flash

https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784

Status: finished
Submission Time: 19.03.2021 08:00:54
Clean

Comments

Tags

Details

  • Analysis ID:
    371828
  • API (Web) ID:
    645747
  • Analysis Started:
    19.03.2021 08:00:56
  • Analysis Finished:
    19.03.2021 08:08:47
  • Technologies:
Full Report Management Report IOC Report Engine Info Verdict Score Reports

System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211

clean
0/100

IPs

IP Country Detection
178.250.0.157
France
34.246.207.243
United States
185.33.221.52
Netherlands
Click to see the 33 hidden entries
185.33.221.14
Netherlands
104.26.3.116
United States
99.86.162.13
United States
52.50.156.162
United States
18.132.239.61
United States
54.195.23.91
United States
216.58.215.226
United States
3.126.239.96
United States
18.206.143.246
United States
185.60.216.35
Ireland
18.156.0.31
United States
142.250.185.194
United States
35.244.174.68
United States
192.229.233.25
United States
52.50.244.146
United States
54.78.254.47
United States
99.86.163.177
United States
151.101.1.194
United States
34.248.172.235
United States
52.73.84.222
United States
104.19.149.54
United States
178.250.2.130
France
178.250.2.131
France
34.120.133.55
United States
52.28.203.152
United States
13.226.169.83
United States
13.226.169.41
United States
54.72.67.237
United States
34.234.127.242
United States
185.60.216.19
Ireland
52.95.116.38
United States
99.86.159.26
United States
34.205.120.60
United States

Domains

Name IP Detection
www.googletagservices.com
216.58.215.226
d1n0xl2kej0ebw.cloudfront.net
99.86.159.26
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com
54.195.23.91
Click to see the 87 hidden entries
d3f7zc5bbfci5.cloudfront.net
99.86.163.177
ping.chartbeat.net
18.206.143.246
scontent.xx.fbcdn.net
185.60.216.19
idsync.rlcdn.com
35.244.174.68
d10jk3zb4x05up.cloudfront.net
13.226.169.41
api.rlcdn.com
34.120.133.55
confiant-integrations.global.ssl.fastly.net
151.101.1.194
cm.g.doubleclick.net
216.58.215.226
match-1943069928.eu-west-1.elb.amazonaws.com
52.50.156.162
bidder.am5.vip.prod.criteo.com
178.250.2.131
star-mini.c10r.facebook.com
185.60.216.35
pagead46.l.doubleclick.net
172.217.168.66
static.am5.vip.prod.criteo.net
178.250.2.130
mabping.chartbeat.net
52.73.84.222
ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud
52.28.203.152
aax-eu.amazon-adsystem.com
52.95.116.38
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com
3.126.239.96
cdn.permutive.com
104.19.149.54
gum.par.vip.prod.criteo.com
178.250.0.157
cs491.wac.edgecastcdn.net
192.229.233.25
tru.am
104.26.3.116
d1ykf07e75w7ss.cloudfront.net
99.86.162.13
partnerad.l.doubleclick.net
216.58.215.226
googleads.g.doubleclick.net
142.250.185.194
s.ad.smaato.net
13.226.169.83
ib.anycast.adnxs.com
185.33.221.14
prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com
34.205.120.60
load-euw1.exelator.com
54.78.254.47
prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com
34.246.207.243
prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud
18.156.0.31
prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com
34.234.127.242
aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com
18.132.239.61
nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com
52.50.244.146
securepubads.g.doubleclick.net
0.0.0.0
auth.9c9media.ca
0.0.0.0
cdn.krxd.net
0.0.0.0
mb.moatads.com
0.0.0.0
dx.bigsea.weborama.com
0.0.0.0
secure.adnxs.com
0.0.0.0
js.agkn.com
0.0.0.0
capi.9c9media.com
0.0.0.0
cm.everesttech.net
0.0.0.0
z.moatads.com
0.0.0.0
platform.twitter.com
0.0.0.0
static.criteo.net
0.0.0.0
match.adsrvr.org
0.0.0.0
consumer.krxd.net
0.0.0.0
m.addthis.com
0.0.0.0
c2shb.ssp.yahoo.com
0.0.0.0
www.ctvnews.ca
0.0.0.0
assets.adobedtm.com
0.0.0.0
connect.facebook.net
0.0.0.0
px.moatads.com
0.0.0.0
usermatch.krxd.net
0.0.0.0
ssum-sec.casalemedia.com
0.0.0.0
js-sec.indexww.com
0.0.0.0
stags.bluekai.com
0.0.0.0
sb.scorecardresearch.com
0.0.0.0
beacon.scorecardresearch.com
0.0.0.0
pixel.mathtag.com
0.0.0.0
htlb.casalemedia.com
0.0.0.0
ups.analytics.yahoo.com
0.0.0.0
static.chartbeat.com
0.0.0.0
kr.ixiaa.com
0.0.0.0
d.agkn.com
0.0.0.0
adservice.google.co.uk
0.0.0.0
geo.moatads.com
0.0.0.0
beta.ctvnews.ca
0.0.0.0
toronto.ctvnews.ca
0.0.0.0
gum.criteo.com
0.0.0.0
jslog.krxd.net
0.0.0.0
r.nexac.com
0.0.0.0
static.ctvnews.ca
0.0.0.0
dpm.demdex.net
0.0.0.0
aa.agkn.com
0.0.0.0
as-sec.casalemedia.com
0.0.0.0
www.facebook.com
0.0.0.0
bidder.criteo.com
0.0.0.0
c.amazon-adsystem.com
0.0.0.0
s7.addthis.com
0.0.0.0
bellmedia.demdex.net
0.0.0.0
beacon.krxd.net
0.0.0.0
idp.securetve.com
0.0.0.0
api-public.addthis.com
0.0.0.0
ib.adnxs.com
0.0.0.0
loadm.exelator.com
0.0.0.0
static.agkn.com
0.0.0.0

URLs

Name Detection
https://reddit.com/submit?url=https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784&title=Ontario slashes gathering sizes for entire province as alarm bells ring over COVID-19 spike
https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Black.woff?s=2_620
https://knlive.ctvnews.ca/polopoly_fs/7.454763
Click to see the 97 hidden entries
http://www.huddletogether.com/projects/lightbox2/)
https://www.ctvnews.ca/polopoly_fs/1.5352826.1616094186
http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_lt-blue.jpg
https://www.ctvnews.ca/polopoly_fs/1.5353552.1616120929
https://www.ctvnews.ca/polopoly_fs/1.5203984.1606322081
https://toronto.ctvnews.ca/traffic
https://toronto.ctvnews.ca/video?playlistId=1.5353262
http://www.twitter.com/
https://static.ctvnews.ca/bellmedia/ctvnews/css/imageGallery.css
http://saskatoon.ctvnews.ca/prince-albert
https://d.agkn.com/iframe/8613/?che=473609438&gdpr=&gdpr_consent=&ref=&bpid=bellmedia&c=%7B%22bpid%2
https://toronto.ctvnews.ca/video?playlistId=1.5351081
https://tru.am/scripts/custom/ctvnews.js
https://www.ctvnews.ca/health/coronavirus/covid-19-in-the-u-s-how-do-canada-s-provinces-rank-against
https://www.ctvnews.ca/polopoly_fs/1.5345551.1615592013
https://twitter.com/SeanDavidson_os/sean-davidson-1.4670847
https://platform.twitter.com/widgets.js
http://bdugraphics.bellmedia.ca/bellaliant_northerntel.png
https://www.ctvnews.ca/health/coronavirus/woman-95-totally-incapacitated-after-receiving-3-doses-of-
https://www.ctvnews.ca/polopoly_fs/1.5271121.1610994383
https://static.ctvnews.ca/bellmedia/common/css/plugins/slick.css
https://calgary.ctvnews.ca/lethbridge
http://www.ctv.ca/rss/
https://edmonton.ctvnews.ca/mcdavid-scores-twice-edmonton-oilers-edge-winnipeg-jets-2-1-1.5353615
https://www.ctvnews.ca/politics/feds-extending-canada-recovery-benefit-eligibility-by-12-weeks-1.531
https://www.bnnbloomberg.ca/want-a-happier-workforce-provide-better-benefits-1.1529528
https://www.ctvnews.ca/entertainment/so-much-money-was-sent-to-our-dope-man-honey-boo-boo-s-mom-spen
https://toronto.ctvnews.ca/don-t-get-this-wrong-statistician-says-no-doubt-third-wave-has-started-in
http://bdugraphics.bellmedia.ca/rogers.png
https://www.ctvnews.ca/polopoly_fs/1.4894117.1586801889
https://london.ctvnews.ca/
https://www.ctv.ca/about
https://twitter.com/share/more/bios/sean-davidson-1.4670847?contactForm=true
https://ottawa.ctvnews.ca/sports-teams-prepare-for-new-game-plan-as-ottawa-moves-into-red-zone-1.535
https://toronto.ctvnews.ca/rss/ctv-news-toronto-featured-1.3981340
https://www.ctvnews.ca/sci-tech/nasa-completes-engine-test-firing-of-moon-rocket-on-2nd-try-1.535339
https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Black.woff?s=2_7104
http://barrie.ctvnews.ca/
https://www.ctvnews.ca/polopoly_fs/1.4859921.1584637596
http://www.wikipedia.com/
https://www.ctvnews.ca/video?playlistId=1.5352369
https://www.ctvnews.ca/polopoly_fs/1.5211981.1606843675
http://www.ctvnews.ca/polopoly_fs/7.663868
https://www.bnnbloomberg.ca/partners-in-performance-one-on-one-with-phil-taller-1.1510005
https://confiant-integrations.freetls.fastly.net/cdt/
https://www.ctvnews.ca/polopoly_fs/1.5312034.1613535292
https://twitter.com/ctvnews
https://www.ctvnews.ca/rss/ctvnews-ca-covid-all-news-tag-driven-1.4866013
https://toronto.ctvnews.ca/this-is-the-full-list-of-people-eligible-for-covid-19-vaccines-in-phase-2
https://toronto.ctvnews.ca/canadians-are-spending-less-and-avoiding-cash-during-pandemic-report-1.53
https://www.ctvnews.ca/polopoly_fs/1.5292462.1612290133
https://www.ctvnews.ca/polopoly_fs/1.5352863.1616095916
http://www.ctvalberta.ca/
http://leandrovieira.com
https://toronto.ctvnews.ca/
https://static.ctvnews.ca/bellmedia/ctvnews/img/fav-icons-2019/64x64-CTVNews-Icon.ico
https://instagram.com/ctvtoronto
https://twitter.com/share/more/bios/sean-davidson-1.4X
http://www.bellmedia.ca/en/toc.html
https://www.ctvnews.ca/health/coronavirus/j-j-developing-several-next-generation-covid-19-vaccines-s
https://toronto.ctvnews.ca/more/bios/sean-davidson-1.4670847?contactForm=true
https://regina.ctvnews.ca/
https://www.ctvnews.ca/health/coronavirus
http://www.shaw.ca/
https://www.ctvnews.ca/health/coronavirus/moderna-plans-to-test-its-covid-19-vaccine-on-canadian-chi
https://www.ctvnews.ca/polopoly_fs/1.4693935
https://openjsf.org/
https://aax-eu.amazon-adsystem.com/s/ecm3?id=5003214223250065627&ex=districtm
https://www.ctvnews.ca/polopoly_fs/1.4821090.1582242646
https://www.ctvnews.ca/
https://static.ctvnews.ca/bellmedia/common/js/videoPlayer.vidi.js
https://www.ctvnews.ca/polopoly_fs/1.4783916.1580052167
https://toronto.ctvnews.ca/rss/ctv-toronto-happening-now-1.5114046
https://toronto.ctvnews.ca/video?clipId=2162820"
http://www.opensource.org/licenses/GPL-2.0
https://gum.criteo.com/syncframe?topUrl=toronto.ctvnews.ca
https://www.ctvnews.ca/polopoly_fs/1.5277016.1611269269
http://wictvfile.cms.9c9media.net/fileserver/file/156947/filename/20110401-470-bell-media-jpg
https://toronto.ctvnews.ca/ontario-logs-more-than-1-500-new-covid-19-cases-for-second-straight-day-1
https://static.ctvnews.ca/bellmedia/common/js/videoNavigation.js
https://www.ctvnews.ca/polopoly_fs/1.5314530.1615970210
https://winnipeg.ctvnews.ca/step-in-the-right-direction-centennial-concert-hall-encouraged-by-prospe
https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTVSans-Black.otf?s=2_7104
https://www.ctvnews.ca/health/coronavirus/zoos-scientists-aim-to-curb-people-giving-virus-to-animals
https://www.bellmedia.ca/bell-media-website-terms-conditions/
https://toronto.ctvnews.ca/things-to-know-t-o/hit-the-slopes-before-the-snow-is-gone-1.5334963
https://www.ctvnews.ca/polopoly_fs/1.2302970.1611241953
https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/Flama-Medium.eot?#iefix&s=2_620
https://d.agkn.com/iframe/8613/?che=720919169&gdpr=&gdpr_consent=&ref=&bpid=bellmedia&c=%7B%22bpid%2
https://instagram.com/ctvtorontob
https://github.com/krux/prescribe/
https://www.ctvnews.ca/health/coronavirus/st-patrick-s-day-revellers-appear-to-be-heeding-covid-advi
https://sizzlejs.com/
https://toronto.ctvnews.ca/video?clipId=2163198
https://www.ctvnews.ca/polopoly_fs/1.5188187.1611601474
https://northernontario.ctvnews.ca/northeastern-ontario-marks-global-recycling-day-with-trash-tips-1
https://instagram.com/ctvtoronto

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ca46aa22-e6b4-464e-9077-7215dc98bc0a[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\chartbeat_mab[1].js
ASCII text, with very long lines
#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\common[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\config[1].json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\coronavirus-links-css-7[1].css
ASCII text, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\detectMobile[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\dnserror[1]
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\down[1]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\down[2]
PNG image data, 15 x 15, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\election-2019-grid[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\election-teasers-stylesheet-7[1].css
ASCII text, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\errorPageStrings[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\f[1].txt
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\f[2].txt
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\f[3].txt
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\favicon[1].ico
MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\get[1].js
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\get[2].js
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\grey-dot[1].gif
GIF image data, version 89a, 4 x 4
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\h3-fixes-7[1].css
HTML document, ASCII text, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\httpErrorPagesScripts[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image0TABT7BG.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x349, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image1IHMBIH9.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x349, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image21VX98Q2.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image5VJCT6LW.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image7CHI6WI1.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image9F4MYJNS.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageA9CKIKGD.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x349, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageAEVCMMOW.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageB4D5GAFZ.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageHHW80XGJ.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageIHOTKOP8.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageIXMQNDK4.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageJ61WEBSV.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageJAMVN95Z.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageJPL3UY1R.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x169, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageKBHTL7M6.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageKC07ACG5.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageLCMZE75G.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageOH0QYD51.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageOQ447ZIG.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageOVSU45TN.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageRH0DSISV.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageRIBHHCXN.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x349, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageS1MENLGQ.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageSH59ZIJT.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageTCJZPSH7.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageTT2FLU70.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageUH8APDX7.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageY99SNPDL.jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x169, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[10].jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[1].jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[1].png
PNG image data, 150 x 84, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[2].jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\8P7RGF10\www.ctvnews[1].xml
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DURNCK2N\toronto.ctvnews[1].xml
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\QALADACS\cdn.krxd[1].xml
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{055635E7-88C4-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{0E479007-88C4-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\10119832207439991432[1].png
PNG image data, 300 x 250, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\7[1].htm
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\7[3].htm
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\8613[1].htm
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\8613[2].htm
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\CTV_Sans-Bold[1].woff
Web Open Font Format, TrueType, length 32484, version 1.0
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\CTV_Sans-Regular[1].woff
Web Open Font Format, TrueType, length 30054, version 1.0
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ErrorPageTemplate[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\Flama-Medium[1].eot
Embedded OpenType (EOT), Flama Medium family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ImoeZsch[1].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\NewErrorPageTemplate[1]
UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC2d6da016bf28471c8bc669fb84568d84-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCe714d7b84ce14ee0a28df675bbd5cf5b-source.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\YNTWJAH3.htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\background_gradient[1]
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bellmedia_logo[1].gif
GIF image data, version 89a, 92 x 23
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[1].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[2].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[3].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[4].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[5].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[6].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[7].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[8].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[9].json
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bid[1].js
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\body-override-7[1].css
ASCII text, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\budget-css-7[1].css
ASCII text, with CRLF, LF line terminators
#