDEEP:	1536:tt9FOjo31mGptoaUd3q7j4lFKcvJx9AzudZmXsot0o6NxoWIzEKkFgh2z7:tt9FOjo31mGptoaUZvLAze3IzcQ2z7
MD5:	B449AEFACA9C4431F56DFEC90FB83FC2
SHA1:	145676C0316493DE8BF1DC5F3BD779E5A5BE5BC2
SHA-256:	B19E1B48170877D264947758A3D1F707D6F5B8672C5115395D09BC9846F87E78
SHA-512:	634F01B62EBEF5AFF487423FEB4B796483D6036ECB278D2902132A2CA0A47AB73C56AB4B244FCC028336AFEFE09908BD33A8A7BD05B1B4EE4C763C94F3659B75
Malicious:	false
IE Cache URL:	https://www.ontario.ca/css/combined.css
Preview:	/! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{box-sizing:content-box}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}button,select{text-tran

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\default[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text
Category:	downloaded
Size (bytes):	1257
Entropy (8bit):	4.705481754828438
Encrypted:	false
SSDEEP:	24:cMk5qodwwhXzWd5D8wKw2J7Krzvy2/pSi:cMk/CwhjWAwK97Krby0Si
MD5:	0053966A329F4AC62C250503BBAC2EA1
SHA1:	3D98750CD2E0C10877FB00EEABC5AC63363DBCE5
SHA-256:	873AEAE49558247BCCC8600268053A2925101B1DBA30E6CB32709CD1C1C354D3
SHA-512:	B50FCDECE24C6A27708B6B7633353DC4488951E2045C2294A97CC3623ACAA623117F08B5C48A2E3FD51CCE44EB6A779F2F2FB0F1492CDAE02442A7DD76D47C84
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/typeahead/default.html
Preview:	<div class="clear-input--wrapper". ng-class="{clearable: !!search.input}">. <input ng-model="search.input". required. ng-focus="enableInputCheck = true". ng-blur="enableInputCheck = false". ng-change="onesiteSearchMainTypeaheadImpl.cacheInput = search.input". ng-keyup="searchByKeyword($event)". maxlength="{{ ::onesiteSearchMainTypeaheadImpl.config.maxLength }}". typeahead-min-length="{{ onesiteSearchMainTypeaheadImpl.config.minLength }}". type="search". typeahead="obj as obj.title for obj in onesiteSearchMainTypeaheadImpl.typeaheadHandler($viewValue)". typeahead-template-url="/onesite_modules/onesite-search/partials/typeahead/suggestion.html". aria-label="{{ 'Search' \| translate }}". autocapitalize="none". role="search". class="no-shadow no-border">. <span class="clear-input">. <a analytics-on. analytics-category="Header". analytics-event="search-clear".

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\drupal.init[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	727
Entropy (8bit):	4.98666298065344
Encrypted:	false
SSDEEP:	12:UkaFN0fw0PXlDlk91R6omRVARZrmEKsyAu4W31oUfCSoUfMPc9VwmWhpmf:SXT8lTomRVA13yrx31j5jM6d
MD5:	561D5E5F6F76F15FD1375A9A1C2A18F1
SHA1:	7F5514D8BDFF39269C12134505B9722484ED6CE7
SHA-256:	41683E0BDFED00E74DE14D86441E289271CA70B2A94C721653B9A49DC32FB24E
SHA-512:	B6FFCCAE5515BD354677128CEC38F5C45B4C806D72463C695673D7582C46DD5F718776C16D604D82210ACDAEEA35209DC04F3B628BB9EFD56A930E6714E31E2B
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/misc/drupal.init.js?v=8.9.13
Preview:	/*. DO NOT EDIT THIS FILE..* See the following change record for more information,.* https://www.drupal.org/node/2815083.* @preserve.**/..if (window.jQuery) {. jQuery.noConflict();.}..document.documentElement.className += ' js';..(function (Drupal, drupalSettings) {. var domReady = function domReady(callback) {. if (document.readyState !== 'loading') {. callback();. } else {. var listener = function listener() {. callback();. document.removeEventListener('DOMContentLoaded', listener);. };. document.addEventListener('DOMContentLoaded', listener);. }. };.. domReady(function () {. Drupal.attachBehaviors(document, drupalSettings);. });.})(Drupal, window.drupalSettings);

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\drupal[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6312
Entropy (8bit):	4.829027756516979
Encrypted:	false
SSDEEP:	192:8y7EabGSafu+3GfZqnWHMZxObyQEvShbIMPr8MZScmtCsLPIjj99Iuerd1:ttzjyIvTS
MD5:	2D083E808846C9D9780ADB0B098027D9
SHA1:	D5B5D83F9C911BD862A4977DE0F41D1BE9BFBAD7
SHA-256:	990FDA61C1303A87F6317B47FEF824552D611209F0537BD4FAAA9648D3DE1363
SHA-512:	827AF9DB47C3D27A27CF0C4BA70BB3C4A59D65DA05A2A6AFF0E8BC03F934E1CF5219AAD1D006D60F215104EA93C0FD034255AB7C977FF0B53D6A30CC8F1B9C12
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/misc/drupal.js?v=8.9.13
Preview:	/*. DO NOT EDIT THIS FILE..* See the following change record for more information,.* https://www.drupal.org/node/2815083.* @preserve.**/..window.Drupal = { behaviors: {}, locale: {} };..(function (Drupal, drupalSettings, drupalTranslations, console, Proxy, Reflect) {. Drupal.throwError = function (error) {. setTimeout(function () {. throw error;. }, 0);. };.. Drupal.attachBehaviors = function (context, settings) {. context = context \|\| document;. settings = settings \|\| drupalSettings;. var behaviors = Drupal.behaviors;.. Object.keys(behaviors \|\| {}).forEach(function (i) {. if (typeof behaviors[i].attach === 'function') {. try {. behaviors[i].attach(context, settings);. } catch (e) {. Drupal.throwError(e);. }. }. });. };.. Drupal.detachBehaviors = function (context, settings, trigger) {. context = context \|\| document;. settings = settings \|\| drupalSettings;. trigger = trigger \|\| 'unload';. var

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	2.2429689033058424
Encrypted:	false
SSDEEP:	96:Ml3XHQgQw4F2VF8InOanFxRvYaNsKQZA4/mnNe:63XHQfYsyneaNsC4enN
MD5:	09BD5B5426A668D935E28A5E7B667AC9
SHA1:	1555B05E7D4BE697F795F148D157872361779375
SHA-256:	AEB3B21855F07B7E9E2632483B0A24488A8F294A152E2D64B96C8A4145A55B51
SHA-512:	B57B5ECA260F7B5EEC154969FAACC5224D5ABBC922B1F033F0ADB667AE77544E0002659BA010216D52C634A1ED2B490C5D1E4A2BF3A92D60FF030F2FB276F5B8
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/favicon.ico
Preview:	......00.... .h&..6... .... .(....&........ .h....7..(...0...`..... ................................................................................................,...J...j...................................j...J...,...........................................................................................................................5...z...........................................................................z...5...................................................................................................l...................................................................................................l...................................................................................i...................................................................................................................i...................................................................$..........................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\favicon[2].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	2.2429689033058424
Encrypted:	false
SSDEEP:	96:Ml3XHQgQw4F2VF8InOanFxRvYaNsKQZA4/mnNe:63XHQfYsyneaNsC4enN
MD5:	09BD5B5426A668D935E28A5E7B667AC9
SHA1:	1555B05E7D4BE697F795F148D157872361779375
SHA-256:	AEB3B21855F07B7E9E2632483B0A24488A8F294A152E2D64B96C8A4145A55B51
SHA-512:	B57B5ECA260F7B5EEC154969FAACC5224D5ABBC922B1F033F0ADB667AE77544E0002659BA010216D52C634A1ED2B490C5D1E4A2BF3A92D60FF030F2FB276F5B8
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/favicon.ico
Preview:	......00.... .h&..6... .... .(....&........ .h....7..(...0...`..... ................................................................................................,...J...j...................................j...J...,...........................................................................................................................5...z...........................................................................z...5...................................................................................................l...................................................................................................l...................................................................................i...................................................................................................................i...................................................................$..........................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\foundation-6-off-canvas[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	25858
Entropy (8bit):	4.660758876397811
Encrypted:	false
SSDEEP:	192:NnAswCp9coBo2pxNCUVrysgFpxjA7a6H9whVrys7c+Vrys6V4OVrysvSdLVrys8d:SlCp9coBoYgNA7a6H66oPS4OFoIn80
MD5:	9267F2AB1E2FD2F84FB0C4A56CE6FAEB
SHA1:	25EB9BB5BFC51DBC44A6A05BE4ABE35AB57F4C79
SHA-256:	AF2E4D3A9200B58773D52449E31E59FB19855F1D59AEC82700D6B53E29AB8838
SHA-512:	1F8C8929CA1F0C34E12BC26801C7B93C0B1FDEEAB589D1850AA716AC2567553A26A66D5FADD9A70CEF82BC82E3E405D2AA944112758242D89F1B3470D9B41AED
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/vendor-assets/styles/foundation-6-off-canvas.css?qrgttk
Preview:	@charset "UTF-8";./*. Foundation for Sites by ZURB. * Version 6.6.1. * foundation.zurb.com. * Licensed under MIT Open Source. */...is-off-canvas-open {. overflow: hidden;.}...js-off-canvas-overlay {. position: absolute;. top: 0;. left: 0;. z-index: 11;. width: 100%;. height: 100%;. -webkit-transition: opacity 0.5s ease, visibility 0.5s ease;. transition: opacity 0.5s ease, visibility 0.5s ease;. background: rgba(254, 254, 254, 0.25);. opacity: 0;. visibility: hidden;. overflow: hidden;.}...js-off-canvas-overlay.is-visible {. opacity: 1;. visibility: visible;.}...js-off-canvas-overlay.is-closable {. cursor: pointer;.}...js-off-canvas-overlay.is-overlay-absolute {. position: absolute;.}...js-off-canvas-overlay.is-overlay-fixed {. position: fixed;.}...off-canvas-wrapper {. position: relative;. overflow: hidden;.}...off-canvas {. position: fixed;. z-index: 12;. -webkit-transition: -webkit-transform 0.5s ease;. trans

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\js.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	troff or preprocessor input, ASCII text
Category:	downloaded
Size (bytes):	402
Entropy (8bit):	4.560472448460017
Encrypted:	false
SSDEEP:	6:UqEIpVUIkj0EJt/c68eONnP6pjedLeMWuwRsvu1fev/Tez90EJtlQF6D1eONKDdp:UgLkr/vgOeE1RsVv/TuWKWXTEXjfK
MD5:	AC3A25C1A721FF659377D3B401A42F7D
SHA1:	0E8A6AFF9EECED7B68EEEE301A1594294E24F337
SHA-256:	132298C08776FAEA963092E83B7C30712BDE095C62530BD3A613322987C4663E
SHA-512:	0159995C7AA47E0DEBB1AA1C29BCC9F0EFED0277C0BDC67ACF501E07510A9C98D0EDF2EBEE7A5C1F136F136529F396EC23030A577451BA19945337309EBECE7A
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/js.module.css?qrgttk
Preview:	/*. @file. * Utility classes to assist with Javascript functionality.. /../. For anything you want to hide on page load when JS is enabled, so. * that you can use the JS to control visibility and avoid flicker.. /..js .js-hide {. display: none;.}../. For anything you want to show on page load only when JS is enabled.. */..js-show {. display: none;.}..js .js-show {. display: block;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\logo-ontario@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 360 x 90, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6685
Entropy (8bit):	7.944455102549109
Encrypted:	false
SSDEEP:	192:2984aRNVS4C+7a2qyRFgge3JhPXtkTnMcN6gmzcNUpEFmMPL:qjqbSe22Dpe3JhPXOXxJNUpjMPL
MD5:	E8A33EC19FDD1999B72BD5068A48E25E
SHA1:	1199C2514782D560AC625C49F7D342A2D863544F
SHA-256:	3716D8CA38EA99B178CC68FDA173E98D05210C126B602B67F0D8B3F130DFD4A2
SHA-512:	5D214AABE15D2850E72C400D828B479C7CD80DE64F7760C21601DD58992C0811E7985F16905FE17F57CE941EE348E71DD11CD54A83057A868A4273098239B5B8
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/logo-ontario@2x.png
Preview:	.PNG........IHDR...h...Z...... ......IDATx.....]A...g.m..qR.m.Qm.W.m.Nm.k.\|'<....RJyb..P!jH.i..U.....:.t.v.j.G..35...\.......T...J:..w.....I.4.""@0......=2SoB..h..%.i"=.....P....x.Rd..v..k.E......"..@{2.IM.....h..4..;..@..'.N..{.(..ZD.U~z....ZD.MQ./..@...(E..h.E..J@....h.q..t..O....h.q.uP..B..h.q..P..<...8K!..VO.-".`..hg)@.-"......i.E..P.v..i..AD..N].\|.{v...+.h...=......%K.q.F..f<......{0..X.v-..X...c..=s&.-].-.7...Sx..%.T/..#...Vf8d..Q..Qc.....'A..p.......Y...."V..H.:..)..-Zb....u.&l..X.p!.n..<;m...5.B..~x.!..... N\d...k......u...x..Vv."k..ID*.o....8.0...................uww...K..........g..wv.{.B.;.WK.I..av.,....h.IT.R...../.....%]05.?..J..).31.Ed..?/.\(........#..4m4.C.J..?..}[......_.P.....K..\.-....Lzq.)^....L.n%...ZQ.'."..3...}/...j......q....p..V.;{N.\........7...9r....J%...?/.....{)..N......>~E...7.B.:U..(..y.L.....0ZM..B!.6.......5"12.>d..>}...+W....(.#u.{.b....g..6....H...l.......+,......@(.F .f..S8.tQb...5.=.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\onesite-body.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3607
Entropy (8bit):	5.057955488770076
Encrypted:	false
SSDEEP:	48:TlJsFGIr0kZVPH4rRVF7GflXv+aEGU7/Jw1NbnW3AMCdvghtd2V9tOAYj2:Tlm3BGRG13U+jMAMCdohtd20vj2
MD5:	9BAC30FFB14C5F96B77117810CCB530A
SHA1:	E3599BF9EB70BAEB73BA0001395B5206CBCBC32D
SHA-256:	40AA79EDB0A65748F49A0089EA387BA2DD987E205BB9B230956A0BDF4EF2B9B1
SHA-512:	6BBCC8BE97091C7A8508C751E8E45B49319BF09AB978E4DDB2FB5732947909B3A025C759B5205F26E5DCC3004CD7C020C3205E02DB1EEF6CA0994857FBD306FB
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-body/onesite-body.min.js
Preview:	"use strict";angular.module("onesite.body",["onesite.body.services","onesite.body.directives"]);."use strict";angular.module("onesite.body.services",[]).factory("bodyService",["componentApiService","dataBindingService","apiEndpointConfig","redirectService","lazyloaderFactory","lazyloadFiles","callbackService","apiKeys","$q","$location",function(l,s,e,a,t,n,r,i,o,u){var c={};r.setupGoogleMapApiCallback();var d={onesiteGooglemap:{regexp:/<onesite-google-map (.=.?)>/,handler:function(){var e=o.defer();return function(){var e=o.defer();if(window.loadGoogleMapApi(!1))e.resolve();else{var a=document.createElement("script");a.type="text/javascript",a.src="https://maps.googleapis.com/maps/api/js?v=3&key="+i.googleMaps+"&libraries=places&callback=loadGoogleMapApi&region=CA",$("head").append(a),window.loadGoogleMapApi(e,"/vendor/google-markerwithlabel/src/markerwithlabel.js")}return e.promise}().then(function(){(function(){var e="onesite.google.map";return t.load(t.instantiate("module",e),{nam

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\onesite-contact-us.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	4213
Entropy (8bit):	5.0419075599097765
Encrypted:	false
SSDEEP:	96:KTfORuzFDubr04doJaveTCzll8Tt90Sh1:KjQyJD0M37
MD5:	2E45C11110BE0B34805211925E828627
SHA1:	473DDAE6DFEA23DB1B1866EAF15F29432BE38F9B
SHA-256:	9EEE3D778CD03BAD9DEA05343FD1DB44AE38D1802EB1D72B5F6B5F57F8E45C3D
SHA-512:	B097225C21F436CADD4C709FFE151A2F92F57D46AB784E3436D3A8F28D783EED0ADD60A5A3589805D777407284199D0033DF687A29EA3362DF6F166EA6166CE0
Malicious:	false
Preview:	"use strict";angular.module("onesite.contact.us.services",[]).factory("contactUsService",["remoteStorageService","sessionService","dataBindingService","apiEndpointConfig","componentApiService","redirectService","$q","$parse",function(a,e,t,c,s,d,u,l){var r={};return r.getContactNode=function(r,n,e){var i="/"+c["onesite.app"].apiService,o=c["onesite.app"].apiServiceCrossDomain,a=u.defer();return function(e,t){var r="/"+c["onesite.app"].apiService,n=c["onesite.app"].apiServiceCrossDomain,i=u.defer();return s.getEntity({url:d.respectProtocol(t.useRelativeUrl?r:n+r)+"/url/"+e,method:"GET",withCredentials:t.withCredentials}).then(function(e){var t=angular.isArray(e)?l("und[0].id")({und:e}):e.id;t?i.resolve(t):i.reject()},function(){i.reject()}),i.promise}(e,n).then(function(t){if(angular.isString(t)&&""!==t.trim()){var e=encodeURIComponent(t);s.getEntity({url:d.respectProtocol(n.useRelativeUrl?i:o+i)+"/"+e+"?fields="+r,method:"GET",withCredentials:n.withCredentials}).then(function(e){a.reso

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\onesite-search.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	46362
Entropy (8bit):	5.079097575525367
Encrypted:	false
SSDEEP:	768:8aWN6+8H8Jaav94am51J829kaRbY85YEOHI5Y1Or4GbOnsQ+zcHmzn46SOtVO9Uo:rWNi39kah5n15y6bPQbp6TO9Us0qoFD6
MD5:	9565D9F801992F78AF690B0818F049CD
SHA1:	95DD71F0064D3D10F9D06B19FAF312DB5AD477BD
SHA-256:	5037C5517FB4B285AA35D13EF405625BDDC6D0DA4FC0DA8D1D027BB735973086
SHA-512:	BABEF137038286D66F6A546A3184594F3F2F347CC43938FD139DDE2435EC6F92904F0B7E986CF2025F880193839777E1337B81913E746E110265D5A03CB8C16D
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/onesite-search.min.js
Preview:	"use strict";angular.module("onesite.search",["onesite.search.services","onesite.search.factories","onesite.search.directives","onesite.search.controllers","mm.foundation"]);."use strict";angular.module("onesite.search.factories",[]).directive("onesiteSearch",[function(){return{restrict:"E",scope:{type:"@",lang:"@",title:"@",search:"=",internalTagList:"=",nodeId:"@",resultStatus:"="},replace:!1,template:['<onesite-search-impl ng-switch="type">','<div ng-switch-when="search-result">','<onesite-search-main ng-switch="subType">','<onesite-search-main-tag ng-switch-when="tag"></onesite-search-main-tag>','<onesite-search-main-external-tag ng-switch-when="externalTag"></onesite-search-main-external-tag>',"<onesite-search-main-default ng-switch-default></onesite-search-main-default>","</onesite-search-main>","</div>",'<onesite-search-gazette ng-switch-when="ontario-gazette"></onesite-search-gazette>','<onesite-search-land-registration ng-switch-when="land_registration_all">',"</onesite-search

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\onesiteActionBar[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1914
Entropy (8bit):	4.386222794275706
Encrypted:	false
SSDEEP:	48:cjY8iYKFoYT3RdDl+G9xLCAqrTWAWCAurTWAs2bs7ErTf1oz19KsD:Q47xbjNqrTtCurTtXs7ErTf1oB93
MD5:	CDA0D817F00500442BDA07006D60A673
SHA1:	0715D673240E3A86E0C019CFA302FEDC64AA61DA
SHA-256:	0EBC1F7DDC087B1FEE62C71D7143C9AD63003815BF36FF6F0BED2104A919A350
SHA-512:	F14CE1616DCD7595A6C2226C2891D2ED1E257EA1A6A57073DA635FFB79583BF2FE9B4AA2769E07E8450E7C88898B5EAAC8F40117D6D1395B3C3D9E5344C694E2
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteActionBar.html
Preview:	<div>. <scroll-to-bottom></scroll-to-bottom>.. <div class="row action-bar">. <hr ng-if="mainController.node.content.tags.tagList.length \|\| mainController.node.content.tags.externalTagList.length"/>.. <div ng-if="mainController.node.content.type === 'dataset' && mainController.node.content.tags.tagList.length" class="small-12 medium-9 large-10 columns">. <h3>. {{ 'Topics' \| translate }}. </h3>. TODO: ga -->. <ul class="inline-list">. <li ng-repeat="tag in ::mainController.node.content.tags.tagList". tag="tag">. <span ng-switch="mainController.node.content.tags.lang". class="label radius">. <onesite-search-tag-anchor ng-switch-when="fr". query-key="balise". query-val="{{ ::tag.name }}". analytics-event="{{ '' \| analyticsEvent }}">. </onesite-search-tag-anchor>. <

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\onesiteArchive[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	4216
Entropy (8bit):	4.653704798148727
Encrypted:	false
SSDEEP:	48:p+66LYzjfmBKjdtV6Y7qgFY7qZhZ6KMLYzqkmBKjgV6Y7qSNeFY7qZhZ6sLYzT9/:5PVjiKkdV2ixBDViS
MD5:	8C0C037EC2B7644202782B6D85E55DBA
SHA1:	50A0F77DCFE2CBEFE19DDFBD356AE9711A1061A5
SHA-256:	16DBB6573CDC9144F8621C0E122EE2470B12C415920AE5A349D8F3B53CAB475A
SHA-512:	ABC673768947BE752FDAF9259834F02F56310AF3076E235A29EF94DC456CC8DAFE8A828D0AE70E9CD22D1FF64E2145184207E066F934C71D60645F4E324B390F
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteArchive.html
Preview:	<div ng-switch="mainController.node.content.lang">.. "Archived because content is not current" -->. <div class="alert-box--warning". ng-if="mainController.node.content.archive_status === 'outdated'">. <div class="row">. <div class="small-12 columns">. <div class="alert__header">. <div class="alert__header-icon">. <div class="alert-box--warning-icon"> </div>. </div>. <h2 class="alert__header-title h4" ng-switch-when="fr">Page archiv.e</h2>. <h2 class="alert__header-title h4" ng-switch-default>Page archived</h2>. </div>. <div class="alert__body">. <p ng-switch-when="fr">. Cette page n'est plus . jour et elle est disponible . des fins d.archivage et de recherche seulement. <a ng-if="mainController.node.content.archive_url" href="{{mainController.node.content.archive_url}}" title="{{mainController.node.content.archive_title}}">Veuillez consulter les plus r.cents renseigne

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\onesiteSearch[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	990
Entropy (8bit):	4.630884483312336
Encrypted:	false
SSDEEP:	24:Qyk2vEeAs78s7416W2iF5EMiyLX4C69YKFdyUM6F:ZEeAsF744xCuZOIWevh
MD5:	DDDBAE6448E24EC4A536374EEFF3185C
SHA1:	64667B5FD631CF48F2412A09642285566391717E
SHA-256:	2569F28379560234D7DF645CBE8936F997B3E9E6D77ED467BA17CC833614C876
SHA-512:	6444592396371981296969799EFC0E0F8C836B1DEAA497E531D6D0BADF368E79103CC03550B7ACBEFE71D14134B19DEE92B2DECED9DDA67F54803610D9BB9F10
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/landRegistration/onesiteSearch.html
Preview:	<form name="landRegistrationForm". ng-submit=". onesiteSearchImpl.enableScreenReaderTotal = false;. init(true).then(focusOnSearchButton).then(enableScreenReaderTotal);. current.keyword = onesiteSearchImpl.filterHandler.query.keyword.model.input;. selected.result = [];. ". ng-init=". last={};. selected = {. result: []. };. current = {. keyword: null. };. ". scroll-to-detail="true">.. <link rel="stylesheet" href="/css/hideHeaderSearch.css">.. Search Input -->. <div class="row">. <div class="small-12 medium-8 medium-push-4 end columns". ng-include="'/onesite_modules/onesite-search/partials/landRegistration/searchInput.html'">. </div>. </div>.. Filters, results, related links -->. <div class="row main-content". ng-include="'/onesite_modules/onesite-search/partials/landRegistration/filters/control.html'">. </div>..</form>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\onesiteSearch[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	615
Entropy (8bit):	4.49011483029449
Encrypted:	false
SSDEEP:	12:5EDNpc37vpC/uHIqC1iF9rc9HvTSuHIqCkFhs+clwgB:e0+J1iF2xT0JkFhf2wS
MD5:	EAAFFC219089C0001EABBD74D2D81CFC
SHA1:	3639184610DB0A35ABE088C0526FF69B3A108913
SHA-256:	8E10F5009F4C90622399F62425FD80F368FD182B60038CE8248C3EC7F33BF338
SHA-512:	92D1D7A6D147C5DD41CB3185E9117E6B92ABC9D74211EE830B64A870C8A473E09B031BC707290336E62775F0868C60A927BCCB605AD852D1752D1555E9C815FD
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/orderInCouncil/onesiteSearch.html
Preview:	<div class="row". ng-init=". last = {};. selected = {. result: []. };. current = {. keyword: null. };. ". scroll-to-detail="true">.. Search Filter -->. <div class="small-12 medium-12 large-4 columns". ng-include="'/onesite_modules/onesite-search/partials/orderInCouncil/control.html'">. </div>.. Result List View -->. <div class="small-12 medium-12 large-8 columns". ng-hide="selected.result[0]". ng-include="'/onesite_modules/onesite-search/partials/orderInCouncil/results.html'">. </div>..</div>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\onesiteSearch[3].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	420
Entropy (8bit):	4.753591950889029
Encrypted:	false
SSDEEP:	12:52cCj6HHIqC1iF1FEOyUMi4vTO6HHIqCkF1FEoDMZ:c56IJ1iFjhyUMikTO6IJkFj5MZ
MD5:	C47FF73E533D3EEC271F37C3248881FB
SHA1:	8764E00EFC0D7231DC7D2F80E25ED01740597239
SHA-256:	58D184A6213BEFF13D2ED89F3A0E5C0918E6B7E618220A1030FEEE0873C90B41
SHA-512:	75E03044D07C193BE1CF86C66268276295674CFE2ABED7530BED9DAD76176D25F6AC6C1D91B63BD4FBB017273DFB2E6A270E4BDCA81649D7BE39CC356E338333
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/tradeCalendar/onesiteSearch.html
Preview:	<div class="row". ng-init="last={}">.. Search Filter -->. <div class="small-12 medium-12 large-4 columns". ng-include="'/onesite_modules/onesite-search/partials/tradeCalendar/filters/control.html'">. </div>.. Result List View -->. <div class="small-12 medium-12 large-8 columns". ng-include="'/onesite_modules/onesite-search/partials/tradeCalendar/result/listView.html'">. </div>..</div>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\onesiteSearch[4].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1737
Entropy (8bit):	4.7896091906288865
Encrypted:	false
SSDEEP:	48:DvuYV79bsFypmy1dsSAIF25OqxTDr6flpCX6dLH64:DrNswpmy1dJuOOTDr6flpD3
MD5:	6D56B4B349496CFF5EAE548C9F2CBD04
SHA1:	8380311034E856AEDC0E7357D450F5076F841152
SHA-256:	85AFC2E3CAA73BF31D45B4F7E3ADBF2DDDB09B61EB022E6D564148F5E208CD74
SHA-512:	D6A5E6705D62EE7FFB8594301F5086ECAB3EB4833FCEE1E1C0F8FDECEF34639870F07DD81FA14E997FC3FACA4B6611DAFF9A4DDAD7A558918C7DD056F9541864
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/faqs/onesiteSearch.html
Preview:	<div ng-switch="onesiteSearchImpl.lang". ng-show="onesiteSearchImpl.total > 0">. <hr/>. <h2>. {{ 'Frequently asked questions' \| translate }}. </h2>.. <div onesite-accordion. class="faq h4". ng-init="last={}">.. TODO: accessibility -->. <div ng-repeat="paginate in onesiteSearchImpl.pagination \| limitTo: onesiteSearchImpl.pageIdx + 1". ng-init="$last ? (last.paginate = paginate) && (last.remaining = onesiteSearchImpl.total - paginate.idx * onesiteSearchImpl.config.pageSize) : null". aria-hidden="{{ !$last }}">. <div onesite-accordion-group. heading="{{ ::faq.title \| html }}". is-open="false". toggle-open="true". analytics="{category: 'faq', event: null, label: faq.title}". ng-repeat="faq in (onesiteSearchImpl.resultList \| slice:paginate.fromIdx: paginate.toIdx)">. <compile-html html="::faq.content". category="faq">. </compile-html>. </div>. <

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\onesiteSearch[5].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text
Category:	downloaded
Size (bytes):	2666
Entropy (8bit):	4.837246446994693
Encrypted:	false
SSDEEP:	48:5WhhtO+eV79QPdsCDghJsnFO+b+ax25Aqqb6VLH6y4VWQ:5JmPdob1aKX9yVh
MD5:	9458FFA88509BE41D5770C3F17FFCBAC
SHA1:	772F52826CA4A7E6FDDB77A66B44C1842F00A8E1
SHA-256:	C9C63FAFA69AC1298BFB069000050FAFFCB1D7124698B2E469FB632BC133286A
SHA-512:	2EBFA960F6F3B5E6DEDD3AF1FE10975C7B370814D83E62E91FD21C9BA4CE313DEF69DE9E98914B36B69C346386AD562A3CF6B563DC1756EDA83937E63E6A4174
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/landing/onesiteSearch.html
Preview:	<div class="row h4">.. <div class="small-12 large-8 medium-12 columns main-content". ng-init="last={}". ng-switch="onesiteSearchImpl.lang">. <h2 class="hidden-for-small-up">. 1-{{ pagination[0].size \| formatNumber:onesiteSearchImpl.lang:0 }}. {{ 'of' \| translate }} {{ onesiteSearchImpl.total \| formatNumber:onesiteSearchImpl.lang:0 }} {{ onesiteSearchImpl.total === 1 ? 'page' : 'pages' \| translate }}. </h2>.. <div class="results-page". ng-repeat="paginate in onesiteSearchImpl.pagination \| limitTo: onesiteSearchImpl.pageIdx + 1". ng-init="$last ? (last.paginate = paginate) && (last.remaining = onesiteSearchImpl.total - paginate.idx * onesiteSearchImpl.config.pageSize) : null". aria-hidden="{{ !$last }}". ng-class="{last_range: $last}">.. <div class="search-results". ng-repeat="result in (onesiteSearchImpl.resultList \| slice:paginate.fromIdx: paginate.toIdx)">. <div ng-include="'/onesite_modules/onesite-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\onesiteTaxonomiesAsMenu[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	343
Entropy (8bit):	4.4629842635226895
Encrypted:	false
SSDEEP:	6:G4fHdGF2D90MgBy596C59FFrA+KL1vBtvCvkL+qt+Nqf/F3vgY+T96i/u96OUJMv:G4f8FG0MAybN9/rA5L1BdKrU+QfN/d+8
MD5:	B501B706A6535B88F105B0E881F2A764
SHA1:	4D75FA115363C44C4F209550F31594343B9C6377
SHA-256:	215CC3DFD1426400FA0425BE5C0FF76D56987BA17CC20D7559D873C66DA4502C
SHA-512:	968AC7410CFCE334113E2655BE2A1426027E331C6E4CC4FB5DCD190DA60C72662323FF2EF35FBFDB1B162F8CD8AC93DB1B6BFADAEBDD409A4C37ABF0EE547664
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteTaxonomiesAsMenu.html
Preview:	<ul class="no-left-margin">. <li ng-repeat="vocabulary in vocabularyList">. <a href="{{ vocabulary.url }}". target="_self". analytics-on. analytics-category="Header". analytics-event="{{ ministry \| analyticsEvent }}". analytics-label="{{ vocabulary.name }}">. {{ vocabulary.name }}. </a>. </li>.</ul>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ontario-a11y[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2276
Entropy (8bit):	4.842280177369027
Encrypted:	false
SSDEEP:	48:Z5Ur6H64sY4Y59QTGb2IMfY6rx7fU83JOdMCKQwjJD:Z51zQ6MfY+Q83J0nKR5
MD5:	587E5E0F1229A2F93D642B87E7F71AF5
SHA1:	F1DB88F7ABA4F1ED5BB5EC67C147A14B9EE994E2
SHA-256:	79CA829DA1BA9E0623352EA06C78BA00E7EF528F312A80BEB2B4281F1FFC17DE
SHA-512:	E432322BC8DC806E5F6E13D3CBB674B5E274E37EBBD9F9B15D285AE5899B61EEC9829515DA944B0E23527D0EA22CA4D709D9032F7AA9F1D150808E4C8158B5A0
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/js/ontario-a11y.js?v=8.9.13
Preview:	/*. A11Y handling. */.var KEYCODE = {. TAB: 9,. ENTER: 13,. ESCAPE: 27.};..function addA11y(element) {. element.setAttribute("aria-hidden", true);.}..function removeA11y(element) {. element.removeAttribute("aria-hidden");.}..function addA11yVisiblity(element) {. element.style.visibility = "visible";. element.setAttribute("aria-hidden", false);. element.setAttribute("tabindex", -1);.}..function removeA11yVisiblity(element) {. element.style.visibility = "hidden";. element.setAttribute("aria-hidden", true);. element.removeAttribute("tabindex");.}..// keyboard utility to Trap focus.function focusUser(config) {.. if (!config) {. throw new Error("Unable to initialize focus-trapping - missing config");. }. var element = config.element,. escapeCallback = config.callbackOnEscape;.. if (escapeCallback && !(escapeCallback instanceof Function)) {. throw new Error("Unable to initialize focus-trapping - callback is not a function");. }.. var focusableElements = el

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ontario-header[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6222
Entropy (8bit):	4.844898050083307
Encrypted:	false
SSDEEP:	96:kBZanKVWpDMRcOjUQ7scwYduZLsknKYidfoeF2:kuAa1F
MD5:	BE99F97DEF9F761341863B11742BD8B7
SHA1:	2DA2BF5C7C092012710C2E2C5E28FA99C0C605EE
SHA-256:	FDFDFF5841C35FCB333180DB8B7D5443B39746D4B9A02A2E70CB4474410E9C8E
SHA-512:	A0DBACB887A904F1111E4AC5EF56A15E44E80F651FB6D90BF1AFD692F68783301140DFAA7C9CB2CFF1BD054978BF31056BCFB496C7D42C7376CB4289ABFF097C
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/js/ontario-header.js?v=8.9.13
Preview:	// Utils.function getClosest(element, selector) {. while (element) {. if (element.matches(selector)) break;. element = element.parentElement;. }. return element;.}..// run asynchronously.function deferInFn(fn) {. if (typeof fn === "function") setTimeout(fn, 0);.}../.Header./.(function () {.. "use strict";.. // review browser support. if (!("addEventListener" in window) \|\| !document.documentElement.classList) return;.. var navPanelSelector = "ontario-header-navigation",. isReadyClass = "ontario-header-navigation--is-ready",. isActiveClass = "ontario-header-navigation--open";.. var header = document.getElementById("ontario-header"),. nav = document.getElementById(navPanelSelector),. openBttnToggler = document.getElementById("ontario-header-menu-toggler"),. closeBttnToggler = document.getElementById("ontario-header-navigation-close-toggler");.. var currentTogger = null,. currentDomEl = null;.. function showNavPanel(navpanel) {. hea

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ontario-icon--error[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	510
Entropy (8bit):	4.8430341235609795
Encrypted:	false
SSDEEP:	12:tvG1W9ocVn7eSZjocTCccTidtxLJXRit5:tu1OVKSZjoScONLJhit5
MD5:	F6BC09EAE0718AE9A3BB69F9AD988059
SHA1:	CA56C9D304B28E584BB203251E15CE8A7D84EE7A
SHA-256:	2CE06C836E10362D58478F672E0A3A106696419D6A07348A8DEA496D2E8AD7D6
SHA-512:	1C15D76F2809B7FA6DE25F88FEE6C6C4FD97C9F82E1486188F037A5F0613AD8FB9E1C2795F1703D34ABADD2A562E17476F5ED72590CDE21A62817E3D92480762
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario-icon--error.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36.67 36.67">. <defs>. <style>. .cls-1 {. fill: #cd0000;. }. </style>. </defs>. <path class="cls-1". d="M684.91,385.94h-3.67v-11h3.67Zm0,7.33h-3.67V389.6h3.67Zm-1.83-27.5a18.39,18.39,0,0,0-7,1.39,18.67,18.67,0,0,0-5.95,4,18.34,18.34,0,1,0,31.3,13,18.39,18.39,0,0,0-5.37-13,18.28,18.28,0,0,0-13-5.37Z". transform="translate(-664.74 -365.77)" />.</svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ontarios-covid-19-vaccination-plan[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	82652
Entropy (8bit):	4.665790778588548
Encrypted:	false
SSDEEP:	1536:j+ySM/YNSq24AmTq/DizM/7hcKsKZEW7ibYyc0fwVgFY72snx3azI7lTmrAz1PJy:GDa3azIQrAz1PJlb93m6L2h
MD5:	0316A40C28B53E7E26871F4B80C45326
SHA1:	0F768BC3CF2381B19464020C5531ED1B371B7393
SHA-256:	DF58701984C9F91D8CB5A7730DD53062B56F7423AEC16C7ABB8EF10A18666D46
SHA-512:	B675670C541A233DEF1A0F7FF9DBAC64EAEA5292DD298EBCAC4ABC91CB62A710B3A639BCAE4AC2A3DAFBB6B358C964AB80DA6142EEA32C98DCA45274FA8D2F6E
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/ontarios-covid-19-vaccination-plan
Preview:	<!DOCTYPE html>.<html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. Google Tag Manager -->. <script>. dataLayer = [];. (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-5G4CS4L');. </script>. End Google Tag Manager -->. <meta http-equiv="Content-Type" content="text/html;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\open-sans-400--italic-4b52a816817a711e6971955c835ecfbb[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 15076, version 1.1
Category:	downloaded
Size (bytes):	15076
Entropy (8bit):	7.960536136856118
Encrypted:	false
SSDEEP:	384:ihKnWsY3Y02JQ9zxRm7TR7NA0tXn/qZOSO7O7RWf5v1X:e2WPp2J2Ct7TXnSsSSSRWhl
MD5:	4B52A816817A711E6971955C835ECFBB
SHA1:	051C5829D5DF0558FC4C8CE02149FB703EA763CA
SHA-256:	14B889CE4EB170C9DEDE3907438E89A1C43E7A8C3E7F3DEB8FB280042CF57BF1
SHA-512:	2D44B2BBB0A66C162ED206CE58BE93F738E45938D41E497E8C3E525A0E06225F64CD335F1854F2475A9664C31127BEF7ECCD2FF630FBF6888C29EA48E55FC541
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/static/open-sans-400--italic-4b52a816817a711e6971955c835ecfbb.woff
Preview:	wOFF......:.......c4........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`.M.=cmap...8...........gasp...............#glyf......'b..8..O..head..D...6...6..'nhhea..\|..."...$...Khmtx..........l.v>xkern..,............loca..6..........t.Kmaxp..8.... ... .d.Ename..8........l.n5.post..9\.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f.f......:....Q.B3_dHcb```.fccfeabby....A!.(..................ah..e.P``...c.`.............x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..{.\S.....7..R.@..C.DT.... ."""....l.....#".....Z..)...-".n./.j.Uk}.Z...U.]..d...7.....m.?1..;g.9s.;g...3.g)jeXF.0..>r5\|.......P*j}..........;..1.......y.(...b...v'?/..+.F.F.z.E..."%~.r[x..'(.............=.>?...1?T.jx......g..Xxw..H.K...AD..d....?.^I.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\optionA[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	384
Entropy (8bit):	5.1301926337667325
Encrypted:	false
SSDEEP:	6:tvKIiad4mc4sl3BAWgL0h4/SAqSGkfHEP5BrQWS1uLNFXATRn6SYRm3Pp+9BRYxY:tvG1B5gLYapGkfkP5BrQWS1EDXATR576
MD5:	486069EB10601E4CE534A6425B2C72F2
SHA1:	E04FED568485C6F6BDBFB72F4614D1A9C5BB984C
SHA-256:	FC242C5724B6740FD5CACD9AABFFDFCEDE27AD44836057090899AE7F22DBE270
SHA-512:	51D06E46E6689FF3BA55CCCC67460C3AB567C414EC13CF1E26848873488AB1B477077AB9BD04E5956898F1D92CD196F10A4BC89393B19F6A0C1F96139058CEA5
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/optionA.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 47.7 47.7"><circle cx="23.85" cy="23.85" r="23.85" style="fill:#49a7a2"/><path d="M681.83,32.55h3.53Q687,37,691.91,50.38h-3.56c-.28-.74-.83-2.22-1.67-4.44h-6.22q-.42,1.11-1.62,4.44h-3.58Q676.9,45.91,681.83,32.55Zm4.22,10.94-2.46-7.36Q683,38,681,43.49Z" transform="translate(-659.44 -17.74)"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\phus[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	14179
Entropy (8bit):	5.188193851128604
Encrypted:	false
SSDEEP:	96:mFWaR9De/V2l12cLqueeL0WeFSu+IBoaY7UtEXctUtYJtv9TuPwdNeMAXVgoyw/:OR9Det2lvL0WeFKtaY7fqtv9TuYVOLyk
MD5:	45559C2BC574E469047CFB109459D30B
SHA1:	58B6F1850C52F4E4CA2E058E40B3A5FCC6BD6505
SHA-256:	96C67525EE0088F5E938646461BA6116B5632375812446E0BEC9716A4F2D8177
SHA-512:	389931FB5430F61E52400F0A20CE768E62DBDB6F7EDFCD91C598CF2086B4045EA2441286DAA090FA2BE205AB61D763723D72CDD5B024902C4E6822CAA538677A
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/data/phus.json
Preview:	[{"id":"1","name":"District of Algoma Health Unit","on_portal":"No","phu_tool":"http://www.algomapublichealth.com/disease-and-illness/infectious-diseases/novel-coronavirus/covid-19-vaccine/vaccine-clinics-in-algoma/#clinics","phu_call_centre":"Yes","phu_phone":"705-541-2332","phu_general_phone":"705-541-2332","phu_general_web":"http://www.algomapublichealth.com/","r3_en":"http://www.algomapublichealth.com/disease-and-illness/infectious-diseases/novel-coronavirus/covid-19-vaccine/vaccine-clinics-in-algoma/#clinics","r3_fr":"http://www.algomapublichealth.com/disease-and-illness/infectious-diseases/novel-coronavirus/covid-19-vaccine/vaccine-clinics-in-algoma/#clinics","age_threshold":"60"},{"id":"2","name":"Brant County Health Unit","on_portal":"No","phu_tool":"https://www.bchu.org/ServicesWeProvide/InfectiousDiseases/Pages/COVID-19-Vaccine-Clinic-Appointments.aspx","phu_call_centre":"Yes","phu_phone":"519-753-4937 ext. 416","phu_general_phone":"519-753-4937 ext. 438","phu_general_web":"h

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\position-container.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.220495863964869
Encrypted:	false
SSDEEP:	3:USQTWqVYb1MVNMNQMXm/1JrYv:UVtYbymQt/frYv
MD5:	A203BFB5819742D466B5E99AF480009A
SHA1:	CC0323B65FD726EF89264B2A7A6D3D7C4999A5E2
SHA-256:	92931CEB6A0AD1C9B3E8FC6F335B9DFD6F0C7C8EE36F089BB10241C142A78FAA
SHA-512:	D12FB20EDE3211C3C3469D5DC86E2BE654A3D5ACE2FE3F20D3E959596106E0775369CB1A5A1886447497508DD572F4D61A47291EDD25910DD8713883AD015185
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/position-container.module.css?qrgttk
Preview:	/. @file. * Contain positioned elements.. */...position-container {. position: relative;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\postalcodes[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2786378
Entropy (8bit):	4.307469615088594
Encrypted:	false
SSDEEP:	12288:sPd86m8RsO98KBBBPqqjDaVasEr3/tBibyYKBilSTq1XjOG29:c2n8xguaG7/tnu1XCr
MD5:	BE1588D543EAA359C95DE4C948280691
SHA1:	A1CF4E81AA166CD80D89419D9F6F9B24DEF4D19F
SHA-256:	63EABDD03EB72721BBE660F6B0E108467BFADDB93FC150EC86A0B7778C7C3C78
SHA-512:	DEE6F0ACFEA6ADC556420726D896D8F5959F0C1043D3A94CF79EF20741EBED995D1D1A4AC8E4D95C42980931E02B981CDB1A8CE19AB34E2F9832C35F4534CF9D
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/data/postalcodes.json
Preview:	{"id7":["B0T1B0","N0A1A0","N0A1B0","N0A1G0","N0A1J0","N0A1L0","N0A1N0","N0A1N1","N0A1N2","N0A1N3","N0A1N4","N0A1N5","N0A1N6","N0A1N7","N0A1N8","N0A1N9","N0A1P0","N0A1S0","N0E1C0","N0E1J0","N0E1M0","N0E1P0","N0E1T0","N0E1X0","N0E2A0","N0J1K0","N1A0A1","N1A0A2","N1A0A3","N1A0A4","N1A0A5","N1A0A6","N1A0A7","N1A0A8","N1A0A9","N1A0B1","N1A0B2","N1A0B3","N1A0B4","N1A0B5","N1A0B7","N1A1A1","N1A1A2","N1A1A3","N1A1A4","N1A1A5","N1A1A6","N1A1A7","N1A1A8","N1A1A9","N1A1B1","N1A1B2","N1A1B3","N1A1B4","N1A1B5","N1A1B6","N1A1B7","N1A1B8","N1A1B9","N1A1C1","N1A1C2","N1A1C3","N1A1C4","N1A1C5","N1A1C6","N1A1C7","N1A1C8","N1A1C9","N1A1E1","N1A1E2","N1A1E3","N1A1E4","N1A1E5","N1A1E6","N1A1E7","N1A1E8","N1A1E9","N1A1G0","N1A1G1","N1A1G2","N1A1G3","N1A1G4","N1A1G5","N1A1G6","N1A1G7","N1A1G8","N1A1G9","N1A1H1","N1A1H2","N1A1H3","N1A1H4","N1A1H5","N1A1H6","N1A1H7","N1A1H8","N1A1H9","N1A1J1","N1A1J2","N1A1J3","N1A1J4","N1A1J5","N1A1J6","N1A1J7","N1A1J8","N1A1J9","N1A1K1","N1A1K2","N1A1K3","N1A1K4","N1A1K5","N

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\print[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1825
Entropy (8bit):	5.0119035673100525
Encrypted:	false
SSDEEP:	48:kEiOuCdPcA69pD5FUZPTX86G6K0IsdMIqn:RuCdPk9vyZPTXV3K0I4MIg
MD5:	CEC5C315C7064A0071DD65758F297374
SHA1:	7B05FA79709AA9B5C02D75D9673EF722DFC5A8D0
SHA-256:	48833449AE55263032E090509216730C8B13E8785D3FA107983BD95BF4ADA36C
SHA-512:	51C4FC6747C2C400CAA3D7AEF4A9367AFD5548D2BD8E4DEC417F4A7EDC5D84F9FE039B3121C1906B2532E18D6D2AE473741FF83372E875D552600EA4FB33AAC4
Malicious:	false
IE Cache URL:	https://www.ontario.ca/css/print.css
Preview:	@charset "UTF-8";#ie10,#toc,.action-bar,.clear-input,.flex-video,.hide-for-print,.left-off-canvas-menu,.marketing-banner img,.show-for-sr,.skip-link,.toc,a.iconBacktotop,footer,h2.toc--header,header .site-logo,header a,header button,header form,nav.pager,span:empty,ul.breadcrumbs{display:none!important}.site-logo-print{display:block!important;height:45px;margin:1rem 0}div,span{background-color:#fff!important;color:#000!important}a[href^=tel]{text-decoration:none;color:#000!important}.marketing-banner .intro .custom-size{padding:0!important;width:100%!important}.main-content{border-top:2pt solid #ccc!important}.button{display:inline-block;background:#ebebeb;border:2pt solid #ccc;border-radius:3px;padding:.5rem;margin:0 1rem 1rem}.alert-box,.callout,.panel,aside{border:2pt solid #ccc;padding:.5rem 1rem;margin-bottom:1rem}img{max-width:100%}table{border:2pt solid #ccc}td,th{border:1pt solid #ccc}th{text-align:left}.no-wrap,a[href^=tel]{white-space:nowrap}abbr[title]:after{content:none}foo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\progress.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	826
Entropy (8bit):	4.968884667611879
Encrypted:	false
SSDEEP:	24:4orYIrbdrFwaqmqddMtXzW5LH3XI/3XxtHdtHIDcoIu1+coqu1xX:4eYIrBFwa1CMtDW5LH3Xq3XxtHdtH+/8
MD5:	F7D575F4F9E0EDC90390EF22E98BDD87
SHA1:	0900DB4220019F5E2050A7631783745A66ECFBED
SHA-256:	4D9DE30F44D155113B05E267EDEB3F534339C20B02135B37B954E2BE32F1F061
SHA-512:	4F450B373777A125CE70CF37D013F43A332E944AA0A644E550D3AC5E11F59E00B867BF061F3B0CA817C347C5BA7612CCA1AE4B18780CD94E0418D705E519A95B
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/progress.module.css?qrgttk
Preview:	/*. @file. * Progress behavior.. . @see progress.js. /...progress {. position: relative;.}..progress__track {. min-width: 100px;. max-width: 100%;. height: 16px;. margin-top: 5px;. border: 1px solid;. background-color: #fff;.}..progress__bar {. width: 3%;. min-width: 3%;. max-width: 100%;. height: 1.5em;. background-color: #000;.}..progress__description,..progress__percentage {. overflow: hidden;. margin-top: 0.2em;. color: #555;. font-size: 0.875em;.}..progress__description {. float: left; / LTR /.}.[dir="rtl"] .progress__description {. float: right;.}..progress__percentage {. float: right; / LTR */.}.[dir="rtl"] .progress__percentage {. float: left;.}..progress--small .progress__track {. height: 7px;.}..progress--small .progress__bar {. height: 7px;. background-size: 20px 20px;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\raleway-modified-700-ffec5345d938424d2e531ea4eecd8d9d[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18032, version 4.20
Category:	downloaded
Size (bytes):	18032
Entropy (8bit):	7.97894287396032
Encrypted:	false
SSDEEP:	384:2lBMfgPLy423SZ3M5aM+yLgJ40M2aVtm1erVAWUfFTeOJVZ9vSCOFqvdym+LqMmn:2lbfv5MoMu40M2aLDrvUsM5OQymaqMmn
MD5:	FFEC5345D938424D2E531EA4EECD8D9D
SHA1:	2A4C6A7FE809944C54D5ACA0AAC37B26DC270737
SHA-256:	811B7E18E89AC8CFE7DCC86987A6022858872307B653DBF74D9EC8CB700AA856
SHA-512:	B6DA2A18B41ED1CC08DCC7E6ECC1677972CAACA7CC8414F8BBB44E48A4B5C4A708C81207BD195C0CCECC197531F60ED07BD2869043D49C5CC8FC96B075316D67
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/static/raleway-modified-700-ffec5345d938424d2e531ea4eecd8d9d.woff
Preview:	wOFF......Fp.......h........................FFTM...0.........$m.GDEF...L....... ."..OS/2...l...G...`..p.cmap...........bd..xgasp................glyf......5...j.-W.head..9,...1...6....hhea..9`... ...$.P..hmtx..9.........".$.loca..<............maxp..=........ ...wname..>....z.....2..post..D..........Ldnx.c```d..3.....}0..K.....x.c`d``..b...`b`../@...1.....'..x.c`b\|........H.3...1.......P.#2.).(.A..A)...........`j.$...)..F..{.=.x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..].\|[...-/.+.JW.J....e..%...#..,'q.$.$a$$....e<.{...<6.>.:.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\secondary-navigation[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2607
Entropy (8bit):	4.779907926046658
Encrypted:	false
SSDEEP:	48:YTfAAmKryfJmz/8Rzm62eGTr9dRcCUeQA1NG:Y7AAmg2JmT8Rzcjr3RkSG
MD5:	CE60BE9D9B0E25B5F2E494193DBA554F
SHA1:	D05ADE985C9AF9C24509EB8B07BF1329D4C41748
SHA-256:	A2FD667C55478849BAB73195417AD57A9224C1750C64DE2760852B8F6E4086B6
SHA-512:	F019812C182C9EBD084E8E70D44B78F91DB8021930FD1E2D5C84A18F30F341EFBF24BA74D9F6847FAB675C7149981A6FB30A6A083E59236DA68FD37A36CD414D
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/js/secondary-navigation.js?v=8.9.13
Preview:	(function ($) {. let activeNavListItem = $('.ontario-list-item-active');. let navListItem = $('.ontario-navigation__list-item');. let navListItemAnchor = $('.ontario-navigation__list-item > a');. let subNavContainer = $('.ontario-sub-navigation__container');.. let activeMobileNavListitem = $('.ontario-mobile-list-item--active');. let mobileNavListItem = $('.ontario-mobile-menu__list-item');. let mobileNavListItemAnchor = $('.ontario-mobile-menu__list-item > a');. let mobileSubNavContainer = $('.ontario-mobile-sub-navigation__container');. let mobileSubNavActiveAnchor = $('.ontario-mobile-list__sub-nav-item--active > a').. navListItemAnchor.on('click', function(e) {. if($(this).next('div').hasClass('ontario-sub-navigation__container')) {. e.preventDefault();.. $(this).parent().toggleClass('ontario-list-item--active');. $(this).parent().siblings().removeClass('ontario-list-item--active');.. ($(this).parent().hasClass('ontario-list-item--

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\splash.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	87
Entropy (8bit):	4.473045002246177
Encrypted:	false
SSDEEP:	3:jTqiCQJxaQJ9AL/+15RK9lYGffI:3TL6+10mGXI
MD5:	93AD982FF17A99465B29B10D2B7E8457
SHA1:	4ECB7344AFB8EAA065BA2E4939C0AD2F0E2D17F7
SHA-256:	78E5D646FB2767F956AD871D606B0A605F5EEB31E40B90A4ED18D48FED8C11E2
SHA-512:	F29A38D00005B17A01B887B952E534E6F61F871938FAF7B0E250BCF569BAFE99D44089DBD9BAFD1864AD3B3AAF9C022BB612D24AE64EF77DA4B9BF71B77A23F6
Malicious:	false
IE Cache URL:	https://www.ontario.ca/splash/splash.min.js
Preview:	"use strict";angular.module("onesite.app").controller("SplashController",function(){});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\system-status-report-general-info[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	255
Entropy (8bit):	4.708599223122268
Encrypted:	false
SSDEEP:	6:UdmEnCWRKuyWfy7MmsBAhxNIRDfy7MmIAF+g/RA:UdzntRbymyImyAh/IZfyImIAZO
MD5:	3F385ED519713C40ED2B0A54D46FA41F
SHA1:	F6CB306AD8ABAC4C5118C3F6156027C48C20A53A
SHA-256:	D106F9CE97021E6CE9A05E593A70EC7E4956667EAB83726C9EB1B473B709FB8E
SHA-512:	151DD0821BE9CE6F4DB4A4B76C37F7A05F4C435C00ADB54FD8C1C7F1FE584FF80A30CEA3735D5F2095C33E070FC791E77BC7BA8261235DBC61FC7F7AE9A6FA9E
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/system-status-report-general-info.css?qrgttk
Preview:	/*. @file. * Default styles for the System Status general info.. */...system-status-general-info__item {. margin-top: 1em;. padding: 0 1em 1em;. border: 1px solid #ccc;.}...system-status-general-info__item-title {. border-bottom: 1px solid #ccc;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\tablesort.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	373
Entropy (8bit):	4.956232052467826
Encrypted:	false
SSDEEP:	6:UNnzjrp0kUoQK1WHX/x3FMVGnr5CBA3EMufKRSzLLBGmF/r5CBA3EMufKRSYdn:UNz/+kZ14HX/fr5CK01H/r5CK0Yd
MD5:	6544EB8B69F4E47510D33641EC3C3C8F
SHA1:	243B2BDEEC0AC48451D0B0C43ADAAEC0B2B5C02C
SHA-256:	750E66789618A2E5A917B34AA2E29ABD2713041F80259CE54EF1B4F0FDFFCBDB
SHA-512:	CA8A268FAB513F87EDBFCD7BF464044F80818476F16A04C1F8944234679701C5AF11E95D9CBCB2090BD33A68429E7B5A6D2D8A15151F75489B906B98C3EDC403
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/tablesort.module.css?qrgttk
Preview:	/*. @file. * Table sort indicator.. . @see tablesort-indicator.html.twig. */...tablesort {. display: inline-block;. width: 16px;. height: 16px;. background-size: 100%;.}..tablesort--asc {. background-image: url(../../../images/core/icons/787878/twistie-down.svg);.}..tablesort--desc {. background-image: url(../../../images/core/icons/787878/twistie-up.svg);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\tools-assessment-centre[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1301
Entropy (8bit):	4.765320160411404
Encrypted:	false
SSDEEP:	24:tK5cDuKk65wjsm6OHU/+qSHYdRzRYRUlWE6+qSHYVcxl8J+qSHYn+qSHY1+qSHy:cc/5459QRzRYRSWk96k2s9j999y
MD5:	6D001D526E1B3BB670632F3F5CC7F2CD
SHA1:	46DC5947F561EEB33C586D1D190B26A644F570A7
SHA-256:	ED04179E7A6E382B19782295B68CAF58CF5946C2C7A9A123FDC265C2F51D754A
SHA-512:	A72C89BFCD7E3ED47EE33309F614E655CCF9650B59F3EF0E4C6418054961BE0467006B18845B294BF6E636B03C0BA431A0FA88BD5AA7393AE092E41EA1FD66F0
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-assessment-centre.svg
Preview:	<svg width="40" height="123" viewBox="0 0 40 123" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M33.0325 33.3529L6.48431 33.983C4.65088 34.0265 3.18163 35.5491 3.17852 37.4088C3.1754 39.2686 4.63966 40.7215 6.47309 40.678L10.9467 40.5718L10.8266 112.208C10.8182 117.267 14.9181 121.335 19.905 121.217C24.892 121.098 29.0058 116.835 29.0143 111.777L29.1342 40.2145L33.0211 40.1223C34.8546 40.0788 36.3238 38.5562 36.3269 36.6965C36.33 34.8367 34.8659 33.3094 33.0325 33.3529Z" stroke="black" stroke-width="3" stroke-miterlimit="10"/>.<path d="M23.8702 7.43875C23.8667 10.492 20.2642 18.8397 20.2642 18.8397C20.2642 18.8397 16.6812 10.6554 16.6848 7.60218C16.6883 4.54897 18.3044 1.98034 20.284 1.93531C22.2637 1.89028 23.8739 4.31106 23.8702 7.43875Z" stroke="black" stroke-width="3" stroke-miterlimit="10"/>.<path d="M23.0837 101.946C23.0873 98.8928 19.5043 90.7085 19.5043 90.7085C19.5043 90.7085 15.9018 99.0563 15.8983 102.109C15.8947 105.163 17.5048 107.658 19.4845 107.613C21.4641 107

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\tools-self-assessment[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2237
Entropy (8bit):	5.115113498114726
Encrypted:	false
SSDEEP:	48:s2x/69sZS8/Zm9z94a909x9r9v49y9sD9M:j7S0L+O
MD5:	5AB53563A412894823B1E744C9920074
SHA1:	355433FE11B41A35597D317ADB68331E0C5A8925
SHA-256:	7A80B423EDB45A20F8F4DA4804112CA8251C70C9DBC6A17D13524C9B5F58809C
SHA-512:	B6D1AC9A8FA5F08C12D06F2D3FB2DEF93EA468CA77B19537413AD014D70745F255AA28F2431989E4A809581FE39B83FE192489B94E259729D5D070E19910A770
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-self-assessment.svg
Preview:	<svg width="93" height="122" viewBox="0 0 93 122" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M62.9479 3.89587H88.0655C89.5008 3.89587 90.6286 5.02361 90.6286 6.35638V118.002C90.6286 119.335 89.5008 120.462 88.0655 120.462H4.20336C2.76807 120.462 1.64034 119.335 1.64034 118.002V6.35638C1.64034 5.02361 2.76807 3.89587 4.20336 3.89587H27.7832H62.9479Z" stroke="black" stroke-width="3" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M60.4874 9.53455H82.3244C83.5546 9.53455 84.5798 10.5598 84.5798 11.79V111.645C84.5798 112.876 83.5546 113.901 82.3244 113.901H9.32941C8.09916 113.901 7.07395 112.876 7.07395 111.645V11.79C7.07395 10.5598 8.09916 9.53455 9.32941 9.53455H29.8336" stroke="black" stroke-width="2.9877" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M60.4874 1.5379H30.2437L32.9092 14.0455H57.8218L60.4874 1.5379Z" fill="#00B2E3" stroke="black" stroke-width="3" stroke-miterlimit="10" stroke-linecap="round"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\vaccine-banner_0[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	382857
Entropy (8bit):	5.968413516007699
Encrypted:	false
SSDEEP:	6144:iDgz20rBryNYMncGZvHyghMP67x470EuLJrEJbpYfayMfSm7IvrBbwfTpg:P20rSew+6d470tLJInYfaDf7IvrBMg
MD5:	771158ABF284E613333214272797B985
SHA1:	01DD1840AC9A5692B5706541BDC9565C4A2FBB35
SHA-256:	41C588243A0E9B7BE2D933F6044E14C7A9640D8A0723ACB70379CFCAA5F32AB8
SHA-512:	DFD5C43CEDF680AC042D16E0D3FC2F062EE2A9371002EDF1804DB33DE95AD9200E7261B31C568D65C0929285D8D23F2F4CB6EC4199558901643E2D5E2428065C
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/vaccine-banner_0.svg
Preview:	<svg width="349" height="213" viewBox="0 0 349 213" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.<rect y="-52" width="349" height="287" fill="url(#pattern0)"/>.<defs>.<pattern id="pattern0" patternContentUnits="objectBoundingBox" width="1" height="1">.<use xlink:href="#image0" transform="translate(0 -0.52019) scale(0.000976562 0.00118765)"/>.</pattern>.<image id="image0" width="1024" height="1280" xlink:href="data:image/jpeg;base64,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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\vaccine-locations[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3324780
Entropy (8bit):	4.7455302260695875
Encrypted:	false
SSDEEP:	6144:zmMgpgZYmS0sXNzM703DUCbkfEE8jli/X:KrEX
MD5:	2A9CFBD4EDA5F7C390C9CE66A935124A
SHA1:	60AEFDB6586C5ACAD90257ADD696477B8DE0844D
SHA-256:	A0F36A5E352EF8FA3BF5C731ACCF3EF679726E21573862B9E89F7659377C96F4
SHA-512:	B4178C77462094083E5611BE7175733BF881480AD2010CE6DDD2CB6725B1B433A51F22005A6C6927542DA90CF323E52ABDDD58544837B185154DE414883E808B
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/vaccine-locations/
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="x-ua-compatible" content="ie=edge"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><style data-href="/covid-19-ac-assets/styles.a7d39651337128709fc0.css">.ontario-callout{padding:.9375rem 2rem .9375rem .9375rem;margin:2.5rem 0}.ontario-callout--double{padding:2rem;margin:2.5rem 0}.ontario-callout--full-width{margin-bottom:0;position:relative;top:-2rem}@media screen and (max-width:39.9375em){.ontario-callout--full-width{top:-1rem}}.ontario-callout__title{font-weight:700;position:relative;top:.2rem}.ontario-callout h2,.ontario-callout h3,.ontario-callout h4{margin-bottom:0}.ontario-callout h2,.ontario-callout h3{font-size:1.5rem;line-height:1.3}.ontario-callout__list{padding:0;margin:0;list-style-type:none}.ontario-callout__list li{margin-bottom:1rem}.ontario-callout__list li a,.ontario-callout__list li a:visited{text-decoration:underline}.ontario-callout__list li a:activ

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\webpack-runtime-ff3f45081dd6bd1465aa[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4116
Entropy (8bit):	5.404637001162482
Encrypted:	false
SSDEEP:	48:EzHpJUuj8WDKY14BqH8aMJj8awUUHXlFwTctbNglK2fYwcW314BqH8aMJjzlL15f:ETpJUbWOOdFHX8TMzscplLB/UyUvqX6+
MD5:	A10A853459944CC249AE96130A432D40
SHA1:	2B03BD576AA087D24D13C4AAD233CFDA2663EF3B
SHA-256:	DB74DAA4291EB2A710031F3513622F6BF0B3FC7FC9A3676AE1F2862F2867F7A6
SHA-512:	DFF8EE0B93A47A8D4B844565093E8D9DB30CB1EFD450651DFDFDD70B2CC6214840581110C609D1059E20F10319FAEE2B28D71989C0FA45986DFDE5E48B953F38
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/webpack-runtime-ff3f45081dd6bd1465aa.js
Preview:	!function(e){function t(t){for(var r,o,s=t[0],i=t[1],u=t[2],d=0,l=[];d<s.length;d++)o=s[d],Object.prototype.hasOwnProperty.call(c,o)&&c[o]&&l.push(c[o][0]),c[o]=0;for(r in i)Object.prototype.hasOwnProperty.call(i,r)&&(e[r]=i[r]);for(f&&f(t);l.length;)l.shift()();return a.push.apply(a,u\|\|[]),n()}function n(){for(var e,t=0;t<a.length;t++){for(var n=a[t],r=!0,o=1;o<n.length;o++){var i=n[o];0!==c[i]&&(r=!1)}r&&(a.splice(t--,1),e=s(s.s=n[0]))}return e}var r={},o={9:0},c={9:0},a=[];function s(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,s),n.l=!0,n.exports}s.e=function(e){var t=[];o[e]?t.push(o[e]):0!==o[e]&&{1:1}[e]&&t.push(o[e]=new Promise((function(t,n){for(var r=({0:"4178e9cc986fc140f048cd41cab70b6192963e31",1:"styles",3:"component---src-pages-404-js",4:"component---src-pages-assessment-centre-locations-index-js",5:"component---src-pages-centres-depistage-index-js",6:"component---src-pages-emplacements-pour-la-vaccination-index-js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1182568
Entropy (8bit):	5.161210199357169
Encrypted:	false
SSDEEP:	12288:PpWIQs2+4jrfEzIgG+J73BSeFs4kYUmj4IWc/xlg:tQs21
MD5:	06D71E0D0186B4BE7DB61D2BDD5B74FE
SHA1:	A03DFAF7EF2D974836135E627A8BF6C0E664368C
SHA-256:	86AB84AC202B84229AC6C0CC546A2D702C8213CAAD237CEBEF1370294C1F5E3B
SHA-512:	E96B0E9CE21379B0872B9A1E6E74778F29942D13B9FDEF2FBB1C7951A8627F2AAC4960AFB6F30CA2B90EE7FA735C5B698949E26D75F7630DC84382E843C6D56F
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{"+ar0":function(e,a,t){var n=t("P8UN");n(n.S+n.F*!t("QPJK"),"Object",{defineProperties:t("YmeT")})},"0HXF":function(e,a,t){"use strict";t.d(a,"a",(function(){return o}));var n={lastWeek:"'last' eeee 'at' p",yesterday:"'yesterday at' p",today:"'today at' p",tomorrow:"'tomorrow at' p",nextWeek:"eeee 'at' p",other:"P"};function o(e,a,t,o){return n[e]}},"2W6z":function(e,a,t){"use strict";t("sC2a");var n=function(){};e.exports=n},"7Qib":function(e,a,t){"use strict";t.d(a,"h",(function(){return n})),t.d(a,"i",(function(){return o})),t.d(a,"a",(function(){return s})),t.d(a,"j",(function(){return r})),t.d(a,"b",(function(){return c})),t.d(a,"f",(function(){return v})),t.d(a,"g",(function(){return g})),t.d(a,"d",(function(){return f})),t.d(a,"c",(function(){return N})),t.d(a,"e",(function(){return k})),t.d(a,"k",(function(){return C}));t("zGcK"),t("v9g0");function n(e){return e.reduce((function(e,a){var t=e.find((function(e){return e.tit

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\8a89caa9-511c-4568-af89-7f2174b4378c[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1405
Entropy (8bit):	4.846601528666309
Encrypted:	false
SSDEEP:	24:YPOTSNBcZCiyIiUvK0+W1Z0V4g1Z0V4gUj0VrCVIBmg9PgT5lHpHmB:YPlQZC5IFK0/1Z0V4g1Z0V4gUj0Vhmgf
MD5:	3432B63D4176808AEB89100F06AE626E
SHA1:	BBD46C3E5790D727611A522F947A40F52CCCCF9D
SHA-256:	77ABF5EB84978F86BE2E216362CEDD5939E06A0E4121A05ED8D3C4EB5559D9D9
SHA-512:	AC0C61540C39CC855C042565E0718006E4E2E0696CC95B7F5822CBC8636034E682F4EC71EAFBA203FBBE9381A4DB1279E848241098B67BFE9130DA62C64E7BD8
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-data/data-catalogue/8a89caa9-511c-4568-af89-7f2174b4378c.json
Preview:	{"help": "https://data.ontario.ca/api/3/action/help_show?name=datastore_search", "success": true, "result": {"sort": "report_date desc", "include_total": true, "resource_id": "8a89caa9-511c-4568-af89-7f2174b4378c", "fields": [{"type": "int", "id": "_id"}, {"info": {"notes": "", "type_override": "timestamp", "label": ""}, "type": "timestamp", "id": "report_date"}, {"info": {"notes": "", "type_override": "", "label": ""}, "type": "text", "id": "previous_day_doses_administered"}, {"info": {"notes": "", "type_override": "", "label": ""}, "type": "text", "id": "total_doses_administered"}, {"info": {"notes": "", "type_override": "", "label": ""}, "type": "text", "id": "total_doses_in_fully_vaccinated_individuals"}, {"info": {"notes": "", "type_override": "", "label": ""}, "type": "text", "id": "total_individuals_fully_vaccinated"}], "records_format": "objects", "records": [{"_id":106,"report_date":"2021-04-13T00:00:00","previous_day_doses_administered":"95,692","total_doses_administered":"3,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\Raleway-700[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 16436, version 1.1
Category:	downloaded
Size (bytes):	16436
Entropy (8bit):	7.973528132200105
Encrypted:	false
SSDEEP:	384:BNebrtrBElie10zsjs72g8Ds9ofyEVL7oVFQ54Fo:BsXbEYHWJqwBos5V
MD5:	E4F290693D69F0CA08871D256363EE9A
SHA1:	3FB6D354094ABB99AFDF80B45086FA7B0F073690
SHA-256:	72FFF1685DFB2C91A5AD93B3028E6B53789A4CA50C738B8590ECFC9EB002B25F
SHA-512:	847CA2BE6BDE8C9B9D174399AB5ACF63ED1C6778953EB412EE548B4DD0AAB63B7235378B120E8EA18D68D7DFD054B0D02B3A379EF9E092C3BBD6D5AD72F287A6
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/Raleway-700/Raleway-700.woff
Preview:	wOFF......@4.......D........................GPOS...0.....14.D.rGSUB...\...\...t...OS/2.......[...`.H..cmap................gasp................glyf......m..Nv-...head..9@...6...6.QP.hhea..9x.......$...ihmtx..9.......x.. .loca..;..........1.Xmaxp..=\|... ... .:..name..=.........'.@.post..>........%...#x.L..l.a....w.m{.g.m...`.m{..A.....j....... ..G.Q....p...PYF.C.@h`.8.P`.;..K.{......E....y.A....%Q. ..+.....Q).....;...B..m......J../...J.9.,).....;.^+.g.F?....A....z;..f.......e.......B,..J<.P..4..MiF+Z....=..H':..../...@.0.a.g......2..L`..Lf1.9.c!.X.......b5kX.:..-..0.8...q......x.#..<.5ox....B4..L..d.e..D..fff...."....p..e..e.g.y.2>ffFQ.......[U......P..n..X4..).r..Z.Y..+Tu.MI..iI.4-3Z...m.&....>N.8.&a..................=#......l...o...4u.z[e...:._.1.AM.I.y...4.......4....."G.N. h.}....:@}...z@K..*...8..G/.4._.?..ghN..,...Ec....Q...&.Aob8....V3..h...>.K.=...}.....:kTZ..E..{........J..$...YC........N...Zl..'..j.1..c.bm..{'+I....z.\|..5@...wF...Q..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\Raleway-regular[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 23124, version 1.1
Category:	downloaded
Size (bytes):	23124
Entropy (8bit):	7.9802653055017405
Encrypted:	false
SSDEEP:	384:XP9TKdqY0+Y88aLOawgz1t17MtnTwl92F7ut/Wa/9sdfPv90WXpI6xP6clYjvmXb:8dq5E8aFwQt1On8Tiw/vF+nv91XpIElj
MD5:	B6CEF9B4764DADA896F1C38229F0AFD8
SHA1:	5665332C0F80F26586D3AA0C5E02FF8664152BB6
SHA-256:	673D9390D7C73824F6509A6FB152F8A3DB97D3325950635A581AD6F31E7ACBD3
SHA-512:	8F02AA4BAE8A1D36CBB9CC9B8B313E7E2B069CF617B051B5FCC8E9178FA318C9B4004328F5427A70E8BB2643B0034BEE45879AB3CC548D0BEFEA0EB33BBAC4B7
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/Raleway-regular/Raleway-regular.woff
Preview:	wOFF......ZT................................GPOS...D.........G.qGSUB.......X...t...!OS/2... ...Z...`..i.cmap...\|.......L....gasp................glyf......p..P.[..Ehead..?....5...6..`8hhea..?........$.2..hmtx..?.... ...p..'Hkern..B.........H..loca..V .........\j.maxp..W.... ... ....name..W...........7epost..X........!.p.Kx.$......E_pV..k.m.m.m...9f..o..O...=......./.@........{.x..t.v.....^).4P...[.S..k.p.w...i....................C..-..#J.}.h..P..T.....1.:]=..T.k...p..Q.w..}...F......[..9..i...[5..vA....>l.t.;#....h.h.......y%V963.6^5.>.5.5.L.O.LlN.O.N.L......tEBE.."A..iIGF2.... ..(Ha.P.b...%)GyP..T....OC..&4...iK;:..t..}....2...e8#..h.0..Lb2S..4.3.Y.f>.X.R...Mlc'...>.s....(.8.INs..\..W..-ns..<..a~7f..q.Y...L.......4...E.0..0(..).D..h.(J..."....n...W_}......VW.s......l8.>......f....*ao......l(4eWB..w..e~....[Y...VNY..r(\|w..~M........[........9[.-Y..Bh...D..:..........7[.....H.{.el.l...-a....lk...`..m-.....3.....z&.....e,.#......c..rAL..=.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\YrjmP_ueahQ[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	49757
Entropy (8bit):	5.825139818358675
Encrypted:	false
SSDEEP:	768:6GKMhWyFa0woWxe3P/PkJj0WFAxjqT8FV2lJcpf7bIZ76q9L:6Ps/KAxjqqV2lJGo762
MD5:	1D2A2331B54D64F3856F61B69831C799
SHA1:	EF8DDAF00F2380B24D67CA933BAD339BE8F0D7EA
SHA-256:	0E80813C21BF755A9B570C7C11BAFAA0CDE146170D436A4C2ABD7741F8A2FE83
SHA-512:	75467DB40B43DAE0AE6923BD1748099AA750F43DFDB025FB9CE7D7D65B132D20DE12CBD1F9EE52E8085F79FAD6C958625B3A12F1221A8EB1E9752E9771BBCAB9
Malicious:	false
Preview:	<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><style name="www-roboto" nonce="ytkjhYD69W1gk9Gh59RsUQ">@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}</style><script name="www-roboto" nonce="ytkjhYD69W1gk9Gh59RsUQ">if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "E"); document.fonts.load("500 10pt Roboto", "E");}</script><link rel="stylesheet" href="/s/player/2cea24bf/www-player.css" name="www-player" nonce="ytkjhYD69W1gk9Gh59RsUQ"><style nonce="ytkjhYD69W1gk9Gh59RsUQ">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100%;}h1 {text-align: center; color: #fff;}h3 {margin-top: 6px; margi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\analytics[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	48759
Entropy (8bit):	5.5215063523389265
Encrypted:	false
SSDEEP:	768:/yR3fYFBLbfsce5XqY1TyPnHpX/KWY3SoavPVRhwmCgYUD0lgEw0stZc:/y9gZfA5h1UHpXxY3Soiuw0sU
MD5:	0A4E309B5F2D7439B4F8876B19F37FC7
SHA1:	7AC30F933A2B889EDBE5D3449F4EC90049B0E2A9
SHA-256:	F79723478F4C48501CD49AC52B81D6244A6562B9D3F08CE8AB208A8B8878D4C4
SHA-512:	891337D9CD308331BD0166BAA7C99C2B856D47F0ADE8AF596F71AFFC962546BBE0952554C51CC9A10E28BB4CEE3648AEC819D83A8935E69E95F53F5CBF141C44
Malicious:	false
IE Cache URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};var q={},r=function(){q.TAGGING=q.TAGGING\|\|[];q.TAGGING[1]=!0};var t=function(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])},v=function(a){for(var b in a)if(a.hasOwnProperty(b))return!0;return!1};var x=/^(?:(?:https?\|mailto\|ftp):\|[^:/?#]*(?:[/?#]\|$))/i;var y=window,z=document,A=function(a,b){z.addEventListener?z.addEventListener(a,b,!1):z.attachEvent&&z.attachEvent("on"+a,b)};var B=/:[0-9]+$/,C=function(a,b,c){a=a.split("&");for(var d=0;d<a.length;d++){var e=a[d].split("=");if(decodeURIComponent(e[0]).replace(/\+/g," ")===b)return b=e.slice(1).join("="),c?b:decodeURIComponent(b).replace(/\+/g," ")}},F=function(a,b){b&&(b=String(b).toLowerCase());if("p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\api[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	852
Entropy (8bit):	5.518736472579191
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZy+KVCetE31tEsLqo40RWUnYN:VKEcixKoe21tFLrwUnG
MD5:	647F2FC22BA401C8613B8A168C02DB1A
SHA1:	CFF6FD91F3B18BC776591420B9B09C321ADA4406
SHA-256:	FE81E776D459F15B4DAEF2EA548D3150A761C08D33C3013DF60D929775548092
SHA-512:	AC598D3755CA8AD371AA8D42AA7DCC53EBC91AA206E80ADC6713ADF09B29EEF31A92CC39218D509FBE0C9274C51DE499B63E6A88A0D6B4CDD049BCF2B3AF6B36
Malicious:	false
IE Cache URL:	https://www.google.com/recaptcha/api.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;po.src='https://www.gstatic.com/recaptcha/releases/mrdLhN7MywkJAAbzddTIjTaM/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-zy6MpaK2q7ThL2mDEY0TbyvBJDr6lKK9SPTRcXRLbNIBZDn1zpbOT7nMFdXz9mci';var e=d.querySelector('script[nonce]'),n=e&&(e['nonce']\|\|e.getAttribute('nonce'));if(n){po.setAttribute('nonce',n);}var s=d.getElementsByTagName('script')[0];s.parentNode.insertBefore(po, s);})();

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\base[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1644380
Entropy (8bit):	5.579185646972128
Encrypted:	false
SSDEEP:	12288:vNetzXRr0KR2GRMzKBZcmknN7TTSacwH2AvJRa9DOc9uzP:1et10KfMzKBZcmkN7Te1EsJwzP
MD5:	A3F4FCB79410AB0223E07AF957F25866
SHA1:	658770C407CB2D1C9F66AC5FA8831A9F33831E7E
SHA-256:	4B76A2DD7B5DBE0AAAE16DC3C414486896335CCB82F0C9A4E0F0FF3739FBDDC7
SHA-512:	AC6E586AD38145288532242578324E4283B8702C7F20DD08503BD22BE8ECDE3FE75690CCCE1B83045F88380E07C4CAB6BDCA50D94349C719E3420CCFCC7063C1
Malicious:	false
IE Cache URL:	https://www.youtube.com/s/player/2cea24bf/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var ba,da,aaa,ia,ka,la,pa,qa,ra,ua,va,wa,baa,caa,xa,ya,daa,za,Ba,Ca,Da,Ea,Ia,Ga,La,Ma,gaa,haa,Wa,Xa,Ya,iaa,jaa,Za,kaa,$a,ab,laa,maa,cb,jb,naa,qb,sb,oaa,xb,ub,paa,vb,qaa,raa,saa,Fb,Hb,Ib,Jb,Mb,Pb,Qb,Tb,Zb,ac,ec,fc,ic,kc,lc,vaa,mc,nc,oc,wc,xc,zc,Gc,Nc,Oc,Sc,Qc,zaa,Caa,Daa,Eaa,Xc,Yc,$c,Zc,bd,ed,Faa,Gaa,dd,Haa,kd,ld,md,nd,qd,rd,sd,ud,Jaa,vd,wd,Ad,Bd,Cd,Dd,Ed,Fd,Gd,Hd,Jd,Md,Nd,Pd,Rd,Sd,Laa,Td,Ud,Vd,Wd,Xd,Yd,ee,ge,je,ne,oe,ve,we,ze,xe,Be,Ee,De,Ce,Qaa,le,Qe,Oe,Pe,Se,Re,ke,Te,Saa,Xe,Ze,We,af,.bf,cf,df,ef,ff,gf,lf,mf,nf,Taa,sf,of,uf,xf,yf,Ef,Bf,Cf,Uaa,Ff,Df,Gf,Hf,Vaa,If,Jf,Kf,Lf,Mf,Of,Nf,Pf,Qf,Yaa,$aa,aba,cba,Uf,Vf,Wf,Yf,$f,bg,hg,ig,lg,dba,og,ng,pg,eba,xg,yg,zg,fba,Ag,Bg,Cg,Eg,Fg,Gg,Hg,gba,Ig,Jg,Kg,hba,iba,Lg,Ng,Mg,Pg,Qg,Tg,Rg,kba,Sg,Ug,Vg,Xg,Wg,mba,lba,Yg,oba,nba,pba,ah,qba,ch,dh,eh,bh,fh,rba,gh,sba,tba,ih,xba,jh,kh,lh,yba,nh,ph,sh,yh,Ah,xh,th,Bh,zba,C

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\book-vaccine[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	114036
Entropy (8bit):	4.88625280764325
Encrypted:	false
SSDEEP:	768:YKo9BNvyFBGnbdrFnQQLWRxmk/Y5hfVNp/cOh5fn+Rh0cbyF6QlKA6mPPg/P:YKo9BNvybGbdZnQDxmzmRGjEHP
MD5:	F994B6380BA1CE89DD0EFFF5069DED0C
SHA1:	B2EA52F328956DBCAFB313D8F1303523A5283444
SHA-256:	79CA3D4D80368302418D7BADD8C9D2C046E5179362C0BFDCB962B8E9863338E8
SHA-512:	8512A0EC0D96F0D07F767CD66BF20BBD1EB47BC039EAD85492057613CA10E5DC994AEB81E0EA8E9EB9D9E8139B2872554CCBDB20540FAAF39BF4A58F7EA31824
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/book-vaccine/
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta name="description" content="Find out how you can schedule your COVID-19 vaccine appointments">. <meta property="og:locale" content="en-CA">. <meta property="og:site_name" content="@ONThealth">. <meta property="og:title" content="How to book a COVID-19 vaccine appointment">. <meta property="og:url" content="https://covid-19.ontario.ca/book-vaccine/">. <meta property="og:type" content="website">. <meta property="og:description" content="Find out how you can schedule your COVID-19 vaccine appointments">. <meta property="og:image:url" content="https://covid-19.ontario.ca/c19-book-vaccine-assets/social_image_en.png">. <meta property="og:image" content="https://covid-19.ontario.ca/c19-book-vaccine-assets/social_image_en.png">. <meta name="twitter:title" con

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\chevron-right[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	5.0198476251156805
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5zMcBH8+hHiATcvXjXRHoNcHRQag2CiY9uvAZe+H4VNX1X3MHq0Y:tI9mc4slzXdhC/O4RPgVh9SMSmK0Y
MD5:	B6B6C4DB699010301B02593710377F70
SHA1:	DEFACACF10E081BFAD75FF96CD9032C00EFE4339
SHA-256:	8BC3003A5FCE0C51EF013C99396F5168BCE06B077E556E80726CB98871AEEC45
SHA-512:	FD96FF1543B9DA27591AB2DBC9D88DE64BEC0580D992507D510C64F8CB47188F0B57D4660E9D7E3C530C473D7636F522A316D724D67B25C7E7B70C01E83F8D5C
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/assets/chevron-right.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M10 6L8.59 7.41 13.17 12l-4.58 4.59L10 18l6-6z"/><path d="M0 0h24v24H0z" fill="none"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\clearfix.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	306
Entropy (8bit):	4.597062318743618
Encrypted:	false
SSDEEP:	6:UfKcs9so2xgeWDEE0R9A28Ap+vqeVlHSsz740GGqRyFw379ZdmEAv:UVWsvK3Dt0U28A8vLHSIVfqAw37oPv
MD5:	D4013A34D3C8CA1BC905E2333703DB0A
SHA1:	5AC08F4138393F9F87CC4AE99168FC2C51112F29
SHA-256:	A0645960ADE152760A6CEFC0B03736A9565C09A46C94B2DD39E54DA585BDE30D
SHA-512:	624A7400282C7FD739873F18BC175CA59E2FBA40DAB5D08E39177F57DFE6B2B1BCC8E1942F56A588680D4F0C2B8C480FA1DB2039C19B017E102F52E904A05FEE
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/clearfix.module.css?qrgttk
Preview:	/*. @file. * Float clearing.. . Based on the micro clearfix hack by Nicolas Gallagher, with the :before. * pseudo selector removed to allow normal top margin collapse.. . @see http://nicolasgallagher.com/micro-clearfix-hack. */...clearfix:after {. display: table;. clear: both;. content: "";.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\co-covid-vaccine-bg-light-purple-772x772-2021-03-04[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=1], baseline, precision 8, 772x772, frames 3
Category:	downloaded
Size (bytes):	71741
Entropy (8bit):	7.96207803306499
Encrypted:	false
SSDEEP:	1536:heH9zLFMbrOSUDMV3oWI5ew6+ofWN8MS1Szw+GVKl:wH8UG3cew6+HwBVK
MD5:	FB5DFB12F7592D96B116A5B8A08DE140
SHA1:	23F4D7E7C1EE992CDD7B620DD7596F4BE0021AAF
SHA-256:	24062561765546D2361E615F15D242EFF88137C89BDC0FF6E71731CCF619DC82
SHA-512:	F738BFE8781D5300CA2A79092C89F00DC1947EEC9DC12185C07DE5CC42F49055AC14CC4192D9F706380A74B96DC149D237F16C0C8E2973A349E1BA806BE97453
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-03/co-covid-vaccine-bg-light-purple-772x772-2021-03-04.jpg
Preview:	......JFIF.............bExif..MM..............................J...........R.(.............................................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................O.........................!1"AQ..2aq.B....#R...3b...$CrS....%4..c...6s.&5DT.....................................................1A!Q.............?..............................................................................................................................................................................................................................................................................................]D.S.<.2&u....b*.....,r.w.PD..vR).Ji......#...['.O..+b..................................................................................................................\.G.N.g....T....6....U.v.9z.K.\z....3.:...K,.k...R..,?+...m....t.6Y....c.......%.%...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\component---src-pages-vaccine-locations-index-js-5583fc738e553f2ae798[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	5054
Entropy (8bit):	5.156297314551839
Encrypted:	false
SSDEEP:	48:lD58jX9pEF0uqgMEXRzU3J83fqDsdGV5sSCCsV1Y9q3Vk7EYf2jdy3YFBAmUvicY:wifqDMGjsSz8Gq3Vk7LI7XUv4nUCbqk
MD5:	028F5D96F2E0C40C886912D324FDA960
SHA1:	263AEE0B07DBA65AAE1D7846A5774B5D0E7DB353
SHA-256:	5E87C1827E16B519451E1D82F600EA35B5F6EB616986F4F60EB4960493F83328
SHA-512:	88E2DECEBBBE3E2C2B6E4B36AC74AB3F653A14DCD874B3909D7E3147EB8AC2314C68EEF2B43D0057F9DDB5D9FBD401691358792C6730927F89FEC76D048766E0
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/component---src-pages-vaccine-locations-index-js-5583fc738e553f2ae798.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[7],{"4pj9":function(e,a,t){"use strict";t.r(a);var n=t("q1tI"),l=t.n(n),r=t("gd65");a.default=function(){return l.a.createElement(r.a,{lang:"en"},l.a.createElement(l.a.Fragment,null,l.a.createElement("h2",{className:"ontario-lead-statement ontario-margin-top-32-! ontario-margin-bottom-32-!"},"Find your closest pharmacy to get the AstraZeneca COVID-19 vaccine if you are age 55 or older."),l.a.createElement("p",null,"Starting April 1, 2021, select pharmacies across the province are booking appointments for AstraZeneca COVID-19 vaccines for eligible people ages 55 or older in 2021."),l.a.createElement("p",null,"You must have an appointment to get vaccinated at a participating pharmacy. Contact a participating pharmacy near you to book an appointment."),l.a.createElement("h3",null,"Before you book"),l.a.createElement("p",null,"You must:"),l.a.createElement("ul",null,l.a.createElement("li",null,"be 55 years old or older in 2021"),l.a.crea

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\component.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	53285
Entropy (8bit):	5.169887911708994
Encrypted:	false
SSDEEP:	768:sy+ta8OMxBTedmgGhnAuhxrZJCGGVbmY2O4BfwPZnuj8VddPm0PjXKYhAClg:LqlRoZjddOiXKYhACO
MD5:	31F620E726F456732B9A64BBE2BE7A40
SHA1:	517BE2F6D5C0537E1B1485803A280F232683D709
SHA-256:	5083CBFC6D40E35C5A2D800E0B1B0A0F624AF5E842D23C0985B4225011A26421
SHA-512:	209977E8F2F413322C62F85F0DA680D821D111DB59DFE90EEFB19E40DC12B39B18EB29C04F31ED6DCF7F7CD18EA1BCF780C43249440E20B992D46884CD996785
Malicious:	false
Preview:	"use strict";angular.module("onesite.component.directives",[]).directive("onesiteHeader",["$filter","$timeout","languageService","routeService","redirectService",function(e,n,i,o,a){var l={en:"page/government-ontario",fr:"fr/page/gouvernement-de-lontario"};return{scope:{contentNode:"=",search:"=",update:"="},restrict:"E",replace:!0,transclude:!0,templateUrl:"/core_modules/component/partials/onesiteHeader.html",link:function(r,t){r.pathLogoHeader="/img/logo-ontario@2x.png",r.pathLogoPrint="/img/ontario@2x-print.png",o.regulateRedirect(t),r.altLang=i.alternativeLanguage(r.contentNode.lang),r.update.header=function(e){r.altLang=i.alternativeLanguage(e.lang),angular.isFunction(r.update.taxonomies)&&r.update.taxonomies(e.taxonomies),function(){var t=this;n(function(){t.click();var e=t.find("p.show-for-sr")[0];e&&angular.isFunction(e.focus)&&e.focus()},0,!1)}.call(t)},r.headerlogoAliasCollection=l,r.aliasToPath=a.aliasToPath,r.changeLangOnly=function(e,t,n){return function(e,t,n){var r=this;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\content-type.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	27192
Entropy (8bit):	5.106979435692114
Encrypted:	false
SSDEEP:	768:vZRL8oADtjyY/QJpQOzsu876tQeJS3Fdouib8nCDHAWJDxDJzJQU:hBz
MD5:	D4EFFA82F8B19DC0709E4B29BB628052
SHA1:	03B56402E394EDD0EB8A9292D1CD6B34AA31ACA8
SHA-256:	142881E53BD4D178276E5E9B9B2577BF8C63E457E705DF147BF42C99DB710416
SHA-512:	BE2F87612CF4F05626A4CBA27567A4A7108F0C3BA0A8962D402599439B6A27C3EA6E54E939DF0335E9FAAC7D4C906EFCEC0BA3CC5451B3EB5D92A268D7396AA9
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/content-type/content-type.min.js
Preview:	"use strict";angular.module("onesite.contentType",["onesite.contentType.factories","onesite.contentType.directives","onesite.contentType.services"]);."use strict";angular.module("onesite.contentType.directives",[]).directive("contentTypeSearchResults",["routeService","scrollService",function(t,n){function i(){n.scrollToElement(angular.element("#footer"),null,10)}return{scope:{mainController:"=",pageSize:"="},restrict:"A",replace:!0,template:'<div ng-include="mainController.node.content.subClass.templateUrl"></div>',link:function(e,r){e.scrollService=n,e.focusBackToTop=i,t.regulateRedirect(r.parent())}}}]).directive("contentTypeGeneric",["$timeout","redirectService","routeService","scrollService",function(t,n,i,o){return{scope:!0,restrict:"A",replace:!0,template:'<div ng-include="mainController.node.content.subClass.templateUrl"></div>',link:function(e,r){e.redirectService=n,e.scrollService=o,i.regulateRedirect(r.parent()),t(function(){angular.isFunction(e.mainController.update.header)&

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\covid-19-vaccines-ontario[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	57145
Entropy (8bit):	4.784787902507297
Encrypted:	false
SSDEEP:	1536:jGnR7q1GdP24A0xI/DizM/7hcKsKZEWd4bYyc0fwVgFY72sneZiwC0mCAz1PJlbs:2DjZiwC0mCAz1PJlb93m6L2h
MD5:	6B17DFBBB28B51787B7F7A459B46EE18
SHA1:	9FB6AD3076B983D4A2D6DA42328CA7CAFD552B81
SHA-256:	D50C39AE69A81CB9677CED57DDCF044626DDFC7B84FEBABB39D8E6BF398178E0
SHA-512:	D1811154F69B7C0BD99A928A6FC0E9FB4CB9C417340BDB803789B1216DD8D21A1E99D37E9191D32C2A673ACF47A00AEF534C713B6E25EC4B476C73D21009FEEE
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-vaccines-ontario
Preview:	<!DOCTYPE html>.<html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. Google Tag Manager -->. <script>. dataLayer = [];. (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-5G4CS4L');. </script>. End Google Tag Manager -->. <meta http-equiv="Content-Type" content="text/html;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\covid-back-to-top[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	407
Entropy (8bit):	4.775491231840767
Encrypted:	false
SSDEEP:	12:tr/BWGuCo2xxSD3c4oIIdu+afRWOcoTR6IwiHA2:tzBXu92xUD3c8vd4q6jH2
MD5:	0C513666D9F866D661ABF1A873A8FB91
SHA1:	A3288EDC928C63CE6AD565C5A829662238424768
SHA-256:	2C89848581CDC174D921828685E762E544C66D181C870877ECA240D93A31087E
SHA-512:	9057487BCCE5C08F73031F0D26DA416414EC2C9A61CA389C829148467D2D0DB7EEE3A92058C595CB2922FF49A55BE291CA77FF52F585162F50496B888D3244A2
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/images/covid-back-to-top.svg
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M16 32C24.8366 32 32 24.8366 32 16C32 7.16344 24.8366 0 16 0C7.16344 0 0 7.16344 0 16C0 24.8366 7.16344 32 16 32Z" fill="#666666"/>.<path d="M5.33301 15.9997L7.21301 17.8797L14.6664 10.4397V26.6664H17.3331V10.4397L24.7731 17.8931L26.6664 15.9997L15.9997 5.33301L5.33301 15.9997Z" fill="white"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\covidappbanner_240x182px[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7664
Entropy (8bit):	4.174995504400109
Encrypted:	false
SSDEEP:	96:CxrHMjARBOhBILB/CUHoSxKY6/8VXZYKd6UWzsMIo94VRoMfvODJkH:6OUHokPXZYKcUOpIWsRoMfvOlkH
MD5:	B34EA8366EE6FBA1AAF196A6C002C57B
SHA1:	46352610A66407C8D4A51B9AAE5F9AE42F578170
SHA-256:	C3E2A241BC53BDDE45287BF91DE137F9DA0E768ADFCC22219EF980206EE8F30E
SHA-512:	80611C744F1C608E69FA5DA4CDD78896D0DE523E1AE1590C5E4EF782D7470F916E7392FD8201739D7F8EB69939E94D161A5DE1C7F698E2585175478778116176
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/covidappbanner_240x182px.svg
Preview:	<svg width="195" height="190" viewBox="0 0 195 190" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0)">.<rect x="11.1429" y="39.1176" width="66.8571" height="114.559" fill="white"/>.<path d="M65.834 10.0745H55.0441H41.2831H23.1435C17.514 10.0745 12.3536 12.4357 8.60064 16.2137C4.84763 19.9917 2.65838 25.3438 2.502 31.0107V49.1135L1.251 49.9005C0.938252 50.0579 0.625501 50.5302 0.312751 50.845C0.156375 51.1599 0 51.6321 0 52.1043V56.0397C0 56.512 0.156375 56.9842 0.312751 57.299C0.469126 57.6139 0.781877 57.9287 1.251 58.2435L2.502 59.0306V67.2162L1.251 68.0033C0.938252 68.1607 0.625501 68.6329 0.312751 68.9478C0.156375 69.2626 0 69.7348 0 70.2071V74.1424C0 74.6147 0.156375 75.0869 0.312751 75.4018C0.469126 75.7166 0.781877 76.0314 1.251 76.3463L2.502 77.1333L2.34563 162.137C2.34563 167.962 4.69126 173.157 8.28789 177.092C12.0409 180.87 17.0449 183.231 22.8308 183.231H65.5213C68.9615 183.231 72.4018 182.287 75.2165 180.712C78.0313 179.138 80.5333 176.777 82.4098

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\default[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, frames 3
Category:	downloaded
Size (bytes):	2773
Entropy (8bit):	7.815056491753636
Encrypted:	false
SSDEEP:	48:ZO4mWWBz6v6RRalbzCY7iFnBIuATJzvv6yZgdaB4kxhdn2Cto9tO3i:ZOtUCqpLG5+ukzvvpBdXN2Ctof
MD5:	E637AA4FA4BE37BE05DC8F6BDEA64F4D
SHA1:	DC37807553C9EBF1A30A6A83005DD0568E3676A5
SHA-256:	73461BB59224E4A2CB23D093AA10EB925092273C7BA47F92F0107C01520D975C
SHA-512:	51E7F2AB02932983AF222903CC4083C463A5420E18B56BAF3E3B765652695DE79BF2A1A52F1FD79BF1A146F069B6DC172D3115AB4EEC1273CB7C87522902AE11
Malicious:	false
IE Cache URL:	https://i.ytimg.com/vi/YrjmP_ueahQ/default.jpg
Preview:	......JFIF......................................................................................................................................................Z.x.."........................................G........................!..1A.."Qq2a......R.......#d....$BTcrs....DSb...............................-......................!..1a..AQq......#$2..............?..*.^..i...........<......L2.....`.{....R......".PQW:u.....j.^.l/...j.B.K.W..?....Z..Q. \|.........S4U.?G..~..'..U..!1..o7...9m.'..{..p..!...4..{4p...R.B..Y..._.;6..^...)..".(G... \|.w...J-U....h....0.......f[.r...F`t6..].j.L#.Y.%....1P@...#...U..p.J...vWR....V.".]..CZ..{^...Wk-Ha......../.Qrh%.-.......1.....Jp.G.....A.q.k8.J1.I..o..}...}......6..r)..A(.7^.....NXc....I..O]dr..4.`......s.KB:e......&..R}....r.U...rZ.^...$.,.7#K.@...:C.}....2f!J....x..[k....W?...8..(..n.q......n.........J..6....6.CXu}6L...}`.{j..y."_..f.]......\.U"....m..zLW.^..G;W.T..\|Y.`.....,."_..l.J....s.OE..X..c<.1.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ed270bb8-340b-41f9-a7c6-e8ef587e6d11[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4893
Entropy (8bit):	4.802609876268765
Encrypted:	false
SSDEEP:	96:XY5IZ+zP+CZp7K34eqJHJCJ2JXJWGHJaS0LlbSjn8MW3cAI:I5IZ+zP+CZp7K34eqJHJCJ2JXJWGHJao
MD5:	56E4B72640AA66A8AE8B394A4BB1078E
SHA1:	48F4C8EE796419B422899870821207B7B9C4FB05
SHA-256:	3CAC5F6BC1F07A250AC3A2B100EBBFA592A4EC44264C02345402B0E449AEA86B
SHA-512:	E9319FE4BCDBEF4DB939E84064333641E1D1AA0A0F42A976439DBBF33C9D454C0D7D0FA28829C4A9E761058EACA076847B829F2C24EDC7A6AA43F456514A08A7
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-data/data-catalogue/ed270bb8-340b-41f9-a7c6-e8ef587e6d11.json
Preview:	{"help": "https://data.ontario.ca/api/3/action/help_show?name=datastore_search", "success": true, "result": {"sort": "Reported Date desc", "include_total": true, "resource_id": "ed270bb8-340b-41f9-a7c6-e8ef587e6d11", "fields": [{"type": "int", "id": "_id"}, {"info": {"notes": "", "type_override": "timestamp", "label": ""}, "type": "timestamp", "id": "Reported Date"}, {"info": {"notes": "", "type_override": "numeric", "label": ""}, "type": "numeric", "id": "Confirmed Negative"}, {"info": {"notes": "", "type_override": "numeric", "label": ""}, "type": "numeric", "id": "Presumptive Negative"}, {"info": {"notes": "", "type_override": "numeric", "label": ""}, "type": "numeric", "id": "Presumptive Positive"}, {"info": {"notes": "", "type_override": "numeric", "label": ""}, "type": "numeric", "id": "Confirmed Positive"}, {"info": {"notes": "", "type_override": "numeric", "label": ""}, "type": "numeric", "id": "Resolved"}, {"info": {"notes": "", "type_override": "numeric", "label": ""}, "type"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\fetch-polyfill[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Pascal source, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8543
Entropy (8bit):	5.238064281324506
Encrypted:	false
SSDEEP:	192:oQHdiEslZc0rsNYNU5mSJHqI03aej6tZoaMLQO/x5/P80+HcW:ocHslLsP5muHqI0Jj6tZcUO/x5+V
MD5:	04E3CC8A9641B3F9F9C9370F4E9B5BDD
SHA1:	9602A891F583094BB04FD407B253ABCAFFB8C8D0
SHA-256:	DE6C4FFA2BD9FD283610E28D0DB2EC48607AAB39D213A51AEF248673A0A7E980
SHA-512:	58942BCC0F39D620A475B65C1AEB4F18872F68F22C89DEC076906A0DB8BC2B7CCA9357710A7824A0FA7404FF73F41013AECA34609CAACD2187414F7BD0D490D6
Malicious:	false
IE Cache URL:	https://www.youtube.com/s/player/2cea24bf/fetch-polyfill.vflset/fetch-polyfill.js
Preview:	/*.. Copyright (c) 2014-2016 GitHub, Inc... Permission is hereby granted, free of charge, to any person obtaining. a copy of this software and associated documentation files (the. "Software"), to deal in the Software without restriction, including. without limitation the rights to use, copy, modify, merge, publish,. distribute, sublicense, and/or sell copies of the Software, and to. permit persons to whom the Software is furnished to do so, subject to. the following conditions:.. The above copyright notice and this permission notice shall be. included in all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,. EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF. MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND. NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE. LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION. OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\formval[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3703
Entropy (8bit):	4.880588540940611
Encrypted:	false
SSDEEP:	96:ztf5l5Sc27Wh78rK5Jguffe8IeKPJC/khNHfAjLPad:Z5l5SJ7m78MJjffeTtb/HfAjLPad
MD5:	28C77E4AF07EAA11ED43F240416ECF6C
SHA1:	660F3DD607C83D82E4C457C0E97BBB5040875644
SHA-256:	A0770F92EE66EECB0C22836558F1FF47BABEDB56E29FCA509E83269987F8CB34
SHA-512:	CFFB14D7A687020F07636D8C42078D9C9FF2E055CED39E5B9B60AD201F15A354F47C6F3C89D0850AFCE65222E4DCBA06B6EF7E1B63D9AE48DA5E7F9FABC03004
Malicious:	false
IE Cache URL:	https://www.phdapps.health.gov.on.ca/phulocator/js/formval.js
Preview:	function containsValue..(.. value..)..{.. if (!((value == void 0) \|\| (value == null) \|\| (value == ''))).. {.. return true;.. } .. else.. {.. return false;.. } ..}....function initializeErrorLog..(.. errorLog..)..{.. if (!containsValue(errorLog)).. {.. return "Please correct the errors below and resubmit the form.\n\n"; .. } .. else.. { .. return errorLog;.. }..}....function addErrorMessageToErrorLog..(.. errorLog,.. errorCount,.. errorMessage..)..{.. errorLog += ++errorCount + errorMessage;..}....function validateUserLogin..(.. form, usernameField, passwordField..)..{.. var errorLog = '';.. var errorCount = 0;.. var username = usernameField.value;.. var password = passwordField.value;.. .. if (!containsValue(username)).. {.. errorLog = initializeErrorLog(errorLog);.. errorLog += ++errorCount + ") Please enter a username

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\framework-8dcecaaefd71e2213eb2[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	128728
Entropy (8bit):	5.260572874945082
Encrypted:	false
SSDEEP:	1536:/TvchObd0et4IM6y9K0WvC1fHfOtSLWHSiH3Pme2pU9v5j:bkhOb5v0o/SW13T2pU9v5j
MD5:	51B7E5BBCA1E70E60653BF822D2504C5
SHA1:	B26A4B2DF7A397A71B893108E611B74432557E99
SHA-256:	E7D15061741800800418CB01C1525FFE6ECFEF21F08F3A8A4CEDCC3F1D324A57
SHA-512:	7876C87C65CF86A3D5ED7AAD552E2EB25CCF097B7AD7A799684EC6F6C4AC574766646FBF211A62EC83A844E5ABCDAA4F52A165CDD5BF3492496E964DC3F34FA0
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/framework-8dcecaaefd71e2213eb2.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{"16Al":function(e,t,n){"use strict";var r=n("WbBG");function l(){}function i(){}i.resetWarningCache=l,e.exports=function(){function e(e,t,n,l,i,a){if(a!==r){var o=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw o.name="Invariant Violation",o}}function t(){return e}e.isRequired=e;var n={array:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:i,resetWarningCache:l};return n.PropTypes=n,n}},"17x9":function(e,t,n){e.exports=n("16Al")()},JhMR:function(e,t,n){"use strict";e.exports=n("KqkS")},KqkS:function(e,t,n){"use strict";var r,l,i,a,o;if("undefined"==typeof window\|\|"function"!=typeof MessageChannel){var u=null,c=null,s=function(){if(null!==u)try{var e=t.unstable_no

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\gtm[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	108249
Entropy (8bit):	5.517083116476077
Encrypted:	false
SSDEEP:	1536:0UKJbOl10E+HlbenK+sCEOzh2aeWgGHcUil1U9aKPt52W11UlBCg+BR424JAQ1:0UKVu10WnvsuSGVinWBC1
MD5:	9C4EA1C5ED539F02EE76CAA3F83796ED
SHA1:	5E5D5F62753C200BE964BACB7E54C731B1A1D64C
SHA-256:	76E303C558939709D2E9153B2ABF2DC6032CB33FA7A7C6CF13B768458A23B13C
SHA-512:	3E35BE0DE2ABD545E4738AD14997A46A3D15CCEA370644701C62EB11060D3470CF99B1ADAE654B58F8CB8793972FD4C37BBBFA895E024B41B413FFB7E18E6481
Malicious:	false
IE Cache URL:	https://www.googletagmanager.com/gtm.js?id=GTM-5G4CS4L
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"12",. . "macros":[{. "function":"__e". },{. "function":"__v",. "vtp_name":"gtm.triggers",. "vtp_dataLayerVersion":2,. "vtp_setDefaultValue":true,. "vtp_defaultValue":"". },{. "function":"__gas",. "vtp_cookieDomain":"auto",. "vtp_doubleClick":false,. "vtp_setTrackerName":false,. "vtp_useDebugVersion":false,. "vtp_fieldsToSet":["list",["map","fieldName","anonymizeIp","value","true"]],. "vtp_useHashAutoLink":false,. "vtp_decorateFormsAutoLink":false,. "vtp_enableLinkId":false,. "vtp_enableEcommerce":false,. "vtp_trackingId":"UA-21003310-20",. "vtp_enableRecaptchaOption":false,. "vtp_enableUaRlsa":false,. "vtp_enableUseInternalVersion":false,. "vtp_enableGA4Schema":false. },{. "function":"__v",. "vtp_name":"gtm.scrollThreshold",. "vtp_dataLayerVersion":1.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\gtm[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	84563
Entropy (8bit):	5.519641358243268
Encrypted:	false
SSDEEP:	1536:+UKJbOli0E+HlmnK+sCEOzh2aeWgGHcUil1U9aKPt52QUlBCg+BJ1:+UKVui0CnvsuSGVinIBJ1
MD5:	074DE81F5DAE40F54D08237E5FF14DE9
SHA1:	D9DF347B93CE80A91B05CD8FFD65E49ACB1436B2
SHA-256:	763C4292DE95774D322809A028D63500EC232CD9281EEB49A359C12A8777FE8B
SHA-512:	E2E5356F6BAAE5BDCDB1D4C8DE8205CA0FDDD6A066EA914095DB2C3C30A01A2098175F7A2915D89DA99A7A203FBD3CBC1C9CBE3156C0851DB6081DB0169785F2
Malicious:	false
IE Cache URL:	https://www.googletagmanager.com/gtm.js?id=GTM-T7V5LF
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"16",. . "macros":[{. "function":"__u",. "vtp_component":"URL". },{. "function":"__e". },{. "function":"__v",. "vtp_name":"gtm.triggers",. "vtp_dataLayerVersion":2,. "vtp_setDefaultValue":true,. "vtp_defaultValue":"". },{. "function":"__u",. "vtp_component":"PATH". },{. "function":"__f",. "vtp_component":"URL". },{. "function":"__e". },{. "function":"__u",. "vtp_component":"HOST". }],. "tags":[{. "function":"__ua",. "vtp_trackingId":"UA-58068936-1",. "vtp_trackType":"TRACK_EVENT",. "vtp_nonInteraction":false,. "vtp_useDebugVersion":false,. "vtp_enableLinkId":false,. "vtp_doubleClick":false,. "vtp_advertisingFeaturesType":"NONE",. "vtp_eventCategory":"test category",. "vtp_eventAction":"test action",. "vtp_eventLabel":"test label",.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ideas-to-combat-corona-virus[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5107
Entropy (8bit):	4.8990878582239095
Encrypted:	false
SSDEEP:	96:bZ692TdGO6Tg6YtTWMDcKYSB7ejHNIMFoc+bQVM:bZuTTg6+yMDcKYBN9oc+k6
MD5:	3C1B5D98BF0309FC7F929CCF1EF87F66
SHA1:	E8D338AC254F7AF80EA79F84F6E7F30B4EE9B840
SHA-256:	15E131C58CEE40EAE3D7F1D2BD13E41C9E27F0A55ABCCC19036CCCFB4458948A
SHA-512:	EA325BA276A74F50B8C4530D50000C016DB7BEB1A892F4B76964238C15CFE9CDEE7C9C806B65CAA3FE39FEE939AA3110FB16008C0B7095F210EBE583FD43F8DE
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-03/ideas-to-combat-corona-virus.svg
Preview:	<svg width="359" height="136" viewBox="0 0 359 136" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0)">.<path d="M27.3462 72.3929C27.3462 72.3929 -15.7078 72.3117 10.4176 60.6291C20.8352 56.0047 40.6937 52.5161 60.7964 49.9199" stroke="black" stroke-width="5" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M101.734 72.3929C101.734 72.3929 144.788 72.3117 118.663 60.6291C108.245 56.0047 88.3867 52.5161 68.2841 49.9199" stroke="black" stroke-width="5" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M101.734 92.0261C101.734 92.0261 144.788 92.1073 118.663 103.79C108.245 108.414 88.3867 111.903 68.2841 114.499" stroke="black" stroke-width="5" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M27.3462 92.0261C27.3462 92.0261 -15.7078 92.1073 10.4176 103.79C20.8352 108.414 40.6937 111.903 60.7964 114.499" stroke="black" stroke-width="5" stroke-miterlimit="10" stroke-lineca

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\item-list.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	285
Entropy (8bit):	4.505137324364592
Encrypted:	false
SSDEEP:	6:UuAVtvA7MmDGjudGj0XQKLt0Gj1IiGHt0GjjVwJ6Ivt0GjHCwJ6EAv:UumvyME/X1iiG9wY9wYPv
MD5:	8C9B6BEC7C9EBFB5351D874B356A38D1
SHA1:	87B4A1A6DB3220CF73F29F80DA1896605B396D74
SHA-256:	5251EC9A6D7F9CC54B205363D70EB38BF67517F8E02B3AE04E85C9CF5F908228
SHA-512:	4896DB2F629D7A2451B0A4A4BF722CA615BCC90F25D18FFF0B26486B51D0C26932294C756AAA6472B40FBA45C069F56CA998DB094CE6582419FDDA83098DD5E0
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/item-list.module.css?qrgttk
Preview:	/*. @file. * Styles for item list.. */...item-list__comma-list,..item-list__comma-list li {. display: inline;.}..item-list__comma-list {. margin: 0;. padding: 0;.}..item-list__comma-list li:after {. content: ", ";.}..item-list__comma-list li:last-child:after {. content: "";.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\jquery.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
IE Cache URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\jquery.once.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	908
Entropy (8bit):	5.080594716216923
Encrypted:	false
SSDEEP:	12:UOzU1tEIxdc+l+Q1V2DKF4kbbju1KAD4cSdcWKp2RDFrOz0hGhe9a711x5OvGKVw:NY4oiZSdcL2DFaTeY10vGK5YZY1rlW
MD5:	48540C4B174900EEE9E0894EBBD23FD7
SHA1:	3D7ECB0A1FEF4AEEACF3F9B82099027DE44C652A
SHA-256:	1DA79754CCDA7C241F56D5A82ED377C3384B58DB3C718D9C1FD38843C47D8DF3
SHA-512:	74ECE696B1E978E6E86A783C356FFA0275DC736AA67AB8698AF8E0E53C40FBAE56748450951AF86A6773450B7FD885D269978C55DF384401AC5F5211A4488012
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/assets/vendor/jquery-once/jquery.once.min.js?v=2.2.3
Preview:	/!. jQuery Once v2.2.3 - http://github.com/robloach/jquery-once. * @license MIT, GPL-2.0. * http://opensource.org/licenses/MIT. * http://opensource.org/licenses/GPL-2.0. */.(function(e){"use strict";if(typeof exports==="object"&&typeof exports.nodeName!=="string"){e(require("jquery"))}else if(typeof define==="function"&&define.amd){define(["jquery"],e)}else{e(jQuery)}})(function(t){"use strict";var r=function(e){e=e\|\|"once";if(typeof e!=="string"){throw new TypeError("The jQuery Once id parameter must be a string")}return e};t.fn.once=function(e){var n="jquery-once-"+r(e);return this.filter(function(){return t(this).data(n)!==true}).data(n,true)};t.fn.removeOnce=function(e){return this.findOnce(e).removeData("jquery-once-"+r(e))};t.fn.findOnce=function(e){var n="jquery-once-"+r(e);return this.filter(function(){return t(this).data(n)===true})}});.//# sourceMappingURL=jquery.once.min.js.map

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\logo-serviceontario@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 314 x 76, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3429
Entropy (8bit):	7.890173045368409
Encrypted:	false
SSDEEP:	48:C/6BjsSsRFT00zid+42Av1T51eeGM21wq5CBJj/BbpCIdazdCTEetQj4LFBBxxoj:CSBwSC50Kisi+CNbpC6azm+j4Llkj
MD5:	140AB78A5FD95A567C1E91E8BDA59E72
SHA1:	C36C77A4C3D2AD9C926DA8C6A18280BC007BC1E7
SHA-256:	ADE4510791D1B4997FE624230C4621811B9B7624394262500C8B592607AEC214
SHA-512:	4EE41DD144C7F16B5A614279AB7D345BBB7C7C7A94980F35B2051AE1A1C1D60314A7A77A4773D4437147AF94265B166657479D61A5CC1BD2EF3FA3EA3D187331
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/logo-serviceontario@2x.png
Preview:	.PNG........IHDR...:...L......N{4....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..?.]G..-7.$.P..HX..R..H.....$.(..H...o..."R8U..48R6JJ.LC..F.....HA..P`.)$e..Xgs3.3w.}s.\|..y..}w...9s...d...AX]........ .+.... ..... .":A.... ...N..AD'.. ...A.... ...A.... ...A.Dt. .":A.... ...N..AD'.. ...AD'.. ...A.... ...A.Dt. ..qdV?.......k...}.......{..............fryse.lzr....x.?.6...........sp....y.Wo..l.iGD.c..G...6.o>.........k..l...i........AWrz...'../.\|...'.kv..s.}.j ?A.....~...r..E.-......<.\|../....?7y...w....!.....v.m.&9....4.>u.7........".0.GG.z..........`.v..T..,'.=............y#/..Bvk.~:.1Yn...t.L.s.aV...'<.;...9.S.S.=...%Yfp...+9...Gr...[;!..7...y.Ky..`.g...:.a.<..n......\.%..0h....M^.<.....~....>..$;.vx...F%:/OBY.X.#.+..Gh%..KU....E.[......K.b..f)g.9...<W$W>.!.....7.).1..+}Ze...G...\....uo.d...;zw...\II...n\..j..a#..p..s.Z6.L.$......0..~N.l...Sj.w.fv..f.yU]^.... ...Q..._..g.......w.....~..Jy....c...<.}.E0.T~..y;..u.z..G..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\logo-serviceontario@3x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 828 x 188, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24516
Entropy (8bit):	7.971561164547846
Encrypted:	false
SSDEEP:	384:yCr/t9JbCkqYQ7rgwk321q5cnq+iq37GTiu9uoozt3mdPh/o51ol7XES5DkE1p1s:yCr//Ju/7rgwxFnqlq37GOztoPS5Kl7g
MD5:	40F71798A45166F3E7D8BEFEC0B0E792
SHA1:	160114222E6595D2FE99B3105F7E1AC4CA0E035D
SHA-256:	B49B863CD7D397BE87B95E00D87BCB29B6A6754EBA20A4A98B65344F0C240CF2
SHA-512:	D254944F64B316DA42EB7695B24EF23177C7E5F5701814FEEE1EB547F5441EA9761B245AECBD39212F08B3660635E70E5AB1D27F2F5F215B62D1BF2BD9C795EE
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/logo-serviceontario@3x.png
Preview:	.PNG........IHDR...<.................sBIT....\|.d.....pHYs..........+......tEXtSoftware.www.inkscape.org..<... .IDATx...w`..?....l....%..l.w.m06.t..@B.......B.$.o8.wI..q)......b....mY.eY....2..C.C\..]i....H..y.l..g....0xd.n.B.!..B.T%"......0..Z!...t..E.!..B.!.1..cT..<0.;)."..B.!...@..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[..^.!dja..z......%.(...+.AX.!...cX.y%........v...(.ae$.Q.3...A....Px......W...<..........x ...Q........!. B..... =2...v....V4.t.aed..X....)..8(9..Hp...`...k....K..#..nxE

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\mainstylePHealthPortal-en[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	183016
Entropy (8bit):	5.350996575136658
Encrypted:	false
SSDEEP:	1536:npXGjUEJk15LDm4oUB5eXXmwDm4oUB5el/7kQ:pXcdJkBB567B5s7kQ
MD5:	19B829E81CBE2523FC9BA03C18DA3FE9
SHA1:	E97FAF1F9C6B26629D20AE560288E2076B0658E9
SHA-256:	BBF22F54AB8486ED6CBAAA3BBD09E81A1FB262B2B340868AECA7E4B458FEAEAA
SHA-512:	72C754C622D73063CDA15B6D758018BEDD798873B4E83D209BAAFAA8AA5A4BE329F301B5AA036C42FCA4FA62AB1D0A2CCB3EAB1EABB3685B1A8F9669A67ABDE6
Malicious:	false
IE Cache URL:	https://www.phdapps.health.gov.on.ca/phulocator/Style/mainstylePHealthPortal-en.css
Preview:	/*** begin PLUMTREE PORTAL 4.5ws STYLES ***/..A..{COLOR: #000000;}...inputBox..{FONT: 10px verdana,arial,helvetica,"sans-serif";}...linkCap..{FONT: 10px verdana,arial,helvetica,"sans-serif"; TEXT-TRANSFORM: uppercase; COLOR: #000000;}...linkCap A..{TEXT-TRANSFORM: uppercase; COLOR: #000000;}...wizBckgrndClddNarrow..{BACKGROUND-COLOR: #F4F4F4;}...wizBckgrndClddWide..{BACKGROUND-COLOR: #CCCCCC;}...bnr..{FONT: bold 10px verdana,arial,helvetica,"sans-serif"; COLOR: #FFFFFF;}...bnrDate..{FONT: 10px verdana,arial,helvetica,"sans-serif"; COLOR: #FFFFFF; TEXT-ALIGN: right;}...bnrHead..{FONT: bold 14px verdana,arial,helvetica,"sans-serif"; TEXT-TRANSFORM: uppercase; COLOR: #FFFFFF;}...bnrHelp..{FONT: bold 10px verdana,arial,helvetica,"sans-serif"; TEXT-TRANSFORM: uppercase; COLOR: #FFFFFF;}...bnrHelp A..{FONT: bold 10px verdana,arial,helvetica,"sans-serif"; TEXT-TRANSFORM: uppercase; COLOR: #FFFFFF; TEXT-ALIGN: right; TEXT-DECORATION: none;}...bnrSubHead..{FONT: 12px verdana,arial,helvetica

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\on-this-page[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4097
Entropy (8bit):	4.677840687836467
Encrypted:	false
SSDEEP:	96:kpsyvhZu7HLWIA3I+0EG7Rm/yrOrufQaNbbibMlriqEM:SBvTu7HLWIA3I+0YUQmbiY1iqEM
MD5:	4B82AA16BCA51DDA7DB60F00A7C36AB2
SHA1:	A035C47F897B4D80DFAB22D74F4EB95E9474CB4A
SHA-256:	F31EE9EDD4D394B3788F4406846BB23379D29E826DA986B715EF236CC10D6444
SHA-512:	BED66AD2D0A113098842FA5D981C587004FA93C16AAF24DBA99972F7B0371ECEDE0F12A1AC125BA1C72DF760E64CB0F75D3DE67113A95A8240FFF6BC7DCA8081
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/js/on-this-page.js?v=8.9.13
Preview:	/*. @file. * Placeholder file for custom sub-theme behaviors.. . /..(function ($, Drupal) {. /*. Use this behavior as a template for custom Javascript.. */.. //Set a tracker to see if this function has already run.. //Putting this in here because function fires twice for unidentified reason. var onThisPageFired = false;.. function toggleClass(element, className) {. if (!element \|\| !className) {. return;. }. var classString = element.className, nameIndex = classString.indexOf(className);. if (nameIndex === -1) {. classString += ' ' + className;. } else {. classString = classString.substr(0, nameIndex) + classString.substr(nameIndex + className.length);. }. element.className = classString;. }.. Drupal.behaviors.onThisPage = {. attach: function (context, settings) {.. var ToC = [];. var onThisPage,. showAll,. showLess,. tocWrapper;. if (!onThisPageFired && $(".toc-body").length > 0 && $(".t

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\onesite-holiday-pay-calculator.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	7106
Entropy (8bit):	5.247064945099283
Encrypted:	false
SSDEEP:	96:vBu1+zG/20SAclNek4zNvIkLCEBcNUaFKTVQcuNQOCCHhQ+H+IF/ms:X0OeBzKkmEFZqZuLK6+eXs
MD5:	1E8EA161887BDB34E5719CFB6E6B3D98
SHA1:	0D1A12896A87757326A6D7E6750C5FBFE44D786D
SHA-256:	3B6FD807B693AA20CB3A9A80410E9A3EE1950F2E7D7D6B7A2317EA66680060DB
SHA-512:	95AFD64FEB218445A632F63F9B675242725564E3DA3DBCC954B6846FB61A0593EDFA930B6EAF223A13AFE20712CFCC2E1A540578231C2CC94D1FEDC1A14E602D
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-holiday-pay-calculator/onesite-holiday-pay-calculator.min.js
Preview:	"use strict";angular.module("onesite.holiday.pay.calculator",["onesite.holiday.pay.calculator.services","onesite.holiday.pay.calculator.controllers","onesite.holiday.pay.calculator.directives"]);."use strict";angular.module("onesite.holiday.pay.calculator.directives",[]).directive("onesiteHolidayPayCalculator",["weekLabels","getDateObject","languageService","daysFromToday","selectedCheckboxes","formatDateForAnalytics","differenceInDays","subdayOptions",function(a,t,o,l,s,c,i,r){return{restrict:"E",scope:!0,replace:!0,templateUrl:"/onesite_modules/onesite-holiday-pay-calculator/partials/onesiteHolidayPayCalculator.html",link:function(e){e.language=o.currentLanguage.get(),e.weekLabels=a,e.daysFromToday=l,e.getDateObject=t,e.selectedCheckboxes=s,e.formatDateForAnalytics=c,e.differenceInDays=i,e.subdayOptions=r}}}]);."use strict";angular.module("onesite.holiday.pay.calculator.controllers",[]).controller("OnesiteHolidayPayCalculatorImpl",["$scope","holidaysOfTheYearService","languageService

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\onesiteAside[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, UTF-8 Unicode text
Category:	downloaded
Size (bytes):	2461
Entropy (8bit):	4.52395668895917
Encrypted:	false
SSDEEP:	48:Anok8XHghh8Wx4YLzOJ19YsYzOVvmq6EUq09qFr:kQghQuM
MD5:	A597AB8F7BB61DA94B4C83B9648D202D
SHA1:	8003CDBB9E31D8EBC590D451E9C2026823E0900A
SHA-256:	4B1EE1B3B0FAA7F96890B2BEF0A78130C009393EA0464E22E21A0B1EFAE4260A
SHA-512:	040BC9BD9E409293F4235AB4802F73B386F805262D2583CBD82395E9C6E2435E06244B85B22843FD41F46C46E67FA7DC5657C5586633536C5345459109D68B86
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteAside.html
Preview:	<aside>. <div class="large-4 medium-12 columns">. <h2 class="show-for-sr">. {{ 'Related information' \| translate }}. </h2>.. <div onesite-accordion. one-open="false". class="sticky">.. <div onesite-accordion-group. heading="{{ 'Accessibility' \| translate }}". is-open="show-for-medium-up". toggle-open="true". ng-if=". mainController.node.content.params.contentType === 'document' &&. mainController.node.content.documentViewer.enable. ". ng-switch="mainController.node.content.lang">. <div ng-switch-when="fr">. <div ng-include="'/core_modules/component/partials/accessibilityNotesFr.html'"></div>. </div>. <div ng-switch-default>. <div ng-include="'/core_modules/component/partials/accessibilityNotes.html'"></div>. </div>. </div>.. <h2 id="section-related" class="h6 sidebar". ng-if="mainController.node.conte

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\onesiteContentDate[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	367
Entropy (8bit):	4.605116063766543
Encrypted:	false
SSDEEP:	6:nsZCdW5KLTeb4am5rKgJq9TRGHKgJWk3TRa+YNWbyRXTuTHRM/:naCV31arQd05D4xy
MD5:	B734290BF6C29ACD25F37BF6AE7C74A6
SHA1:	DD46AB64053914894DBA40EED5991CA9021CD036
SHA-256:	DD1F871501A564211AEF5F7603BC12B2AD7C2C85CEA48EF06E2C43F1BF47A090
SHA-512:	0ACF6894D03AFF6427EBBFFC2584E82CD1AA2BF22BF76ADA4300AB0655E45604CE5E391545A87C63410185A6AC279EE1C663272FB7F4199E012EC639EAF90475
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteContentDate.html
Preview:	<div class="clearfix">. <small class="right". ng-switch="language">.. <span ng-switch-when="fr">. {{ text \| translate }} : {{ date \| date: 'd' }} {{ date \| date: 'MMMM' \| translate }} {{ date \| date: 'yyyy' }}. </span>.. <span ng-switch-default>. {{ text }}: {{ date \| date: 'MMMM d, yyyy' }}. </span>.. </small>.</div>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\onesiteFootnotes[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	876
Entropy (8bit):	4.478318989033825
Encrypted:	false
SSDEEP:	12:mHHIqC3jlclqvQfawoTbaWju6RPvhXmIzDuqUwwBNr33d+LPqs6HiG7kQh0fYMR:mIJ3jl/wITZRPvNm0yLr33kT+HE45MR
MD5:	6217180C101F83B59264D9D7E28892CC
SHA1:	99A180CA8096917C551F4CE9EA3091DFABBF6A1D
SHA-256:	186BAB01224AF5776B1BAC4175F67B99CA966E9D3EF15090C1A69BD6B6AF7C7C
SHA-512:	5073BCC98B42195766A862BC890D8B9BFBDAB562A781D7F6BAF185106F2882143779758D339C1C4842674D40FFD18962EB462766FF05838E96A596B59F1E9F52
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteFootnotes.html
Preview:	<div class="row" ng-show="footnoteList[0]">. <div class="small-12 medium-12 large-12 columns">. <hr/>. <h2 class="h3">{{ 'Footnotes' \| translate }}</h2>. <ul class="footnotes">. <li ng-repeat="footnote in footnoteList". id="foot-{{ footnote.id }}">. <span class="show-for-sr">{{ 'footnote' \| translate }}</span>. [{{ footnote.id }}]. <a href="#ref-{{ footnote.id }}". id="return-{{ footnote.id }}". rev="footnote". analytics-on. analytics-event="return". analytics-label="{{footnote.id}}\|\|{{footnote.title}}". analytics-category="footnotes">. <span class="show-for-sr">{{ 'Back to paragraph' \| translate }}</span>. <span aria-hidden="true">^</span>. </a>. <span ng-bind-html="footnote.tags"></span>. </li>. </ul>. </div>.</div>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\onesite[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 48360, version 1.0
Category:	downloaded
Size (bytes):	48360
Entropy (8bit):	6.38943268154998
Encrypted:	false
SSDEEP:	768:z0Zqlr9O272i5zdZVWIE1aFvtZYUKXylaqR2akcPYec87o5kVYTDF3VGVpvpeIBP:z0Zqlr9/dzHVWIvtWUKXQR2akcPYeZ71
MD5:	C3A096A96DCD188F89A38E4156BC099C
SHA1:	4369F0CC5C86B33799DB72254FD842601E8295EC
SHA-256:	B050C96C1880A23F6FDC8CC513CDD646029872488A0A0A612CADBD2EF549DAD7
SHA-512:	7E89D167AF1F28115BB9D6149B74F2CA243553C2AA5A33B0A3893A69DC18023E3F150548081C596CA6F6AD0513A4D68E79650E7B92787E16CFCA78B7E5B2B32A
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/onesite.woff?2lmqj5
Preview:	wOFF........................................OS/2.......`...`....cmap...h...T...T.V.Mgasp................glyf.......<...<..\.head.......6...6"..1hhea...8...$...$....hmtx...\...,...,.\..loca................maxp... ... ... ....name...@.........P..post....... ... ...............................3...................................@.........@...@............... .................................8............. ........... ................................................79..................79..................79.........@............%...#"........3!26764'%#535#.3...J.......J......l......R.............."......". .@.......%...I.w.5.?.P.\|....747635476?.676;.54763!2.......+....#"'&5#...#"'&5#"'&5.35#..........327654'&#".......;.....;.276=.3276=.4'&+.54'&+."....#".......327654'&#"..%......q....\...........n++<=++.++<=++I...m.[..p..I.............%.......m..............m.............................q...........n...<++++<<++++<........o.................................n.................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ontario-icon-breadcrumb[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	652
Entropy (8bit):	5.227778890961346
Encrypted:	false
SSDEEP:	12:TMHdoI645i/nzVW/KYf3UfW6O4lbyzRtSVhzxuUUUUUUUUUUUUUUcq:2dVB5AALfEfWMlbInSu
MD5:	FB0A3EBD668CEC8C4C654413F20FA336
SHA1:	A5AF6E1B1772677538A8A8177ED52474674E010A
SHA-256:	179C4C5284987677F59E6C0F4D95F15161442A19B1EC3F944703A75935F2C38E
SHA-512:	8D1DD8F1D2D90E98BA63824014DA31B91031C8CDAFB91E685CC3169CF6DD190AED8A3852FBF625E911E28733DEE0EBC62C6779FC49324D45E3D7BB0DD0102D23
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario-icon-breadcrumb.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 256 256" style="enable-background:new 0 0 256 256;" xml:space="preserve">..<g>...<g>....<polygon points="79.093,0 48.907,30.187 146.72,128 48.907,225.813 79.093,256 207.093,128 .."/>...</g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..</svg>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ontario-logo--desktop[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3363
Entropy (8bit):	4.699343789507078
Encrypted:	false
SSDEEP:	96:xvfsTA6uY8sAwKKdXAknjYCGd9A7Dx5Xq:hsEogeXAk9x56
MD5:	B7EBE96F1F149A2868B0ED6BD83C9438
SHA1:	6E435F081C337377206EC6B2D685C3385F095F96
SHA-256:	B5C52A066CC456C3A9DF9BF806716D30EC256E20118567B1E2AF731409F9604F
SHA-512:	1B25BED94BE1E185146826DBDD8062D45AF9EAC92EDAC4CDE72EE41B9A7A5EDC5111F57FF3201DE0A32D724ADFAC7CB51F669F5BBB2256C39B66B81BF3335CD1
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/ontario-logo--desktop.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.2.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 180 45.1" style="enable-background:new 0 0 180 45.1;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}...st1{fill:#FFFFFF;}...st2{fill-rule:evenodd;clip-rule:evenodd;}.</style>.<g>..<path class="st0" d="M0,25.5C0,18,4.6,13.3,12.5,13.3c7.9,0,12.5,4.7,12.5,12.2c0,7.5-4.6,12.2-12.5,12.2C4.5,37.7,0,32.9,0,25.5z... M12.5,33.5c2.3,0,4.3-0.8,5.6-2.2s2.1-3.5,2.1-5.9c0-2.4-0.7-4.5-2.1-5.9c-1.4-1.5-3.3-2.2-5.7-2.2c-2.3,0-4.3,0.8-5.6,2.2...c-1.3,1.4-2.1,3.5-2.1,5.9c0,2.5,0.7,4.5,2.1,5.9C8.2,32.8,10.1,33.5,12.5,33.5z"/>..<path class="st1" d="M41.2,37.2V26.8c0-2.7-1.4-4.3-3.8-4.3c-2.4,0-3.8,1.7-3.8,4.3v10.5h-4.5v-18h4.5v2.6c1.3-1.5,3-2.9,5.9-2.9...c3.8,0,6.1,2.6,6.1,6.7v11.7L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ontario@2x-print[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 637 x 162, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4233
Entropy (8bit):	7.890440885738752
Encrypted:	false
SSDEEP:	96:dn8r57dOJ3d9P56ef0wc54KE1aE4W6lizEm2wbZLxAvqOFc:duI3dr6eY4AExzEBMpKvqOFc
MD5:	F4DC8A52B36FCE82D8E252233967B942
SHA1:	0739463222FBE6D07057AD44293778D7DACCE5D4
SHA-256:	5118D295C9B133CA1E0511029D25E93E94EF3C4AC165822DD3D070A3A7996AF5
SHA-512:	6FEBE50A98484B7F57FDB39EBDF23506547525540BDBDD2A973047A7210D71A86B48C38AF80BAAD3CFDD4EAAB47AC9C7E4FC090FF91B00FFE2E0CE83C91464BD
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/ontario@2x-print.png
Preview:	.PNG........IHDR...}..........Z.,...cPLTE......................................................@@@ppp.................. 000......PPP```....^......tRNS..@ ....P0..`...p.......IDATx......!..a..,-....W....0.0\|...7`Nn!..^K)...?...[....P...._[...X....j....Wo?..c..m...K.y....[.:.>.B...<....C.$z..............C..../..9vg.3.k.....Q35..]s.g.._4...\.C..a}\|W....-...w^.....nh.._....3.......tC.)...h.V?......e.b..E...:...'.2...J4....a. ...........t}.3Q....(`..c.....Oy'...Nd..v{..R.TM.X..i.lw...x...p8.........R...I(..=.N...n.....Y...kI.........c.1......;...H.a..94....a.R$~.c..N..wC...t...S........B..... X...d..v..}...a...V.D.Y.m.....>x.O.<...k...r..x.....&p.......V.H.........._.]u.R.}Rp....s<-.3.,...$]^...k..\|...p..v..3*.<..[..u.......b.$.j..>..{.>o..;hc.j..wO..a.H..F,.T..}..._w$F.p.......wj..A...R.v.\'.\|O...0....>...W...V...A.7.\.}.>.c.....Q.o.....^yf.^ &......zq.h.....o$.WX`R.k./.ga........v.`.....Q$.B.c.A..[~.A...a...}..).T..6...K.).g..2....@.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\open-sans-400--italic[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 15076, version 1.1
Category:	downloaded
Size (bytes):	15076
Entropy (8bit):	7.960536136856118
Encrypted:	false
SSDEEP:	384:ihKnWsY3Y02JQ9zxRm7TR7NA0tXn/qZOSO7O7RWf5v1X:e2WPp2J2Ct7TXnSsSSSRWhl
MD5:	4B52A816817A711E6971955C835ECFBB
SHA1:	051C5829D5DF0558FC4C8CE02149FB703EA763CA
SHA-256:	14B889CE4EB170C9DEDE3907438E89A1C43E7A8C3E7F3DEB8FB280042CF57BF1
SHA-512:	2D44B2BBB0A66C162ED206CE58BE93F738E45938D41E497E8C3E525A0E06225F64CD335F1854F2475A9664C31127BEF7ECCD2FF630FBF6888C29EA48E55FC541
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/fonts/open-sans-400--italic/open-sans-400--italic.woff
Preview:	wOFF......:.......c4........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`.M.=cmap...8...........gasp...............#glyf......'b..8..O..head..D...6...6..'nhhea..\|..."...$...Khmtx..........l.v>xkern..,............loca..6..........t.Kmaxp..8.... ... .d.Ename..8........l.n5.post..9\.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f.f......:....Q.B3_dHcb```.fccfeabby....A!.(..................ah..e.P``...c.`.............x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..{.\S.....7..R.@..C.DT.... ."""....l.....#".....Z..)...-".n./.j.Uk}.Z...U.]..d...7.....m.?1..;g.9s.;g...3.g)jeXF.0..>r5\|.......P*j}..........;..1.......y.(...b...v'?/..+.F.F.z.E..."%~.r[x..'(.............=.>?...1?T.jx......g..Xxw..H.K...AD..d....?.^I.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\open-sans-400[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14260, version 1.1
Category:	downloaded
Size (bytes):	14260
Entropy (8bit):	7.955023552448444
Encrypted:	false
SSDEEP:	384:V0ZkWiwHBFDPthd/jO+yk0iwCebLvVgYGpn/qZOSO7O7RWf5z4Oc:V0hRbVFykgNSnSsSSSRWR8/
MD5:	D0BAD741AEFB909E4BE56D188B6F02B9
SHA1:	1547224E0A0BE06E5178815718797BD6607169A4
SHA-256:	4194A431CCA6678145F2C4D7D2E597087E2A76A4878C26B66315B2BA4F4EA393
SHA-512:	33FB0A386FD3ED97ADA0A6612D818530FED61E8688A0C38BCE29031076430C7FC2AA075C5AA8003E2E091D80C64602FE7A8D7F3B7380601EFB3CEC20285B50D5
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/fonts/open-sans-400/open-sans-400.woff
Preview:	wOFF......7.......^L........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2......._...`.>..cmap...8...........gasp...............#glyf......$Y..3..~.head..'<...6...6...=hhea..'t.......$....hmtx..'........l..Y.kern..)............loca..3.........C.O.maxp..5`... ... .d..name..5........2../Jpost..6,.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f..8.....u..1...<.f....................{...h..... 0t.vf.....&.O.....)B..q>H..u..R``.....9.x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..z.\S...=so.j.......R.!......V..RDDZ...J.E....H.R.j...R.^k...Z[...W.$.w......~.~...9..9.r...8.....9..9...F\|..#M.f....Y....}.g...\qf.......^..J...;.'..~.h..P?.@..4..........2r.....^./..'....!.1?!..s.H.8.3..U..\g.eP./=/.\@.....^...W...W.-...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\optionB[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	688
Entropy (8bit):	4.670381988102231
Encrypted:	false
SSDEEP:	12:tvG1B5gLYapGkfTqKLaTvjoLcjoAf0VBK3bvnZhuLuAzT8WjaDm8:tu1BWOUXxhf7KrZ8UWGDm8
MD5:	FE3FEFC8F0A091D0D76373BC323BDE00
SHA1:	16AF914F23026856EE067F6D7DE95F9C7A2C5AA2
SHA-256:	1C8EF09634376E6CAE367CA94C53047822E8C15560ACF1099F09C9CF6D34AA4D
SHA-512:	0C5CFB0B8F6B93AC8C4C70975C264DC3D1EA88DF685E4E7B71EE80669756C564CE9723472A441463EFD6F493C37E0D643778D7A7B8DCEF38F1AEF7DB5598511F
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/optionB.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 47.7 47.7"><circle cx="23.85" cy="23.85" r="23.85" style="fill:#49a7a2"/><path d="M685.61,50.38H677V32.55h9.54a3.61,3.61,0,0,1,2.94,1.38,4.9,4.9,0,0,1,1.13,3.16,4.69,4.69,0,0,1-.69,2.48A4,4,0,0,1,688,41.23a4.52,4.52,0,0,1,2.45,1.65,4.69,4.69,0,0,1,.89,2.91,3.91,3.91,0,0,1-1.67,3.36A6.64,6.64,0,0,1,685.61,50.38Zm-5.15-14.86V40h4.63a2,2,0,0,0,1.5-.62,2.23,2.23,0,0,0,.61-1.64,2.29,2.29,0,0,0-.57-1.62,1.8,1.8,0,0,0-1.39-.61Zm5.32,7.23h-5.32v4.69h5.15a2.14,2.14,0,0,0,1.59-.67,2.26,2.26,0,0,0,.66-1.64,2.58,2.58,0,0,0-.59-1.69A1.91,1.91,0,0,0,685.78,42.75Z" transform="translate(-659.44 -17.74)"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\page_government-ontario[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	15129
Entropy (8bit):	5.185804144059711
Encrypted:	false
SSDEEP:	384:5FlMRMqCJVsxiqELBsq8FF9FxFpoM867v+T7v+c:5FlMRMqCJVsxZELBsq8FF9FxFpoM8Xuc
MD5:	C522CABEDA9E96F5C5CE757140CB3A78
SHA1:	DFCADC39E1F95C8DDBBA31F121D5F7A667ACF359
SHA-256:	0880994C5F3A2D94971B7A3A88895AD81AB8F2D36D7E59449E25174A483FB756
SHA-512:	A339E4E982C01AEFB5EF5F3CDEA19578E59766C41D7867A3772722ABF4BD8078C3E0DAD8BC3C2C1B52D8737D406A25DE517C4FF3D54F5DDD3A2EF3E333902283
Malicious:	false
Preview:	{"_id":"60707288fb20fe08ca834930","changed":1617982086,"language":"en","nid":"53967","private":0,"published_at":"1444061784","status":1,"title":" Government of Ontario","translations":{"fr":"page/gouvernement-de-lontario"},"type":"page","metatags":{"description":{"#attached":{"drupal_add_html_head":[[{"#weight":2,"#value":"Ontario.ca is the official website of the Ontario Government.","#name":"description","#id":"metatag_description_0","#tag":"meta","#theme":"metatag"},"metatag_description_0"]]}},"og:description":{"#attached":{"drupal_add_html_head":[[{"#weight":31.1,"#value":"Ontario.ca is the official website of the Ontario Government.","#name":"og:description","#id":"metatag_og:description_0","#tag":"meta","#theme":"metatag_property"},"metatag_og:description_0"]]}},"twitter:description":{"#attached":{"drupal_add_html_head":[[{"#weight":48.2,"#value":"Ontario.ca is the official website of the Ontario Government.","#name":"twitter:description","#id":"metatag_twitter:description_0","#t

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\phone[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3983
Entropy (8bit):	3.9233631757088947
Encrypted:	false
SSDEEP:	96:AFxvRl2OV1d/UaGgX2phUt1nExHaQEET+u7hO7VC:yvRlll/UaGgXwhc10HQEiEOo
MD5:	79DEF050C85931B2A5F387892E013F8C
SHA1:	A2AB876984106052B752A224B780C8B2FD58342E
SHA-256:	3D2AF2899747E4C51E45AC7EB1EAA0FDEE399022C94D8F4721922FB8AC740E8C
SHA-512:	2A90F626B9B9ABD202087D1361311863A331662E0ECC67BD4DD067A189E523CCE4E0963FEE27FE454A8531589B67ADCDE9ABF1B3223C368BB83CB1F83C318BF0
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/phone.svg
Preview:	<svg width="104" height="104" viewBox="0 0 104 104" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M82.1171 64.4242C79.988 62.2073 77.4199 61.022 74.6981 61.022C71.9982 61.022 69.4081 62.1853 67.1912 64.4023L60.255 71.3165C59.6843 71.0092 59.1136 70.7238 58.5649 70.4385C57.7747 70.0434 57.0284 69.6702 56.3918 69.2752C49.8947 65.1486 43.9901 59.7708 38.3271 52.8127C35.5833 49.3446 33.7395 46.4253 32.4006 43.4621C34.2005 41.8158 35.8687 40.1037 37.493 38.4575C38.1076 37.8429 38.7222 37.2063 39.3368 36.5917C43.9462 31.9822 43.9462 26.0119 39.3368 21.4024L33.3444 15.4101C32.664 14.7296 31.9616 14.0272 31.3031 13.3248C29.9861 11.9639 28.6033 10.5591 27.1765 9.24214C25.0474 7.13495 22.5012 6.0155 19.8233 6.0155C17.1454 6.0155 14.5553 7.13495 12.3603 9.24214C12.3384 9.26409 12.3384 9.26409 12.3164 9.28604L4.85345 16.8149C2.04386 19.6245 0.441519 23.0486 0.0903206 27.0216C-0.436477 33.4309 1.45122 39.4013 2.89991 43.3084C6.4558 52.9005 11.7677 61.7902 19.6916 71.3165C29.3057 82.7963

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\raleway-modified-700[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18032, version 4.20
Category:	downloaded
Size (bytes):	18032
Entropy (8bit):	7.97894287396032
Encrypted:	false
SSDEEP:	384:2lBMfgPLy423SZ3M5aM+yLgJ40M2aVtm1erVAWUfFTeOJVZ9vSCOFqvdym+LqMmn:2lbfv5MoMu40M2aLDrvUsM5OQymaqMmn
MD5:	FFEC5345D938424D2E531EA4EECD8D9D
SHA1:	2A4C6A7FE809944C54D5ACA0AAC37B26DC270737
SHA-256:	811B7E18E89AC8CFE7DCC86987A6022858872307B653DBF74D9EC8CB700AA856
SHA-512:	B6DA2A18B41ED1CC08DCC7E6ECC1677972CAACA7CC8414F8BBB44E48A4B5C4A708C81207BD195C0CCECC197531F60ED07BD2869043D49C5CC8FC96B075316D67
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/fonts/raleway-modified-700/raleway-modified-700.woff
Preview:	wOFF......Fp.......h........................FFTM...0.........$m.GDEF...L....... ."..OS/2...l...G...`..p.cmap...........bd..xgasp................glyf......5...j.-W.head..9,...1...6....hhea..9`... ...$.P..hmtx..9.........".$.loca..<............maxp..=........ ...wname..>....z.....2..post..D..........Ldnx.c```d..3.....}0..K.....x.c`d``..b...`b`../@...1.....'..x.c`b\|........H.3...1.......P.#2.).(.A..A)...........`j.$...)..F..{.=.x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..].\|[...-/.+.JW.J....e..%...#..,'q.$.$a$$....e<.{...<6.>.:.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\raleway-modified-700[2].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18032, version 4.20
Category:	downloaded
Size (bytes):	18032
Entropy (8bit):	7.97894287396032
Encrypted:	false
SSDEEP:	384:2lBMfgPLy423SZ3M5aM+yLgJ40M2aVtm1erVAWUfFTeOJVZ9vSCOFqvdym+LqMmn:2lbfv5MoMu40M2aLDrvUsM5OQymaqMmn
MD5:	FFEC5345D938424D2E531EA4EECD8D9D
SHA1:	2A4C6A7FE809944C54D5ACA0AAC37B26DC270737
SHA-256:	811B7E18E89AC8CFE7DCC86987A6022858872307B653DBF74D9EC8CB700AA856
SHA-512:	B6DA2A18B41ED1CC08DCC7E6ECC1677972CAACA7CC8414F8BBB44E48A4B5C4A708C81207BD195C0CCECC197531F60ED07BD2869043D49C5CC8FC96B075316D67
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/fonts/raleway-modified-700/raleway-modified-700.woff
Preview:	wOFF......Fp.......h........................FFTM...0.........$m.GDEF...L....... ."..OS/2...l...G...`..p.cmap...........bd..xgasp................glyf......5...j.-W.head..9,...1...6....hhea..9`... ...$.P..hmtx..9.........".$.loca..<............maxp..=........ ...wname..>....z.....2..post..D..........Ldnx.c```d..3.....}0..K.....x.c`d``..b...`b`../@...1.....'..x.c`b\|........H.3...1.......P.#2.).(.A..A)...........`j.$...)..F..{.=.x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..].\|[...-/.+.JW.J....e..%...#..,'q.$.$a$$....e<.{...<6.>.:.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\recaptcha__en[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	341678
Entropy (8bit):	5.691689116624371
Encrypted:	false
SSDEEP:	6144:HZZ7B4tguIvvtotzv5vK4qRLdQkGVEdUyrxxuudvU:771vv4mRLdQTqdPddM
MD5:	B639548B50C2EE7294D4E04A2E563ACE
SHA1:	FF47D0F0F354D6F68098510A2EA67716A1AB369E
SHA-256:	030235AB6FC1739381DF015B815A93E2ED3921F09832954DBACDE9991708E27A
SHA-512:	918B6EEF1B9AF7F0C4750976E6274318BD77EAC525E23012B0FACA2AE4707D1F66BF427B04F8F01FC6224780EF6A68DDF12668596D671F8A85CB576C3F9F7AEF
Malicious:	false
IE Cache URL:	https://www.gstatic.com/recaptcha/releases/mrdLhN7MywkJAAbzddTIjTaM/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var W=function(){return[function(d,E,Z,R,n,M,O,g,c,I,k,x,h,X,z){if(X=[2,20,0],!((d^877)&13)){if(R=l[30](X[1],document,l[37](16,E,Z)),!R)throw Error("reCAPTCHA client element has been removed: "+Z);z=R}if(!(d>>1&11\|\|(x=["10","setTimeout","535.3"],Zg.call(this),this.I=Z\|\|null,this.Y=l[25].bind(null,X[0]),this.Z={},this.T=E,R)))if(this.J=null,m&&!V[46](46,x[X[2]]))P[26](11,x[X[0]],D(this.M,this));else{for(h=(O=[(M=((this.J=new RQ(D(this.M,this)),V)[3](14,"window",x[1],this.J),V[3](22,"window","setInterval",.this.J),X[2]),"requestAnimationFrame"),"mozRequestAnimationFrame","webkitAnimationFrame","msRequestAnimationFrame"],k=this.J,G.window);M<O.length;M++)I=O[M],O[M]in h&&V[3](6,"window",I,k);for(c=(g=D((dn=(n=this.J,!0),n.J),n),X[2]);c<Mq.length;c++)Mq[c](g);OG.push(n)}return(d-6)%11\|\|this.I(new gn(void 0!==R?R:!0,new Q(E,Z))),z},function(d,E,Z,R,n,M){return((M=["keyup",27,0],d+4&2\|\|E.keyCode!=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\report-price-gouging-during-corona-virus[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6814
Entropy (8bit):	4.082683189957993
Encrypted:	false
SSDEEP:	192:zmzBdEFaqO6JpO5+2wiR0WB4+z3H/VqTF+W3TY:zYdEFaqO2pO5+2wRk8F+W3TY
MD5:	22BB5F4589A65EC0D626A05E687D25C4
SHA1:	44836538FEF4DFFCD1C992A447208A934844E2EA
SHA-256:	D04BE8D3F4F462D8568629AB858610E2119F06229AA29137968274AF240B8FB9
SHA-512:	7619B907D6562D3CF630631A17636C48714A6EC58DEFD436B6229110CEA7F03498725419AAB33F4FAB7E527957824CFA5E4E607FF2C08AFAFBC40C4A17B6A81E
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/report-price-gouging-during-corona-virus.svg
Preview:	<svg width="140" height="151" viewBox="0 0 140 151" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M97.3 98.325H51.4V98.4249H5.60001L10.9 148.225H51.4H92L97.3 98.325Z" fill="white"/>.<path d="M51.4 149.925H10.9C10 149.925 9.30001 149.225 9.20001 148.425L3.90001 98.625C3.80001 98.125 4.00001 97.625 4.30001 97.325C4.60001 96.925 5.10001 96.725 5.60001 96.725H51.1C51.2 96.725 51.3 96.725 51.4 96.725H97.3C97.8 96.725 98.3 96.925 98.6 97.325C98.9 97.725 99.1 98.125 99 98.625L93.7 148.525C93.6 149.425 92.9 150.025 92 150.025H51.7C51.6 149.925 51.5 149.925 51.4 149.925ZM12.4 146.525H51.1C51.2 146.525 51.3 146.525 51.4 146.525H90.4L95.3 100.125H51.7C51.6 100.125 51.5 100.125 51.4 100.125H7.50001L12.4 146.525Z" fill="black"/>.<path d="M51.4 100.125H1.7C0.7 100.125 0 99.325 0 98.425C0 97.525 0.8 96.725 1.7 96.725H51.4C52.4 96.725 53.1 97.525 53.1 98.425C53.1 99.325 52.4 100.125 51.4 100.125Z" fill="black"/>.<path d="M42.9 148.825C42 148.825 41.2 148.125 41.2 147.225L38.5 99.6249C38.4 9

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\reset-appearance.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	274
Entropy (8bit):	4.5219236059353545
Encrypted:	false
SSDEEP:	6:UiE4nzwfgWczGPtd+LRuL7OAnRtX0H0D0K:UvdczGPtELRuL7jXOMH
MD5:	5318929554D3BCE84406B2A5418EACAE
SHA1:	0E6DB18A3D7FBBDB6FC3827D3DA529A778AED732
SHA-256:	0AC01AB832B811CDC2DFDDAF28BA2F1EE3EF3BB6486CBAEB424226FDE71EE625
SHA-512:	9CD234CAFB5B728B9F0C7D1E2A9E851A751C1617B04550E68ECB0DD0E7211FBC6453093E5AC93CBACA89F716AA573BEACFE730917F567619DC93675A52F08C93
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/reset-appearance.module.css?qrgttk
Preview:	/. @file. * Utility class to remove browser styles, especially for button.. */...reset-appearance {. margin: 0;. padding: 0;. border: 0 none;. background: transparent;. line-height: inherit;. -webkit-appearance: none;. -moz-appearance: none;. appearance: none;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\spring-2021[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, frames 3
Category:	downloaded
Size (bytes):	64293
Entropy (8bit):	7.846351923438243
Encrypted:	false
SSDEEP:	1536:Fma7QnNHsXD4679zsPckbbtVwWRQOIzdH5sl4ueSd6n1kg:d2NHsmrbEWmfdH50g
MD5:	508FD6E64738121024290EBD8E7A6A74
SHA1:	002BE4D4876CD81414B945DB4FB77E4A65B42C02
SHA-256:	FB969147A45B36F77DA9C817E8199F5A2C7DC24164E08BC5207156DA52455143
SHA-512:	C0671B8DB8A92879A84E0137BE230FC653443D4E82D51B56FFB82780C053845DF346BC96A54A58626150420F6132296A71C413EB31E98B1B3CA2BBB9AC623139
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/assets/splash/spring-2021.jpg
Preview:	......Exif..II*.................Ducky.......(......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 116.164766, 2021/02/19-23:10:07 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="7604F6EC7101F9F3A6EBDB708AB235C7" xmpMM:DocumentID="xmp.did:538CC97A88F611EBB8D7BA14A11AA145" xmpMM:InstanceID="xmp.iid:538CC97988F611EBB8D7BA14A11AA145" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4f6e4f4a-9343-47ca-b280-5c7c6d910e7f" stRef:documentID="adobe:docid:photoshop:ea19256a-bce7-cf40-9d50-1aabf33ba4b6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\styles-c2fe8482057191dca484[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.445012903413859
Encrypted:	false
SSDEEP:	3:lD3ORZy/LBdORZzZqVRNilf:lD3r1daZurilf
MD5:	059CFC353C033AEE704318A0A67275A2
SHA1:	22D5EA1600DF265723B181B484F2E3F85A4BCBBC
SHA-256:	68D5BEF571C6A9E14D8A182BC2ED9CBE64D353A86DCBA0387440760CBEED8F53
SHA-512:	875433B858A8CCA9B0549543ECDDDEA7C6A0034DD88A9DBFCCEAA880056ACD3AA224E7099BD3EE7CDD330B0185809D74FDDA41B49B1614E6CE3CD5192BBC6BEF
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/styles-c2fe8482057191dca484.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],[]]);

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\tools-check-results[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3293
Entropy (8bit):	4.377750953191204
Encrypted:	false
SSDEEP:	48:LSdcv0AR0SyrfonORD3D3p/5QlKCqnd481aXTHgpv6/2qlvGoSLPOWgl8gRNxTmU:0fA2NeO5p/ed+W+aXjL2qlPSLPKP
MD5:	8CD5AD971CD7F400B278A3243E4BA64E
SHA1:	9E732926F06917A6D3E864D8BE43DE85417E4EDC
SHA-256:	B0BC972FA7E01734CAB1825534858D6543478FD4F12AADDE65AF8D1EAB5ED011
SHA-512:	033CD335AEF4F75F7B7C07D1F8205801EB704EE1C1E1912DFCF0B918E5A7B7A0C34555C14A62AFC847788447CE7EE95CA56B33C91CD47F0F96680EE1351052BA
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-check-results.svg
Preview:	<svg width="78" height="128" viewBox="0 0 78 128" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M58.4059 2.22899L49.2795 2.19162L37.7087 2.14423L22.2265 2.08082C17.5003 2.06147 13.0934 3.69956 9.98562 6.44707C6.87789 9.19459 4.90698 12.9128 4.89003 17.0531L4.83689 30.026L3.53144 30.4347C3.20493 30.5714 2.87786 30.8461 2.71376 31.1214C2.54966 31.3968 2.38556 31.6721 2.38386 32.0862L2.37256 34.8464C2.37143 35.1224 2.5327 35.5371 2.69454 35.8138C2.85638 36.0905 3.18119 36.3678 3.50657 36.5072L4.6451 37.0639L4.62136 42.8603L3.47831 43.4076C3.1518 43.5443 2.82473 43.819 2.66063 44.0943C2.49653 44.3697 2.33243 44.6451 2.33073 45.0591L2.31943 47.8193C2.3183 48.0953 2.47957 48.51 2.64141 48.7867C2.80325 49.0634 3.12806 49.3407 3.45344 49.4801L4.59197 50.0368L4.34327 110.761C4.32632 114.901 6.2667 118.636 9.35183 121.408C12.437 124.181 16.8304 125.855 21.5565 125.875L57.8989 126.024C60.8323 126.036 63.7686 125.358 66.2177 124.264C68.6668 123.17 70.7922 121.522 72.4304 119.459C74.3956

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\tree-child.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	478
Entropy (8bit):	4.890689215237644
Encrypted:	false
SSDEEP:	12:U5id+JBmmfpx4uccJBommfI6p4uEwJBSHwJBomeFecJBTdmfpxMcOv:IiAXpuuc4sIBu9ccF4x+pPA
MD5:	50CA567C3A83F0F669E0AD776C17E177
SHA1:	AA9886EC28F76CE659B55528A41B7D00247DB5AA
SHA-256:	7B01B36D9B978726EEB935EB9CF4CA4B7AC06E7191264F079068F6B0F3A51E90
SHA-512:	7E64427E208477B2EC1F2045D1A2913199A35358712769CFF785A9A19D09E9F8B129C1564156C32E96FF3A4003CC5E502DC86BAEA50D903D8D80A97C94810C12
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/tree-child.module.css?qrgttk
Preview:	/*. @file. * Visual styles for a nested tree child.. /..div.tree-child {. background: url(../../../images/core/tree.png) no-repeat 11px center; / LTR /.}.div.tree-child-last {. background: url(../../../images/core/tree-bottom.png) no-repeat 11px center; / LTR */.}.[dir="rtl"] div.tree-child,.[dir="rtl"] div.tree-child-last {. background-position: -65px center;.}.div.tree-child-horizontal {. background: url(../../../images/core/tree.png) no-repeat -11px center;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\trillium_6[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 144x144, frames 3
Category:	downloaded
Size (bytes):	8660
Entropy (8bit):	7.889806609797456
Encrypted:	false
SSDEEP:	192:aknOiayY7s/y3yL8YKPKhU/zplFG8LtTusd3KCNllctSIky5:pnx5K3yL8kIbFG8Lhusd3VSSIkm
MD5:	A18E8422462335FC0879495809189094
SHA1:	F941AC2B0E6086C2D779B5D7093D9D478E68BAF0
SHA-256:	6EFB43B92424429C270E1D5B773A2E999F1231A6A7BA59096171EF475F7D97FF
SHA-512:	30E5D7A8F457CAA353446DC5FAFD2397E231895A8928DDFE8A9C1483966FB99D6D21426F33EF9CD60C40548D1BD4F2DB25A00860EAE7FAF1C0938474372EF851
Malicious:	false
IE Cache URL:	https://files.ontario.ca/trillium_6.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:DocumentID="xmp.did:B82A61F6110911E5B5AE9E5C9EA152F0" xmpMM:InstanceID="xmp.iid:B82A61F5110911E5B5AE9E5C9EA152F0" xmp:CreatorTool="COOLPIX L1V1.2"> <xmpMM:DerivedFrom stRef:instanceID="228B4BD8679281BAB641C70E4070908B" stRef:documentID="228B4BD8679281BAB641C70E4070908B"/> <dc:creator> <rdf:Seq> <rdf:li>Karen Labonte</rdf:li> </rdf:Seq> </dc:creator> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Trilliums</rdf:li> </rdf:Alt> </dc:title> </rdf:Description>

C:\Users\user\AppData\Local\Temp\mso7087.tmp Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	GIF image data, version 89a, 15 x 15
Category:	dropped
Size (bytes):	663
Entropy (8bit):	5.949125862393289
Encrypted:	false
SSDEEP:	12:PlrojAxh4bxdtT/CS3wkxWHMGBJg8E8gKVYQezuYEecp:trPsTTaWKbBCgVqSF
MD5:	ED3C1C40B68BA4F40DB15529D5443DEC
SHA1:	831AF99BB64A04617E0A42EA898756F9E0E0BCCA
SHA-256:	039FE79B74E6D3D561E32D4AF570E6CA70DB6BB3718395BE2BF278B9E601279A
SHA-512:	C7B765B9AFBB9810B6674DBC5C5064ED96A2682E78D5DFFAB384D81EDBC77D01E0004F230D4207F2B7D89CEE9008D79D5FBADC5CB486DA4BC43293B7AA878041
Malicious:	false
Preview:	GIF89a....w..!..MSOFFICE9.0.....sRGB......!..MSOFFICE9.0.....msOPMSOFFICE9.0Dn&P3.!..MSOFFICE9.0.....cmPPJCmp0712.........!.......,....................'..;..b...RQ.xx..................,+................................yy..;..b.........................qp.bb..........uv.ZZ.LL.......xw.jj.NN.A@....zz.mm.^_.........yw........yx.xw.RR.,.++............................................................................................................................................................................................................8....>.......................4567...=..../0123.....<9:.()+,-.B.@...."#$%&'....... !............C.?....A;<...HT(..;

C:\Users\user\AppData\Local\Temp\~DF7AEF20D2E45A483C.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	485332
Entropy (8bit):	3.210835305715398
Encrypted:	false
SSDEEP:	6144:N3Uydh3qiRwxQU3MzqzUL8b3Uydh3qiRwxQU3MzqzUL8:Nt3HRwH3Muzjbt3HRwH3Muzj
MD5:	65EA23AB3D511D294C5EC27562895731
SHA1:	0518C78424A941F2A097B0084070A9EA580E30B3
SHA-256:	6BF275278DECC3A10EF856B6A599574A83ACED3530C5F59E17B701C0716C9988
SHA-512:	F9829C159FD0CA9E940DF5EFCC6ECBDEF30A95C353E8ED2FB23A44287A836A7E49EABCE7693818A22ADF480B046F7CE3887B6157812CEDCF75EEDC8DE924A37A
Malicious:	false
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFBDE38999DEAEFB26.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	0.27918767598683664
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9lRx/9lRJ9lTb9lTb9lSSU9lSSU9laAa/9laA:kBqoxxJhHWSVSEab
MD5:	AB889A32AB9ACD33E816C2422337C69A
SHA1:	1190C6B34DED2D295827C2A88310D10A8B90B59B
SHA-256:	4D6EC54B8D244E63B0F04FBE2B97402A3DF722560AD12F218665BA440F4CEFDA
SHA-512:	BD250855747BB4CEC61814D0E44F810156D390E3E9F120A12935EFDF80ACA33C4777AD66257CCA4E4003FEF0741692894980B9298F01C4CDD2D8A9C7BB522FB6
Malicious:	false
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFC60B25E8C96A76F5.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13077
Entropy (8bit):	0.5073011575869905
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9loWF9loa9lWfb8PwP:kBqoI1jfb8P+
MD5:	4C34D9DEA373AC7142A9BD1BE7F45C8B
SHA1:	5D6889B3D5C8524653185F2A6E86DA6D00E29352
SHA-256:	F701B781D20293EE87316124F6D821CE28D207E4871BF778F8E9080E688617CF
SHA-512:	EEE96956EEC9B658668D101AED33E40EBA4B8C051DFF5265478E082AB5691EDB78C95B813C89187DFB4C4275DE913DD34096DADD70E329BCBDF67D2FAF5B10F3
Malicious:	false
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx.LNK Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 14:03:44 2020, mtime=Tue Apr 13 23:46:50 2021, atime=Tue Apr 13 23:46:48 2021, length=56869, window=hide
Category:	dropped
Size (bytes):	2910
Entropy (8bit):	4.732690169116817
Encrypted:	false
SSDEEP:	48:8piQQOb+a63zhHOc1WvB6ppiQQOb+a63zhHOc1WvB6:8pB2dPsvKpB2dPsv
MD5:	B06AAB35E09066272EF3DB83C9E2A7A0
SHA1:	A6FC33828FE5416EF438CFE901514C9B3A6D1085
SHA-256:	BEC0951280CF08FE6E6C0B1BAEA17B4E2AAF91DECC881B3E1F18632C79864AAB
SHA-512:	74719576A4D65C22009D189A3A0AD9034FE6DE5BBF8D257ED225821E5894EAE2245E3FD2AEE8E0E4532968F53312E3BB1E1072DE410E7DFE5E7227C8661DDCF9
Malicious:	false
Preview:	L..................F.... .......:...j.3..0..q....0..%............................P.O. .:i.....+00.../C:\...................x.1......N....Users.d......L...R......................:.....q\|..U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....P.1.....>Qwx..user.<.......Ny..R.......S....................E.+.h.a.r.d.z.....~.1.....>Qxx..Desktop.h.......Ny..R.......Y..............>....../..D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.......2.%....R.. .COVID-~1.DOC.........>Qwx.R......h....................../&.C.O.V.I.D.-.1.9. .V.a.c.c.i.n.e. .L.o.c.a.t.i.o.n.s. . .B.o.o.k.i.n.g. .S.i.t.e.s._.A.p.r.i.l. .1.2. .(.8.e.b.6.0.e.b.7.-.3.1.1.5.-.4.1.f.6.-.b.c.c.5.-.3.e.7.0.c.6.2.3.1.9.d.d.)...d.o.c.x.......................-...................>.S......C:\Users\user\Desktop\COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx..u.....\.....\.....\.....\.....\.D.e.s.k.t.o.p.\.C.O.V.I.D.-.1.9. .V.a.c.c.i.n.e. .L.o.c.a.t.i.o.n.s. . .B.o.o.k.i.n.g.

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	322
Entropy (8bit):	5.271205955411001
Encrypted:	false
SSDEEP:	6:Ht2o1Gw/RynP3Eg3hcUMdFGo1Gw/RynP3Eg3hcUMdFg2o1Gw/RynP3Eg3hcUMdFc:Htd1DwP3zhcVdFN1DwP3zhcVdFgd1DwR
MD5:	C692A251B6AEBF8353BF2F2D0A9B12EF
SHA1:	F30BECF30EAB0AB4E9336ACB06907382E06E8373
SHA-256:	F77BFA990FCF28D61C20D3FE3DFA6FF2C0C02159BD6B449F8AA1D018868A0DC1
SHA-512:	4B2FA4C74685BAE679313FF920C05D4355AD0294B3E058D00F1F248DA26804C3EEAE4846F9A9AB2B1284EDA94D2074CE92C5565190B0D2A665E5C77CBAE6E4F8
Malicious:	false
Preview:	[misc]..COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx.LNK=0..COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx.LNK=0..[misc]..COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx.LNK=0..

C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	2.7570127792548975
Encrypted:	false
SSDEEP:	3:Rl/ZdU//tlZ6ke7Ef2Nszl/lNgyVgdc:RtZW6X7Ef2Nszitc
MD5:	996E1C3A2BCE70FB10D594CCAFDEFF70
SHA1:	F91A97CB61A9A75FEB4B949FC141CDF83C5F8AB5
SHA-256:	C6F6C771C000B9A28C330B648BF32C4892C7A20B2BC1F0A52E3257ED053F05E7
SHA-512:	473C7D43D28D296F9B2E124755DC398C8E4EFC6CEC844533653CE944D79F858601AE6978E288AA6F764EBFD8B99500A3E3E35481630BECC796E673194CDFA78B
Malicious:	false
Preview:	.pratesh................................................p.r.a.t.e.s.h............;...............................;......h...h...h................;....0Eo.0Eo.0Eo.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\V2DUZ36X7STW7L4JGTAZ.temp Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	3440
Entropy (8bit):	3.1892259328412047
Encrypted:	false
SSDEEP:	48:XdiFmP7I6oC9GrIoj1oAsASFJdiFmP7I6oh683GrIoj1oAczH:JP7Fd9SD6AJ8P7Fe3SD6AG
MD5:	B5E54DBFA13EF91525EC1911FF9AEB03
SHA1:	EF3C3B489B41265891E9D9FBDD82ED1A8FEFA1F1
SHA-256:	C74DAEBD382063244CD9EB3CB98FDD256291EDC6C44BCEF9497C645ED1156AA5
SHA-512:	B6008404462A43041D263AAE6C0E62F4DBA1E8B7ED003327C3D8A7019EDC85F718B187FF26272A0F21065F29D00B3B5270B232C73CFA3A2FF0FCC64D4B0D2C60
Malicious:	false
Preview:	...................................FL..................F.@.. .....@.>...]V...0....?.c................................P.O. .:i.....+00.../C:\.....................1.....>Q=w..PROGRA~1..t......L.>Qox....E...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....l.1......L.J..INTERN~1..T......L..R................................i.n.t.e.r.n.e.t. .e.x.p.l.o.r.e.r.....f.2......L.9 .iexplore.exe..J......L.J.R.......R..........x.............i.e.x.p.l.o.r.e...e.x.e.......^...............-.......]............_.e.....C:\Program Files\internet explorer\iexplore.exe....-.p.r.i.v.a.t.e...C.:.\.W.i.n.d.o.w.s.\.S.Y.S.T.E.M.3.2.\.I.E.F.R.A.M.E...d.l.l.........%SystemRoot%\SYSTEM32\IEFRAME.dll...................................................................................................................................................................................................................................%.S.y.s.t.e.m.R.o.o.t.%.\.S.Y.S.T.E.M.3.2.\.I

C:\Users\user\Desktop\~$VID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	2.7570127792548975
Encrypted:	false
SSDEEP:	3:Rl/ZdU//tlZ6ke7Ef2Nszl/lNgyVgdc:RtZW6X7Ef2Nszitc
MD5:	996E1C3A2BCE70FB10D594CCAFDEFF70
SHA1:	F91A97CB61A9A75FEB4B949FC141CDF83C5F8AB5
SHA-256:	C6F6C771C000B9A28C330B648BF32C4892C7A20B2BC1F0A52E3257ED053F05E7
SHA-512:	473C7D43D28D296F9B2E124755DC398C8E4EFC6CEC844533653CE944D79F858601AE6978E288AA6F764EBFD8B99500A3E3E35481630BECC796E673194CDFA78B
Malicious:	false
Preview:	.pratesh................................................p.r.a.t.e.s.h............;...............................;......h...h...h................;....0Eo.0Eo.0Eo.

Static File Info

General
File type:	Microsoft Word 2007+
Entropy (8bit):	7.746354233936926
TrID:	Word Microsoft Office Open XML Format document (49504/1) 49.01% Word Microsoft Office Open XML Format document (43504/1) 43.07% ZIP compressed archive (8000/1) 7.92%
File name:	COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx
File size:	56869
MD5:	14d9efc0e6bd70f11db15709caffe72f
SHA1:	a9d37cf22facbe7ceda7dec88b983b5092597b5f
SHA256:	cbf87430a5ac83f27e1152f1cbe3b867400ccc68895c9a596697e8e64196c0ef
SHA512:	88f2f4db40640edcafe6f0bd172045a07cdfd03d575cf46e2a19e07c0506c2d26a9bdf112f8441b1b2f3b2332c350aa51bea2adc648e477340d2c2cd11d2200f
SSDEEP:	1536:7QVomU8A9ppjEmIohQbXbmr22FKBLiJkA:7Q7UFpJhCXaKBOyA
File Content Preview:	PK..........!..9r=....\.......[Content_Types].xml ...(.........................................................................................................................................................................................................

File Icon


Icon Hash:	74fcd0d2d6d6d0cc

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 13, 2021 17:47:24.471661091 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:24.472528934 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:24.518699884 CEST	443	49727	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:24.518805027 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:24.519051075 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:24.519151926 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:24.534818888 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:24.535063028 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:24.581574917 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:24.581609011 CEST	443	49727	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:24.584042072 CEST	443	49727	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:24.584094048 CEST	443	49727	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:24.584137917 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:24.584139109 CEST	443	49727	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:24.584192038 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:24.584203005 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:24.587877989 CEST	443	49727	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:24.587959051 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:24.590080023 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:24.590138912 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:24.590181112 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:24.590202093 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:24.590255976 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:24.590269089 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:24.594541073 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:24.594635010 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.052876949 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.053848982 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.059137106 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.059339046 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.059659958 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.097651005 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.097803116 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.097820997 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.097901106 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.097943068 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.098678112 CEST	443	49727	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.098805904 CEST	443	49727	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.098870039 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.098881960 CEST	443	49727	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.098933935 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.099280119 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.100275040 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.103804111 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.103827953 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.104115963 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.104203939 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.104257107 CEST	443	49727	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.104348898 CEST	443	49727	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.104408026 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.127332926 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.127366066 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.127389908 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.127413988 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.127525091 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.127573013 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.128597021 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.128623009 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.128700972 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.128742933 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.129841089 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.129869938 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.129952908 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.129972935 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.131153107 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.131182909 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.131266117 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.131289959 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.132426023 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.132447958 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.132512093 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.132533073 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.133795023 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.133833885 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.133888006 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.133908987 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:25.146270990 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:25.147341013 CEST	443	49727	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.114315033 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.114494085 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.114661932 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.114824057 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.114978075 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.115149021 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.115324020 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.159395933 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.159436941 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.159483910 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.159509897 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.159544945 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.159698009 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.160289049 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.299328089 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.299427986 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.299501896 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.299732924 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.299740076 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.299771070 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.299804926 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.299834967 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.300226927 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.300317049 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.385605097 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.385660887 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.385775089 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.385814905 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.386226892 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.386265039 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.386311054 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.386331081 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.387068033 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.387150049 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.389368057 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.389445066 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.389450073 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.389509916 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.390045881 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.390090942 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.390132904 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.390158892 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.391295910 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.391325951 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.391380072 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.391412020 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.395730019 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.395827055 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.396020889 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.396056890 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.396102905 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.396136045 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.396377087 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.396445990 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.396617889 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.396682024 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:30.396764994 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:30.396821022 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:31.971131086 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:31.972843885 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:31.973040104 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.002230883 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.002486944 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.016055107 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.017107010 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.017559052 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.017591000 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.047004938 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.047058105 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.062002897 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.063020945 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.063155890 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.108464956 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.108515978 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.153028965 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.153079033 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.153129101 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.153151989 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.153759003 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.153799057 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.153836012 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.153858900 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.154928923 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.154972076 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.155029058 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.155838966 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.155927896 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.155991077 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.156022072 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.156088114 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.157237053 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.157311916 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.157329082 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.157393932 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.158540964 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.158582926 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.158629894 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.159313917 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.159853935 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.159893990 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.159934044 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.159962893 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.161171913 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.161211014 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.161252975 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.161267996 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.162451029 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.162491083 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.162513971 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.162543058 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.163769960 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.163813114 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.163842916 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.163877964 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.165067911 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.165111065 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.165127039 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.165190935 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.166363955 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.166459084 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.176443100 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.176493883 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.176512003 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.176557064 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.177069902 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.177109957 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.177131891 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.177175045 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.178391933 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.178433895 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.178452969 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.178505898 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.179713964 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.179755926 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.179804087 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.179810047 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.180994034 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.181035042 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.181103945 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.181128025 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.182324886 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.182368040 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.182435036 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.182461023 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.183635950 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.183676958 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.183711052 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.183762074 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.185082912 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.185121059 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.185180902 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.185210943 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.186244011 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.186280012 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.186321020 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.186340094 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.197716951 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.197741985 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.197788000 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.197813034 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.198331118 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.198348045 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.198389053 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.198405981 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.199721098 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.199744940 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.199779987 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.199799061 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.200954914 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.200973034 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.201045990 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.201066971 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.202426910 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.202455044 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.202502966 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.202541113 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.203568935 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.203599930 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.203638077 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.203675032 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.204895020 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.204919100 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.204950094 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.204981089 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.208787918 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.208813906 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.208830118 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.208859921 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.208892107 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.208957911 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.209290981 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.209309101 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.209352970 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.209372044 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.209378004 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.210218906 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.210247993 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.210288048 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.210313082 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.211411953 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.211433887 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.211479902 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.211508036 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.212723970 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.212748051 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.212815046 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.212855101 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.214025974 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.214051962 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.214137077 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.214160919 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.215344906 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.215373039 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.215419054 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.215447903 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.216665030 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.216696978 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.216756105 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.216789961 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.217953920 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.217978954 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.218060970 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.218087912 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.223367929 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.223397970 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.223421097 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.223433971 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.223443985 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.223444939 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.223458052 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.223479033 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.223499060 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.223545074 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.224869967 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.224900961 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.224955082 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.224977016 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.226016045 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.226047993 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.226151943 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.227410078 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.227457047 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.227502108 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.227530003 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.228774071 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.228802919 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.228854895 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.228890896 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.229918003 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.229942083 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.230011940 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.230038881 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.230990887 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.231070995 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.231173992 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.231236935 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.232563019 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.232588053 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.232646942 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.232686043 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.233472109 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.233489990 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.233541012 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.233572006 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.234780073 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.234803915 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.234857082 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.234903097 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.238744020 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.238764048 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.238779068 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.238792896 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.238838911 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.238886118 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.239281893 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.239299059 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.239360094 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.240504980 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.240520954 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.240581036 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.240617990 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.241892099 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.241909027 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.241990089 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.242047071 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.243506908 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.243566990 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.243599892 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.243652105 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.244539022 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.244570971 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.244609118 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.244651079 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.244956970 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.244986057 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.245018959 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.245054007 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.245486975 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.245512009 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.245554924 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.245590925 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.246179104 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.246232986 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.246272087 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.246319056 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.247359037 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.247385025 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.247421980 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.247442961 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.247632027 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.247674942 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.247678041 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.247726917 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.248395920 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.248459101 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.248466969 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.248503923 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.249141932 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.249162912 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.249193907 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.249213934 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.249852896 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.249908924 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.249913931 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.249962091 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.250643015 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.250662088 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.250704050 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.250746965 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.251329899 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.251357079 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.251394033 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.251410007 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.252079010 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.252106905 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.252140999 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.252162933 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.252784014 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.252831936 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.252861977 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.252898932 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.253895044 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.253940105 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.253978968 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.254012108 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.254251957 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.254275084 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.254322052 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.254975080 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.255004883 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.255043030 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.255076885 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.255661964 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.255687952 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.255723000 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.255749941 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.256407022 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.256436110 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.256462097 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.256486893 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.257147074 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.257173061 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.257227898 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.257241964 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.257868052 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.257891893 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.257920980 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.257945061 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.258579016 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.258611917 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.258640051 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.258663893 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.259300947 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.259324074 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.259351969 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.259383917 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.260015965 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.260037899 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.260067940 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.260080099 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.260746002 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.260768890 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.260797977 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.260814905 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.261487961 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.261512041 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.261557102 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.261580944 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.262200117 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.262224913 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.262244940 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.262276888 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.262907028 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.262929916 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.262959957 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.262995005 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.263621092 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.263644934 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.263669968 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.263699055 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.264322042 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.264347076 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.264370918 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.264396906 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.265053988 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.265086889 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.265104055 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.265132904 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.265747070 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.265783072 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.265810013 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.265829086 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.266444921 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.266474009 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.266499996 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.266524076 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.267136097 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.267158031 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.267213106 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.267230988 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.267849922 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.267879963 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.267900944 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.267916918 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.268548012 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.268575907 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.268599033 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.268600941 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.268620014 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.268644094 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.269520998 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.269550085 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.269576073 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.269584894 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.269604921 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.269629002 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.270412922 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.270433903 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.270450115 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.270467997 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.270483971 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.270500898 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.271323919 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.271352053 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.271372080 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.271372080 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.271395922 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.271418095 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.272176981 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.272203922 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.272228003 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.272231102 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.272259951 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.272280931 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.273111105 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.273139000 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.273166895 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.273171902 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.273194075 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.273220062 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.273947954 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.273972988 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.273994923 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.274013042 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.274039030 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.274868965 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.274888039 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.274904013 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.274924994 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.274945974 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.275721073 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.275737047 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.275755882 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.275794029 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.275816917 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.276598930 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.276614904 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.276629925 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.276660919 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.276683092 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.277519941 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.277542114 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.277568102 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.277574062 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.277611971 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.278393030 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.278414965 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.278436899 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.278446913 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.278486013 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.279262066 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.279283047 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.279305935 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.279318094 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.279360056 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.280141115 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.280165911 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.280188084 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.280210018 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.280236959 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.281032085 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.281054020 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.281075001 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.281083107 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.281120062 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.281919003 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.281981945 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.282202959 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.282229900 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.282249928 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.282259941 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.282280922 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.282300949 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.285876989 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.285908937 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.286005020 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.286030054 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.286089897 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.286109924 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.286127090 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.286142111 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.286161900 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.286181927 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.286993980 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.287013054 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.287029028 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.287045956 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.287069082 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.287899971 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.287919044 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.287935019 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.287966967 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.288006067 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.288784981 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.288813114 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.288836956 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.288851023 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.288888931 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.289706945 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.289737940 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.289760113 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.289779902 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.289813042 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.290518045 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.290553093 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.290575981 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.290589094 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.290612936 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.290628910 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.291378021 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.291399002 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.291418076 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.291443110 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.291459084 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.292248964 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.292279005 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.292303085 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.292306900 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.292320967 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.292337894 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.292354107 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.292376995 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.293181896 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.293210983 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.293232918 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.293251991 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.293253899 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.293287992 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.293324947 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.294100046 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.294128895 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.294154882 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.294154882 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.294181108 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.294187069 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.294213057 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.294229984 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.295001030 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.295030117 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.295051098 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.295052052 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.295074940 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.295083046 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.295105934 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.295130014 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.295903921 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.295933962 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.295957088 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.295962095 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.295977116 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.295979977 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.296000957 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.296024084 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.296794891 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.296817064 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.296859980 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.296876907 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.297177076 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.297203064 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.297224998 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.297230005 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.297244072 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.297247887 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.297271013 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.297297955 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.298077106 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.298099041 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.298121929 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.298142910 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.298176050 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.298190117 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.298197985 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.298201084 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.298902988 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.298928022 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.298949003 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.298960924 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.298975945 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.298986912 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.299010992 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.299029112 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.299738884 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.299762964 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.299782991 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.299799919 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.299806118 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.299823999 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.299843073 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.299860001 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.300602913 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.300628901 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.300649881 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.300663948 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.300674915 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.300683975 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.300708055 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.300734043 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.301465034 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.301491022 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.301511049 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.301521063 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.301536083 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.301547050 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.301572084 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.301589012 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.302330971 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.302356005 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.302372932 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.302388906 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.302390099 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.302409887 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.302437067 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.303133011 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.303165913 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.303190947 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.303196907 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.303215981 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.303226948 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.303247929 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.303267002 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.303925037 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.303956985 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.303981066 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.303987026 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.304007053 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.304012060 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.304023981 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.304055929 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.304730892 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.304758072 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.304775000 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.304790974 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.304805994 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.304848909 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.305516005 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.305536032 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.305552959 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.305572987 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.305593014 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.305614948 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.306361914 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.306380033 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.306395054 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.306422949 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.306593895 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.307049990 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.307069063 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.307082891 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.307102919 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.307116032 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.307120085 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.307159901 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.307197094 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.308011055 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.308043003 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.308067083 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.308073997 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.308090925 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.308094025 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.308115959 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.308116913 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.308142900 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.308171988 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.308948040 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.308978081 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.309000969 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.309006929 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.309019089 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.309021950 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.309045076 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.309056044 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.309077024 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.309092045 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.309889078 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.309909105 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.309923887 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.309940100 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.309953928 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.309957981 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.309971094 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.310014009 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.310878038 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.310899019 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.310914040 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.310933113 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.310937881 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.310950041 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.310950041 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.310982943 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.311003923 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.311688900 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.311708927 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.311723948 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.311743975 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.311748981 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.311763048 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.311763048 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.311803102 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.311826944 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.312552929 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.312573910 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.312591076 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.312604904 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.312612057 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.312621117 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.312624931 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.312649012 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.312688112 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.313450098 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.313469887 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.313496113 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.313510895 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.313524008 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.313530922 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.313536882 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.313541889 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.313569069 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.313591003 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.314347982 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.314371109 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.314393997 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.314404964 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.314414978 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.314420938 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.314440012 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.314441919 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.314460039 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.314480066 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.315166950 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.315186024 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.315207958 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.315227032 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.315252066 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.315262079 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.315673113 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.315696001 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.315717936 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.315733910 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.315741062 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.315752029 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.315766096 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.315778017 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.315797091 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.315819025 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.316555977 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.316576958 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.316600084 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.316615105 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.316621065 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.316632986 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.316646099 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.316663980 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.316669941 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.316679955 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.316710949 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.316751957 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.317492962 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.317514896 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.317537069 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.317559004 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.317560911 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.317574024 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.317583084 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.317588091 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.317608118 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.317622900 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.317636013 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.317663908 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.318367004 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.318387985 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.318408966 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.318432093 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.318449020 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.318453074 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.318473101 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.318475962 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.318480968 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.318512917 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.318556070 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.319504976 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.319525003 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.319545984 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.319567919 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.319585085 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.319590092 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.319607019 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.319613934 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.319614887 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.319622993 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.319643974 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.319669962 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.321183920 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.321204901 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.321219921 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.321235895 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.321254015 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.321284056 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.321329117 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.321342945 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.323044062 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.323074102 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.323096991 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.323127031 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.323132038 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.323148966 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.323149920 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.323154926 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.323169947 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.323180914 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.323213100 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.323223114 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.324739933 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.324760914 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.324778080 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.324793100 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.324810028 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.324810982 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.324826956 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.324831009 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.324867964 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.324893951 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.325680017 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.325709105 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.325727940 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.325761080 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.325788021 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.326837063 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.326865911 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.326888084 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.326908112 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.326910973 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.326935053 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.326941967 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.326955080 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.326958895 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.327001095 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.327020884 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.330527067 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.330544949 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.330590963 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.330615044 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.331568956 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.331588984 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.331607103 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.331624031 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.331640959 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.331640005 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.331656933 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.331671953 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.331674099 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.331702948 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.331724882 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.333410025 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.333431959 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.333451033 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.333471060 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.333482027 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.333518982 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.335138083 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.335163116 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.335184097 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.335205078 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.335208893 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.335226059 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.335227013 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.335249901 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.335275888 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.335293055 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.336855888 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.336879969 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.336899042 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.336919069 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.336935043 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.336936951 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.336952925 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.336961985 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.337004900 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.337028980 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.338695049 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.338721991 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.338746071 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.338754892 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.338788986 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.338804960 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.338808060 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.338834047 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.338855982 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.338866949 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.338877916 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.338906050 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.338906050 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.338927984 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.338967085 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.340487003 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.340503931 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.340524912 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.340547085 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.340553999 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.340565920 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.340569019 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.340580940 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.340591908 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.340612888 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.340615988 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.340632915 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.340637922 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.340656996 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.340698957 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.340949059 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.340966940 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.341010094 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.341034889 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.342725039 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.342746019 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.342758894 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.342776060 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.342787981 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.342799902 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.342802048 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.342812061 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.342828035 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.342832088 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.342900038 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.344330072 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.344360113 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.344382048 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.344394922 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.344407082 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.344427109 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.344430923 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.344453096 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.344470978 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.344475031 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.344496965 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.344507933 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.344536066 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.344564915 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.346045017 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.346065998 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.346076965 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.346091986 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.346102953 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.346118927 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.346122980 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.346129894 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.346139908 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.346144915 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.346162081 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.346179962 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.346208096 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.346227884 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.347754955 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.347776890 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.347791910 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.347806931 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.347826004 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.347826958 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.347846031 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.347850084 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.347861052 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.347877026 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.347907066 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.347934008 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.349343061 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.349360943 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.349376917 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.349405050 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.349409103 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.349436998 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.349440098 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.349452972 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.349468946 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.349484921 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.349498034 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.349529028 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.349549055 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.351154089 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.351176023 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.351196051 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.351217985 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.351231098 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.351246119 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.351246119 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.351267099 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.351275921 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.351289988 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.351305962 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.351324081 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.351372004 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.352684021 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.352709055 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.352732897 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.352760077 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.352771044 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.352785110 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.352793932 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.352807999 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.352814913 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.352832079 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.352838993 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.352854967 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.352860928 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.352885008 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.352893114 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.352932930 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.354501963 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.354530096 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.354552031 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.354572058 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.354574919 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.354597092 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.354599953 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.354619980 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.354641914 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.354649067 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.354662895 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.354674101 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.354691982 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.354696035 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.354708910 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.354716063 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.354741096 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.354764938 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.356389046 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.356420040 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.356442928 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.356455088 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.356466055 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.356482029 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.356489897 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.356513977 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.356522083 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.356539965 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.356550932 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.356563091 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.356580973 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.356587887 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.356601000 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.356610060 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.356630087 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.356651068 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.356673002 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.358093023 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.358127117 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.358151913 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.358163118 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.358175993 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.358181953 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.358200073 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.358202934 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.358222961 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.358234882 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.358246088 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.358253002 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.358269930 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.358270884 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.358294964 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.358295918 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.358321905 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.358323097 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.358350992 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.358377934 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.358983994 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.359008074 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.359028101 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.359050035 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.359055996 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.359071016 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.359078884 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.359093904 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.359112024 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.359117031 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.359141111 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.359150887 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.359163046 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.359180927 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.359220982 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.361227989 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.361263037 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.361284971 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.361304998 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.361305952 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.361330986 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.361341953 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.361355066 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.361377001 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.361377954 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.361414909 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.361424923 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.361447096 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.361458063 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.361466885 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.361491919 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.361514091 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.362415075 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.362446070 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.362462044 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.362479925 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.362481117 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.362503052 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.362509966 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.362525940 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.362545013 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.362546921 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.362565041 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.362582922 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.362585068 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.362607002 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.362623930 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.362627029 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.362637997 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.362682104 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.364125013 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.364145994 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.364167929 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.364186049 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.364190102 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.364201069 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.364207983 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.364218950 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.364227057 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.364239931 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.364274979 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.364286900 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.365890980 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.365921021 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.365943909 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.365963936 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.365987062 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.365987062 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.366009951 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.366017103 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.366025925 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.366045952 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.366092920 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.367754936 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.367788076 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.367815018 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.367837906 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.367844105 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.367860079 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:32.367876053 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:32.367923021 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:33.206370115 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:33.251137018 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:33.383274078 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:33.383315086 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:33.383464098 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:47:33.383491039 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:47:33.386941910 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.107284069 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.107449055 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.108401060 CEST	49742	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.109388113 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.152333021 CEST	443	49728	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.152399063 CEST	443	49727	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.152507067 CEST	49728	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.152864933 CEST	49727	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.153053999 CEST	443	49742	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.153161049 CEST	49742	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.153891087 CEST	49742	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.154038906 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.154156923 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.154589891 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.198659897 CEST	443	49742	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.200656891 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.203835964 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.203915119 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.204435110 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.206301928 CEST	443	49742	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.206381083 CEST	49742	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.206440926 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.206633091 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.207088947 CEST	49742	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.208828926 CEST	49742	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.251004934 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.251050949 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.251142025 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.251358986 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.253051996 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.253082991 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.253108978 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.253317118 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.253515005 CEST	443	49742	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.253649950 CEST	443	49742	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.254091978 CEST	49742	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.254126072 CEST	49742	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.255192995 CEST	443	49742	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.255219936 CEST	443	49742	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.255278111 CEST	49742	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.266287088 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.266340017 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.266386032 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.266427994 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:42.298310995 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:42.300939083 CEST	443	49742	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:44.703944921 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.705168009 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.751024008 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.751120090 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.751183987 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.751292944 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.752219915 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.752463102 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.798801899 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.798846006 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.802386999 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.802440882 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.802483082 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.802522898 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.802529097 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.802540064 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.802561998 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.802578926 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.802583933 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.802601099 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.802615881 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.802644968 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.806113005 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.806181908 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.806602001 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.806679964 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.841029882 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.841680050 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.842212915 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.887435913 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.887872934 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.888122082 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.888195992 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.888412952 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.888825893 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.888947964 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.905873060 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.905960083 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.905960083 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.906007051 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.906019926 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.906065941 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.906066895 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.906107903 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.917078018 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.918040037 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.920803070 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.961149931 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.961661100 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.962395906 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.963237047 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.964639902 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.965739965 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.965842962 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.973803997 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.976026058 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.976094961 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.976144075 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.976192951 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.976192951 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.976236105 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.977082014 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.977112055 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.977185011 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.977247000 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.977502108 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.977540016 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.977585077 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.978801012 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.978842974 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.978852987 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.978883028 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.980112076 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.980173111 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.980267048 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.980321884 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.981461048 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.981506109 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.981537104 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.981563091 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.982733965 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.982773066 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.982801914 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.982837915 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.984132051 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.984184027 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.984205008 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.984227896 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.985364914 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.985431910 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.985436916 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.985641003 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.986706018 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.986747026 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.986778021 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.986802101 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.988019943 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.988064051 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.988089085 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.988106012 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.989348888 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.989398003 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.989418983 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.989466906 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.990648031 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.990699053 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.990712881 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.990741968 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.996629000 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.996671915 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.996697903 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.996721983 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.997612000 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.997663975 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.997684956 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.997709990 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.998600006 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.998641014 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.998666048 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.998683929 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:44.999922991 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.999964952 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:44.999991894 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.000010967 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.005867958 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.006011963 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.006112099 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.006197929 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.007529020 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.008219957 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.009313107 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.009429932 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.015645981 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.018668890 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.019023895 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.020875931 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.020975113 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.021168947 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.021199942 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.021235943 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.021259069 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.021261930 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.021332979 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.022288084 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.022475958 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.022491932 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.022528887 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.022553921 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.023757935 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.023818970 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.024522066 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.046497107 CEST	49753	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.046646118 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.046726942 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.046989918 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.051783085 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.052383900 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.052454948 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.053034067 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.056025028 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.056140900 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.057032108 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.058815956 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.060539007 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.063677073 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.063898087 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.063988924 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.066601992 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.067105055 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.068126917 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.069449902 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.069482088 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.072020054 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.082365036 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.082412958 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.082453966 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.082473993 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.082494020 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.082494974 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.082499981 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.082534075 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.082549095 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.082576990 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.082588911 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.082616091 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.082633018 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.082664967 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.082664013 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.082709074 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.082721949 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.082757950 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.083739042 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.083787918 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.083801985 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.083837986 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.085076094 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.085150003 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.087099075 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.087232113 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.087285042 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.087347031 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.087347031 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.087472916 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.091233015 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.091265917 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.091290951 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.091314077 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.091378927 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.091444016 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.091465950 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.091983080 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.092006922 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.092082024 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.092137098 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.092165947 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.092242956 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.092256069 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.092267036 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.092294931 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.092304945 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.092494965 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.092572927 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.095395088 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.095419884 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.095468044 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.095489979 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.096811056 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.096843004 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.096906900 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.096923113 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.098072052 CEST	443	49753	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.098104954 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.098151922 CEST	49753	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.098186970 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.100498915 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.102750063 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.103636980 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.113286972 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.114098072 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.114643097 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.114840984 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.114978075 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.115025997 CEST	49753	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.115407944 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.116657019 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.125848055 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.125935078 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.125957012 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.125987053 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.125996113 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.126045942 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.126049042 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.126106024 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.127511024 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.127569914 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.127587080 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.127615929 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.127878904 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.127906084 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.127931118 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.127945900 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.128845930 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.128875971 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.128904104 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.128922939 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.129808903 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.129836082 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.129872084 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.129894972 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.130728006 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.130754948 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.130795002 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.130820990 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.131722927 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.131747961 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.131781101 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.131800890 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.132647991 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.132675886 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.132702112 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.132719040 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.133614063 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.133640051 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.133668900 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.133686066 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.134589911 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.134617090 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.134654045 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.134670973 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.135518074 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.135543108 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.135570049 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.135582924 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.135591030 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.135601997 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.135639906 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.135667086 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.136471987 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.136503935 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.136532068 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.136558056 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.137466908 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.137495995 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.137531042 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.137547970 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.138381958 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.138418913 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.138437986 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.138458014 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.139318943 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.139352083 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.139379025 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.139394045 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.140271902 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.140310049 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.140332937 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.140361071 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.141222954 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.141256094 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.141278982 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.141297102 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.142195940 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.142234087 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.142261982 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.142282009 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.143141031 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.143178940 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.143199921 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.143218994 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.144309044 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.144364119 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.144395113 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.144440889 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.145204067 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.145246983 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.145257950 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.145277023 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.145292044 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.145967007 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.146004915 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.146028996 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.146045923 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.146948099 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.147002935 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.147013903 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.147047043 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.148324966 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.148384094 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.148448944 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.148498058 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.150144100 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.150187016 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.150213957 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.150224924 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.150227070 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.150274992 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.150274992 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.150324106 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.150742054 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.150782108 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.150795937 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.150827885 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.151765108 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.151808977 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.151822090 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.151880980 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.152653933 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.152694941 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.152719021 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.152749062 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.156322956 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.156385899 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.156418085 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.156436920 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.156441927 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.156487942 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.156500101 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.156546116 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.156606913 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.156666040 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.156666994 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.156709909 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.157947063 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.158011913 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.158046007 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.158072948 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.158073902 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.158128977 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.158133984 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.158185959 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.158201933 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.158255100 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.158263922 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.158314943 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.158323050 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.158370972 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.158381939 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.158444881 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.158447027 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.158485889 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.158500910 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.158540964 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.159507990 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.163351059 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.163399935 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.163439035 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.163465977 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.163479090 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.163480997 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.163527012 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.165591955 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.165690899 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.165735006 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.165749073 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.165808916 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.165819883 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.167557001 CEST	443	49753	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.167606115 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.167846918 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.167905092 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.168128014 CEST	443	49753	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.168199062 CEST	49753	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.168210983 CEST	443	49753	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.168272972 CEST	49753	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.168773890 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.168859959 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.169017076 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.169060946 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.169065952 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.169111013 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.173568010 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.173625946 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.173656940 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.173671961 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.173690081 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.173696995 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.173710108 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.173738956 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.173747063 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.173794031 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.173811913 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.173841953 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.174688101 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.174729109 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.174736977 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.174770117 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.178479910 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.178535938 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.178554058 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.178582907 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.178838015 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.178903103 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.178905010 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.178946972 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.178947926 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.178989887 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.179018021 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.179029942 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.179608107 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.179651976 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.179670095 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.179702997 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.180571079 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.180620909 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.180632114 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.180665016 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.180671930 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.180705070 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.180710077 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.180748940 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.181410074 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.181457996 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.181462049 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.181503057 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.182301998 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.182343960 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.182360888 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.182394028 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.183293104 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.183335066 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.183341026 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.183387041 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.187175989 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.187225103 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.187254906 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.187263966 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.187295914 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.187313080 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.187325954 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.187357903 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.187370062 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.187398911 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.187402964 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.187438965 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.187441111 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.187479973 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.187480927 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.187521935 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.188055038 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.188096046 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.188113928 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.188150883 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.188975096 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.189022064 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.189060926 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.189922094 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.189964056 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.189965010 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.189985037 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.190021992 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.194128990 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.194174051 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.194211960 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.194217920 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.194238901 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.194255114 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.194273949 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.194293976 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.194293976 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.194336891 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.194343090 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.194396973 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.194830894 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.194874048 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.194889069 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.194917917 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.195772886 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.195815086 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.195838928 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.195867062 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.195908070 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.195946932 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.196080923 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.196091890 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.322905064 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.329670906 CEST	49753	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.335319042 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.344456911 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.345453978 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.350747108 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.358397961 CEST	49753	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.359164953 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.365305901 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.366419077 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.374290943 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.374466896 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.374531984 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.374555111 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.374586105 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.378099918 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.381165028 CEST	443	49753	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.381185055 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.381542921 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.381627083 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.382611036 CEST	443	49753	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.382626057 CEST	443	49753	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.382714033 CEST	49753	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.382750988 CEST	49753	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.389492989 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.392345905 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.394319057 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.396002054 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.396497965 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.396606922 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.397042990 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.402985096 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.403013945 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.403032064 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.403141975 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.403191090 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.404900074 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.407891989 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.407921076 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.408020973 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.408189058 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.410028934 CEST	443	49753	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.410397053 CEST	443	49753	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.410460949 CEST	49753	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.410566092 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.411252022 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.412570000 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.412659883 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.412890911 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.412966013 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.414119005 CEST	49753	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.421935081 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.422854900 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.424156904 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.424478054 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.424499989 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.424525023 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.424540997 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.424542904 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.424570084 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.424575090 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.424595118 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.424638033 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.424659967 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.425662994 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.425678968 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.425735950 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.425749063 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.426317930 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.426337004 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.426362991 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.426393032 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.427501917 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.427546978 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.427567005 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.427578926 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.428687096 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.428719044 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.428741932 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.428761959 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.430003881 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.430068970 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.430099010 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.430126905 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.431159019 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.431205034 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.431224108 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.431252956 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.432375908 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.432410002 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.432440996 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.432466030 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.433561087 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.433593988 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.433610916 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.433628082 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.434719086 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.434767962 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.434775114 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.434809923 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.435662031 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.435730934 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.435914040 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.435951948 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.435971975 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.435982943 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.436001062 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.436012030 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.436032057 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.436044931 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.436949015 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.437047005 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.437088966 CEST	49756	443	192.168.2.3	104.16.19.94
Apr 13, 2021 17:48:45.437249899 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:45.437303066 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:45.440841913 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.452210903 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.456365108 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.456396103 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.456418991 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.456442118 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.456454039 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.456464052 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.456507921 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.456518888 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.456816912 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.456871986 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.456924915 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.456955910 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.464257956 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.464312077 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.464351892 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.464375973 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.466794968 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.466870070 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.481328964 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.481369019 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.481441975 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.481484890 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.481851101 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.481884956 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.481919050 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.481942892 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.482355118 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.482460976 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.482461929 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.482487917 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.482518911 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.482532024 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.483088970 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.483117104 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.483165979 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.483191013 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.483895063 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.483931065 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.483977079 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.483995914 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.484329939 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.484426975 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.485089064 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.485153913 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.485157013 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.485204935 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.486433983 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.486465931 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.487689018 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.487713099 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.487749100 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.487797022 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.487895966 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.488430023 CEST	443	49756	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.489046097 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.489104986 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.489164114 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.489192009 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.490329981 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.490401030 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.490447044 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.490488052 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.497482061 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.509251118 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.509326935 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.509394884 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.509392977 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.509424925 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.509450912 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.510808945 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.510874033 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.510915995 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.510947943 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.511790991 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.511853933 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.511907101 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.511930943 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.513468981 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.513503075 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.513525009 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.513567924 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.513626099 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.514370918 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.514400959 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.514447927 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.514472961 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.516457081 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.516505003 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.516537905 CEST	443	49753	104.16.19.94	192.168.2.3
Apr 13, 2021 17:48:45.516570091 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.516602993 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.516810894 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.516853094 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.516885996 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.516921043 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.518066883 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.518111944 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.518162012 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.518184900 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.526858091 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.526962042 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:45.526984930 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:45.527045012 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.110687971 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.114412069 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.115535021 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.202199936 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.202235937 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.204758883 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.266897917 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.266922951 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.267016888 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.267086983 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.267328978 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.267347097 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.267359018 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.267371893 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.267393112 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.267419100 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.267488003 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.267505884 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.267925978 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.267942905 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.267995119 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.268007994 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.268675089 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.268692017 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.268764019 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.268796921 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.269188881 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.269206047 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.269257069 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.269285917 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.269984961 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.270004034 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.270087004 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.270469904 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.270498991 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.270553112 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.270576954 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.271328926 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.271349907 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.271421909 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.271473885 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.271749973 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.271780968 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.271857977 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.272625923 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.272650003 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.272705078 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.272768974 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.272964001 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.272985935 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.273019075 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.273041010 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.358342886 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.358386993 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.358407021 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.358557940 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.358594894 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.359669924 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.359714031 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.359824896 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.359884024 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.360924006 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.360963106 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.361063004 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.361092091 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.362195015 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.362240076 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.362324953 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.362379074 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.363440990 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.363487959 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.363591909 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.363620996 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:46.364703894 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:46.364826918 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.522640944 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.561338902 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.567392111 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.581722975 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.581759930 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.581864119 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.608577013 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.621694088 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.621738911 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.621855021 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.661712885 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.706657887 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.715020895 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.759972095 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.797655106 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.807565928 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.808363914 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.808830023 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.842506886 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.846225977 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.846304893 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.846364975 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.846441984 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.846510887 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.847573996 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.849863052 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.853030920 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.855290890 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.855345011 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.855374098 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.855381966 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.855424881 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.855485916 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.856657028 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.856693983 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.856800079 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.856818914 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.858067036 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.858093023 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.858143091 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.858164072 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.864339113 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.866096973 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.866138935 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.866183043 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.866220951 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.866240978 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.866256952 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.866298914 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.866312981 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.866852999 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.866950035 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.867240906 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.867268085 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.867333889 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.867695093 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.868930101 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.895359993 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.895407915 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.895459890 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.895484924 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.896332026 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.896375895 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.896426916 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.896446943 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.897424936 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.897475004 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.897507906 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.897536993 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.898437977 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.898479939 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.898528099 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.898567915 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.899714947 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.899756908 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.899832964 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.901846886 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.901891947 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.901930094 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.901976109 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.902013063 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.902167082 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.903228998 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.909265995 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.911789894 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.911833048 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.912059069 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.912606001 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.912643909 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.912686110 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.912709951 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.922811031 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.922857046 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.922894955 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.922902107 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.922956944 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.922965050 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.924278021 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.924321890 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.924384117 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.924417973 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.925367117 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.925432920 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.925489902 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.926610947 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.926672935 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.926743031 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.928039074 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.928081036 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.928148031 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.929157019 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.929202080 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.929301977 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.929337025 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.930794954 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.930838108 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.930885077 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.930915117 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.931703091 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.931782961 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.931788921 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.931847095 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.932931900 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.932975054 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.933052063 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.934159994 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.934201956 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.934278011 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.935653925 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.935761929 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.935844898 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.936667919 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.936711073 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.936748981 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.936780930 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.937916994 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.937961102 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.938076973 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.938133955 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.939147949 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.939198971 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.939359903 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.940433025 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.940474033 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.940576077 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.941679001 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.941721916 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.941803932 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.941826105 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.942903996 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.942946911 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.943061113 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.944175959 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.944217920 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.944308996 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.945466042 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.945513964 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.945585012 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.945606947 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.946657896 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.946696997 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.946733952 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.946757078 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.948009968 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.948049068 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.948129892 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.949171066 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.949210882 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.949310064 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.950447083 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.950488091 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.950579882 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.967647076 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.967708111 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.967828989 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.968116999 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.968211889 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.983948946 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.983998060 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.984036922 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.984076977 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.984466076 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.984514952 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.984536886 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.984570026 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.985722065 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.985761881 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.985812902 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.985838890 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.986993074 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.987036943 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.987111092 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.988228083 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.988270998 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.988358021 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.989526033 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.989567041 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.989645004 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.989670038 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.990772963 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.990816116 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.990843058 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.990873098 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.992028952 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.992080927 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.992158890 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.993277073 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.993324995 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.993416071 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.994540930 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.994585037 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.994606972 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.994662046 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.995780945 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.995825052 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.995873928 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.995896101 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.997020006 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.997061968 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.997137070 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:47.998281002 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:47.998361111 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:48.050734043 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:48.095592976 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:48.204310894 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:48.204416037 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:48.601232052 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:48.645948887 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:48.877240896 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:48.877269030 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:48.877357960 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:48.877387047 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:48.880310059 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:48.924956083 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.064034939 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.064079046 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.064132929 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.064141035 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:49.064182043 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:49.064193010 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.064212084 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:49.064399958 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:49.065253019 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.065303087 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.065356016 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:49.065496922 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:49.066529036 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.066570044 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.066623926 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:49.066660881 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:49.067826033 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.067867994 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.067940950 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:49.067979097 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:49.069096088 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.069125891 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.069334030 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:49.070353985 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.070391893 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.070486069 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:49.071722031 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:49.071839094 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:50.435642004 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.480555058 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.493917942 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.493977070 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.494014025 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.494041920 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.494383097 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.494493008 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.494730949 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.494788885 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.501466990 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.503000021 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.504602909 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.514168978 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.527209997 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.528007030 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.546360016 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.549494028 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.559674978 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.559724092 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.559814930 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.561501026 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.561638117 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.561945915 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.562099934 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.562741041 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.563625097 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.571506023 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.572685957 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.572791100 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.576980114 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.583795071 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.583884001 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.586184978 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.609896898 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.620342016 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.620472908 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.621407032 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.621411085 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.621480942 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.622603893 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.623912096 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.623953104 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.624094009 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.624150038 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.628607988 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.634211063 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.634304047 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.635175943 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.643277884 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.643353939 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.646598101 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.653165102 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.653213024 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.653264046 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.653305054 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.653713942 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.653759003 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.653786898 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.653810024 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.654957056 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.655000925 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.655056000 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.655081987 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.656229973 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.656270981 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.656301975 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.656323910 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.657543898 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.657582045 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.657613039 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.657640934 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.669414043 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.678873062 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.678965092 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.679943085 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.680908918 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.680953026 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.681013107 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.681061029 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.681201935 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.681241035 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.681271076 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.681299925 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.681849957 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.681920052 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.685854912 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.685964108 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.691914082 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.692001104 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.703701019 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.703767061 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.703783989 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.703825951 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.704179049 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.704227924 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.704241991 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.704282999 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.705457926 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.705508947 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.705542088 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.705570936 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.706655979 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.706705093 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.706723928 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.706757069 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.707915068 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.707973003 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.707986116 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.708019972 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.709156036 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.709204912 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.709233999 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.709265947 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.710391045 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.710437059 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.710472107 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.710489035 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.726726055 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.726820946 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.737209082 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.737297058 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.828083992 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.831535101 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.831819057 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:50.923130989 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.924123049 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:50.924765110 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.019476891 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.019556999 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.043198109 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.088076115 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.195103884 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.197644949 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.253159046 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.253675938 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.254313946 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.254415989 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.284503937 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.332307100 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.346324921 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.346492052 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.377682924 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.378551006 CEST	49766	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.402221918 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.427088022 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.428474903 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.436974049 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.448539019 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.452847004 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.472727060 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.474674940 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.484487057 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.485481024 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.487324953 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.488240957 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.508554935 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.509051085 CEST	443	49766	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.509198904 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.509603024 CEST	49766	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.532376051 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.542062044 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.556477070 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.556663990 CEST	49766	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.556731939 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.556826115 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.607378006 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.607878923 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.686311960 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.686336040 CEST	443	49766	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.686414957 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.686461926 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.686534882 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.686543941 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.686553955 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.686671972 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.687761068 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.687823057 CEST	443	49766	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.687860012 CEST	443	49766	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.687870026 CEST	49766	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.687875032 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.687892914 CEST	443	49766	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.687913895 CEST	443	49766	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.687916040 CEST	49766	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.687943935 CEST	49766	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.687964916 CEST	49766	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.689162016 CEST	443	49766	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.689227104 CEST	49766	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.691386938 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.692421913 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.694259882 CEST	49766	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.767913103 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.768017054 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.819447994 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.819591999 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.821492910 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.821533918 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.821649075 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.821670055 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.821716070 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.821794987 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.822176933 CEST	443	49766	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:51.822247982 CEST	49766	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:51.875128031 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.921273947 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.935129881 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.935175896 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:51.935316086 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:51.935359001 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.090570927 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.092818975 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.093908072 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.095246077 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.096513987 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.097523928 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.105912924 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:52.135608912 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.139440060 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.139842033 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.140022993 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.140345097 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.140680075 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.185367107 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.192107916 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.235142946 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:52.235203981 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:52.235280991 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:52.235315084 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:48:52.235316038 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:52.235369921 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:48:52.244098902 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.244153023 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.244241953 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.245687008 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.247662067 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.247757912 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.247862101 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.248380899 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.248466015 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.249128103 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.292284012 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.294631004 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.295614958 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.339525938 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.403415918 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.403481960 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.403629065 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.405426979 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.423892975 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.423983097 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.425961018 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.438108921 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.439702988 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.450381994 CEST	443	49747	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.470870018 CEST	443	49746	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.471194029 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.474929094 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.475105047 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.475120068 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.475167990 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.478806019 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:52.485686064 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.498953104 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.499002934 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.499152899 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.499495029 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.499536037 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.499617100 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.500794888 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.500879049 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.500978947 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.502146959 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.502190113 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.502288103 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.503365993 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.503407955 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.503479004 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.503506899 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.516930103 CEST	443	49749	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.526170969 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:52.527457952 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:52.530258894 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:52.530955076 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:52.531905890 CEST	443	49750	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.533895016 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.535765886 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.536220074 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.537545919 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.537739992 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.543651104 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.544054031 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.544569016 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.545422077 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.546148062 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.546446085 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.546566963 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:52.546602011 CEST	49750	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.546670914 CEST	49747	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.546710014 CEST	49746	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.546745062 CEST	49749	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.547998905 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.548449039 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.558592081 CEST	49767	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.559036970 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.572559118 CEST	49768	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.572762966 CEST	49769	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.573149920 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.573275089 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.573371887 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.573472977 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.573632002 CEST	49770	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.577667952 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.578042030 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:52.579924107 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:52.580076933 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.580163956 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.580308914 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:52.580337048 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:52.580365896 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.580375910 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:52.580394983 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:52.580411911 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:52.580421925 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:52.580427885 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.580447912 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:52.580456972 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:52.580476046 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:52.580491066 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:52.580495119 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.580521107 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:52.581166983 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.581542015 CEST	443	49755	143.204.11.28	192.168.2.3
Apr 13, 2021 17:48:52.581609011 CEST	49755	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:48:52.582340956 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.582875967 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.584106922 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.584126949 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.585901022 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.586672068 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.587435007 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.589504004 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.589854956 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.589884996 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.590573072 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.592209101 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.592588902 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.592737913 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.592847109 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.594556093 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.595118999 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.597170115 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.597702980 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.597809076 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.598493099 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.599833012 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.601068020 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.601334095 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.601613998 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.603043079 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.603333950 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.603595018 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.604861975 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.605120897 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.605386972 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.605557919 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.605595112 CEST	443	49767	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.605714083 CEST	49767	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.614001989 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.614869118 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.615554094 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.615768909 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.616149902 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.616379976 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.616563082 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.616741896 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.616909027 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.617059946 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.617283106 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.619102955 CEST	443	49768	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.619493961 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.619612932 CEST	49768	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.619652987 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.619736910 CEST	443	49770	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.619893074 CEST	443	49769	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.619987011 CEST	49770	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.620019913 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.620079041 CEST	49769	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.620575905 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.623405933 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.623836040 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.625732899 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.627870083 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.631645918 CEST	49768	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.631674051 CEST	49767	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.632101059 CEST	49769	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.632561922 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.632814884 CEST	49770	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.633069992 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.633899927 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.634110928 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.637415886 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.641810894 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.642249107 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.642693043 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.643057108 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.644429922 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.645951033 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.646203041 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.647758961 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.647846937 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.647902966 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.647983074 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.648024082 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.648993015 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.649096012 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.649435997 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.649463892 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.649482012 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.649580002 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.650702953 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.650723934 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.650831938 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.651545048 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.651573896 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.651653051 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.652826071 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.652851105 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.652930021 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.654143095 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.654169083 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.654186010 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.654287100 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.655414104 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.655441046 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.655503988 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.656704903 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.656729937 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.656833887 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.656860113 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.657984972 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.658009052 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.658083916 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.659245014 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.659269094 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.659326077 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.659347057 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.660542965 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.660567999 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.660655022 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.661788940 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.661813974 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.661834955 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.661932945 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.661983967 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.663111925 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.663132906 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.663156033 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.663178921 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.663255930 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.664432049 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.664457083 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.664478064 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.664541006 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.664581060 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.665694952 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.665718079 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.665791988 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.666958094 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.666980028 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.667048931 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.667073011 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.668257952 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.668283939 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.668358088 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.669538975 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.669609070 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.669684887 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.670814991 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.670840025 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.670917034 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.672105074 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.672128916 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.672195911 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.673399925 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.673450947 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.673485994 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.673731089 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.676485062 CEST	443	49767	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.676508904 CEST	443	49768	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.676889896 CEST	443	49769	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.677023888 CEST	443	49770	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.677325010 CEST	443	49770	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.678002119 CEST	49770	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.678531885 CEST	49770	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.678616047 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.679049015 CEST	443	49767	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.679162979 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.679167032 CEST	49767	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.679637909 CEST	49767	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.679672003 CEST	443	49768	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.679857969 CEST	443	49769	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.679958105 CEST	49768	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.680625916 CEST	49769	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.680654049 CEST	49769	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.681746960 CEST	49768	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.682722092 CEST	49770	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.683152914 CEST	49767	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.683320999 CEST	49769	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.684151888 CEST	49768	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.692646980 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.692797899 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.693713903 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.693742037 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.693810940 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.694354057 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.694379091 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.694446087 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.695635080 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.695661068 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.695729971 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.696955919 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.696997881 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.697046041 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.697077036 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.698237896 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.698266029 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.698318958 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.698347092 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.699486971 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.699512005 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.699583054 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.699608088 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.700803041 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.700830936 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.700963020 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.700985909 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.702080965 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.702104092 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.702150106 CEST	49770	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.702178001 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.702245951 CEST	49769	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.702286005 CEST	49768	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.702307940 CEST	49767	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.702452898 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.703358889 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.703385115 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.703444004 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.703468084 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.704679966 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.704704046 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.704766989 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.704797983 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.705945015 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.705981016 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.706049919 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.707251072 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.707298994 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.707323074 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.707345963 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.708522081 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.708544016 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.708576918 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.708602905 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.709821939 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.709846020 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.709912062 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.711074114 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.711097956 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.711160898 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.712373972 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.712400913 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.712471962 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.713674068 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.713695049 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.713767052 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.714935064 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.714961052 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.715008020 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.715121031 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.716198921 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.716216087 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.716281891 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.716351032 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.716557980 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.717545033 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.717561960 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.717629910 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.718744993 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.718765974 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.718836069 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.719892979 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.719912052 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.719974041 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.719995975 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.721055984 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.721076012 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.721131086 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.721147060 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.722158909 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.722178936 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.722259998 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.722763062 CEST	443	49770	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.722831011 CEST	49770	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.723288059 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.723306894 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.723406076 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.724129915 CEST	49774	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.724217892 CEST	49773	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.724252939 CEST	49775	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.724275112 CEST	443	49767	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.724364996 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.724365950 CEST	49776	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.724374056 CEST	49767	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.724406004 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.724420071 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.724463940 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.725408077 CEST	443	49769	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.725487947 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.725505114 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.725517988 CEST	49769	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.725558996 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.726366997 CEST	443	49768	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.726473093 CEST	49768	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.726638079 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.726661921 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.726847887 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.726958990 CEST	443	49770	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.727031946 CEST	49770	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.727766991 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.727817059 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.727839947 CEST	443	49767	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.727874041 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.727909088 CEST	49767	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.728097916 CEST	443	49769	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.728142977 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.728173971 CEST	49769	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.728785992 CEST	443	49768	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.728859901 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.728893042 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.728967905 CEST	49768	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.728984118 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.728995085 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.730017900 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.730051994 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.730130911 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.731106997 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.731137991 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.731205940 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.732254982 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.732286930 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.732367039 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.733378887 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.733428955 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.733529091 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.734482050 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.734518051 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.734555006 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.734575033 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.735599041 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.735630035 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.735671043 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.735692978 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.736713886 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.736746073 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.736807108 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.737839937 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.737871885 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.737962961 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.738517046 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.738549948 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.738634109 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.739224911 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.739253044 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.739319086 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.739933014 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.739962101 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.740006924 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.740041018 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.740633011 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.740660906 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.740727901 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.740739107 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.741379976 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.741432905 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.741507053 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.742033005 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.742067099 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.742145061 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.742719889 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.742744923 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.742788076 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.742803097 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.743426085 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.743455887 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.743500948 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.743516922 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.744122028 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.744153023 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.744195938 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.744208097 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.744781017 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.744812012 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.744872093 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.745492935 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.745522022 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.745583057 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.746187925 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.746217966 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.746280909 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.746884108 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.746912956 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.746974945 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.747211933 CEST	443	49748	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.747570038 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.747598886 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.747648001 CEST	49748	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.747665882 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.747704983 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.748286009 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.748315096 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.748380899 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.748956919 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.748992920 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.749034882 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.749069929 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.749674082 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.749703884 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.749766111 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.750355959 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.750389099 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.750452042 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.751044035 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.751077890 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.751137018 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.751754999 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.751784086 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.751851082 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.752430916 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.752460003 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.752521038 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.753145933 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.753174067 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.753221989 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.753257990 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.753866911 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.753906012 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.753981113 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.754528999 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.754559040 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.754636049 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.755244970 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.755273104 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.755342007 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.755925894 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.755956888 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.756021976 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.756692886 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.756784916 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.756851912 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.757354021 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.757391930 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.757406950 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.757452011 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.758019924 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.758050919 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.758104086 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.758697987 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.758725882 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.758785009 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.759592056 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.759625912 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.759701967 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.760111094 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.760139942 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.760201931 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.760785103 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.760812998 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.760874987 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.761151075 CEST	443	49745	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.761487007 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.761519909 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.761559010 CEST	49745	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.761616945 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.761632919 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.762254953 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.762280941 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.762351990 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.762862921 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.762888908 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.762953997 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.763546944 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.763573885 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.763637066 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.764261007 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.764288902 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.764345884 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.764951944 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.764978886 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.765037060 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.765649080 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.765675068 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.765731096 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.766381025 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.766411066 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.766464949 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.767025948 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.767092943 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.767157078 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.767760038 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.767786026 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.767822981 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.767849922 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.768544912 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.768588066 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.768620014 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.768644094 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.768776894 CEST	443	49773	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.768924952 CEST	443	49775	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.769052982 CEST	49773	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.769083977 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.769114017 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.769135952 CEST	49775	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.769139051 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.769177914 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.769781113 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.769819975 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.769886971 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.769922972 CEST	443	49774	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.770136118 CEST	443	49776	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.770230055 CEST	49774	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.770490885 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.770540953 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.770550966 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.770553112 CEST	49776	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.770592928 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.771155119 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.771184921 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.771246910 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.771476030 CEST	49773	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.771792889 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.771823883 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.771864891 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.771871090 CEST	49775	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.771893978 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.772459984 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.772485971 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.772557020 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.773159981 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.773188114 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.773247957 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.773753881 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.773785114 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.773816109 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.773854971 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.773884058 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.774468899 CEST	49774	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.774616003 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.774657965 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.774693012 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.774708033 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.774709940 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.774761915 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.774760962 CEST	49776	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.775476933 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.775504112 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.775528908 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.775557995 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.775597095 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.776335955 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.776361942 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.776386976 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.776418924 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.776453018 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.777189016 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.777219057 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.777242899 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.777291059 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.777323008 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.778073072 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.778120995 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.778162003 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.778193951 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.778223038 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.778899908 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.778929949 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.778969049 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.779005051 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.779033899 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.779946089 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.780009031 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.780041933 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.780086040 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.780114889 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.780551910 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.780613899 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.780638933 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.780653954 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.780697107 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.781409979 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.781438112 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.781471014 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.781521082 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.781542063 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.782216072 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.782242060 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.782286882 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.782325029 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.782778978 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.782814980 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.782854080 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.782895088 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.782999992 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.783607960 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.783634901 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.783660889 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.783701897 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.783734083 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.784404039 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.784441948 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.784467936 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.784467936 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.784498930 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.784522057 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.785016060 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.785043001 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.785068989 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.785094023 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.785096884 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.785123110 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.785351992 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.785852909 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.785881042 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.785906076 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.785931110 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.785944939 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.785974979 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.786000013 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.786750078 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.786788940 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.786823988 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.786854029 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.786861897 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.786891937 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.786919117 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.787494898 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.787552118 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.787587881 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.787616968 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.787627935 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.787669897 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.788295984 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.788332939 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.788369894 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.788376093 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.788429022 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.788441896 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.788459063 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.788512945 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.789088011 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.789119005 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.789138079 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.789144039 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.789161921 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.789186001 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.789213896 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.789866924 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.789891005 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.789920092 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.789936066 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.789946079 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.789968967 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.789982080 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.790018082 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.790880919 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.790923119 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.790957928 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.790962934 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.790992975 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.791053057 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.791079998 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.791083097 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.791198969 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.791774035 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.791814089 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.791831970 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.791866064 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.791882992 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.791944981 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.791961908 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.792013884 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.792712927 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.792785883 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.792809963 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.792835951 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.792840958 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.792866945 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.792872906 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.792897940 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.792915106 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.793751955 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.793770075 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.793795109 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.793811083 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.793828011 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.793865919 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.793869019 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.794595003 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.794617891 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.794642925 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.794646978 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.794668913 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.794677019 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.794701099 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.794729948 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.794771910 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.795516968 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.795552969 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.795576096 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.795599937 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.795608044 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.795619965 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.795634031 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.795667887 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.796396971 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.796415091 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.796437979 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.796456099 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.796472073 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.796483040 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.796498060 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.796521902 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.797319889 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.797357082 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.797378063 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.797414064 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.797424078 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.797440052 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.797470093 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.797496080 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.798135042 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.798165083 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.798221111 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.798228979 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.798252106 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.798271894 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.798280954 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.798302889 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.798321962 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.798999071 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.799027920 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.799046040 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.799088001 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.799103975 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.799124956 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.799124956 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.799160004 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.799175978 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.799881935 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.799921989 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.799947977 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.799949884 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.799964905 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.799973965 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.799987078 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.799994946 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.800018072 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.800039053 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.800648928 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.800677061 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.800697088 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.800734997 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.800772905 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.801157951 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.801192045 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.801208019 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.801230907 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.801242113 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.801249027 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.801278114 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.801289082 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.801703930 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.802131891 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.802164078 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.802195072 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.802221060 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.802261114 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.816329002 CEST	443	49773	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.816507101 CEST	443	49775	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.816751003 CEST	443	49775	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.816850901 CEST	49775	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.818115950 CEST	49775	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.820549011 CEST	443	49773	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.820652962 CEST	49773	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.821043968 CEST	49773	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.821109056 CEST	443	49774	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.821584940 CEST	443	49776	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.824181080 CEST	443	49776	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.824517012 CEST	49776	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.824790001 CEST	443	49774	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.824878931 CEST	49774	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.825016022 CEST	49776	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.825438023 CEST	49774	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:48:52.863997936 CEST	443	49775	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.866599083 CEST	443	49773	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.870317936 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.870347977 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.870451927 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.872205019 CEST	443	49776	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.872750998 CEST	443	49774	13.226.169.100	192.168.2.3
Apr 13, 2021 17:48:52.873464108 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.873666048 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.873739004 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.874937057 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.875014067 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.875026941 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.875869989 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.876446009 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.876468897 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.876513004 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.876532078 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.876562119 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.877770901 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.877933025 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.878000021 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.878774881 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.878873110 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.878947973 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.880055904 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.880230904 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.880347013 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.881160021 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.881182909 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.881268978 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.881850004 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.881934881 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.882019043 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.884850025 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.884910107 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.884982109 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.885103941 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.886537075 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.886595964 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.886617899 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.886766911 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.887171984 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.887187004 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.887243032 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.890624046 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.890640974 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.890676022 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.890737057 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.890764952 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.894889116 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.894912004 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.894987106 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.905693054 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.905770063 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.905869961 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.906330109 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.906385899 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.906409025 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.906430960 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.907955885 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.907982111 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.908015013 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.908056021 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.913921118 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.914654016 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.914742947 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.919568062 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.919631958 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.919675112 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.919749022 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.919770002 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.919945955 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.920049906 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.920120001 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.920217991 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.920244932 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.920278072 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.920294046 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.922691107 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.922820091 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.922913074 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.930521011 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.930557013 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.930640936 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.934938908 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.934979916 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.935018063 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.935034990 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.935050011 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.935071945 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.937437057 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.937478065 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.937511921 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.937521935 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.937560081 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.937597990 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.947798014 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.947830915 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.947865963 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.947911978 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.947949886 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.948796988 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.948844910 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.948857069 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.948889971 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.948904037 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.948939085 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.951036930 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.951081038 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.951117039 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.951172113 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.951173067 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.951188087 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.951220036 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.951220989 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.951275110 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.951277018 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.951323986 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.952327967 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.952384949 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.952387094 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.952444077 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.952469110 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.952476978 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.952512980 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.952569008 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.952778101 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.952810049 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.952840090 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.952842951 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.952867031 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.952903032 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.952936888 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.952981949 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.953147888 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.953212976 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.953469992 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.953521967 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.953536034 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.953609943 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.953677893 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.953836918 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.953870058 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.953908920 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.953965902 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.954030991 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.954083920 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.954222918 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.954257011 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.954298973 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.954324961 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.954698086 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.954788923 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:52.954813957 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:52.954859018 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.015103102 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.015546083 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.016055107 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.061839104 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.061861038 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.062267065 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.149954081 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.152637005 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.152883053 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.171390057 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.171413898 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.171430111 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.171444893 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.171457052 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.171468973 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.171480894 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.171478987 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.171492100 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.171504021 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.171515942 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.171531916 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.171556950 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.171576023 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.171704054 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.171720982 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.171782017 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.177325964 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.177361012 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.177406073 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.177432060 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.177457094 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.177458048 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.177481890 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.177505970 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.177510023 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.177525043 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.177536011 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.177561998 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.177588940 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.177591085 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.177669048 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.177675962 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.177717924 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.177736998 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.177769899 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.177781105 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.177917957 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.177977085 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.194521904 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.197516918 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.197531939 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.214838028 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.214880943 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.214914083 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.214921951 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.214943886 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.214955091 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.214971066 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.214987993 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215004921 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215019941 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215051889 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215053082 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215075970 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215084076 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215094090 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215121031 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215164900 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215187073 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215197086 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215229988 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215230942 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215261936 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215276003 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215293884 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215296984 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215317011 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215327024 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215336084 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215363979 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215374947 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215396881 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215428114 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215431929 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215442896 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215460062 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215471983 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215481043 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.215507030 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.215529919 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.223448038 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.223802090 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.270257950 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.301635981 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.301702023 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.301726103 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.301762104 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.301778078 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.301810980 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.301814079 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.301835060 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.301858902 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.301862955 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.301882029 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.301889896 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.301920891 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.301932096 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.301975012 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.302042007 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.302042007 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.302067041 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.302088976 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.302108049 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.302113056 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.302136898 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.302145004 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.302151918 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.302186012 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.302212000 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.306557894 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306595087 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306616068 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306636095 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306653976 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306673050 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306698084 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306720018 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306737900 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.306740046 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306762934 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306792974 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.306813002 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.306875944 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306901932 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306926966 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306948900 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.306963921 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.306988955 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.307029963 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.341514111 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.341550112 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.341583967 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.341618061 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.341641903 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.341662884 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.341666937 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.341667891 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.341672897 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.341702938 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.341734886 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.341739893 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.341751099 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.341773033 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.341792107 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.341805935 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.341840982 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.341869116 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.341907024 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.341939926 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.341976881 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.342014074 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.342031956 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.342046976 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.342067957 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.342070103 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.342089891 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.342129946 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.362060070 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.377343893 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.377366066 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.377564907 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.377602100 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.378973961 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.379079103 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.379086971 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.379276991 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.403215885 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.420821905 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.420845985 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.420938015 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.493951082 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.554723024 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.554740906 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:48:53.554790974 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:53.554826021 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:48:56.792483091 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.792670965 CEST	49780	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.835819960 CEST	443	49780	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.835844994 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.835941076 CEST	49780	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.835977077 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.839339018 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.839358091 CEST	49780	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.882333040 CEST	443	49780	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.882549047 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.896171093 CEST	443	49780	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.896243095 CEST	443	49780	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.896280050 CEST	443	49780	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.896327019 CEST	49780	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.896363974 CEST	49780	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.896388054 CEST	49780	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.896792889 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.896838903 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.896866083 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.896907091 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.896930933 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.908041000 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.908453941 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.908746004 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.908906937 CEST	49780	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.911402941 CEST	49780	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.952097893 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.952150106 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.952178001 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.952208042 CEST	443	49780	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.952248096 CEST	443	49780	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.952263117 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.952280998 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.952286005 CEST	49780	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.952316046 CEST	49780	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.955660105 CEST	443	49780	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.955745935 CEST	49780	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.956994057 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.957461119 CEST	49780	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.957822084 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.985042095 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.985095024 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.985150099 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.985172033 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.985285997 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:56.986150980 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.989625931 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:56.990099907 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:57.004682064 CEST	443	49780	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:57.004710913 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:57.032847881 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:57.033467054 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:57.065181017 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:57.065285921 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:57.065299988 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:57.065337896 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:57.066117048 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:57.066159010 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:48:57.066188097 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:57.066204071 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:57.090598106 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:48:57.139481068 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:49:10.285834074 CEST	49785	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.286874056 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.302154064 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.302968025 CEST	49788	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.334284067 CEST	443	49785	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.334427118 CEST	49785	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.335480928 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.335580111 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.343199968 CEST	49785	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.343314886 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.345068932 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.345175982 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.345839024 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.346112013 CEST	443	49788	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.347817898 CEST	49788	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.348582029 CEST	49788	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.388684034 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.391539097 CEST	443	49785	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.391594887 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.391642094 CEST	443	49788	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.399101019 CEST	443	49785	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.399169922 CEST	443	49785	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.399203062 CEST	443	49785	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.399235964 CEST	443	49785	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.399274111 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.399300098 CEST	49785	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.399327040 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.399343967 CEST	49785	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.399352074 CEST	49785	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.399353027 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.399362087 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.399378061 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.399406910 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.399415016 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.399467945 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.402714014 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.402775049 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.402811050 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.402854919 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.402900934 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.402904987 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.406830072 CEST	443	49788	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.406871080 CEST	443	49788	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.406898022 CEST	443	49788	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.407017946 CEST	49788	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.407073021 CEST	49788	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.423319101 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.423414946 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.424093008 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.424191952 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.424446106 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.424619913 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.428440094 CEST	49788	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.429059982 CEST	49788	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.429516077 CEST	49785	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.429990053 CEST	49785	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.467036963 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.467076063 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.467202902 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.467252970 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.467456102 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.467665911 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.467746019 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.468394041 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.468422890 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.468452930 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.468455076 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.468486071 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.468518019 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.468523979 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.468544006 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.471411943 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.471446037 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.471487045 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.471529007 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.471818924 CEST	443	49788	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.471873999 CEST	443	49788	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.472006083 CEST	49788	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.472023964 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.472208023 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.472261906 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.472309113 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.472357035 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.472666025 CEST	443	49788	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.473004103 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.473088026 CEST	49788	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.473176956 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.473238945 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.473745108 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.473809958 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.473843098 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.473866940 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.473889112 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.473932028 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.474404097 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.474431992 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.474473000 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.474528074 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.474549055 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.476069927 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.476712942 CEST	49788	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.476727009 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.476941109 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.477422953 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.477456093 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.477565050 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.477581024 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.478533030 CEST	443	49785	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.478599072 CEST	443	49785	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.478693962 CEST	49785	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.478837967 CEST	443	49785	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.478928089 CEST	49785	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.480216026 CEST	49786	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.481496096 CEST	49785	443	192.168.2.3	142.250.185.65
Apr 13, 2021 17:49:10.511434078 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.511464119 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.511554003 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.512904882 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.512942076 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.513025045 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.515800953 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.515837908 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.515882015 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.515919924 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.518800020 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.518819094 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.519248962 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.521826982 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.521913052 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.524821997 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:10.526412964 CEST	443	49788	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:10.529858112 CEST	443	49786	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.536364079 CEST	443	49785	142.250.185.65	192.168.2.3
Apr 13, 2021 17:49:10.573827028 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:11.615031958 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:11.660334110 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675290108 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675328016 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675353050 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675375938 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675410032 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675432920 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675445080 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:11.675457954 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675484896 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675492048 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:11.675504923 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675522089 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675524950 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:11.675546885 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:11.675611973 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:11.675677061 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675729990 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675746918 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:11.675802946 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:11.675825119 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.719405890 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.764426947 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.777810097 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.777858973 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.777895927 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.777932882 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.777935028 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.777957916 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.777977943 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.777995110 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.778018951 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.778031111 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.778059959 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.778068066 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.778100967 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.778111935 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.778147936 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.778150082 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.778183937 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.778201103 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.778232098 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.872781038 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.873363972 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.873831987 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.874320984 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.874810934 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.875334024 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.875792980 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.876435041 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.876873016 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.877417088 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.886826992 CEST	49766	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:12.886852980 CEST	49766	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:12.887268066 CEST	49775	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:12.889691114 CEST	49773	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:12.889981985 CEST	49776	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:12.890352964 CEST	49774	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:12.917970896 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.917999983 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.918817043 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.918834925 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.919439077 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921020985 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921051979 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921075106 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921096087 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921117067 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921122074 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921138048 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921148062 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921160936 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921185017 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921192884 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921206951 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921210051 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921228886 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921246052 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921250105 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921277046 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921319008 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921430111 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921453953 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921474934 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921475887 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921493053 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921498060 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921519041 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921519995 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921540976 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921564102 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921586990 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921608925 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921597958 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921629906 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.921632051 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921638012 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921665907 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921669960 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.921696901 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.922317982 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.922343969 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.922363997 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.922384977 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.922399044 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.922405958 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.922426939 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.922449112 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.922472000 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.922483921 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.922489882 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.922492981 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.922497034 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.922519922 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.922548056 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.922569990 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.923202038 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.923227072 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.923249960 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.923270941 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.923290014 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.923310041 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.923331022 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.923352003 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.923372030 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.923392057 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.923521996 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.923576117 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.924098015 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.924123049 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.924144030 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.924166918 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.924161911 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.924190044 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.924192905 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.924213886 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.924231052 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.924236059 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.924254894 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.924257994 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.924279928 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.924283981 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.924300909 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.924344063 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.924357891 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.924999952 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925025940 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925046921 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925065041 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.925069094 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925088882 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925102949 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.925110102 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925120115 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.925133944 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925154924 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925159931 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.925175905 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925189018 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.925195932 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925237894 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.925276041 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.925878048 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925905943 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925925970 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925949097 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925952911 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.925961018 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.925971031 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925975084 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.925992012 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.925996065 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.926013947 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926016092 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.926034927 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926055908 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926075935 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926079988 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.926084995 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.926089048 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.926096916 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.926136017 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.926789045 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926812887 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926836014 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926856995 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926877022 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926892996 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.926897049 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926918030 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926939964 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926961899 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.926965952 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926986933 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.926994085 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.927007914 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.927011967 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.927014112 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.927016973 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.927031040 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.927819967 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.927845955 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.927866936 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.927886963 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.927907944 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.927922010 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.927932024 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.927963972 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.927968979 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.927970886 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.927992105 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.927999973 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.928013086 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.928035021 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.928039074 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.928080082 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.928141117 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.928566933 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.928590059 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.928611040 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.928625107 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.928632021 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.928653955 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.928669930 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.928678036 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.928699970 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.928719997 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.928735018 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.928742886 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.928764105 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.928766012 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.928837061 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.928855896 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.929451942 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.929476023 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.929497957 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.929507017 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.929522991 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.929533958 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.929548025 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.929560900 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.929569960 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.929589987 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.929591894 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.929613113 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.929632902 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.929641008 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.929653883 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.929666996 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.929724932 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.930346966 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.930371046 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.930392027 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.930413961 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.930458069 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.930468082 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.930471897 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.930474997 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.930490017 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.930510998 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.930515051 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.930531979 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.930531979 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.930552959 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.930555105 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.930579901 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.930610895 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.931236029 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.931260109 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.931281090 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.931301117 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.931323051 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.931345940 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.931349039 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.931361914 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.931368113 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.931369066 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.931390047 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.931401968 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.931412935 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.931432962 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.931433916 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.931456089 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.931463003 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.931539059 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.932110071 CEST	443	49775	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:12.932137012 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.932157993 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.932168961 CEST	49775	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:12.932179928 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.932200909 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.932224035 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.932240009 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.932249069 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.932271004 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.932282925 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.932288885 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.932293892 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.932302952 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.932318926 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.932346106 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.932379961 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.933037043 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933062077 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933083057 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933105946 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933110952 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.933128119 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933129072 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.933149099 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933157921 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.933162928 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.933171988 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933180094 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.933193922 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933202028 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.933216095 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933221102 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.933238029 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933243990 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.933259964 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933271885 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.933293104 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.933311939 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.933937073 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933960915 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933980942 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.933990002 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.934004068 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.934015036 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.934029102 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.934047937 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.934050083 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.934072018 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.934079885 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.934094906 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.934103012 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.934118032 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.934120893 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.934139013 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.934145927 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.934165955 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.934189081 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.934830904 CEST	443	49773	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:12.934856892 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.934876919 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.934896946 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.934919119 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.934932947 CEST	49773	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:12.934942007 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.934942007 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.934969902 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.934977055 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.934990883 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.935005903 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.935014963 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.935031891 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.935036898 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.935054064 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:12.935065031 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.935096979 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:12.936269999 CEST	443	49776	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:12.936290026 CEST	443	49774	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:12.936341047 CEST	49776	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:12.936362028 CEST	49774	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:16.175324917 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:16.229609966 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:16.236519098 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:16.236624002 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:16.236627102 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:16.236690998 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:16.333688021 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:16.562482119 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:16.562505007 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:16.562660933 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:17.798549891 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:49:17.841831923 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:49:17.873800039 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:49:17.873826027 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:49:17.873902082 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:49:17.874718904 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:49:17.874847889 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:49:17.874917984 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:49:17.875561953 CEST	49779	443	192.168.2.3	216.58.207.130
Apr 13, 2021 17:49:17.925754070 CEST	443	49779	216.58.207.130	192.168.2.3
Apr 13, 2021 17:49:18.123076916 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:18.167735100 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:18.168268919 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:18.168287992 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:18.168363094 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:18.168396950 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:18.169297934 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:18.169317007 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:18.169413090 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:18.170787096 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:18.170876026 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:18.171626091 CEST	49787	443	192.168.2.3	172.217.22.246
Apr 13, 2021 17:49:18.221554995 CEST	443	49787	172.217.22.246	192.168.2.3
Apr 13, 2021 17:49:19.398844004 CEST	49794	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:19.399715900 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:19.541855097 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:19.544327021 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:19.544487000 CEST	49794	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:19.544559956 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:19.721092939 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:19.725449085 CEST	49794	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:19.865557909 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:19.868447065 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:19.869288921 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:19.869317055 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:19.869337082 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:19.869441032 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:19.869489908 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:19.872462988 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:19.872484922 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:19.872503042 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:19.872576952 CEST	49794	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:19.872606993 CEST	49794	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.015202999 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.015451908 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.015510082 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.015880108 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.016392946 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.016660929 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.016853094 CEST	49794	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.025177956 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.025213003 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.029035091 CEST	49794	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.169344902 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.170526981 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.172115088 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.174824953 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.176255941 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.180141926 CEST	49794	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.197309971 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.197340012 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.197362900 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.197412968 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.197443008 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.197467089 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.197489023 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.197506905 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.197547913 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.197563887 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.197571039 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.315799952 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.317161083 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.343369961 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.343426943 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.343466997 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.343506098 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.343543053 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.343578100 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.343590975 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.343602896 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.343635082 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.343673944 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.343703985 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.343714952 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.343746901 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.343746901 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.343873978 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.460623980 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.460726976 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.492505074 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.492531061 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.492552042 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.492573977 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.492598057 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.492623091 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.492626905 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.492645979 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.492646933 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.492650032 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.492669106 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.492681026 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.492690086 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.492711067 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.492723942 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.492727995 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.492731094 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.492767096 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.492773056 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.492811918 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.604564905 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.606194019 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.638276100 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.638634920 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.638700962 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.638758898 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.638781071 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.638806105 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.638818026 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.638827085 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.638873100 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.638928890 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.638933897 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.638933897 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.638995886 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.639058113 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.639125109 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.639187098 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.639187098 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.639194012 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.639244080 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.639307022 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.639631033 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.639981985 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.749633074 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.749696970 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.749896049 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.782741070 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.782773018 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.782800913 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.782825947 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.782849073 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.782871962 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.782895088 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.782917976 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.782934904 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.782941103 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.782963991 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.782991886 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.783004999 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.783015013 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.783021927 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.783037901 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.783050060 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.783061981 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.783083916 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.783106089 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.783123970 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.783133984 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.783159018 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.783401966 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.783428907 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.783448935 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:20.783555984 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:20.783581018 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.253429890 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.253861904 CEST	49794	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.259104013 CEST	49796	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.259354115 CEST	49797	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.396503925 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.396851063 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399197102 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399243116 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399282932 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399302959 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399322987 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399333954 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399362087 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399367094 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399398088 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399399996 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399420023 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399440050 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399465084 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399478912 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399497986 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399528027 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399542093 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399570942 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399609089 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399616957 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399629116 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399647951 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399671078 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399677992 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399714947 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399719000 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399733067 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399755955 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399774075 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399796963 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399847031 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399848938 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399889946 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399890900 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399897099 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399918079 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.399952888 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.399977922 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.402890921 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.402928114 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.402972937 CEST	49794	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.403007030 CEST	49794	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.405565023 CEST	443	49796	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.405713081 CEST	49796	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.407035112 CEST	443	49797	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.407143116 CEST	49797	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.412477016 CEST	49796	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.415117979 CEST	49797	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.417115927 CEST	49794	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.419169903 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.558963060 CEST	443	49796	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.559003115 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.559377909 CEST	443	49796	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.559509993 CEST	49796	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.559932947 CEST	49796	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.561316013 CEST	443	49794	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.561475992 CEST	49794	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.562073946 CEST	443	49797	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.562550068 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.562664986 CEST	443	49797	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.562753916 CEST	49797	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.564730883 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.564774036 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.564812899 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.564843893 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.564861059 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.564873934 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.564882994 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.564924955 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565124035 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565167904 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565190077 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565213919 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565227985 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565258980 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565275908 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565298080 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565311909 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565336943 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565351963 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565376043 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565396070 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565443993 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565459013 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565510988 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565520048 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565567017 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565568924 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565624952 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565650940 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565687895 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565686941 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565747023 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565772057 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565802097 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565807104 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565865993 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565885067 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565906048 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565929890 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565953016 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.565967083 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.565995932 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.566013098 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.566037893 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.566068888 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.566076994 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.566088915 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.566117048 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.566145897 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.566148996 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.566165924 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.566186905 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.566210032 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.566225052 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.566245079 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.566272974 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.566286087 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.566307068 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.566333055 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.566364050 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.576545954 CEST	49797	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:21.705593109 CEST	443	49796	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.705848932 CEST	443	49796	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.723496914 CEST	443	49797	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:21.723546028 CEST	443	49797	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:22.705270052 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:22.849071026 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:22.852346897 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:22.853030920 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:22.854976892 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:22.998348951 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:23.002685070 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:23.002713919 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:23.002738953 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:23.002763987 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:23.002763033 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:23.002791882 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:23.002810001 CEST	443	49795	204.41.3.217	192.168.2.3
Apr 13, 2021 17:49:23.002810001 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:23.002840042 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:23.002863884 CEST	49795	443	192.168.2.3	204.41.3.217
Apr 13, 2021 17:49:23.464874983 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:23.509680033 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941087961 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941131115 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941179037 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941219091 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941253901 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941257000 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:23.941289902 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941297054 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:23.941303968 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:23.941329002 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941343069 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:23.941365957 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941376925 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:23.941435099 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:23.941437006 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941477060 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941512108 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941514969 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:23.941534042 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:23.941546917 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941554070 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:23.941584110 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941605091 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:23.941617966 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:23.941618919 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:23.941662073 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:23.941685915 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.227576017 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.272692919 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283510923 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283544064 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283565044 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283585072 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283606052 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283632994 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283658981 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283663988 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.283687115 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283696890 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.283710003 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.283716917 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283746004 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.283751965 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283762932 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.283802986 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.283830881 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283859015 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283879995 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.283919096 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.283938885 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.284024954 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.284060955 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.284094095 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.284126043 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.284130096 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.284157991 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.284161091 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.284179926 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.284194946 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.284202099 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.284235954 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.284272909 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.284282923 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.284307003 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.284313917 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.284339905 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.284347057 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.284388065 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.284934044 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.284986019 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285017014 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285049915 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285057068 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.285083055 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.285096884 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285114050 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.285135984 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285151958 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.285167933 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285188913 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.285208941 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285233021 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.285245895 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285273075 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.285279989 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285319090 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.285531998 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.285823107 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285862923 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285896063 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285900116 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.285918951 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.285929918 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285947084 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.285964012 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.285969973 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.286005020 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.286010981 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.286041975 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.286076069 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.286088943 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.286111116 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.286123991 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.286144972 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.286154032 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.286196947 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.286711931 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.286756992 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.286788940 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.286793947 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.286823988 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.286828995 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.286838055 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.286864042 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.286896944 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.286911011 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.286928892 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.286945105 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.286962032 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.286971092 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.286995888 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.287008047 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.287038088 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.287087917 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.288559914 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.288598061 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.288669109 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.424010038 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:24.468890905 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.483436108 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.483464956 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:24.483597994 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:27.852699995 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:27.897480965 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.041064024 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.041131020 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.041171074 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.041218042 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.042329073 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.087024927 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.227266073 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.227325916 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.227375031 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.227410078 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.227448940 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.227494001 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.227500916 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.227504969 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.274279118 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.274312019 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.274344921 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.274450064 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.274450064 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.274518013 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.274528027 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321322918 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321362972 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321420908 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321455956 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321446896 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321489096 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321495056 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321499109 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321506023 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321528912 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321558952 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321588993 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321597099 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321621895 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321650982 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321664095 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321683884 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321686029 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321697950 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321706057 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321718931 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321727037 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321758032 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321784019 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321791887 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321822882 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321841002 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321851015 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321852922 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321885109 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321901083 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321916103 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321918011 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321928024 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.321949005 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321978092 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.321983099 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.322004080 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.322545052 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.322577000 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.322606087 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.322629929 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.322650909 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.322668076 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.322674036 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.322700977 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.322710037 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.322727919 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.322752953 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.322752953 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.322766066 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.322776079 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.322782993 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.322798014 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.322807074 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.322822094 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.322854042 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.323482990 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.323508978 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.323538065 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.323564053 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.323580027 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.323587894 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.323612928 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.323623896 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.323633909 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.323638916 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.323656082 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.323673010 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.323679924 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.323693037 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.323703051 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.323712111 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.323735952 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.323771000 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.324357033 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324381113 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324402094 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324423075 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324426889 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.324454069 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.324477911 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.324723005 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324747086 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324768066 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324779987 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.324798107 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324810982 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.324822903 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324845076 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324850082 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.324866056 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324872971 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.324887991 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324892998 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.324909925 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324913979 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.324932098 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.324930906 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.324953079 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.325059891 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.325424910 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.325607061 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.325634956 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.325659990 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.325680017 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.325701952 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.325711012 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.325732946 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.325733900 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.325756073 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.325754881 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.325778008 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.325788975 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.325803041 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.325807095 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.325819016 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.325829029 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.325846910 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.326495886 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.326519012 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.326555014 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.326575994 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.326574087 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.326591015 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.326611042 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.326634884 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.326636076 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.326656103 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.326657057 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.326675892 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.326684952 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.326704979 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.326713085 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.326735973 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.326746941 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.326772928 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.327410936 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.327434063 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.327454090 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.327472925 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.327480078 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.327503920 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.327511072 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.327527046 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.327543020 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.327548027 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.327568054 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.327570915 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.327591896 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.327613115 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.327626944 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.327636957 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.327652931 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.328278065 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.328301907 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.328324080 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.328347921 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.328372002 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.328371048 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.328392029 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.328393936 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.328413010 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.328417063 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.328439951 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.328454971 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.328485966 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.371964931 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.502578020 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.504133940 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.504890919 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.505609989 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.506146908 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.506679058 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.547873020 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.549140930 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.549715042 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.550431013 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.551141977 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.551659107 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.676925898 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.676976919 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677026033 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677069902 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677108049 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677123070 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677148104 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677165985 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677171946 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677190065 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677206039 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677228928 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677258968 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677269936 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677273989 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677309036 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677357912 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677366972 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677458048 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677495956 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677520990 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677536011 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677551031 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677577019 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677603006 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677617073 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677640915 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677655935 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677670002 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677695036 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677732944 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677751064 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677782059 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677783012 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677826881 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677844048 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677865982 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677886963 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677905083 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.677922010 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.677963018 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.678365946 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.678411007 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.678450108 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.678479910 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.678488970 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.678529978 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.678560019 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.678570032 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.678617001 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.678626060 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.678683996 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.678731918 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.678750038 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.678759098 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.678775072 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.678839922 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.679225922 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.679279089 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.679299116 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.679337025 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.679354906 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.679378033 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.679399014 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.679415941 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.679430962 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.679455996 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.679481030 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.679495096 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.679517031 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.679543972 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.679554939 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.679588079 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.679605007 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.679644108 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.679716110 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.680111885 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.680155993 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.680185080 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.680197001 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.680223942 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.680258036 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.680304050 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.680330992 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.680341959 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.680371046 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.680392027 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.680397987 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.680437088 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.680485964 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.680536032 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.680536032 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.680561066 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.680814981 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.681008101 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.681052923 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.681091070 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.681128979 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.681133032 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.681148052 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.681166887 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.681183100 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.681222916 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.681224108 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.681277037 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.681281090 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.681320906 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.681359053 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.681359053 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.681379080 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.681428909 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.681432009 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.681487083 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.681869984 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.681915998 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.681951046 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.681953907 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.681974888 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.682002068 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.682012081 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.682045937 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.682085037 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.682102919 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.682125092 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.682127953 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.682164907 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.682208061 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.682221889 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.682238102 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.682249069 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.682259083 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.682378054 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.682789087 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.682835102 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.682883978 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.682902098 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.682926893 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.682965040 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.682982922 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.683005095 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.683047056 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.683063984 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.683088064 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.683113098 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.683126926 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.683141947 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.683168888 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.683186054 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.683698893 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.683738947 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.683760881 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.683778048 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.683785915 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.683789968 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.683834076 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.683872938 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.683881044 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.683900118 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.683912992 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.683918953 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.683953047 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.683968067 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.683991909 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.684045076 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.684057951 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.684381962 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.684423923 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.684458017 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.684473038 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.684478998 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.684520006 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.684559107 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.684561968 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.684590101 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.684598923 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.684614897 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.684638977 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.684653044 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.684676886 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.684694052 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.684717894 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.684720993 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.684765100 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.684814930 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.684822083 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.685266972 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.685303926 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.685333967 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.685360909 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.685360909 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.685385942 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.685420036 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.685422897 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.685477018 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.685477972 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.685518980 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.685548067 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.685570002 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.685575008 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.685599089 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.685602903 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.685663939 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.685672045 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.686153889 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.686193943 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.686227083 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.686254978 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.686256886 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.686285019 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.686312914 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.686342001 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.686377048 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.686400890 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.686418056 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.686430931 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.686436892 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.686444044 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.686449051 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.686450005 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.686465025 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.686506987 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.687056065 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.687093019 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.687123060 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.687150002 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.687175989 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.687203884 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.687231064 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.687233925 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.687257051 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.687284946 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.687314987 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.687319040 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.687329054 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.687335968 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.687340975 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.687345982 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.687350035 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.687355042 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.687360048 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.687364101 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.687942982 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.687973976 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688000917 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688028097 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688041925 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.688054085 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688080072 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688086033 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.688098907 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.688112974 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688137054 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.688153028 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688170910 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.688189030 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688216925 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688219070 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.688232899 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.688282967 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.688829899 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688859940 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688886881 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688913107 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.688914061 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688944101 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688950062 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.688957930 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.688966990 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.688971996 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.688990116 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.689002037 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689030886 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689063072 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689070940 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.689096928 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689100981 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.689135075 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.689152002 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.689730883 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689760923 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689788103 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689821005 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689821959 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.689851999 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689860106 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.689878941 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689881086 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.689908028 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689929962 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.689935923 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689939022 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.689963102 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689990044 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.689994097 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.690004110 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.690097094 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.690112114 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.690633059 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.690665007 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.690685987 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.690727949 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.690751076 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.690753937 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.690778017 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.690799952 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.690823078 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.690844059 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.690871954 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.690944910 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.690973043 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.691518068 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.691546917 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.691580057 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.691596985 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.691610098 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.691628933 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.691637993 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.691658020 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.691667080 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.691680908 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.691695929 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.691711903 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.691723108 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.691737890 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.691751003 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.691776991 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.691780090 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.691824913 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.692394018 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.692424059 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.692457914 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.692460060 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.692486048 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.692488909 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.692506075 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.692517042 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.692544937 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.692559958 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.692570925 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.692574024 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.692586899 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.692599058 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.692615986 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.692625999 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.692656040 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.692658901 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.692682981 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.692694902 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.693288088 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.693319082 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.693346024 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.693372965 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.693387985 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.693419933 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.693427086 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.693449020 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.693456888 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.693475962 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.693507910 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.723771095 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.723831892 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.723876953 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.723921061 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.723944902 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.723964930 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.723979950 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.724009037 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.724023104 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.724057913 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.724102974 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.724118948 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.724162102 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.805907965 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.805936098 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.805979967 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:28.806003094 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.806052923 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:28.806061029 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.277626991 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.277678013 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.277882099 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.278039932 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.278201103 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.278345108 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.322246075 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.322276115 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.322367907 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.322520971 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.322685003 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.322859049 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.456799984 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.456839085 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.456861019 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.456882954 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.456907034 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.456928968 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.456950903 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.456976891 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.456984043 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.457001925 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.457026005 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.457029104 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.457032919 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.457040071 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.457053900 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.457056999 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.457072020 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.457082987 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.457103968 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.457123041 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.458059072 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458092928 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458112955 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458137989 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458158016 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458167076 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.458184958 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458200932 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.458210945 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458224058 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.458231926 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458251953 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458271027 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458282948 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.458300114 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458324909 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.458344936 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.458380938 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.458486080 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458511114 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458532095 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458570957 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.458601952 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.458631039 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.458844900 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.460115910 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460150957 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460174084 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460197926 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460200071 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.460222006 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460223913 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.460247993 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460262060 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.460273981 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460297108 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460302114 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.460311890 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.460321903 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460340977 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460361958 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.460365057 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460405111 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.460436106 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.460537910 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460562944 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460583925 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.460597992 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.460623980 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.460649967 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.462053061 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462084055 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462106943 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462131977 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462161064 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462163925 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.462188005 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462205887 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.462213993 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462234020 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.462238073 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462264061 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462277889 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.462286949 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462302923 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.462312937 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462347031 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.462380886 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.462424040 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462450027 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462472916 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.462502956 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.462532043 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.462538958 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.462654114 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.463932991 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.463959932 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.463984966 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.464010000 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.464020967 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.464035988 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.464059114 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.464060068 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.464077950 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.464082956 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.464109898 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.464117050 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.464138985 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.464152098 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.464164019 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.464179993 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.464190960 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.464226961 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.464245081 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.464288950 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.464306116 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.464360952 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.480103016 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480154037 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480178118 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480201006 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480225086 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480247974 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480268002 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480292082 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480314970 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480314970 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.480340004 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480365038 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480375051 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.480382919 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480413914 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.480423927 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.480448008 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.480448961 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480547905 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.480613947 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.513525009 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.513645887 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.558078051 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.558409929 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.559189081 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.603904963 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.689224005 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.689260006 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.689390898 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.709850073 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.709899902 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.709999084 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.712726116 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.736928940 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.736948013 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.737014055 CEST	443	49743	143.204.11.124	192.168.2.3
Apr 13, 2021 17:49:29.737059116 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:29.737096071 CEST	49743	443	192.168.2.3	143.204.11.124
Apr 13, 2021 17:49:34.002118111 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.002228022 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.047089100 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.047112942 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.047200918 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.047482967 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.049196959 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.049515009 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.094332933 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.094367981 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.094643116 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.094795942 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.095318079 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.097464085 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.097537994 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.128123045 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.128285885 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.141597986 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.173073053 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.173105001 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.331934929 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.332003117 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.332066059 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.332125902 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.332174063 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.334422112 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.339652061 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.340383053 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.341931105 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.344384909 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.349656105 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.355189085 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.385237932 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.386540890 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.389273882 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.389302969 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.389411926 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.389957905 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.390625000 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.390932083 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.397229910 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.398339033 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.398977995 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.400211096 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.400325060 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.400810003 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.438049078 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.438673973 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.438929081 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.439029932 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.439224958 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.439229965 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.441108942 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.441131115 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.441736937 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.446679115 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.446933031 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.447035074 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.447244883 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.447477102 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.447552919 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.448575974 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.448609114 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.449675083 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.450611115 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.450728893 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.488039970 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.488085985 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.489861012 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.492607117 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.494762897 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.495032072 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.496221066 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.497478962 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.497925043 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.498735905 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.499916077 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.528853893 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.529211998 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.533902884 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.547143936 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.578690052 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.596227884 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.597913027 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.603219032 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.603317976 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.604830980 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.604918957 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.608839035 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.616558075 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.617722988 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.653599977 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.653634071 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.653764963 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.655313969 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.660897017 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.663280964 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.700098991 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.768155098 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.768243074 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.769745111 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.771020889 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.776745081 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.777498960 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.795664072 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.796808004 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.803266048 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.808453083 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.809678078 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.810750008 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.822288036 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.823556900 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.849906921 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.857708931 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.867959976 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.868082047 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.868814945 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.873641014 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.875303984 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.875905991 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.913788080 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.921928883 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.969526052 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.969561100 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.969593048 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.969619036 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.969692945 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.969743013 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.970550060 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.970577955 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.970626116 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.970643997 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.971828938 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.971857071 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.971915960 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.973071098 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.973098993 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.973133087 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.973150969 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.974350929 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.974370956 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.974421978 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.975600004 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.975616932 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:34.975672007 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:34.975699902 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.108388901 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.108477116 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.108501911 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.108526945 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.108551025 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.108622074 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.108633041 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.108639956 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.108676910 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.108685017 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.136915922 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.137408972 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.199584961 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.200438023 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.201327085 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.213841915 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.215373993 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.246227980 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.246850014 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.248780012 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.289088011 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.289293051 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.355341911 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.355413914 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.355514050 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.356890917 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.425046921 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.443391085 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.447391033 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.473292112 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.577919006 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.578027964 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.648890018 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.659044981 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:35.697197914 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.790245056 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:35.790281057 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:35.790304899 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:35.790437937 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:35.790467024 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:35.803088903 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.803185940 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.836321115 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.864120960 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.884418964 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.894781113 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.900970936 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.902385950 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.907979012 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:35.908765078 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.939699888 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.947670937 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.949538946 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.952963114 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.992729902 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:35.993438959 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.022870064 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.027460098 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.046613932 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.046724081 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.052612066 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.052735090 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.053236008 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.054397106 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.054486990 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.062012911 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.069241047 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.074568987 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.078843117 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.079719067 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:36.099021912 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.109874010 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.116416931 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.120388985 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.126540899 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.211940050 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:36.212006092 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:36.212039948 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:36.212080002 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:36.212099075 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:36.212127924 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:36.212129116 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:36.212133884 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:36.212161064 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:36.212174892 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:36.212192059 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:36.212196112 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:36.212213993 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:36.212249041 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:36.212297916 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:36.212327957 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:36.212357998 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:36.212373018 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:36.213540077 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:36.213620901 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:36.215461016 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.215635061 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.227246046 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.227405071 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.235482931 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.235590935 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.237114906 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.237148046 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.237185955 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.237231970 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.269706964 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.269964933 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.321960926 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.321964025 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.322290897 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.340410948 CEST	443	49765	34.198.74.185	192.168.2.3
Apr 13, 2021 17:49:36.340895891 CEST	49765	443	192.168.2.3	34.198.74.185
Apr 13, 2021 17:49:36.367711067 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.367783070 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.367935896 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.401626110 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.401767015 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.402724028 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.422569036 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.428889036 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.447787046 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.467713118 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.470455885 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.470594883 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.471404076 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.473577023 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.473727942 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.473800898 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.473876953 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.474776983 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.475018024 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.475111961 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.516016960 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.519506931 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.521179914 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.552355051 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.552581072 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.587743998 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.588066101 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.589135885 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.623783112 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.624058962 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.625314951 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.625351906 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.625371933 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.625523090 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.625735998 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.625782013 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.638716936 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.647631884 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.660350084 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.662158966 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.670192957 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.680843115 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:49:36.692689896 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.706185102 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.706935883 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.727919102 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:49:36.728019953 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:49:36.728074074 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:49:36.728092909 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:49:36.728112936 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:49:36.728171110 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:49:36.729023933 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:49:36.729116917 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:49:36.729116917 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:49:36.729243040 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:49:36.730319023 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:49:36.730348110 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:49:36.730401039 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:49:36.730417013 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:49:36.731623888 CEST	443	49754	143.204.11.28	192.168.2.3
Apr 13, 2021 17:49:36.731730938 CEST	49754	443	192.168.2.3	143.204.11.28
Apr 13, 2021 17:49:36.756772995 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.756877899 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.777292967 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.777333975 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.777424097 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.777462959 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.777817965 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.777848005 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.777901888 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.779176950 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.779211998 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.779227972 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.779256105 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.779287100 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.780467987 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.780495882 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.780535936 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.780551910 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.781783104 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.781810999 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.781855106 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.781871080 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.783081055 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.783111095 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.783157110 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.783174038 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.784375906 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.784441948 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.799216032 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.799251080 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.799385071 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.803483963 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.810992956 CEST	443	49804	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.811160088 CEST	49804	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.840517044 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.840719938 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.840764999 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.840792894 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.840817928 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.840842962 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.840919018 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.840974092 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.840981960 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.840986967 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.842068911 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.842101097 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.842165947 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.842199087 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.843400955 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.843473911 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.843478918 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.843538046 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.844736099 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.844763994 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.844808102 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.844830036 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.846107006 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.846132040 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.846178055 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.846206903 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.847436905 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.847511053 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.847531080 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.847584963 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.848788977 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.848817110 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.848881960 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.848910093 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.850145102 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.850169897 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.850240946 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.850276947 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.911741018 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.913455009 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.915555954 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:36.958043098 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.958075047 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.960016966 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.996259928 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:36.996392012 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.028522015 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.061515093 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.067064047 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.067104101 CEST	443	49802	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.067198038 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.067313910 CEST	49802	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.067635059 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.067713976 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.073548079 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.107683897 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.180556059 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.180768967 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.213397980 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.213608027 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.520062923 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.524209023 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.525154114 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.526093006 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.567464113 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.571139097 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.571572065 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.573345900 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.676246881 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.676285028 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.676444054 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.676505089 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.676732063 CEST	443	49801	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.676811934 CEST	49801	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.677712917 CEST	443	49803	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.677803040 CEST	49803	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.679531097 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.679570913 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.679636955 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.679656029 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.680063963 CEST	443	49800	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.680145025 CEST	49800	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.681610107 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.681638956 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.681688070 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.681713104 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.682231903 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.682261944 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.682295084 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.682316065 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.683762074 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.683813095 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.683861017 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.683887005 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.684911013 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.684962988 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.684994936 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.685018063 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.686176062 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.686203003 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.686247110 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.686261892 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.687491894 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.687521935 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.687553883 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.687577009 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.688904047 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.688936949 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.688970089 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.688988924 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.690130949 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.690162897 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.690197945 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.690220118 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.691426039 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.691457033 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.691500902 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.691528082 CEST	49805	443	192.168.2.3	13.226.169.100
Apr 13, 2021 17:49:37.693454981 CEST	443	49805	13.226.169.100	192.168.2.3
Apr 13, 2021 17:49:37.693522930 CEST	49805	443	192.168.2.3	13.226.169.100

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 13, 2021 17:46:42.888191938 CEST	56961	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:46:42.936991930 CEST	53	56961	8.8.8.8	192.168.2.3
Apr 13, 2021 17:46:43.706806898 CEST	59353	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:46:43.759239912 CEST	53	59353	8.8.8.8	192.168.2.3
Apr 13, 2021 17:46:44.469343901 CEST	52238	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:46:44.518542051 CEST	53	52238	8.8.8.8	192.168.2.3
Apr 13, 2021 17:46:45.269143105 CEST	49873	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:46:45.319401979 CEST	53	49873	8.8.8.8	192.168.2.3
Apr 13, 2021 17:46:46.408253908 CEST	53196	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:46:46.475136995 CEST	53	53196	8.8.8.8	192.168.2.3
Apr 13, 2021 17:46:47.578264952 CEST	56777	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:46:47.626987934 CEST	53	56777	8.8.8.8	192.168.2.3
Apr 13, 2021 17:46:49.792937040 CEST	58643	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:46:49.845501900 CEST	53	58643	8.8.8.8	192.168.2.3
Apr 13, 2021 17:46:52.473488092 CEST	60985	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:46:52.525286913 CEST	53	60985	8.8.8.8	192.168.2.3
Apr 13, 2021 17:46:55.739396095 CEST	50200	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:46:55.796766043 CEST	53	50200	8.8.8.8	192.168.2.3
Apr 13, 2021 17:46:56.885198116 CEST	51281	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:46:56.934010983 CEST	53	51281	8.8.8.8	192.168.2.3
Apr 13, 2021 17:46:57.655098915 CEST	49199	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:46:57.703841925 CEST	53	49199	8.8.8.8	192.168.2.3
Apr 13, 2021 17:46:58.596441984 CEST	50620	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:46:58.645226002 CEST	53	50620	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:03.646451950 CEST	64938	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:03.698035002 CEST	53	64938	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:05.126492977 CEST	60152	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:05.175437927 CEST	53	60152	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:07.272876978 CEST	57544	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:07.273910046 CEST	55984	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:07.336971045 CEST	53	55984	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:07.337438107 CEST	53	57544	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:07.485972881 CEST	64185	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:07.563205004 CEST	53	64185	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:07.690701008 CEST	65110	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:07.739383936 CEST	53	65110	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:10.667406082 CEST	58361	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:10.726596117 CEST	53	58361	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:11.419346094 CEST	63492	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:11.476443052 CEST	53	63492	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:12.090281963 CEST	60831	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:12.149446964 CEST	53	60831	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:12.415641069 CEST	60100	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:12.478169918 CEST	53	60100	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:12.758230925 CEST	53195	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:12.807065964 CEST	53	53195	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:13.434314966 CEST	50141	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:13.501713037 CEST	53	50141	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:13.569354057 CEST	53023	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:13.632644892 CEST	49563	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:13.634743929 CEST	53	53023	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:13.684197903 CEST	53	49563	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:13.904340029 CEST	51352	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:13.955831051 CEST	53	51352	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:15.468911886 CEST	59349	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:15.520292044 CEST	53	59349	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:16.605174065 CEST	57084	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:16.656044006 CEST	53	57084	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:21.593106985 CEST	58823	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:21.656730890 CEST	53	58823	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:22.397485971 CEST	57568	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:22.480134964 CEST	53	57568	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:24.386660099 CEST	50540	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:24.459129095 CEST	53	50540	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:30.283480883 CEST	54366	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:30.332076073 CEST	53	54366	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:32.085519075 CEST	53034	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:32.147736073 CEST	53	53034	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:39.098732948 CEST	57762	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:39.150473118 CEST	53	57762	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:41.246761084 CEST	55435	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:41.305984020 CEST	53	55435	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:51.644272089 CEST	50713	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:51.693403006 CEST	53	50713	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:52.658173084 CEST	50713	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:52.706804991 CEST	53	50713	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:52.712934971 CEST	56132	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:52.766746044 CEST	53	56132	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:53.664427042 CEST	50713	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:53.713531017 CEST	53	50713	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:53.728652954 CEST	56132	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:53.788866043 CEST	53	56132	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:54.742491007 CEST	56132	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:54.802608013 CEST	53	56132	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:55.681508064 CEST	50713	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:55.731020927 CEST	53	50713	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:56.759634972 CEST	56132	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:56.821711063 CEST	53	56132	8.8.8.8	192.168.2.3
Apr 13, 2021 17:47:59.696688890 CEST	50713	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:47:59.746169090 CEST	53	50713	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:00.774593115 CEST	56132	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:00.826096058 CEST	53	56132	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:05.974091053 CEST	58987	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:06.032816887 CEST	53	58987	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:25.404052019 CEST	56579	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:25.464585066 CEST	53	56579	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:42.810472965 CEST	60633	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:42.871109009 CEST	53	60633	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:44.543875933 CEST	61292	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:44.615226984 CEST	53	61292	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:44.928807020 CEST	63619	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:44.963581085 CEST	64938	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:44.973141909 CEST	61946	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:44.977459908 CEST	53	63619	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:45.032593012 CEST	53	61946	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:45.035176992 CEST	53	64938	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:47.124147892 CEST	64910	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:47.186108112 CEST	53	64910	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:49.007302046 CEST	52123	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:49.057882071 CEST	53	52123	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:51.306675911 CEST	56130	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:51.375931978 CEST	53	56130	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:52.632953882 CEST	56338	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:52.692909002 CEST	53	56338	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:53.038994074 CEST	59420	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:53.095979929 CEST	53	59420	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:56.690555096 CEST	58784	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:56.760970116 CEST	53	58784	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:57.045048952 CEST	63978	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:57.110292912 CEST	53	63978	8.8.8.8	192.168.2.3
Apr 13, 2021 17:48:57.177660942 CEST	62938	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:48:57.259351015 CEST	53	62938	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:10.225538015 CEST	55708	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:10.226135015 CEST	56803	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:10.276608944 CEST	53	56803	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:10.292573929 CEST	53	55708	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:11.267518997 CEST	57145	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:11.331001043 CEST	53	57145	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:19.309216022 CEST	55359	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:19.397136927 CEST	53	55359	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:25.423852921 CEST	58306	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:25.519187927 CEST	53	58306	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:40.320986986 CEST	64124	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:40.387809992 CEST	53	64124	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:49.409920931 CEST	49361	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:49.534140110 CEST	53	49361	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:49.983794928 CEST	63150	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:50.032923937 CEST	53	63150	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:50.720006943 CEST	53279	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:50.779936075 CEST	53	53279	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:51.312920094 CEST	56881	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:51.394880056 CEST	53	56881	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:51.901057959 CEST	53642	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:52.009167910 CEST	53	53642	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:52.458342075 CEST	55667	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:52.518181086 CEST	53	55667	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:52.893199921 CEST	54833	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:52.952779055 CEST	53	54833	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:53.547312975 CEST	62476	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:53.604567051 CEST	53	62476	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:54.733607054 CEST	49705	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:54.803796053 CEST	53	49705	8.8.8.8	192.168.2.3
Apr 13, 2021 17:49:55.405867100 CEST	61477	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:49:55.463757992 CEST	53	61477	8.8.8.8	192.168.2.3
Apr 13, 2021 17:50:07.881071091 CEST	61633	53	192.168.2.3	8.8.8.8
Apr 13, 2021 17:50:07.953835011 CEST	53	61633	8.8.8.8	192.168.2.3

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Apr 13, 2021 17:47:12.415641069 CEST	192.168.2.3	8.8.8.8	0x84dc	Standard query (0)	clientconfig.passport.net	A (IP address)	IN (0x0001)
Apr 13, 2021 17:47:24.386660099 CEST	192.168.2.3	8.8.8.8	0xd355	Standard query (0)	covid-19.ontario.ca	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:42.810472965 CEST	192.168.2.3	8.8.8.8	0x9247	Standard query (0)	covid-19.ontario.ca	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:44.543875933 CEST	192.168.2.3	8.8.8.8	0xa814	Standard query (0)	www.ontario.ca	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:44.963581085 CEST	192.168.2.3	8.8.8.8	0xdd06	Standard query (0)	files.ontario.ca	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:44.973141909 CEST	192.168.2.3	8.8.8.8	0x2436	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:51.306675911 CEST	192.168.2.3	8.8.8.8	0xd379	Standard query (0)	api.ontario.ca	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:52.632953882 CEST	192.168.2.3	8.8.8.8	0xe037	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:53.038994074 CEST	192.168.2.3	8.8.8.8	0x1bc1	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:56.690555096 CEST	192.168.2.3	8.8.8.8	0x2728	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:57.045048952 CEST	192.168.2.3	8.8.8.8	0x90bb	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)
Apr 13, 2021 17:49:10.225538015 CEST	192.168.2.3	8.8.8.8	0x3490	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)
Apr 13, 2021 17:49:10.226135015 CEST	192.168.2.3	8.8.8.8	0xdbfc	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)
Apr 13, 2021 17:49:19.309216022 CEST	192.168.2.3	8.8.8.8	0xcdb3	Standard query (0)	www.phdapps.health.gov.on.ca	A (IP address)	IN (0x0001)
Apr 13, 2021 17:49:25.423852921 CEST	192.168.2.3	8.8.8.8	0xd201	Standard query (0)	covid19.ontariohealth.ca	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Apr 13, 2021 17:47:07.563205004 CEST	8.8.8.8	192.168.2.3	0xcb4b	No error (0)	prda.aadg.msidentity.com	www.tm.a.prd.aadg.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:47:10.726596117 CEST	8.8.8.8	192.168.2.3	0x4bce	No error (0)	prda.aadg.msidentity.com	www.tm.a.prd.aadg.akadns.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:47:12.478169918 CEST	8.8.8.8	192.168.2.3	0x84dc	No error (0)	clientconfig.passport.net	authgfx.msa.akadns6.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:47:24.459129095 CEST	8.8.8.8	192.168.2.3	0xd355	No error (0)	covid-19.ontario.ca	covid-19.ontariogovernment.ca		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:47:24.459129095 CEST	8.8.8.8	192.168.2.3	0xd355	No error (0)	covid-19.ontariogovernment.ca	d1yhecx6e3wyn1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:47:24.459129095 CEST	8.8.8.8	192.168.2.3	0xd355	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.124	A (IP address)	IN (0x0001)
Apr 13, 2021 17:47:24.459129095 CEST	8.8.8.8	192.168.2.3	0xd355	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.38	A (IP address)	IN (0x0001)
Apr 13, 2021 17:47:24.459129095 CEST	8.8.8.8	192.168.2.3	0xd355	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.101	A (IP address)	IN (0x0001)
Apr 13, 2021 17:47:24.459129095 CEST	8.8.8.8	192.168.2.3	0xd355	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.100	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:42.871109009 CEST	8.8.8.8	192.168.2.3	0x9247	No error (0)	covid-19.ontario.ca	covid-19.ontariogovernment.ca		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:48:42.871109009 CEST	8.8.8.8	192.168.2.3	0x9247	No error (0)	covid-19.ontariogovernment.ca	d1yhecx6e3wyn1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:48:42.871109009 CEST	8.8.8.8	192.168.2.3	0x9247	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.38	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:42.871109009 CEST	8.8.8.8	192.168.2.3	0x9247	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.124	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:42.871109009 CEST	8.8.8.8	192.168.2.3	0x9247	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.100	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:42.871109009 CEST	8.8.8.8	192.168.2.3	0x9247	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.101	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:44.615226984 CEST	8.8.8.8	192.168.2.3	0xa814	No error (0)	www.ontario.ca	www.ontariogovernment.ca		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:48:44.615226984 CEST	8.8.8.8	192.168.2.3	0xa814	No error (0)	www.ontariogovernment.ca	d36pom45p27o8j.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:48:44.615226984 CEST	8.8.8.8	192.168.2.3	0xa814	No error (0)	d36pom45p27o8j.cloudfront.net		13.226.169.100	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:44.615226984 CEST	8.8.8.8	192.168.2.3	0xa814	No error (0)	d36pom45p27o8j.cloudfront.net		13.226.169.24	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:44.615226984 CEST	8.8.8.8	192.168.2.3	0xa814	No error (0)	d36pom45p27o8j.cloudfront.net		13.226.169.33	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:44.615226984 CEST	8.8.8.8	192.168.2.3	0xa814	No error (0)	d36pom45p27o8j.cloudfront.net		13.226.169.36	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:45.032593012 CEST	8.8.8.8	192.168.2.3	0x2436	No error (0)	cdnjs.cloudflare.com		104.16.19.94	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:45.032593012 CEST	8.8.8.8	192.168.2.3	0x2436	No error (0)	cdnjs.cloudflare.com		104.16.18.94	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:45.035176992 CEST	8.8.8.8	192.168.2.3	0xdd06	No error (0)	files.ontario.ca	files.ontariogovernment.ca		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:48:45.035176992 CEST	8.8.8.8	192.168.2.3	0xdd06	No error (0)	files.ontariogovernment.ca	d2khazk8e83rdv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:48:45.035176992 CEST	8.8.8.8	192.168.2.3	0xdd06	No error (0)	d2khazk8e83rdv.cloudfront.net		143.204.11.28	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:45.035176992 CEST	8.8.8.8	192.168.2.3	0xdd06	No error (0)	d2khazk8e83rdv.cloudfront.net		143.204.11.53	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:45.035176992 CEST	8.8.8.8	192.168.2.3	0xdd06	No error (0)	d2khazk8e83rdv.cloudfront.net		143.204.11.64	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:45.035176992 CEST	8.8.8.8	192.168.2.3	0xdd06	No error (0)	d2khazk8e83rdv.cloudfront.net		143.204.11.15	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:51.375931978 CEST	8.8.8.8	192.168.2.3	0xd379	No error (0)	api.ontario.ca	api.ontariogovernment.ca		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:48:51.375931978 CEST	8.8.8.8	192.168.2.3	0xd379	No error (0)	api.ontariogovernment.ca	productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:48:51.375931978 CEST	8.8.8.8	192.168.2.3	0xd379	No error (0)	productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com		34.198.74.185	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:51.375931978 CEST	8.8.8.8	192.168.2.3	0xd379	No error (0)	productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com		3.224.191.206	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:51.375931978 CEST	8.8.8.8	192.168.2.3	0xd379	No error (0)	productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com		52.71.121.103	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:52.692909002 CEST	8.8.8.8	192.168.2.3	0xe037	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:48:53.095979929 CEST	8.8.8.8	192.168.2.3	0x1bc1	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:48:56.760970116 CEST	8.8.8.8	192.168.2.3	0x2728	No error (0)	googleads.g.doubleclick.net		216.58.207.130	A (IP address)	IN (0x0001)
Apr 13, 2021 17:48:57.110292912 CEST	8.8.8.8	192.168.2.3	0x90bb	No error (0)	static.doubleclick.net	static-doubleclick-net.l.google.com		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:49:10.276608944 CEST	8.8.8.8	192.168.2.3	0xdbfc	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:49:10.276608944 CEST	8.8.8.8	192.168.2.3	0xdbfc	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.65	A (IP address)	IN (0x0001)
Apr 13, 2021 17:49:10.292573929 CEST	8.8.8.8	192.168.2.3	0x3490	No error (0)	i.ytimg.com		172.217.22.246	A (IP address)	IN (0x0001)
Apr 13, 2021 17:49:19.397136927 CEST	8.8.8.8	192.168.2.3	0xcdb3	No error (0)	www.phdapps.health.gov.on.ca		204.41.3.217	A (IP address)	IN (0x0001)
Apr 13, 2021 17:49:25.519187927 CEST	8.8.8.8	192.168.2.3	0xd201	No error (0)	covid19.ontariohealth.ca	covax.azurefd.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:49:25.519187927 CEST	8.8.8.8	192.168.2.3	0xd201	No error (0)	covax.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 13, 2021 17:47:24.587877989 CEST	143.204.11.124	443	192.168.2.3	49727	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:47:24.594541073 CEST	143.204.11.124	443	192.168.2.3	49728	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:48:44.806113005 CEST	13.226.169.100	443	192.168.2.3	49745	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:48:44.806602001 CEST	13.226.169.100	443	192.168.2.3	49746	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:48:45.167846918 CEST	143.204.11.28	443	192.168.2.3	49755	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:48:45.168210983 CEST	104.16.19.94	443	192.168.2.3	49753	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Oct 21 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Oct 21 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:48:45.168210983 CEST	104.16.19.94	443	192.168.2.3	49753	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:48:45.168773890 CEST	143.204.11.28	443	192.168.2.3	49754	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:48:45.169060946 CEST	104.16.19.94	443	192.168.2.3	49756	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Oct 21 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Oct 21 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:48:45.169060946 CEST	104.16.19.94	443	192.168.2.3	49756	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:48:51.687761068 CEST	34.198.74.185	443	192.168.2.3	49765	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:48:51.689162016 CEST	34.198.74.185	443	192.168.2.3	49766	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:48:56.896243095 CEST	216.58.207.130	443	192.168.2.3	49780	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:28:05 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:28:04 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:48:56.896243095 CEST	216.58.207.130	443	192.168.2.3	49780	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:48:56.896838903 CEST	216.58.207.130	443	192.168.2.3	49779	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:28:05 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:28:04 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:48:56.896838903 CEST	216.58.207.130	443	192.168.2.3	49779	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:49:10.399235964 CEST	142.250.185.65	443	192.168.2.3	49785	CN=*.googleusercontent.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:32:57 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:32:56 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:49:10.399235964 CEST	142.250.185.65	443	192.168.2.3	49785	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:49:10.399406910 CEST	142.250.185.65	443	192.168.2.3	49786	CN=*.googleusercontent.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:32:57 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:32:56 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:49:10.399406910 CEST	142.250.185.65	443	192.168.2.3	49786	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:49:10.402811050 CEST	172.217.22.246	443	192.168.2.3	49787	CN=edgestatic.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:13:20 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:13:19 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:49:10.402811050 CEST	172.217.22.246	443	192.168.2.3	49787	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:49:10.406898022 CEST	172.217.22.246	443	192.168.2.3	49788	CN=edgestatic.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:13:20 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:13:19 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:49:10.406898022 CEST	172.217.22.246	443	192.168.2.3	49788	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Apr 13, 2021 17:49:20.015510082 CEST	204.41.3.217	443	192.168.2.3	49795	CN=www.phdapps.health.gov.on.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	Wed Apr 15 16:50:31 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Mon Sep 22 19:14:57 CEST 2014 Mon Nov 27 21:23:42 CET 2006	Sun Apr 24 17:20:30 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Mon Sep 23 03:31:53 CEST 2024 Fri Nov 27 21:53:42 CET 2026	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	Mon Sep 22 19:14:57 CEST 2014	Mon Sep 23 03:31:53 CEST 2024
					CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	Mon Nov 27 21:23:42 CET 2006	Fri Nov 27 21:53:42 CET 2026
Apr 13, 2021 17:49:20.016660929 CEST	204.41.3.217	443	192.168.2.3	49794	CN=www.phdapps.health.gov.on.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	Wed Apr 15 16:50:31 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Mon Sep 22 19:14:57 CEST 2014 Mon Nov 27 21:23:42 CET 2006	Sun Apr 24 17:20:30 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Mon Sep 23 03:31:53 CEST 2024 Fri Nov 27 21:53:42 CET 2026	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	Mon Sep 22 19:14:57 CEST 2014	Mon Sep 23 03:31:53 CEST 2024
					CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	Mon Nov 27 21:23:42 CET 2006	Fri Nov 27 21:53:42 CET 2026

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: WINWORD.EXE PID: 5956 Parent PID: 792

General

Start time:	17:46:48
Start date:	13/04/2021
Path:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE' /Automation -Embedding
Imagebase:	0x3e0000
File size:	1937688 bytes
MD5 hash:	0B9AB9B9C4DE429473D6450D4297A123
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: iexplore.exe PID: 5992 Parent PID: 792

General

Start time:	17:47:19
Start date:	13/04/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff6091b0000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: iexplore.exe PID: 6176 Parent PID: 5992

General

Start time:	17:47:20
Start date:	13/04/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5992 CREDAT:17410 /prefetch:2
Imagebase:	0xd10000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Compliance:

Software Vulnerabilities:

Networking:

System Summary:

Hooking and other Techniques for Hiding and Protection:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: WINWORD.EXE PID: 5956 Parent PID: 792

General

Chronological Activities

Analysis Process: iexplore.exe PID: 5992 Parent PID: 792

General

Chronological Activities

Analysis Process: iexplore.exe PID: 6176 Parent PID: 5992

General

Chronological Activities

Disassembly