Edit tour

Windows Analysis Report
http://garwoodsheating.com/

Overview

General Information

Sample URL:	http://garwoodsheating.com/
Analysis ID:	1541644
Tags:	urlscan
Infos:

Detection

Score:	20
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=2216,i,2334288279004458650,9609088969978004780,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3064 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6012 --field-trial-handle=2216,i,2334288279004458650,9609088969978004780,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1208 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6508 --field-trial-handle=2216,i,2334288279004458650,9609088969978004780,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://garwoodsheating.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /g/collect?v=2&tid=G-KQMZSWM9K6&gtm=45je4al0v899685487za200&_p=1729810966756&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101686685~101823848&cid=1386283618.1729810968&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1729810968&sct=1&seg=0&dl=https%3A%2F%2Fwww.garwoodsheating.com%2F&dt=Garwood%27s%20Heating%20%26%20Cooling%2C%20Inc.%2C%20Air%20Conditioner%20%26%20Furnace%20Repair%20%26%20Service%20%7C%20Edwardsville%2C%20IL%2062025&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=5776 HTTP/1.1Host: analytics.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.garwoodsheating.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.garwoodsheating.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 24 Oct 2024 23:03:10 GMTContent-Type: text/html; charset=UTF-8Content-Length: 4519Connection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Thu, 24 Oct 2024 23:03:25 GMTServer: cloudflareCF-RAY: 8d7d993fdc64e5b9-DFW

Source: chromecache_401.2.dr	String found in binary or memory: http://amsul.github.io/pickadate.js
Source: chromecache_270.2.dr, chromecache_454.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: http://google.com/ads/remarketingsetup
Source: chromecache_374.2.dr, chromecache_298.2.dr	String found in binary or memory: http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/
Source: chromecache_401.2.dr	String found in binary or memory: http://jh3y.github.io/-cs-spinner
Source: chromecache_376.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_311.2.dr	String found in binary or memory: http://schema.org/AggregateRating
Source: chromecache_311.2.dr	String found in binary or memory: http://schema.org/Rating
Source: chromecache_311.2.dr	String found in binary or memory: http://schema.org/Review
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: http://tag.brandcdn.com/privacy
Source: chromecache_385.2.dr, chromecache_262.2.dr, chromecache_386.2.dr, chromecache_263.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_270.2.dr, chromecache_454.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_401.2.dr	String found in binary or memory: http://www.demandforce.com
Source: chromecache_386.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_450.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_310.2.dr	String found in binary or memory: https://adservices.brandcdn.com/pixel/cv?aid=
Source: chromecache_290.2.dr	String found in binary or memory: https://adservices.brandcdn.com/pixel/cv_confirm.png?aid=
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://amerenillinoissavings.com/
Source: chromecache_322.2.dr, chromecache_294.2.dr, chromecache_421.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_463.2.dr, chromecache_360.2.dr	String found in binary or memory: https://bid.g.doubleclick.net/xbbe/pixel?d=KAE
Source: chromecache_357.2.dr, chromecache_441.2.dr, chromecache_307.2.dr, chromecache_450.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://core-dot-sos-apps.appspot.com/fonts/bootstrap/glyphicons-halflings-regular.eot);src:url(http
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://core-dot-sos-apps.appspot.com/fonts/bootstrap/glyphicons-halflings-regular.svg#glyphicons_ha
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://core-dot-sos-apps.appspot.com/fonts/bootstrap/glyphicons-halflings-regular.ttf)
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://core-dot-sos-apps.appspot.com/fonts/bootstrap/glyphicons-halflings-regular.woff)
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://core-dot-sos-apps.appspot.com/fonts/bootstrap/glyphicons-halflings-regular.woff2)
Source: chromecache_260.2.dr	String found in binary or memory: https://core-dot-sos-apps.appspot.com/scripts/core.min.js?v=1729776912
Source: chromecache_268.2.dr	String found in binary or memory: https://core-dot-sos-apps.appspot.com/scripts/core.min.js?v=1729783850
Source: chromecache_376.2.dr	String found in binary or memory: https://core-dot-sos-apps.appspot.com/scripts/core.min.js?v=1729790355
Source: chromecache_454.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_270.2.dr, chromecache_454.2.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_270.2.dr, chromecache_454.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_331.2.dr, chromecache_283.2.dr, chromecache_430.2.dr, chromecache_291.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_454.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_270.2.dr, chromecache_454.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_454.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_405.2.dr, chromecache_245.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/versions#beta-channel
Source: chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_385.2.dr, chromecache_262.2.dr, chromecache_386.2.dr, chromecache_263.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_270.2.dr, chromecache_454.2.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_326.2.dr, chromecache_346.2.dr	String found in binary or memory: https://local.demandforce.com
Source: chromecache_326.2.dr, chromecache_346.2.dr	String found in binary or memory: https://local.demandforce.com/b/garwoodsheatingandcoolingi
Source: chromecache_326.2.dr, chromecache_346.2.dr	String found in binary or memory: https://local.demandforce.com/b/garwoodsheatingandcoolingi/reviews.page?
Source: chromecache_326.2.dr, chromecache_346.2.dr	String found in binary or memory: https://local.demandforce.com/v2/b/images/demandforce_logo_pms-sm.png
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?key=AIzaSyAj0ZTOCqzE6HqMX_Xf3T5NvXFT_RP9qjc&libraries=visual
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_450.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_357.2.dr, chromecache_441.2.dr, chromecache_307.2.dr, chromecache_450.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_263.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_451.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_386.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_463.2.dr, chromecache_360.2.dr	String found in binary or memory: https://services.google.com/sitestats/
Source: chromecache_376.2.dr	String found in binary or memory: https://sos-apps.appspot.com/
Source: chromecache_376.2.dr	String found in binary or memory: https://sos-apps.appspot.com/includes/reviewApp/site-review-submission.php
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://sos-apps.appspot.com/process-user-topic.php
Source: chromecache_357.2.dr, chromecache_450.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_421.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/
Source: chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/default/review.jpg
Source: chromecache_268.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/default/videos.jpg
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/logos/ReviewBuzz.png
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/logos/bbb-a-plus-badge.png
Source: chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/logos/credit-cards-discover.png
Source: chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/logos/credit-cards-mastercard.png
Source: chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/logos/credit-cards-visa.png
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/logos/nate-certified-100.png
Source: chromecache_268.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/products/GeneralAire-humidifier.png
Source: chromecache_268.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/products/bryant-air-conditioner.png
Source: chromecache_268.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/products/bryant-fan-coil.png
Source: chromecache_268.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/products/bryant-gas-furnace.png
Source: chromecache_268.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/products/bryant-hybrid-heat.png
Source: chromecache_268.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/products/bryant-thermostat.png
Source: chromecache_268.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/products/bryant-zoning.png
Source: chromecache_260.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/images/rotator/bryant-installer-03.jpg);
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/uploads/0014360DEA000413/images/Bryant-Circle-of-Champions
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/uploads/0014360DEA000413/images/Garwood-BBB-Torch-2021Winn
Source: chromecache_268.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/uploads/0014360DEA000413/images/Garwoods-REME-HALO-logo.pn
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/uploads/0014360DEA000413/images/ameren-logo.png
Source: chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/uploads/0014360DEA000413/images/garwoods-logo-v2.png
Source: chromecache_260.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/uploads/0014360DEA000413/images/rotator-van.jpg);
Source: chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/uploads/core/images/Bryant/bryant-fad-white-tagline.png
Source: chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/google-button.png
Source: chromecache_260.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/google-reviews.png
Source: chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/review-app-google-lo
Source: chromecache_376.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/review-app-sos-logo.
Source: chromecache_260.2.dr	String found in binary or memory: https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/sos-reviews.png
Source: chromecache_270.2.dr, chromecache_454.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_451.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_386.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_463.2.dr, chromecache_322.2.dr, chromecache_360.2.dr, chromecache_294.2.dr, chromecache_421.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_357.2.dr, chromecache_441.2.dr, chromecache_307.2.dr, chromecache_450.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://www.bbb.org/us/il/edwardsville/profile/heating-and-air-conditioning/garwoods-heating-cooling
Source: chromecache_260.2.dr	String found in binary or memory: https://www.garwoodsheating.com
Source: chromecache_376.2.dr	String found in binary or memory: https://www.garwoodsheating.com/about/reviews/
Source: chromecache_268.2.dr	String found in binary or memory: https://www.garwoodsheating.com/heating-air-conditioning-products/
Source: chromecache_441.2.dr, chromecache_307.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_322.2.dr, chromecache_294.2.dr, chromecache_421.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_322.2.dr, chromecache_294.2.dr, chromecache_421.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_322.2.dr, chromecache_294.2.dr, chromecache_421.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_450.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_322.2.dr, chromecache_294.2.dr, chromecache_421.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_376.2.dr	String found in binary or memory: https://www.google.com/maps/place/Garwood
Source: chromecache_396.2.dr, chromecache_448.2.dr, chromecache_363.2.dr, chromecache_244.2.dr, chromecache_391.2.dr, chromecache_455.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/834731891/?random
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?onload=CaptchaCallback&render=explicit
Source: chromecache_353.2.dr, chromecache_335.2.dr, chromecache_388.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_357.2.dr, chromecache_441.2.dr, chromecache_307.2.dr, chromecache_450.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_450.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_463.2.dr, chromecache_360.2.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: chromecache_322.2.dr, chromecache_294.2.dr, chromecache_421.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-KQMZSWM9K6
Source: chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__.
Source: chromecache_414.2.dr, chromecache_273.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_353.2.dr, chromecache_388.2.dr, chromecache_328.2.dr, chromecache_419.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_357.2.dr, chromecache_450.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://www.reviewbuzz.com/web-widget/GarwoodsHeatingCoolingInc
Source: chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	String found in binary or memory: https://www.selectonsite.com
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_260.2.dr	String found in binary or memory: https://www.youtube.com/embed/J_kzFgju7PA?rel=0
Source: chromecache_260.2.dr	String found in binary or memory: https://www.youtube.com/embed/NpMhKZDN7Js?rel=0
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_357.2.dr, chromecache_450.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_386.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 65426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65381 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65324 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65192
Source: unknown	Network traffic detected: HTTP traffic on port 65497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65196
Source: unknown	Network traffic detected: HTTP traffic on port 49152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65371 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65190
Source: unknown	Network traffic detected: HTTP traffic on port 49281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65348 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65314 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65344 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65322 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65312 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65398 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65309
Source: unknown	Network traffic detected: HTTP traffic on port 65352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65301
Source: unknown	Network traffic detected: HTTP traffic on port 65490 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65304
Source: unknown	Network traffic detected: HTTP traffic on port 65089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65364 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65320
Source: unknown	Network traffic detected: HTTP traffic on port 65226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65319
Source: unknown	Network traffic detected: HTTP traffic on port 65329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65312
Source: unknown	Network traffic detected: HTTP traffic on port 65512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65314
Source: unknown	Network traffic detected: HTTP traffic on port 49251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65315
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65330
Source: unknown	Network traffic detected: HTTP traffic on port 65443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49286
Source: unknown	Network traffic detected: HTTP traffic on port 65500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49282
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49280
Source: unknown	Network traffic detected: HTTP traffic on port 65248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65329
Source: unknown	Network traffic detected: HTTP traffic on port 65305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65323
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65322
Source: unknown	Network traffic detected: HTTP traffic on port 65180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65326
Source: unknown	Network traffic detected: HTTP traffic on port 49216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49270
Source: unknown	Network traffic detected: HTTP traffic on port 65330 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65333
Source: unknown	Network traffic detected: HTTP traffic on port 65214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65338
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65339
Source: unknown	Network traffic detected: HTTP traffic on port 65386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65337
Source: unknown	Network traffic detected: HTTP traffic on port 65273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65342 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65505
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65509
Source: unknown	Network traffic detected: HTTP traffic on port 65179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65500
Source: unknown	Network traffic detected: HTTP traffic on port 49275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65504
Source: unknown	Network traffic detected: HTTP traffic on port 65534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65502
Source: unknown	Network traffic detected: HTTP traffic on port 49157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65517
Source: unknown	Network traffic detected: HTTP traffic on port 65029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65511
Source: unknown	Network traffic detected: HTTP traffic on port 65216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65512
Source: unknown	Network traffic detected: HTTP traffic on port 65388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65513
Source: unknown	Network traffic detected: HTTP traffic on port 65090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65529
Source: unknown	Network traffic detected: HTTP traffic on port 65408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65528
Source: unknown	Network traffic detected: HTTP traffic on port 49170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65521
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65524
Source: unknown	Network traffic detected: HTTP traffic on port 49218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65150
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65393
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65154
Source: unknown	Network traffic detected: HTTP traffic on port 65092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65396
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65397
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65395
Source: unknown	Network traffic detected: HTTP traffic on port 65246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65388
Source: unknown	Network traffic detected: HTTP traffic on port 65108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65162
Source: unknown	Network traffic detected: HTTP traffic on port 65469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65160
Source: unknown	Network traffic detected: HTTP traffic on port 65423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65163
Source: unknown	Network traffic detected: HTTP traffic on port 49180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65164
Source: unknown	Network traffic detected: HTTP traffic on port 65039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65158
Source: unknown	Network traffic detected: HTTP traffic on port 65212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65398
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65399
Source: unknown	Network traffic detected: HTTP traffic on port 65258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65177
Source: unknown	Network traffic detected: HTTP traffic on port 65319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65168
Source: unknown	Network traffic detected: HTTP traffic on port 65165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65188
Source: unknown	Network traffic detected: HTTP traffic on port 65372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65180
Source: unknown	Network traffic detected: HTTP traffic on port 65027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65179
Source: unknown	Network traffic detected: HTTP traffic on port 65401 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65111
Source: unknown	Network traffic detected: HTTP traffic on port 65445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65350
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65351
Source: unknown	Network traffic detected: HTTP traffic on port 65118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49261 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65109
Source: unknown	Network traffic detected: HTTP traffic on port 65047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65103
Source: unknown	Network traffic detected: HTTP traffic on port 65477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65346
Source: unknown	Network traffic detected: HTTP traffic on port 65236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65349
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65347
Source: unknown	Network traffic detected: HTTP traffic on port 65291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65360
Source: unknown	Network traffic detected: HTTP traffic on port 65339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65120
Source: unknown	Network traffic detected: HTTP traffic on port 49190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65357
Source: unknown	Network traffic detected: HTTP traffic on port 65070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65116
Source: unknown	Network traffic detected: HTTP traffic on port 65516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65375
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65373
Source: unknown	Network traffic detected: HTTP traffic on port 65340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65131
Source: unknown	Network traffic detected: HTTP traffic on port 65489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65381
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65382
Source: unknown	Network traffic detected: HTTP traffic on port 65362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65385
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65386
Source: unknown	Network traffic detected: HTTP traffic on port 65467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65383
Source: unknown	Network traffic detected: HTTP traffic on port 49155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65384
Source: unknown	Network traffic detected: HTTP traffic on port 49226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65138
Source: unknown	Network traffic detected: HTTP traffic on port 53249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65449 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65437 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49211 -> 443

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:53228 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:53235 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:53238 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:53250 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:65085 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:65310 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:65473 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:49240 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49261 version: TLS 1.2

Source: classification engine

Classification label: sus20.phis.win@40/345@138/50

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=2216,i,2334288279004458650,9609088969978004780,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://garwoodsheating.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6012 --field-trial-handle=2216,i,2334288279004458650,9609088969978004780,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6508 --field-trial-handle=2216,i,2334288279004458650,9609088969978004780,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=2216,i,2334288279004458650,9609088969978004780,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6012 --field-trial-handle=2216,i,2334288279004458650,9609088969978004780,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6508 --field-trial-handle=2216,i,2334288279004458650,9609088969978004780,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://admin.youtube.com	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://goo.gle/js-api-loading	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://yurt.corp.google.com	0%	URL Reputation	safe
https://support.google.com/fusiontables/answer/9185417).	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
https://viacon.corp.google.com	0%	URL Reputation	safe
https://static.doubleclick.net/instream/ad_status.js	0%	URL Reputation	safe
https://support.google.com/youtube/answer/6276924	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
http://tools.ietf.org/html/rfc1950	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
i.ytimg.com	142.250.186.150	true	false	unknown
www.demandforce.com	104.18.35.35	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	64.233.184.157	true	false	unknown
cdn.inspectlet.com	104.22.56.245	true	false	unknown
insight.adsrvr.org	35.71.131.137	true	false	unknown
prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com	52.9.171.8	true	false	unknown
www.garwoodsheating.com	188.114.97.3	true	false	unknown
local.demandforce.com	98.158.198.91	true	false	unknown
cm.g.doubleclick.net	216.58.206.66	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.185.193	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	52.210.142.7	true	false	unknown
cdn.mxpnl.com	130.211.5.208	true	false	unknown
core-dot-sos-apps.appspot.com	172.217.16.148	true	false	unknown
www.inspectlet.com	172.67.10.172	true	false	unknown
match.adsrvr.org	3.33.220.150	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
di8doh40j4s30.cloudfront.net	18.66.147.109	true	false	unknown
d8ghbpr3r4dzt.cloudfront.net	13.33.187.97	true	false	unknown
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	35.157.170.10	true	false	unknown
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	18.194.77.216	true	false	unknown
hn.inspectlet.com	172.67.10.172	true	false	unknown
static.doubleclick.net	216.58.206.70	true	false	unknown
analytics-alv.google.com	216.239.32.181	true	false	unknown
youtube-ui.l.google.com	142.250.186.174	true	false	unknown
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	34.248.126.201	true	false	unknown
d1eoo1tco6rr5e.cloudfront.net	13.225.83.200	true	false	unknown
googleads.g.doubleclick.net	142.250.185.98	true	false	unknown
play.google.com	142.250.185.206	true	false	unknown
garwoodsheating.com	188.114.97.3	true	false	unknown
td.doubleclick.net	142.250.186.34	true	false	unknown
sos-apps.appspot.com	172.217.16.148	true	false	unknown
www.demandforced3.com	172.64.153.110	true	false	unknown
ib.anycast.adnxs.com	37.252.173.215	true	false	unknown
adservices.brandcdn.com	unknown	unknown	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
idpix.media6degrees.com	unknown	unknown	false	unknown
secure.adnxs.com	unknown	unknown	false	unknown
d.agkn.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown
aa.agkn.com	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	unknown
su.addthis.com	unknown	unknown	false	unknown
secure-gl.imrworldwide.com	unknown	unknown	false	unknown
tag.brandcdn.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
ib.adnxs.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://sos-apps.appspot.com/ip-lookup.php	false		unknown
https://yt3.ggpht.com/ytc/AIdro_mJZWekx_QC_yZgoobJQY-ml6LjcseCKRrAy9U4uWE=s68-c-k-c0x00ffffff-no-rj	false		unknown
https://www.youtube.com/s/player/fb725ac8/www-embed-player.vflset/www-embed-player.js	false		unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam	false		unknown
https://www.demandforce.com/widget/css/widget.css	false		unknown
https://insight.adsrvr.org/track/conv/?adv=jsac74j&ct=0:capyj8y&fmt=3	false		unknown
https://d.agkn.com/pixel/10751/?che=1729811015772&ip=173.254.250.71	false		unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR	false		unknown
https://www.google.com/js/bg/9J_OlxnAizjMJN_fZ8JRYj0PV4Me2EAx1CVcnywh2Sk.js	false		unknown
https://www.youtube.com/generate_204?VvA5_g	false		unknown
https://adservices.brandcdn.com/pixel/cv_pixel.js	false		unknown
https://local.demandforce.com/v2/b/javascripts/lib/pickadate/picker.date.js	false		unknown
https://local.demandforce.com/v2/b/javascripts/main.js	false		unknown
https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&google_gid=CAESEMpC02vAuLVfFTx7n2BvwSs&google_cver=1	false		unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=1830&partner_device_id=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&partner_url=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dtapad	false		unknown
https://core-dot-sos-apps.appspot.com/fonts/slick/slick.woff	false		unknown
https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=903&dpuuid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam	false		unknown
https://www.youtube.com/s/player/fb725ac8/www-player.css	false		unknown
https://dpm.demdex.net/ibs:dpid=903&dpuuid=8de1627a-48e8-41d6-a181-d901bc5b2217&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam	false		unknown
https://www.inspectlet.com/inspectlet-jq.js	false		unknown
https://www.garwoodsheating.com/about/reviews/#reviews-list	true		unknown
https://i.ytimg.com/vi_webp/J_kzFgju7PA/sddefault.webp	false		unknown
https://local.demandforce.com/v2/b/stylesheets/main.css	false		unknown
https://www.youtube.com/s/player/fb725ac8/player_ias.vflset/en_US/remote.js	false		unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17	false		unknown
https://secure-gl.imrworldwide.com/cgi-bin/m?ci=tradedesk&cg=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17	false		unknown
https://www.garwoodsheating.com/images/favicon.ico	true		unknown
https://match.adsrvr.org/track/cmf/rubicon?gdpr=0	false		unknown
https://core-dot-sos-apps.appspot.com/scripts/core.min.js?v=1729783850	false		unknown
https://adservices.brandcdn.com/pixel/cv_confirm.png?aid=110315&buid=f51dbd93-2c9d-4f0c-a4da-f9e5b5526a5e&m=www.garwoodsheating.com&r=www.garwoodsheating.com&oid=19982838	false		unknown
https://core-dot-sos-apps.appspot.com/fonts/raty.woff	false		unknown
https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=903&dpuuid=8de1627a-48e8-41d6-a181-d901bc5b2217&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam	false		unknown
https://static.doubleclick.net/instream/ad_status.js	false	URL Reputation: safe	unknown
https://insight.adsrvr.org/track/evnt/?adv=jsac74j&ct=0:s4sw4zh&fmt=3	false		unknown
https://local.demandforce.com/v2/b/images/demandforce_logo_pms-sm.png	false		unknown
https://secure.adnxs.com/getuid?https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Freceive%3Fpartner_id%3DAPPNEXUS%26partner_device_id%3D%24UID%26pt%3D38408e72-24b7-400d-992a-344852538306%252Chttps%25253A%25252F%25252Fmatch.adsrvr.org%25252Ftrack%25252Fcmf%25252Fgeneric%25253Fttd_pid%25253Dtapad%252C	false		unknown
https://googleads.g.doubleclick.net/pagead/id	false		unknown
https://www.garwoodsheating.com/images/topic-healthy-home.png	true		unknown
https://www.youtube.com/s/player/fb725ac8/player_ias.vflset/en_US/embed.js	false		unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le7wiUTAAAAAG-hCuWRcM2y2iVhXwgujyFy8Km9&co=aHR0cHM6Ly93d3cuZ2Fyd29vZHNoZWF0aW5nLmNvbTo0NDM.&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=normal&cb=7xf8xqvm8rmq	false		unknown
https://www.youtube.com/s/player/fb725ac8/player_ias.vflset/en_US/base.js	false		unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le7wiUTAAAAAG-hCuWRcM2y2iVhXwgujyFy8Km9&co=aHR0cHM6Ly93d3cuZ2Fyd29vZHNoZWF0aW5nLmNvbTo0NDM.&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=compact&cb=ecuhzawa4rv	false		unknown
https://i.ytimg.com/vi_webp/NpMhKZDN7Js/sddefault.webp	false		unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=yjn0gup	false		unknown
https://www.google.com/js/th/It53B4OXF04wOkLSwvG0idPTlSk2hAXwxFmUWIvLxEQ.js	false		unknown
https://local.demandforce.com/b/garwoodsheatingandcoolingi/reviews.widget	false		unknown
https://d.agkn.com/pixel/10751/?che=1729811015842&ip=173.254.250.71	false		unknown
https://garwoodsheating.com/	false		unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le7wiUTAAAAAG-hCuWRcM2y2iVhXwgujyFy8Km9&co=aHR0cHM6Ly93d3cuZ2Fyd29vZHNoZWF0aW5nLmNvbTo0NDM.&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=compact&cb=nbv0xek1x3pa	false		unknown
https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=2305313710300817963&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_357.2.dr, chromecache_450.2.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_385.2.dr, chromecache_386.2.dr	false	URL Reputation: safe	unknown
http://www.broofa.com	chromecache_270.2.dr, chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://amerenillinoissavings.com/	chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	false	URL Reputation: safe	unknown
http://g.co/dev/maps-no-account	chromecache_270.2.dr, chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://adservices.brandcdn.com/pixel/cv?aid=	chromecache_310.2.dr	false		unknown
https://support.google.com/recaptcha#6262736	chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	false	URL Reputation: safe	unknown
http://youtube.com/streaming/otf/durations/112015	chromecache_385.2.dr, chromecache_386.2.dr	false		unknown
http://tag.brandcdn.com/privacy	chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_322.2.dr, chromecache_294.2.dr, chromecache_421.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_450.2.dr	false		unknown
https://www.youtube.com/iframe_api	chromecache_357.2.dr, chromecache_450.2.dr	false		unknown
https://admin.youtube.com	chromecache_385.2.dr, chromecache_386.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/api/drm/fps?ek=	chromecache_385.2.dr, chromecache_386.2.dr	false		unknown
http://google.com/ads/remarketingsetup	chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	false		unknown
https://goo.gle/js-api-loading	chromecache_270.2.dr, chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_385.2.dr, chromecache_386.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_421.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://github.com/madler/zlib/blob/master/zlib.h	chromecache_385.2.dr, chromecache_262.2.dr, chromecache_386.2.dr, chromecache_263.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_451.2.dr	false	URL Reputation: safe	unknown
https://yurt.corp.google.com	chromecache_385.2.dr, chromecache_386.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/fusiontables/answer/9185417).	chromecache_270.2.dr, chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_270.2.dr, chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://viacon.corp.google.com	chromecache_385.2.dr, chromecache_386.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_385.2.dr, chromecache_386.2.dr	false		unknown
http://www.demandforce.com	chromecache_401.2.dr	false		unknown
https://www.garwoodsheating.com	chromecache_260.2.dr	false		unknown
https://www.selectonsite.com	chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	false		unknown
http://amsul.github.io/pickadate.js	chromecache_401.2.dr	false		unknown
https://sos-apps.appspot.com/	chromecache_376.2.dr	false		unknown
https://www.bbb.org/us/il/edwardsville/profile/heating-and-air-conditioning/garwoods-heating-cooling	chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	false		unknown
http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/	chromecache_374.2.dr, chromecache_298.2.dr	false		unknown
http://schema.org/Review	chromecache_311.2.dr	false		unknown
https://support.google.com/youtube/answer/6276924	chromecache_385.2.dr, chromecache_386.2.dr	false	URL Reputation: safe	unknown
http://jh3y.github.io/-cs-spinner	chromecache_401.2.dr	false		unknown
http://youtube.com/yt/2012/10/10	chromecache_385.2.dr, chromecache_386.2.dr	false		unknown
https://cct.google/taggy/agent.js	chromecache_357.2.dr, chromecache_441.2.dr, chromecache_307.2.dr, chromecache_450.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_335.2.dr, chromecache_398.2.dr, chromecache_451.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_263.2.dr	false		unknown
https://www.google.com/pagead/1p-user-list/834731891/?random	chromecache_396.2.dr, chromecache_448.2.dr, chromecache_363.2.dr, chromecache_244.2.dr, chromecache_391.2.dr, chromecache_455.2.dr	false		unknown
https://www.reviewbuzz.com/web-widget/GarwoodsHeatingCoolingInc	chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	false		unknown
https://core-dot-sos-apps.appspot.com/fonts/bootstrap/glyphicons-halflings-regular.woff)	chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	false		unknown
https://core-dot-sos-apps.appspot.com/fonts/bootstrap/glyphicons-halflings-regular.woff2)	chromecache_268.2.dr, chromecache_260.2.dr, chromecache_376.2.dr	false		unknown
http://tools.ietf.org/html/rfc1950	chromecache_385.2.dr, chromecache_262.2.dr, chromecache_386.2.dr, chromecache_263.2.dr	false	URL Reputation: safe	unknown
https://www.google.%/ads/ga-audiences	chromecache_322.2.dr, chromecache_294.2.dr, chromecache_421.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	chromecache_405.2.dr, chromecache_245.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
142.250.186.150	i.ytimg.com	United States	15169	GOOGLEUS	false
172.67.10.172	www.inspectlet.com	United States	13335	CLOUDFLARENETUS	false
13.225.83.200	d1eoo1tco6rr5e.cloudfront.net	United States	16509	AMAZON-02US	false
52.9.171.8	prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.184.226	unknown	United States	15169	GOOGLEUS	false
52.210.142.7	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
34.248.126.201	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
37.252.171.52	unknown	European Union	29990	ASN-APPNEXUS	false
35.71.131.137	insight.adsrvr.org	United States	237	MERIT-AS-14US	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.34	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
172.217.16.148	core-dot-sos-apps.appspot.com	United States	15169	GOOGLEUS	false
216.239.32.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
142.250.184.194	unknown	United States	15169	GOOGLEUS	false
35.157.170.10	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
98.158.198.91	local.demandforce.com	United States	13897	CDC1US	false
18.66.147.109	di8doh40j4s30.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.250.185.116	unknown	United States	15169	GOOGLEUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
142.250.185.193	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	www.garwoodsheating.com	European Union	13335	CLOUDFLARENETUS	false
13.33.187.97	d8ghbpr3r4dzt.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.35.35	www.demandforce.com	United States	13335	CLOUDFLARENETUS	false
18.66.147.116	unknown	United States	3	MIT-GATEWAYSUS	false
216.58.206.70	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.206	play.google.com	United States	15169	GOOGLEUS	false
172.64.153.110	www.demandforced3.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.174	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
37.252.173.215	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
216.58.206.38	unknown	United States	15169	GOOGLEUS	false
64.233.184.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
15.197.193.217	unknown	United States	7430	TANDEMUS	false
172.217.23.110	unknown	United States	15169	GOOGLEUS	false
104.22.57.245	unknown	United States	13335	CLOUDFLARENETUS	false
13.33.187.112	unknown	United States	16509	AMAZON-02US	false
104.22.56.245	cdn.inspectlet.com	United States	13335	CLOUDFLARENETUS	false
185.89.210.46	unknown	Germany	29990	ASN-APPNEXUS	false
216.58.206.66	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
18.194.77.216	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
172.217.18.20	unknown	United States	15169	GOOGLEUS	false
142.250.185.97	unknown	United States	15169	GOOGLEUS	false
142.250.185.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.8
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541644
Start date and time:	2024-10-25 01:01:47 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://garwoodsheating.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus20.phis.win@40/345@138/50
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.181.238, 108.177.15.84, 34.104.35.123, 142.250.185.168, 142.250.185.226, 142.250.185.123, 142.250.185.251, 142.250.185.155, 142.250.185.187, 142.250.185.91, 142.250.186.59, 142.250.186.91, 216.58.212.155, 216.58.206.91, 172.217.23.123, 142.250.185.219, 172.217.18.123, 142.250.184.251, 142.250.181.251, 216.58.206.59, 216.58.212.187, 172.217.18.2, 142.250.186.42, 142.250.185.106, 142.250.185.234, 142.250.184.234, 216.58.206.42, 142.250.185.170, 216.58.206.74, 142.250.185.74, 142.250.186.170, 216.58.212.170, 142.250.185.138, 142.250.185.202, 172.217.16.138, 172.217.18.106, 142.250.181.234, 142.250.186.74, 172.217.16.155, 142.250.186.155, 142.250.184.219, 142.250.186.35, 142.250.185.131, 142.250.74.202, 142.250.186.138, 142.250.186.106, 142.250.184.202, 172.217.18.10, 172.217.16.195, 142.250.186.78, 172.217.16.202, 4.245.163.56, 69.173.144.139, 69.173.144.138, 69.173.144.165, 142.250.184.238, 142.250.184.195, 192.229.221.95, 40.69.42.241, 93.184.2
Excluded domains from analysis (whitelisted): www.googleadservices.com, storage.googleapis.com, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, maps.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, wildcard.weather.microsoft.com.edgekey.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, www.google-analytics.com, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, ajax.googleapis.com, e15275.d.akamaiedge.net, wu.ec.azureedge.net, e4016.a.akamaiedge.net, www-alv.google-analytics.com, tile-service.weather.microsoft.com, ctldl.windowsupdate.c
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://garwoodsheating.com/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 89, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1370
Entropy (8bit):	7.6769840630888675
Encrypted:	false
SSDEEP:	24:jUq6QaRRjmkOomMoVkECB0bFhYKsXYd1Qcef+9UgNFRU0Hauapb3AmgdAerX:jx+9mkxmpyECB0BhJsIda+9Uex1atcmW
MD5:	ABBF7320A9BE99A84E3E13E20ACA3EB8
SHA1:	3A54C83F87160D00FC60FC698280A1CC3839C9A1
SHA-256:	D8A2785E4957DCE6747BAD7EB14ACBA9F286A29A0A21B8026A68620BEDD736A7
SHA-512:	712A7F271ECEE3A1E986FA054377DFAC26A5A52CA3957AFCD10FE2C9091E410E0986006AA024B811937BE19F69B8C03F7456E775D3D91B48ACDF79E5533297D4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Y........ ...3PLTE......................................................G....tRNS.. 0@P`p........#.......IDATh..Z..(.. ......v...qN..n...)1..AHj....^.;C..3.d....1Kv..W....0. ..p....l..:[..D.9.[...}#"...~....B..).."..jym..Z;.H..Kv.-..VD."@.bC...M....c-.KD...m.R......B........y.F...,.H.+;"R.-...R....+...........bTDd..j..MA.P.dv..4m.]....&......}Z...>ax.S0r. .&.....@/gm..W..Fy...5..3....}x+.....G.(8%.".....gfV..9.AD.. "...A1....O../.1.z....~.........c..=.!..&7933+..W..........).`M..?....U.d..DK.d]9D..}.U.#..Fv.'.....Z.I. +.......!.........\.L...N.@.>....0Q.0....~.....@..y@.e.DD..3;.YUo..?B.....,.b.J...f..C.%...d3.$..v ...]j..L..^(F..K...Du.D.H...i..Sa..m.'.T..=.a..A.O..Xp._...&..n.`.q..t[.t... .g.7..c...u....p.!`ff6....bi....X.3.7R[.....m .\.:..33...~T..'.6W.&.. L...q...4.W.u...[.$...J...#.>@..X".n...toc..1Hy_.....I4.....q.I.m?...W.NQN...:jB.R(.....cEJ;...].gU.L....SS>.)...m......r...9..f..@.Z..t.{..v..)#.p..U.\|.A.....

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 462 x 210, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19410
Entropy (8bit):	7.957062030287544
Encrypted:	false
SSDEEP:	384:bfanFzTIf9LrCCCu9nzd30WtcVV8Cr/ESNzmY85gBApe9VZnAbC4oAm:raq1C0kWyv8Cr7Nyv5EA49/AO4oAm
MD5:	A50A8D36397ECEF2A4F4A57D41F17EC6
SHA1:	217F7AF63EB83F8BA1CD3969CD155B5A671B492D
SHA-256:	44F51DD05AADF0299C17EC2D21F1B97AA5ECEF5FA2F6CC43379A05DAB5C56C67
SHA-512:	55EFB7A636244182501AD98B917331A41C2BDCCFC5DEB3DE56CB00556BB6DAA55A0C641A5ED265A178719FD5D9F75B19A42C34BDEC8964C17B0D7C59CAFD7C3D
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/google-button.png
Preview:	.PNG........IHDR.............. .....pHYs................UiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-11-01T10:52:10-05:00" xmp:MetadataDate="2018-11-01T10:52:10-05:00" xmp:ModifyDate="2018-11-01T10:52:10-05:00" xmpMM:InstanceID="xmp.iid:e632845b-8726-be4b-a252-2799428fec03" xmpMM:DocumentID="adobe:docid:photoshop:b2d4bfa4-b83a-1e40-a4a7-2cac883351ef" xmpMM:OriginalDocumentID="xmp.did:e836e92b-d7a3-294a-b98b-0f35e802a8c9" photoshop:Co

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4736), with no line terminators
Category:	dropped
Size (bytes):	4736
Entropy (8bit):	5.82065247541917
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUyOwS3Vq+:1DY0hf1bT47OIqWb1JOwSlq+
MD5:	B9FE7F77BC38D5459223531573BDE324
SHA1:	8FFEF675EA6A1B2543146D69A9B81B1899DBA076
SHA-256:	196E4C82802BA48B3F73309CEB16EF59BC25AC1FA6F6911BD4619E676CA23CB4
SHA-512:	CE8904E415A8EB28BF41BFAD2B502725707C5465A82C5DB35B2DCA193F8733149FB83F78D919727E95587E579D001B08C8DABED444C2BF049FF719ACECAEA03A
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1251)
Category:	dropped
Size (bytes):	6274
Entropy (8bit):	5.574825561225863
Encrypted:	false
SSDEEP:	192:QKEBW0wUmfP55WnMFlOoRXcPDmYHdAxXlh:QKEBdwUmfP55WnKRrwCHh
MD5:	03B98497E346C99F6790FDC60FD666A7
SHA1:	13CD887389C2F51662A89FBBCA3BC3E880087DF2
SHA-256:	7C8B0E3793C3851545EA26BA73BF8AD40635A25EF33C18311F39ABE1A361618F
SHA-512:	DD317EAD574530C57B3DFE615BEFFC8E38C0F4F9D0C5D450A05E8A315365371C06065680191C11000E2B287455045E9C6BD779A5350DAF1D3A343F94E8D71F05
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('geocoder', function(_){var AQa=function(a){const b=_.Wj({address:_.ip,bounds:_.gk(_.nl),location:_.gk(_.qk),language:_.ip,region:_.ip,latLng:_.gk(_.qk),country:_.ip,partialmatch:_.jp,newForwardGeocoder:_.jp,newReverseGeocoder:_.jp,extraComputations:_.gk(_.ak(_.Zj(zQa))),fulfillOnZeroResults:_.jp,componentRestrictions:_.gk(_.Wj({route:_.gk(_.kp),locality:_.gk(_.kp),administrativeArea:_.gk(_.kp),postalCode:_.gk(_.kp),country:_.gk(_.kp)})),placeId:_.ip});return _.fk(c=>b(c),function(c){if(c.placeId){if(c.address)throw _.Uj("cannot set both placeId and address");.if(c.latLng)throw _.Uj("cannot set both placeId and latLng");if(c.location)throw _.Uj("cannot set both placeId and location");if(c.componentRestrictions)throw _.Uj("cannot set both placeId and componentRestrictions");}return c})(a)},BQa=function(a){function b(c){if(typeof c==="object"&&c!==null)for(const d in c)if(d==="display_name"){const e=c.display_name,f=Object.keys(e);f.length===2&&f.includes("text")&

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12591)
Category:	downloaded
Size (bytes):	12660
Entropy (8bit):	5.182948187095638
Encrypted:	false
SSDEEP:	192:64jc2UbRgm0Yv1XiRG+3XaEEBvx2mD2ObEXH+aVKQJrsUWV3pdo60:6WcXGm0hapBvxdDrDakTUmT0
MD5:	B47F2C820A0C744AAD0A3C477E8D0239
SHA1:	F1086DD9182A354AD16FA1AC3B0D67471B91D460
SHA-256:	621D2A2AE41AEE9776A0C15EA84AC5208D0E222795B4D22F4B04F01590444ABC
SHA-512:	E4FBD1A5F52F52EEA65F1035551310E6570746F3510D1BBEC1ADCA06232CA2FBD1C33F7612652E3F361B70FF4D17AD1F79C1C02B8BE78D0BA4417B788844FBB4
Malicious:	false
Reputation:	low
URL:	https://local.demandforce.com/v2/b/javascripts/lib/pickadate/picker.date.js
Preview:	/! For license information please see picker.date.js.LICENSE.txt /.!function(e){"function"==typeof define&&define.amd?define(["picker","jquery"],e):"object"==typeof exports?module.exports=e(require("./picker.js"),require("jquery")):e(Picker,jQuery)}((function(e,t){var a,n=e._;function i(e,t){var a,n=this,i=e.$node[0],r=i.value,o=e.$node.data("value"),s=o\|\|r,l=o?t.formatSubmit:t.format,c=function(){return i.currentStyle?"rtl"==i.currentStyle.direction:"rtl"==getComputedStyle(e.$root[0]).direction};n.settings=t,n.$node=e.$node,n.queue={min:"measure create",max:"measure create",now:"now create",select:"parse create validate",highlight:"parse navigate create validate",view:"parse create validate viewset",disable:"deactivate",enable:"activate"},n.item={},n.item.clear=null,n.item.disable=(t.disable\|\|[]).slice(0),n.item.enable=-(!0===(a=n.item.disable)[0]?a.shift():-1),n.set("min",t.min).set("max",t.max).set("now"),s?n.set("select",s,{format:l}):n.set("select",null).set("highlight",n.item.n

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 89, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1370
Entropy (8bit):	7.6769840630888675
Encrypted:	false
SSDEEP:	24:jUq6QaRRjmkOomMoVkECB0bFhYKsXYd1Qcef+9UgNFRU0Hauapb3AmgdAerX:jx+9mkxmpyECB0BhJsIda+9Uex1atcmW
MD5:	ABBF7320A9BE99A84E3E13E20ACA3EB8
SHA1:	3A54C83F87160D00FC60FC698280A1CC3839C9A1
SHA-256:	D8A2785E4957DCE6747BAD7EB14ACBA9F286A29A0A21B8026A68620BEDD736A7
SHA-512:	712A7F271ECEE3A1E986FA054377DFAC26A5A52CA3957AFCD10FE2C9091E410E0986006AA024B811937BE19F69B8C03F7456E775D3D91B48ACDF79E5533297D4
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/images/topic-energy-concerns.png
Preview:	.PNG........IHDR.......Y........ ...3PLTE......................................................G....tRNS.. 0@P`p........#.......IDATh..Z..(.. ......v...qN..n...)1..AHj....^.;C..3.d....1Kv..W....0. ..p....l..:[..D.9.[...}#"...~....B..).."..jym..Z;.H..Kv.-..VD."@.bC...M....c-.KD...m.R......B........y.F...,.H.+;"R.-...R....+...........bTDd..j..MA.P.dv..4m.]....&......}Z...>ax.S0r. .&.....@/gm..W..Fy...5..3....}x+.....G.(8%.".....gfV..9.AD.. "...A1....O../.1.z....~.........c..=.!..&7933+..W..........).`M..?....U.d..DK.d]9D..}.U.#..Fv.'.....Z.I. +.......!.........\.L...N.@.>....0Q.0....~.....@..y@.e.DD..3;.YUo..?B.....,.b.J...f..C.%...d3.$..v ...]j..L..^(F..K...Du.D.H...i..Sa..m.'.T..=.a..A.O..Xp._...&..n.`.q..t[.t... .g.7..c...u....p.!`ff6....bi....X.3.7R[.....m .\.:..33...~T..'.6W.&.. L...q...4.W.u...[.$...J...#.>@..X".n...toc..1Hy_.....I4.....q.I.m?...W.NQN...:jB.R(.....cEJ;...].gU.L....SS>.)...m......r...9..f..@.Z..t.{..v..)#.p..U.\|.A.....

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 235, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	61614
Entropy (8bit):	7.990670305434861
Encrypted:	true
SSDEEP:	1536:CV9pDNUMc8CJE59YSxPmYiwQlevI5v8OPoTHMNp:CV9pDNUl8Culj9Da8OPnH
MD5:	41F0B1EAB5C10C4CEFDDEBB1159EA4B5
SHA1:	6C52D70D82014B1CED45072F896D1AC7FE5C0D8C
SHA-256:	D3AA745974F97CB80EAF76135FDC2ACD9251105C168BD4EEFF80C09380F4108D
SHA-512:	8026CEA50AC7FE4EA73FC4946EA82352640A8E5AFF54C458EAC56F3A171B6967D979C2DCE3A173AAB1371C416545C8D313FF67A850EB9BA9BE31F588BAFD0F7D
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/0014360DEA000413/images/Garwoods-REME-HALO-logo.png
Preview:	.PNG........IHDR...,................tEXtSoftware.Adobe ImageReadyq.e<...PIDATx....d.U%x.......U....[.n.V. .#a...F `.`5.,..\|\|.F..,.A;.a..V.H. ....Vw...&+}...>..{.....2.}...eeddd.....{.=..}..#<.#<............+<.#<.#........+<.#<..u~.......".F.E...V..E.f..O.C.e.I.4.ToY.H...._..\.....%...N. 3.Z.M..Cq.$.S<FT.u.f.....$..u2.(%....G.d.J...S<..Z.M....8...5...rZ%.\...}..x........%l..U.\|.F>.m;fR.e..5(.N.....Q.T.....R~a..t.y^..Q.\...d..q(...5')f_\.h6...,Z._.l6Em~].......9.Uj.s.R..u.->.u.....0..b..#.o....D(.N..d.&..5r:...&...,..P(P__..?..6m.H.H......u....[...{.n..V:}.4.v.md...Q.?...~ZXX...c.U.y\,...{...G..+....)J$.488H....={..U...iz......o..n..&..^.........P.R.w..]...O.....R.$......o.N}.}433..{.....w.......>L.o.k.....>.a...h4J[.n...%.d2..&&&h.m\|]4.U.Uy...^......y.~.z......7..y..;wn.?w..\|._...r9...7<.UW]51<<\|/?.9>..499)......0.L..dQ.........s.e..^.87.B.b.67m.D.N.\|...&....\|.V.}.....^.N.^:`.Gx..+.!`...`...x.&1.@.iiq...-..{N.<y...drn~..Z...[-.<}&...

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	1101
Entropy (8bit):	7.272614158238896
Encrypted:	false
SSDEEP:	24:iIU7HRJ/x6e3mpNx0xAzRi6VyigLavWSR/Is:BYRR3mXx0xA46VYLAWS9Is
MD5:	B9389EC50CBF52353268C5733287AEC3
SHA1:	E9F96DF8A6BF124BD5CC54F0A74F2D893EF0E127
SHA-256:	F1AB26D1E2FEAF4389A46C90FD63E9F8BF2D0BC17A410196CCC453A0260D8545
SHA-512:	1EA8FD125F172C50CD88B9F261EF6630FDBC83AF675C42BBB57116D8B412D973854FFB41F2DB355B98CC28EA01AC1DF266BDECD8B500374840ED9C255E050DAF
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/ytc/AIdro_mJZWekx_QC_yZgoobJQY-ml6LjcseCKRrAy9U4uWE=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF......................................................................................................................................................D.D.......................................+.............................!"1.2QBRaqr3...............................1.......................A.!1Qa.q....."2..Rb.................?..O..`. .... .... .... .... ...L.,..7)J.. .o ...yH?....$.w."Z..U.....g.-q..l.k:.....dxCf.....\..^_..V.q?.~......m>.$.{r4....I..!]{..M.E..}g..kju..6..A..D...r.iN..&...E..\O...... .........tLD..~...)Q.........s_.h.....:..e5o..9K\-..h].e;x.}3.}._..V.{...+..y.....t@a...I..8.u'oQIeJ/......'NY.....m..jz.+5..6......l.G.R...'..-4........%$.LdS.. ....o.%......Wi.R...dq...h]..{. ..ouub...=.x~...P.R......g.Jce....y.........]....]......h.5J.w......7p..........a...N..l.......'..%Hc...1v.....~.o]?O....e-....... .... .AWk.-X../U..kw..T...C..P.K..F....\[m..ZJ.#.......Y.).AFo.^...L..K...C..#.*<......=....TRH.=P..(.N.h.+M.=8.=..g.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	1096
Entropy (8bit):	7.3116070551742665
Encrypted:	false
SSDEEP:	24:xRA27BDG1fZ64fdVVN7Dex8G0X6rKLJ5u7d3//fMb:xRw1fZ64f7CSGiM0f6Eb
MD5:	13A34A6D6B15DA7F8EA0022171B6D672
SHA1:	C7861443165D5614C62C58172277F21CC648F199
SHA-256:	397B507CF81670C33E00EBCBC3F409438A901F33D7395687DF7F7727F1B7966D
SHA-512:	8132469D144CC0BE5D65451B596D30DDF7F0B332BC11D2DCF346678CC2C0994AB1D60189734C2E26D4DEEC01D4E56D2220F99D27BBBCE14B075731C03BE8EA5B
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/ytc/AIdro_nVNLosY_rSp_jV6MS57MdpHEScPexXFVHxb6nGj54=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF......................................................................................................................................................D.D.......................................-............................"1.!2.#3ABQaq.................................+.......................!...1Q..Aaq...."2.............?.....@@@@@@@@@@@@@@@@@@@Ak./.......9..cpl..>....}..........C.<w......m...X.8.5B...{.....Z...z~<......?..eL..L......x....\U.V.-.l5.Wv.a~74.#.d..A.... .QoKc....].4..%~o......A8.l\.]*...t`...?rvU...4\|.&..>N.p}....tt.<....9..^....4.....?v..zzW.....Q..t......:9..v.v.. ......x.q1.[[..\|&..j.t...z./.$5.^wJ.8..\|X...3.....]....j..l..\.Dm.DT.!.....c...T5M!...i.h..[u.mkf0.p.. .fF.~.v0.b.M<o...8..yr....xG..z...8..[l.B..u".Y;7.;.&..+^H..r.c..y..zG..s.U.k).j.\.#./..5.G\....T<.Hzn.,.w...H..9...;_..=......-^......S.D.......P..wJ...H......+.....,k.~..V..nh.........i.....?....=M"....}...........}H^...zP.;...{.......F@#..^..b.2F.O..tT.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 35, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3415
Entropy (8bit):	7.924379536815121
Encrypted:	false
SSDEEP:	48:0V4PF3I3eHBdHybDV6FCDkd0lO38OvDQITBt6O3561lXiq+CWoW2ggKCHvR:0StKeKhAm8bQITmTiqFWoWTqR
MD5:	88AF5BBF167D676A4C467A1034901362
SHA1:	68B1D318BE47F146425F52C5075B84A5EB9A5134
SHA-256:	6DF5D76FEAC88C9267A9D53C5ABF9F8CA8D99DA124DD6202078F92341962F7D3
SHA-512:	7DE20C6C3E7E43256A07126B440EAAE712899CF16752BA340C0074746D9940955243A4D2EC5B8A95E55B80FC6269C6C796457A3CC5C16FDAADA18DBEBD92FC29
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...#........F....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..YytT....2.L&.LV..da7..D..zd..p..Z{...........=.s...-...V.U..DD.`.......u&.}...3JB......3g.y.......O(^..!.O...>N....}.I9.jx......%.6.@....h..A.....0...`,z.0..t......#.#Z^.u.J.N....(..Yt.6-...@....zT4#&....L........!.. ..lr..S.....P..jFD.p..I.(..]...y.....X\4..E15X.i.Z.D.....5y..>.&....\|.v.......\|}.5.:.....9...Q..w;<..........=cP.V.S.....`.........D}t.z.....cQ.i,.=...v...K".u^..I.......s..}...[2a%....JIZ3.M:.....n.....!....C.4..l./.oW....3...I..F.e.FHr....t..P.t..B..X.D@.$_..........;'}....#..DD3C.....3..\.Z.?..DEw.....FD.......v#U.q...!...T...g!...n-<.%.....@u.S........R ..[.w......g.......UK."cR.Q..8.#LN'.l.W...$i.S3.... ....S...A.....$..E'-!..I3.7..k.=.BG..+@&p...Y.5.....F..z..;...E...*.j."M.-..R.\G\D..X..Q..A...<6.m.-.!my.5,....."-...Q-@..(..9.p.a.....^..........x.[N.....8@...J/..ORh..,..ga#rHBTw.?.#..>Y..[1..0J&MXY\|..U.Fw.EqT.. .53X.L..A.a.Y.!.....'....

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	1096
Entropy (8bit):	7.3116070551742665
Encrypted:	false
SSDEEP:	24:xRA27BDG1fZ64fdVVN7Dex8G0X6rKLJ5u7d3//fMb:xRw1fZ64f7CSGiM0f6Eb
MD5:	13A34A6D6B15DA7F8EA0022171B6D672
SHA1:	C7861443165D5614C62C58172277F21CC648F199
SHA-256:	397B507CF81670C33E00EBCBC3F409438A901F33D7395687DF7F7727F1B7966D
SHA-512:	8132469D144CC0BE5D65451B596D30DDF7F0B332BC11D2DCF346678CC2C0994AB1D60189734C2E26D4DEEC01D4E56D2220F99D27BBBCE14B075731C03BE8EA5B
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................D.D.......................................-............................"1.!2.#3ABQaq.................................+.......................!...1Q..Aaq...."2.............?.....@@@@@@@@@@@@@@@@@@@Ak./.......9..cpl..>....}..........C.<w......m...X.8.5B...{.....Z...z~<......?..eL..L......x....\U.V.-.l5.Wv.a~74.#.d..A.... .QoKc....].4..%~o......A8.l\.]*...t`...?rvU...4\|.&..>N.p}....tt.<....9..^....4.....?v..zzW.....Q..t......:9..v.v.. ......x.q1.[[..\|&..j.t...z./.$5.^wJ.8..\|X...3.....]....j..l..\.Dm.DT.!.....c...T5M!...i.h..[u.mkf0.p.. .fF.~.v0.b.M<o...8..yr....xG..z...8..[l.B..u".Y;7.;.&..+^H..r.c..y..zG..s.U.k).j.\.#./..5.G\....T<.Hzn.,.w...H..9...;_..=......-^......S.D.......P..wJ...H......+.....,k.~..V..nh.........i.....?....=M"....}...........}H^...zP.;...{.......F@#..^..b.2F.O..tT.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	703325
Entropy (8bit):	5.306845374558168
Encrypted:	false
SSDEEP:	6144:H2s6wxnzCZ75QsKcTnGPp5UPB0rB8W97kRsFpW8/kGBoGYjxhbVwx4H:N32KcTGPpMXWXvM1Gwx3wxi
MD5:	DD805194FF6BFAD52EF1E3A75B24AD2E
SHA1:	9417CDAF63D9F209E472AF3DC083045ED39BBCDF
SHA-256:	18E6371CF275C9CA4B7F9E59D01E280205DE5062F07E0D34015B966FBEE4D3B4
SHA-512:	6D3FA5EDF7466F8274CFE29141C794B083AD47502FDCE58463EA11987A9D6A2D4C584EB1849573D19A450D0CC2B404E41EB8B73DB8AF71148D08C0DB92C53E2E
Malicious:	false
Reputation:	low
Preview:	if(!function(t,e){"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(t.document)return e(t);throw new Error("jQuery requires a window with a document")}:e(t)}("undefined"!=typeof window?window:this,function(f,R){var u=[],c=u.slice,L=u.concat,H=u.push,z=u.indexOf,i={},$=i.toString,m=i.hasOwnProperty,g={},t="1.11.1",w=function(t,e){return new w.fn.init(t,e)},W=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,j=/^-ms-/,q=/-([\da-z])/gi,B=function(t,e){return e.toUpperCase()};function U(t){var e=t.length,i=w.type(t);return"function"!==i&&!w.isWindow(t)&&(!(1!==t.nodeType\|\|!e)\|\|("array"===i\|\|0===e\|\|"number"==typeof e&&0<e&&e-1 in t))}w.fn=w.prototype={jquery:t,constructor:w,selector:"",length:0,toArray:function(){return c.call(this)},get:function(t){return null!=t?t<0?this[t+this.length]:this[t]:c.call(this)},pushStack:function(t){var t=w.merge(this.constructor(),t);return t.prevObject=this,t.context=this.context,t},each:function(t,e){return w.each

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 633, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	44846
Entropy (8bit):	7.903798094745186
Encrypted:	false
SSDEEP:	768:MAKXR1xDORNFJ+weox4Z/4dCDPjAmFGSIffFoQNvh6pXIEYx:MAKnxK6wJY4dCwpSy7o2x
MD5:	39EE3DD84F496A0B3D7B58C9E0599DD5
SHA1:	BDE068A003628777AC648AB1285C61761BFFCEC8
SHA-256:	B8E8C5D279E974CE6B5BC5974A5C8596F13C273D6AA98D8DCB150B79C8F8D9E8
SHA-512:	4BFAF1B204AA0877A766317DCB6082B1FD17AE469D09C9E3A6A1C15A1026A83234F75A1FF828BE91C34A61BB152128EEF4AF01688611EE8F590643DFD15199BF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......y......5.H....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.163858, 2019/03/06-03:18:36 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop Elements 18.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:3DE3E84D2B7F11ECBE0FAF98559D9C47" xmpMM:DocumentID="xmp.did:3DE3E84E2B7F11ECBE0FAF98559D9C47"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3DE3E84B2B7F11ECBE0FAF98559D9C47" stRef:documentID="xmp.did:3DE3E84C2B7F11ECBE0FAF98559D9C47"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>k.......IDATx........t..d..e..b...]J.AJ....H.R..(.E.B.....w).www..f.?..p.Nr.=''.I..y.3ps.I........2...

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 135 x 89, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1421
Entropy (8bit):	7.698817345087714
Encrypted:	false
SSDEEP:	24:dB4ryNoXKD9shjIPrN4Qnn8aYBdnWbFXa1VJ4fURU4Qww9STBlw8E4JozSE:bKaOu9pPCQnn8asoBqXm4QXwTBlxJozT
MD5:	F75F8C6FEBA873B212028A5D0EC90F7F
SHA1:	4B9C1911DFADFA02EE6E76DE59B4EC7B8C6F470D
SHA-256:	727383264861E2F7E030E90C602B5F4FB53D1F78717DFD85449BE10CBCC70A49
SHA-512:	CE6EE5F4962E895480380E33E3946F812277B0C55BE98E16BD725DF45A4EB7EA37C3D693B86D8C0F481ABAE4E50B6983BBF34090BB3A72B43BC2399277337B1D
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/images/topic-ready-for-maintenance.png
Preview:	.PNG........IHDR.......Y.....#..g...3PLTE......................................................G....tRNS.. 0@P`p........#.......IDATh....(.E. F....k.!...ctQ.....rYA.~.......Pd L.0......D3.........X..\|..z....w\|.G.....0.1.......%...d.1.q.X@r.Y.\|.?hG.^=........8.y......5..S....?........0>.&\|..x."..qcf^?.7.%^'..+....4.DM::...}v.z...^..W.lg`.f..>jo1....p\|.....E...muu_..0gkN.yn:W..{.9.&tK....RfeR..sz./9n.w...OV>m8u..i.XV..~.7~.....{.T...Q..h'K.-5?8-8+..z.)..j..:a...........\|;!......G...... .H.."....H..[...$.A.`.....".%..Io}.......@..I+~........,...O..%.0.....w8....H.P.m@$:. ]....m!...l....r.33..l.V&..2....&..03.'.......W...S...z ..:....S..\|x.P..l.?...(..^8L...#.........6.t..d.\I..s.Y.H.z...cs.lA......5.]9j...b _...Q.....s..S./..>..5X.p.....].N.....=.:n...O.....0..j...e.v.H....i...s.b.w.C....M..BD.1o...\.c...Q.......i............R...Y.1+....,aEv/m....Fv...C..T;..@..........k.r.Zi]r..O8l'..J.u<....d.Pd...&...DM..r....J^9.5...".{.1.....n).

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	dropped
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 462 x 210, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18953
Entropy (8bit):	7.936331547097677
Encrypted:	false
SSDEEP:	384:b6anf1STskQetSblI9SEhlAymlO0vQreXaW1UpP3tpUhU:ua9HNpKSzy/VKXaW1U4U
MD5:	230018AD48B693F768E86CB517EE35C2
SHA1:	932DC0BE9406D8818A3D9E4300F08D3843FE75B6
SHA-256:	15D0840113DB75E329C86D32E03E7858135EC687596860C8E73113C4BF79599B
SHA-512:	6894DEC9763B7D01594487013873BD77D6E3CB57292B974EC77E26392736DBCFEE60EA7CB5F97C5F3C42A2B3B6412019B6757C8AE216B492B9E8A75498E45CC8
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/yp-button.png
Preview:	.PNG........IHDR.............. .....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-11-01T10:55:58-05:00" xmp:MetadataDate="2018-11-01T10:55:58-05:00" xmp:ModifyDate="2018-11-01T10:55:58-05:00" xmpMM:InstanceID="xmp.iid:dfb64eab-3cc8-e747-a270-48a047d65f6b" xmpMM:DocumentID="adobe:docid:photoshop:fb02653c-18fe-1a4a-bc9c-0a5de8b45650" xmpMM:OriginalDocumentID="xmp.did:bdda0811-fcd5-5d41-8d1f-50958ecf5c1b" photoshop:Co

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18713
Entropy (8bit):	7.969170354765344
Encrypted:	false
SSDEEP:	384:dnQB3tffNXMVXe420Sx/Wk5oSTMu/SkLE31bpjw9k2sUlfzWvedOZS:du5fNXUe4qxevSMZjJ9wGsRSgB
MD5:	C8C6AA70284910DCA8838A26BF256C78
SHA1:	0182071C8263FDE662DB0D5F37A4D0EB5BED6766
SHA-256:	11DC5E121554F2CD8204C58EAF186054F1240EDC6EA351AED831DB4AB48B3A3F
SHA-512:	E5A9F3C2A7AFDF3456A2F35BF6DB4531C0483288A6D5EF3EA8295778B444E1AECA364D8E74DBC8354D75DE911C1725DA208F38ACFE9F1E148B96BE91C15F5424
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/logos/nate-certified-100.png
Preview:	.PNG........IHDR...d...d.....p.T....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="uuid:8DA59291CDBB11DD81A7D2CB53B91267" xmpMM:DocumentID="xmp.did:4CC1C7019F3111E398F189FC0ADBF076" xmpMM:InstanceID="xmp.iid:4CC1C7009F3111E398F189FC0ADBF076" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e9b54eca-1e92-b849-9dc9-67061933d5af" stRef:documentID="xmp.did:02801174072068118F62B73EBA1A189D"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">NATE_3D_mstr</rdf:li

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (64839), with CRLF line terminators
Category:	downloaded
Size (bytes):	308973
Entropy (8bit):	5.206453129222693
Encrypted:	false
SSDEEP:	1536:iw+xlMHHwL8RwIzXmTkBhA+/6Zk58E1fy5YaPI5Y7JUcaAhGpXH+U5jQAwo+RNUY:ycwIzq+/6Fa+UNuB1pLqy
MD5:	8F87E4EFC93036D58DA55D395BD64380
SHA1:	036EAD85828D60C3752F4EF7808ABA6EAB250682
SHA-256:	BF72B6296C2A052021F43137E220C8FDD767B59EB6DB13E30457673962D72F0C
SHA-512:	FF0C55452D96F13AEE932ED0B347414461EFCA7E147A4E53DBBB04BCAC76718EEA78EC1D971C1FBA04D84400FF3D615E56EEAECAE549949771827B6077F4FA2F
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/
Preview:	..<!doctype html>..<html lang="en">....<head>.. <meta charset="utf-8">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <meta name="msvalidate.01" content="9E3403CCBB82E1EA5F6789288E1A7AA8">.... <meta name="description" content="Serving Edwardsville, IL area. We specialize in HVAC service, repair and maintenance of Bryant furnaces, AC (A/C), heat pumps, ductless, geothermal for people near me">.. <title>Garwood's Heating & Cooling, Inc., Air Conditioner & Furnace Repair & Service \| Edwardsville, IL 62025</title>.. <meta name="keywords" content="" />.... <style>.. @charset "UTF-8";button,html,input,select,textarea{color:#222}body{font-size:1em;line-height:1.4}a{color:#00e}a:visited{color:#551a8b}a:hover{color:#06e}textarea{resize:vertical}.nocallout{-webkit-touch-callout:none}.pressed{background-color:rgba(0,0,0,.7)}textarea[contenteditable]{-webkit-appearance:none}.gifhidden{

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 114, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	25855
Entropy (8bit):	7.985893550876008
Encrypted:	false
SSDEEP:	768:lRYO/cgYsCS2fQ/x2wHuHVRu6RKDnWR6sUGA:l6O/c/vI/MTHQi7A
MD5:	245B4A32B88578C37B30DAB2E2584DEB
SHA1:	AE5ED211B127741A33B369F6CC3ADEA23094C1A4
SHA-256:	B1559E1E1D9374FFABA950CB95BA542480AEC54B1DCA3BF3177603E2A907DFB2
SHA-512:	484F166DE564849E27C017A685EDA80D50E6BDE06E558D6F786308995080B148B1E40920FE19DB713A872FFA7AB60B29384CBF27A75A7071D70A237BF67E938E
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/products/bryant-zoning.png
Preview:	.PNG........IHDR.......r.......(v....tEXtSoftware.Adobe ImageReadyq.e<..d.IDATx..].x\W...7..w[.-..%....'.B...BY:.I`Y..R..).. .i.'8=q.$.rQ.$[...h4.....7#..8......k4.y..s......:F?\|...k.]. ...&..i.{.#...g...g6.a2. .S.%:..I..i....&...z...7,H..r..q.caU....qN..(....%.C....xZ..I.,..G...T..5]5..U..?.........]Ab.U5..U.kT.3..T.;.M...<..Z..;....'..$....#\|...z.jVh\.:.1....L&.<..m4..I..,....5.Z.G....$>.&.O..JPc.2.<.\...D..BU.1.V.3..tI6.Z;:/>ZY.7.Q^..._=ZU......@....[d..K4...#...^...ni...e..x...9.9==._..z.Wu.o.>t..c..u..^e.e...h8......r.a..[....K....H..}j..u.:dMuk...'..{o.;....'.........@}}=..[.E..^]U.^....5...$WX.2.......?.`1n.$.a.+a..."a.d........`p..7....svkk;....aNRR.......i5.o......c...Y.f........R.........I...H....'.Xq(@i4.....6.Cmll....v..\|...DUu... .N....uUU.L.(.......>....X.q.B]..hi.z1;3.{.......\.k0K*.._..a...4b..v..9.!...d0!..p8.....]{.\|...{.bv^^QQ..R6ep.=... A..)...w...;......../....9\08..UVz.-M.yzLp...M....2.......&..f..n....$..n!z......K.o?.;......

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	downloaded
Size (bytes):	338863
Entropy (8bit):	5.619536316877692
Encrypted:	false
SSDEEP:	3072:0FZ1f4ZutKX4juukrULBLeV4nLdw0Jl7GrLSFtJoDqleuH:0FZ1gTX4juukoBSV4nZZJl7ULotvJ
MD5:	80FD686D1F3DC5E7346D3C54EABA548C
SHA1:	05110FBAD08767E9ADD85A86B9210F2992595BAB
SHA-256:	363AC5A0E9D457D8A2E0B81FBC12D5121BAFD1464D21B00D1A7692CD33D7C308
SHA-512:	A38F62048F542EDD9DF01B9A219BE225BE1E2A4B0B3248982DB01D41D346D9C05C0903BFFD4A737FDBB13A449442698529F546F4AF86472A79A3176154379683
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/fb725ac8/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function u(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	dropped
Size (bytes):	338863
Entropy (8bit):	5.619536316877692
Encrypted:	false
SSDEEP:	3072:0FZ1f4ZutKX4juukrULBLeV4nLdw0Jl7GrLSFtJoDqleuH:0FZ1gTX4juukoBSV4nZZJl7ULotvJ
MD5:	80FD686D1F3DC5E7346D3C54EABA548C
SHA1:	05110FBAD08767E9ADD85A86B9210F2992595BAB
SHA-256:	363AC5A0E9D457D8A2E0B81FBC12D5121BAFD1464D21B00D1A7692CD33D7C308
SHA-512:	A38F62048F542EDD9DF01B9A219BE225BE1E2A4B0B3248982DB01D41D346D9C05C0903BFFD4A737FDBB13A449442698529F546F4AF86472A79A3176154379683
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function u(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=1274, bps=0, PhotometricIntepretation=RGB, manufacturer=SONY, model=NEX-VG20E, orientation=upper-left, width=1920], baseline, precision 8, 600x600, components 3
Category:	dropped
Size (bytes):	256353
Entropy (8bit):	7.950735648563406
Encrypted:	false
SSDEEP:	6144:O1Y1oQMNAOW7zADFAbVlUWHt6YSrtKkY3MS1z0rJ8N:QqDMNAxcDFAbVlUAwdYt14rJO
MD5:	C2D2D6F43B5D9A3AD652524F59A77C6E
SHA1:	195D5D1300BA238A78DDC4FAFDF186A34EDE783A
SHA-256:	38EC0F69B3579D46CC9238FE72075581AF85DA855C2766139E1612D1B20F8052
SHA-512:	70848CF855DDCDC4790DDA55C368C711C8134C20AF63DD68686B364DF38311F2905A011B798D61DA4FFC5B6D6DA3C5158FFACEB57C42284AA6815EC16F106BE0
Malicious:	false
Reputation:	low
Preview:	....!.Exif..MM.*...............................................................................................................................(...........1.....$.....2.......................i.........(... ......SONY.NEX-VG20E.......'.......'.Adobe Photoshop CC 2019 (Macintosh).2019:07:24 09:25:12........d..........................'..................0231.................................................................................X...........X.4.....................d...8....2016:06:13 18:54:55..e`...B@.K.f..B@...N....E 18-200mm F3.5-6.3 OSS............................n...........v.(.....................~...........$.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'.....

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	30658
Entropy (8bit):	7.992981991039087
Encrypted:	true
SSDEEP:	768:1PaU1Ju4zxkDmxIrKkeRwupyMc46BQTyKrSsXTa1ug:1/7u4zxmmU6RqMcHqGBsO1n
MD5:	8C41AF1AAF6B8A53CCDA0F2DCC82CDF0
SHA1:	743C18E219DB221ACD956978EA6436A587B697F6
SHA-256:	63BE2CF64867A18DFBF5F4F886E78E6292E19DF54AFF5FD88C5F72D297D84231
SHA-512:	7050178DCC1BBE9ACCE73AB80CB1A2CB6C8F8C8FE781A03560138799A659443992D77BA4A6EA0E711EF5CB793C45BFC5269FCFEC004285FCB8B847D07587CFEF
Malicious:	false
Reputation:	low
Preview:	RIFF.w..WEBPVP8 .w...a.......>q0.F$."!......en....p..5...b..._......>..I...{...........6.f~...w.?w.......".......g?....g........#..z.~s...j6...S.O:....O.^...\|............O.~t.">....m... 5....B..C...P..P../T ..;.... 5....B..C...P..P../T ..;.... 5....B..C..d........d..y.._.n\|.....Q%........Dk.[b.MG.k@.r.\|-_.G...%_...3.En4z:.TK..=.......'8A....%.b.2P....1..}S......Qe.c .rw...PO.. /{.J..i:....O.:N. ....lpNf.u..X}.W..+p.......GhM.....E..r;S.?_P...N.L..3.M[.S......i...E......%...'\|...........Q...jK/......^.j.]-E.o..CF?/..%..<..g ..Q.F_..x..{.&A...\nf....$C.y3..X..B.d..R..b\|...}..r.g..............Q.glN...1.y.8..X...pLU.).i..&....u..s.!.../....w...]Sm..v.8....qq.2..PXH.5....u...<.\|.`..G.........YznY(.r.B.d...x<5##..._...j.u\|F...O5.^..w.J.....6.Z..j....R.>.=..\|.fr..u..]h....3.'.R!.[..*....jQ...".y....e..x.:.(...{..........l....>.>..$w4.1..n....C........e.J<r".D.F!.....J..........:....d.'.H...-..d..P7S....#..W/4....N.(5.t....\.......>.".L6.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11870
Entropy (8bit):	7.97838993481524
Encrypted:	false
SSDEEP:	192:D8ZcT7NLk9pZ9VlSOxIzXV9ubT6jbDVekfp3m/uvQgzwG4bysCjvH6EGML:D8iT7NLsf9SrO0hegzNeys2vHDx
MD5:	0FDC473C9B42A6FABE1A79F5826AAE68
SHA1:	9089F6D4DAEE7137C978F309DA5CAEA3CF496E90
SHA-256:	142B68A7308295BB837963A9172E6D63A0C80AD7B79304931B96DD624828B6B6
SHA-512:	7B504C1B814D3E9F77E05514E0A45175C1AA402A8D41D6DF6CB0DC768467D410AEE8C64ED8DBB21E3074AA18218F4EFEFE8842176EFD5ED3C91BB442C6723D95
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/files/mobile/images/pinterest.png
Preview:	.PNG........IHDR.............<..R....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..}...W...2...[.j...\|....c.6.f..m......a .X....6..X`g7v&b....Y....e0..\|b....eI.d.j.[....+...........*.Z.....2.........?q..~.9...z\.i..q.Mh.... ...A.........!..'..\|B.rQ.. 4..;......Q?k.F....t..s.#....]e.....~z._l...@p^.D..[.....nz~..t./.F.!n;.w.....JH.#.....+...S..,.a2...&~E...7&..D.6...F>.W.in-_.4!.$.{...Fl..7.K.P~C#n..:.c.... ....A.....]. .N"M.......e.4...P _.C.......;....P\....0L.2...i... 3.-.Wo.F..4.w.5.3"&........F6..#..D..f6....u.z...G....T.!..doQq.`.X.S.7 ..#;:..!d'..9....aC>...xJ......1.E!..H>....DX........_CQM\}...2[....v<.c..h..A.A..<..W^e.@ .`.F?...b..............g/E1.d6...UXu..$.:.. .r....h.(...[..}..4.[0.g..[..E..Q...'._ <..k.$[AG...n'.0.h.......\{....f..x............A.....1.E&.@...~.0...M.....Z.f.V....DBG...ot.d.!/....E1TT.u+Z..Q.q....'....n.'.....H..R.OBW.uH............m[..GQ.9k%..6.(.8..9..l..9...-.@j..h......V...&Y.....nN."t~m.0E.. .

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 144, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12818
Entropy (8bit):	7.979465046816014
Encrypted:	false
SSDEEP:	384:8eaGtu1+k3Qr4LLu7FUjcn4xdOwYUatyN6XB:85GtuUkgnGewYAc
MD5:	FD8212C7AA90434B365B3B605BB4D444
SHA1:	DE3C5EBF0C274BB3ACB4C31E1792683E8D755695
SHA-256:	927FF5500BBF4BB18D214BBC4D2974C5CDB1C36A4C061737028C30B0F62D9941
SHA-512:	80F46B7F05CEE782E0FA2E3D075EB735E536A6CDE4F421F2032F4AC8450D4C3C527B3D336A6B715F6F681671A6B8055BB05D2B5383147FE13CEA6FE164963310
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......tEXtSoftware.Adobe ImageReadyq.e<..1.IDATx..}..].u.9..o..;%...K.Mj.$.I./@`$N.....mQ.@.....4i..-.&q..p.6i./u.+.c.v..5$.r .v.5.-Y.Bq..y.....3..h..{..43o..8.{.\|.;....G}..!.?A}.....X.Q..>..V}l.#.Ho.....#...$.r........g.\|..y..z...........+.....6.]...[..I..V.&..o.s..[.....~...b..pu........+...&:....AQ...\9....Y.#. %A.g.n6`br....`..,t.-h.......?...>.V...f...T.....e..8q.8.v...=w.>..O.b..w.<..o......a..z.j........y...j.Q.Q.@I..../.z.....^==.......oU@....8u.4...F.)..^...4......\.p....q.n...E)...G.n..S.^j4.s.~..u.3.9.~....B,......F.D./..\|....X..@s.......\|..o....KK7+`..R.<...3S@.rP@Y....2\|...$....d..N!2u.0.dY..W.+...Hm.r......B..}..a)i.......+.........p.....k4..Wo.ie.....)u.....J]...\|./~..{...3..d0..a0,`8..7.@.}s.........FE.E..V..u}.,.W}...p.......^.N....2.,....L.T=.\|.Yu>i...LB../<.,P9.-..?P....\...G...>v.{........[...s.F}X..N.....g..7ss..ER...R...........H.i4.)`...@.r....p..82_...y.P.W`1...A.Nu.H..I[;..

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (64847), with CRLF line terminators
Category:	downloaded
Size (bytes):	265865
Entropy (8bit):	5.259147713195739
Encrypted:	false
SSDEEP:	1536:ww+xlMHHwL8RwIzXmTkBhA+/6Zk58E1fy5YaPI5Y7JUcaAhGpXF+U59QAmo+RNUc:EcwIzq+/6FG+U3UkKwKgKxKjqF
MD5:	76F3A197E28174DFDEFC96B52FD5A363
SHA1:	458CDD9ADC851639C1AB69ADC27DF14BB09F0B84
SHA-256:	9482A323B260EB849C62ED4A4792C80408BA9E7932240F1EEBF4773EE8373A3D
SHA-512:	F9AA97B07531E58C1BE8CFE33B0CBA308E4640C726204355BD907A5C398630302599A0330DD1DF5C29AC9E4B8C0E190A35022286EBFCE22B4191A9A65B1F6DDC
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/heating-air-conditioning-products/
Preview:	..<!doctype html>..<html lang="en">....<head>.. <meta charset="utf-8">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <meta name="msvalidate.01" content="9E3403CCBB82E1EA5F6789288E1A7AA8">.... <meta name="description" content="Showing all the air conditioners (AC), heat pumps, furnaces, air handlers, geothermal systems, boilers, duct-free systems and garage heaters we offer near Edwardsville, IL">.. <title>Garwood's Heating & Cooling, Inc., Furnaces & Air Conditioners - Edwardsville, IL, Bryant</title>.. <meta name="keywords" content="" />.... <style>.. @charset "UTF-8";button,html,input,select,textarea{color:#222}body{font-size:1em;line-height:1.4}a{color:#00e}a:visited{color:#551a8b}a:hover{color:#06e}textarea{resize:vertical}.nocallout{-webkit-touch-callout:none}.pressed{background-color:rgba(0,0,0,.7)}textarea[contenteditable]{-webkit-appearance:none}.gifhidden{left:-10

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	176
Entropy (8bit):	5.2006874604904425
Encrypted:	false
SSDEEP:	3:xPU9n73Kun/CohziCnkiuqcIn76QRfftKowBtGuhGQjNkWGfVG0sNkYY:xPU5z96oFkivcI73KowXfDjjGft++
MD5:	8962B1CF8980F15E10834C65DEFB46E1
SHA1:	7B031950D0617E0EA064464CE5B0C2C6ADBA12DA
SHA-256:	342D78F33E849A02508451440C908DDBD79329FBB97A42DBAF6FD65A52ABCD9E
SHA-512:	13E58A659BE47949043260A2C52766025B421FB3308C0492ABBDA5758AE1CF67DFF56EA57D41CE0DA9F5C63937A42E7130C0DC80E943D92637212A49475B7863
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSMwkPR6dJeYqvTxIFDU-7kaoSBQ32LRYkEgUNwfKEIxIFDSzOxGQSBQ2U1FseEgUNMYofKRJBCTdW30ANT0soEgUNZXm3OhIFDXhvEhkSBQ1T8nVhEgUNlNRbHhIFDUZnFX0SBQ1Vu_VvEgUNY67tIRIFDbyF11I=?alt=proto
Preview:	CjYKBw1Pu5GqGgAKBw32LRYkGgAKBw3B8oQjGgAKBw0szsRkGgAKBw2U1FseGgAKBw0xih8pGgAKSAoHDWV5tzoaAAoHDXhvEhkaAAoHDVPydWEaAAoHDZTUWx4aAAoHDUZnFX0aAAoHDVW79W8aAAoHDWOu7SEaAAoHDbyF11IaAA==

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10655)
Category:	dropped
Size (bytes):	241699
Entropy (8bit):	5.64353242249529
Encrypted:	false
SSDEEP:	6144:58K6Ghs0cH4nYEZUMUmFwjlHltuIy/QLZb4joTbx2hdLlSneZj3Yri0WUo2w8:58K6Ghs0cH4nYEZymFwjZltuIy/QLZbB
MD5:	C393DC0D7DA9832172FA3CCEDC9A0055
SHA1:	7D13AF2C628BCA7B58DA2E3820A52040E8AA8EA2
SHA-256:	AA1782680B53EB9C61BEF0654FCBCA0B71CDE5D560ECF7E59B5842C3A0957CFE
SHA-512:	E7B3C845FE9DC907F40E52D1403B15BC745C36FA7CC9945A26660DA730747BE3C2219FE36BA6F260C93E0892DB08CC8C6E78BB3DE36A3F74CE356F97A459DA9B
Malicious:	false
Reputation:	low
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=989\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=989\u0026hl=en-US\u0026"],null,null,null,1,"989",["https://khms0.google.com/kh?v=989\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=989\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=163\u0026hl=en-US\u0026"],null,null,null,null,"163",["https://khms0.google.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=163\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetv

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 329, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	103009
Entropy (8bit):	7.993394744585247
Encrypted:	true
SSDEEP:	1536:b+jreE9yhgtaAg8aW4QUSUyW7HMaxW5j/6jvN7SGv0DNbofCgWE3D1:qfe/Afg8djUSU7zY5j/ESGsDNbACvEz1
MD5:	63DB671C370F118B44DA6226E9761EAD
SHA1:	08A979CD471DB904F68929BA60F37CE4E8EC28E8
SHA-256:	67621F5A688B7CB38417150AB4B6148209B3759E97AD2EE27AE9A58FBC7E20F2
SHA-512:	593DAAE49A1BE0F2D269AD37AD819B6535022EB26BA97A76380C19EB4C747FA0EF478305B7810DF5FE2E2DE04EF0100BE62DABB9C1D75D67CBE887BEC7B7C16A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......I.......{+....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.163858, 2019/03/06-03:18:36 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop Elements 18.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DED28E687D5411EB90C4B879D7E639AD" xmpMM:DocumentID="xmp.did:DED28E697D5411EB90C4B879D7E639AD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DED28E667D5411EB90C4B879D7E639AD" stRef:documentID="xmp.did:DED28E677D5411EB90C4B879D7E639AD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>._,\....IDATx..W.$.&....:"....U(.@hM.M.%..{D....}..y.?..k.k.k#zf..M..$..(..u.......=.GU..H.,...~a.....

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 89, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1419
Entropy (8bit):	7.695866995765983
Encrypted:	false
SSDEEP:	24:j0zPt2AHGvOUuy6x3nazr1QmzNoEuWJup78OngwoHWo/NRKEMM:j0sAHEbMwpDoEuWJUFpa7MM
MD5:	0FF73A75927B0093DEBC6F7CDA4B9D34
SHA1:	5B75D52E1B342907D6D2FDB286ED09221C642F9A
SHA-256:	06432C7AB1F89CCC5ED03FD8EB3FE9D4905C126E3BE4A847C50E85BD696759B3
SHA-512:	0B370FADA1B7685980CD846ECACBA43FC194AAE76F25A4E5204273886B06C33176648C35DE550B469B3A340BEFB73B6261CA799DDDE959CCC740A14420F5A0C9
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/images/topic-repair-or-replace.png
Preview:	.PNG........IHDR.......Y........ ...3PLTE......................................................G....tRNS.. 0@P`p........#.......IDATh.....E.........>`0...].......+.aK..k_....ve.._..^N......@.u....%...Kd...\|\|..}7...,....k.qWt..../.....d.....r&......Z....WV..2..B......M...K.GA.9.@~v.d.a "...y...g..95.g.. ?...7.Hr...m..e...E.x........i....\|.J.3..L.Q.E.>_.6O....._..3.\.E...U.(.!>..&_.Ds..f.......:.aKbe-oq.y...Q/....W.~.M>.g3Rv....\|YE....&>...."....!.R..f...C7..x./..+..V.,...o.H]..M.....X..Qa.H..F!=...S.....T.....\|.c..E.f.-.93.7F..,.@...l._...j._4........k_.....5...rum.t1CC.m.9.^.s....r...........L........Ms.SG...e.8.]3.~&PU.BW.....]..+.6-h.EU..I...?..O..U5..`.......a"...`..t} ...]mh..Y....."./X..U......m......w.\#.""2......[..#Ah......;A.C ".4?.J`..4..H.K4.,"...oM..J....-?...^=1...D"W..u,..n%...5.....7.............\|#.0' . ..e.0.F.x.............t......;.....C..y...I.Y..[.x.L......O.7............R.4....*..@6/.z.....L.z.y.(x.%..y. "DDFDfr..I;..~E..u".M

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	120879
Entropy (8bit):	5.46517427003263
Encrypted:	false
SSDEEP:	3072:108jX1zmSnRdKanojnsf9Xyx7txlEx0irIuS8/f0Ria:+IrnRdKanojnsf9Xyx7txlEx0irIuS88
MD5:	EEF0D1FC271AF0135707D1C1BCC322C7
SHA1:	77230FCE10DF38177FBA160C60A95A47EAE57ADC
SHA-256:	92ABE234BCDA152286D15436C897C576E19EC2F0A3C0BB58F5FB93059B8C8549
SHA-512:	36DFCCB0EC4D424C52EF53935A8A2C41CEF0CE7914C293EE097798D112A5DCFA27F4948A08C177BE7882FD3F17724D18C01946170BDFDE288A88C43A9B3D5793
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/fb725ac8/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var g7=function(a){g.Hk(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.Za()).toString(36));return a},h7=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.oha(a.D,b,c)},Dsb=function(a){if(a instanceof g.tn)return a;.if(typeof a.Mm=="function")return a.Mm(!1);if(g.Sa(a)){var b=0,c=new g.tn;c.next=function(){for(;;){if(b>=a.length)return g.t1;if(b in a)return g.un(a[b++]);b++}};.return c}throw Error("Not implemented");},Esb=function(a,b,c){if(g.Sa(a))g.kc(a,b,c);.else for(a=Dsb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},Fsb=function(a,b){var c=[];.Esb(b,function(d){try{var e=g.Vp.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.sma(e)&&c.push(d)},a);.return c},Gsb=function(a,b){Fsb(a,b).forEach(function(c){g.Vp.prototype.remove.call(this,c)},a)},Hsb=function(a){if(a.qa){if(a.qa.locationOverri

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 462 x 210, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	28294
Entropy (8bit):	7.9326277147932425
Encrypted:	false
SSDEEP:	384:bulnWSEDxfe9O3HiU19VhvaHxnE+fks7JG5repz/FwIvTth1xWo1nfK6vM29791V:6lWJH3iuy1dclezqi1xWS1bIhbZkQle7
MD5:	3DE6E9402BA2F80B6E4CDCBC7FD20AD6
SHA1:	7334C810B81E274255A9112A47823F1C44DA49BE
SHA-256:	2E1A222A50A2BF286E52328CE24D20B4A605B4F029969D8D7ED39CE580B2C653
SHA-512:	6ECAB1A829F4C4C7D6DC151B15FF00663DEFF36CC7D86174A24933E74CD564ABF298A94D9B570A254FEE8E88DF4C24904B86CFF4506A9E5E67FAFACB84692A98
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/facebook-button.png
Preview:	.PNG........IHDR.............. .....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-11-01T12:41:37-05:00" xmp:MetadataDate="2018-11-30T13:34:26-06:00" xmp:ModifyDate="2018-11-30T13:34:26-06:00" photoshop:ColorMode="3" dc:format="image/png" xmpMM:InstanceID="xmp.iid:2b068d2

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	392635
Entropy (8bit):	5.180172392119847
Encrypted:	false
SSDEEP:	1536:ENG8ZHMsTtkmgV3B8ILvPptpZ8p7M6oya+MOn4y6Ox5juDEnXrDJc7MsBy/n+TEI:ENG8ZUmgZB7GoyVufJGc8QoGN
MD5:	ED3519EEDCB17885736F4460D07E3226
SHA1:	D4F08D8456BA81DB45E97383D1384BFD4E8D6699
SHA-256:	30F433E272D8D6BF5437749A5B91004B217118CF09B69FF9302D11A30B5B4C64
SHA-512:	379D69E54B0CAEF79867149E29C6A09940353F8FCFE776A9AED67B1695C742BD94B0646F1AED5BE9BDCACBD076438849738EACD2363829D3864861FD350F4DF8
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/fb725ac8/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	2.6968929824182477
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHht:/+t
MD5:	354857DE9229BAE15647FBC6364A4B19
SHA1:	F23E9C4FADC2E01BF323E90E5C1459BB6CF4F917
SHA-256:	5ECB58845A9AC30E4EB4B18EB0E7431BA1FB195CE035309735EFAEE67421C7A3
SHA-512:	D734513CE24E1684C2729E7D1C65764498AB06913553237F9FB0E3D252178A0CF06FF02E45592DCB996D9D757D6549ABF78667E5525E9687ECEB6645E4B45951
Malicious:	false
Reputation:	low
URL:	https://secure-gl.imrworldwide.com/cgi-bin/m?ci=tradedesk&cg=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17
Preview:	GIF89a.............!.......,...........D..;.

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	703325
Entropy (8bit):	5.306845374558168
Encrypted:	false
SSDEEP:	6144:H2s6wxnzCZ75QsKcTnGPp5UPB0rB8W97kRsFpW8/kGBoGYjxhbVwx4H:N32KcTGPpMXWXvM1Gwx3wxi
MD5:	DD805194FF6BFAD52EF1E3A75B24AD2E
SHA1:	9417CDAF63D9F209E472AF3DC083045ED39BBCDF
SHA-256:	18E6371CF275C9CA4B7F9E59D01E280205DE5062F07E0D34015B966FBEE4D3B4
SHA-512:	6D3FA5EDF7466F8274CFE29141C794B083AD47502FDCE58463EA11987A9D6A2D4C584EB1849573D19A450D0CC2B404E41EB8B73DB8AF71148D08C0DB92C53E2E
Malicious:	false
Reputation:	low
URL:	https://core-dot-sos-apps.appspot.com/scripts/core.min.js?v=1729783850
Preview:	if(!function(t,e){"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(t.document)return e(t);throw new Error("jQuery requires a window with a document")}:e(t)}("undefined"!=typeof window?window:this,function(f,R){var u=[],c=u.slice,L=u.concat,H=u.push,z=u.indexOf,i={},$=i.toString,m=i.hasOwnProperty,g={},t="1.11.1",w=function(t,e){return new w.fn.init(t,e)},W=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,j=/^-ms-/,q=/-([\da-z])/gi,B=function(t,e){return e.toUpperCase()};function U(t){var e=t.length,i=w.type(t);return"function"!==i&&!w.isWindow(t)&&(!(1!==t.nodeType\|\|!e)\|\|("array"===i\|\|0===e\|\|"number"==typeof e&&0<e&&e-1 in t))}w.fn=w.prototype={jquery:t,constructor:w,selector:"",length:0,toArray:function(){return c.call(this)},get:function(t){return null!=t?t<0?this[t+this.length]:this[t]:c.call(this)},pushStack:function(t){var t=w.merge(this.constructor(),t);return t.prevObject=this,t.context=this.context,t},each:function(t,e){return w.each

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 302 x 66, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10417
Entropy (8bit):	7.880984331656399
Encrypted:	false
SSDEEP:	192:ZS17F8kn7KHIwWHFeXPbr/KBrTjgSvIoFG4LEKb0GTJWK/C1p2AtLllEQsJnbaoT:A1Nn7KHx+ArMr4Sgos4Ln0ut0p3RbEQ6
MD5:	B53E8E746776B9450C0C684B868F8E76
SHA1:	D19BD16BA7F8BBB8E757355BBCBDDCB2FFDDC81C
SHA-256:	9ACC7CCFACD5A105985374B4D1A35C56F859B7F568E423A626C1471E0BB66AC9
SHA-512:	3B078E24CDD7C7B9AD61FECC0A7499C9C2DA53FF8A5506C3D472C652DB08670D9455A393C8D1A4EF65F2C20146BE2F9FF493A78AE43686E4AC36EFA256228F04
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/review-app-sos-logo.png
Preview:	.PNG........IHDR.......B.......;.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-08-02T11:27:50-05:00" xmp:ModifyDate="2018-08-03T13:36:26-05:00" xmp:MetadataDate="2018-08-03T13:36:26-05:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:4dd6fd66-4eef-ed4d-91b1-c0346fae8d3d" xmpMM:DocumentID="adobe:docid:photoshop:54dbc9d0-e0e6-8b48-afb6-4bf8301bd44

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	133
Entropy (8bit):	4.960788388379343
Encrypted:	false
SSDEEP:	3:b86SRaWjq6b2OowOtEguRmbMPCLFttkULn:g5njqwO9huRmbzLGULn
MD5:	DB08B366B4AAAE274471D0E5A1D82597
SHA1:	F2BAF89F07C2E29483E1E122007F8A1B52BE5A25
SHA-256:	B8EE5ADD0846D014CB86BB9DBAB6939C1812B162D06E10F338216DCDB548339A
SHA-512:	7FC4515393F91F37E4A34D7C3C5CA40C76E75A867D0AFF1F027179DC6047066713C4AE21CF37D542AD15625B89D6FC6F8ED9A4BB1C2FFC5C2AE4ADF814F895B2
Malicious:	false
Reputation:	low
URL:	https://d1eoo1tco6rr5e.cloudfront.net/jsac74j/s4sw4zh/iframe
Preview:	<img height="1" width="1" style="border-style:none;" alt="" src="//insight.adsrvr.org/track/evnt/?adv=jsac74j&ct=0:s4sw4zh&fmt=3"/>..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	703325
Entropy (8bit):	5.306845374558168
Encrypted:	false
SSDEEP:	6144:H2s6wxnzCZ75QsKcTnGPp5UPB0rB8W97kRsFpW8/kGBoGYjxhbVwx4H:N32KcTGPpMXWXvM1Gwx3wxi
MD5:	DD805194FF6BFAD52EF1E3A75B24AD2E
SHA1:	9417CDAF63D9F209E472AF3DC083045ED39BBCDF
SHA-256:	18E6371CF275C9CA4B7F9E59D01E280205DE5062F07E0D34015B966FBEE4D3B4
SHA-512:	6D3FA5EDF7466F8274CFE29141C794B083AD47502FDCE58463EA11987A9D6A2D4C584EB1849573D19A450D0CC2B404E41EB8B73DB8AF71148D08C0DB92C53E2E
Malicious:	false
Reputation:	low
Preview:	if(!function(t,e){"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(t.document)return e(t);throw new Error("jQuery requires a window with a document")}:e(t)}("undefined"!=typeof window?window:this,function(f,R){var u=[],c=u.slice,L=u.concat,H=u.push,z=u.indexOf,i={},$=i.toString,m=i.hasOwnProperty,g={},t="1.11.1",w=function(t,e){return new w.fn.init(t,e)},W=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,j=/^-ms-/,q=/-([\da-z])/gi,B=function(t,e){return e.toUpperCase()};function U(t){var e=t.length,i=w.type(t);return"function"!==i&&!w.isWindow(t)&&(!(1!==t.nodeType\|\|!e)\|\|("array"===i\|\|0===e\|\|"number"==typeof e&&0<e&&e-1 in t))}w.fn=w.prototype={jquery:t,constructor:w,selector:"",length:0,toArray:function(){return c.call(this)},get:function(t){return null!=t?t<0?this[t+this.length]:this[t]:c.call(this)},pushStack:function(t){var t=w.merge(this.constructor(),t);return t.prevObject=this,t.context=this.context,t},each:function(t,e){return w.each

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3066337848221269109&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10075)
Category:	downloaded
Size (bytes):	273639
Entropy (8bit):	5.407791771882002
Encrypted:	false
SSDEEP:	6144:jpuay/Jfu00LsNgYCsGsRtO2ChghmAt+Bgirns/aMeloQf/V:jpuay/Jfu00DYC2ChghmY+Bgirns/aM+
MD5:	429E2C94AD6F3495539A7ABF95C6E608
SHA1:	2F6A84081093967BAA50E00D4DF7F8CC45CDD19D
SHA-256:	0B73D8C2668C726BB234CA3E92CE1FD27A00FCE21B84B68004FE67F8148A3507
SHA-512:	E190B37E45F489C28D0E3808F2227F9349069E0413F87AFB607AEAB7332197011D3D2B3D9FC9B7AE74C38863704BAC55A0F86349232C06AC518673F703C52B37
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/10/common.js
Preview:	google.maps.__gjsload__('common', function(_){var Iia,Hia,Kia,Qia,Tia,$ia,aja,dja,Ir,eja,Jr,fja,Kr,gja,Lr,Or,Qr,ija,kja,jja,mja,nja,pja,ys,rja,tja,uja,Js,yja,pt,Hja,Jja,Ija,Nja,Oja,Rja,Sja,Tja,Ut,$t,Yja,au,du,Zja,eu,$ja,hu,fka,tu,jka,uu,kka,lka,nka,pka,oka,rka,qka,mka,ska,tka,zu,uka,ala,ela,gla,ila,wla,Vla,Yla,bma,cma,kma,lma,mma,nma,rma,pma,qx,rx,tma,uma,vma,wma,yma,jw,kw,zma,fla,iw,lw,Nia,Oia,jla,Pia,Xia,Zia,Ema,Fma,Gma,Hma,Ima,yx,$v,Lma,Mma,Nma,Pma,Cla,Ula,Nla,vja,Ds;.Iia=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.Vg(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=Hia(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=Hia(f,a,d+1));e&&b.push(e);return b};Hia=function(a,b,c){a instanceof _.mh&&(a=a.Eg(b,+c));return Array.isArray(a)?Iia(a):typeof a==="boolean"?a?1:0:typeof a==="number"?isNaN(a)\|\|a===Infinity\|\|a===-Infinity?String(a):a:a instanceof Uint8Array?_.cc(a):a instanceof _.jc?_.qc(a):a};_.Sq=function(a){return!!a.handled};._.Jia=funct

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 114, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25855
Entropy (8bit):	7.985893550876008
Encrypted:	false
SSDEEP:	768:lRYO/cgYsCS2fQ/x2wHuHVRu6RKDnWR6sUGA:l6O/c/vI/MTHQi7A
MD5:	245B4A32B88578C37B30DAB2E2584DEB
SHA1:	AE5ED211B127741A33B369F6CC3ADEA23094C1A4
SHA-256:	B1559E1E1D9374FFABA950CB95BA542480AEC54B1DCA3BF3177603E2A907DFB2
SHA-512:	484F166DE564849E27C017A685EDA80D50E6BDE06E558D6F786308995080B148B1E40920FE19DB713A872FFA7AB60B29384CBF27A75A7071D70A237BF67E938E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......r.......(v....tEXtSoftware.Adobe ImageReadyq.e<..d.IDATx..].x\W...7..w[.-..%....'.B...BY:.I`Y..R..).. .i.'8=q.$.rQ.$[...h4.....7#..8......k4.y..s......:F?\|...k.]. ...&..i.{.#...g...g6.a2. .S.%:..I..i....&...z...7,H..r..q.caU....qN..(....%.C....xZ..I.,..G...T..5]5..U..?.........]Ab.U5..U.kT.3..T.;.M...<..Z..;....'..$....#\|...z.jVh\.:.1....L&.<..m4..I..,....5.Z.G....$>.&.O..JPc.2.<.\...D..BU.1.V.3..tI6.Z;:/>ZY.7.Q^..._=ZU......@....[d..K4...#...^...ni...e..x...9.9==._..z.Wu.o.>t..c..u..^e.e...h8......r.a..[....K....H..}j..u.:dMuk...'..{o.;....'.........@}}=..[.E..^]U.^....5...$WX.2.......?.`1n.$.a.+a..."a.d........`p..7....svkk;....aNRR.......i5.o......c...Y.f........R.........I...H....'.Xq(@i4.....6.Cmll....v..\|...DUu... .N....uUU.L.(.......>....X.q.B]..hi.z1;3.{.......\.k0K*.._..a...4b..v..9.!...d0!..p8.....]{.\|...{.bv^^QQ..R6ep.=... A..)...w...;......../....9\08..UVz.-M.yzLp...M....2.......&..f..n....$..n!z......K.o?.;......

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65471)
Category:	downloaded
Size (bytes):	192811
Entropy (8bit):	5.323525560023918
Encrypted:	false
SSDEEP:	3072:5zZjuNi1N+x6lIyVSfdyAme+X5nv6tZxekHZryoaC:5zluNiCx6lINkAmrlv6V5eoD
MD5:	6C7AB871F7F55224DE0AE7526DA87401
SHA1:	07C5B1CA23E5E312B51AF1C3074BD1C3F89BBCB5
SHA-256:	5D554121551DF68E414C85920B6541D2E92251A189FF19A4B1F8DFFE97CE1CB5
SHA-512:	6F635CB4FD1A318037A26FC8A98682F21237242D22CB112618DF8B2B9FDD9423929625B5B2141EF43BE2FB76480FB88249F4730F3E1B2C162EA32BA302CE73F5
Malicious:	false
Reputation:	low
URL:	https://cdn.inspectlet.com/inspectlet.js
Preview:	if(!window.__insp \|\| typeof window.__insp.loaded != 'boolean'){..!function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){var n=[],r=e.document,i=n.slice,o=n.concat,s=n.push,a=n.indexOf,u={},l=u.toString,c=u.hasOwnProperty,f={},p=function(e,t){return new p.fn.init(e,t)},d=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,h=/^-ms-/,g=/-([\da-z])/gi,v=function(e,t){return t.toUpperCase()};function m(e){var t=!!e&&"length"in e&&e.length,n=p.type(e);return"function"!==n&&!p.isWindow(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}p.fn=p.prototype={jquery:"2.2.4",constructor:p,selector:"",length:0,toArray:function(){return i.call(this)},get:function(e){return null!=e?e<0?this[e+this.length]:this[e]:i.call(this)},pushStack:function(e){var t=p.merge(this.constructor(),e);return t.prevObjec

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 201, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17801
Entropy (8bit):	7.949645153623929
Encrypted:	false
SSDEEP:	384:/TaneyET+k78Ixl3JozW5cvjqQ+MsW9yrb1FMlwOT+YmipgP4+IS:raeP7nl5kP0j1FEwu1yv9
MD5:	649D432062A7840CAA940F3AC1168327
SHA1:	07E139DFC3E02171F2C6A4247A0288D34A5D90EC
SHA-256:	DC730D15FAC9E66109370D8539E537D3638DB99A998F986A36C6E97712681F50
SHA-512:	8C8953E9F6A3375811E19A7A1D7FF17B06925260BD770F03E3D25C8383B0BBA69958DD46CD0406875BEF9480441BF014DB15A5A0ED0B09132107DF48835C0D52
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............f.};....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-11-02T08:53:50-05:00" xmp:MetadataDate="2018-11-02T08:53:50-05:00" xmp:ModifyDate="2018-11-02T08:53:50-05:00" xmpMM:InstanceID="xmp.iid:f4458d18-2f58-2b43-8378-87e62574c633" xmpMM:DocumentID="adobe:docid:photoshop:3d7d4aa4-2be2-ca4e-9ac5-374ba2386747" xmpMM:OriginalDocumentID="xmp.did:8f5f26cc-1c36-714f-8938-b69422077f9f" photoshop:Co

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 89, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	936
Entropy (8bit):	7.454532440239675
Encrypted:	false
SSDEEP:	24:jaMRCZb5cfGHseil9r7FJmR8jk0D4HoBFuDjG:jgZb5cfGHsd2akhSgK
MD5:	2351DAF0323AE622415D02FCD31C5ADF
SHA1:	326C1D0F0556B535F216FC2E8515BB40B1279245
SHA-256:	F31C67381133B0250E94E8C2EFE1DEEFE36FC75CBB9558B386B43ADFD9E16E6D
SHA-512:	765F0C7BDEFB751F3F7439285E0A3B938EC00CA2793A9345B332995C200A106343BAF36B300597BF93B02099683E0679C9E4CA084DA64AD8D21873861678119B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Y........ ...3PLTE......................................................G....tRNS.. 0@P`p........#.......IDATh..... ....Q#F...i.X..t....v.-..(..w../. ..f.f.../....{..@{.........5.5..`......b...%.@.p$hG8.."...%............^..&...........MOa.G..K?j#.......Y/.`\a}.%..?m..&kb.,.....}Z9.....cs.x{Y................M...K.h(..E.,...Vz.......\.......I...C..;..;..M.E..3P.H.$........R...D...$.O.e..........y+P....:..B.....UU....y..=;W.Py. X.t3.:.t@...c........TDD8.PL....13.[.....P../.9.(Dd.X.xRv$.....Q "Sx1.....DC...-xg.l..:.B=.~..6. j~....zT......O.N.......8...`......kA. .4.mH..gk"s97r.[.......sa<.V..\y ...'.....:....0.K.+...F....&.q../...u............2:.).$iB(..r....^U.x..%...F....:..zt.....@'M..X.@#..KGD].\..-..........$..,-..+f.......(.....T[..l.@..U.1.a_.]+....,Qq....h.?.....)T...Y..0...7..4......Wl.</Z....._W..{Z.]........S{.`...iP....~.Lo.4....\|.G.......IEND.B`.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32047)
Category:	dropped
Size (bytes):	95931
Entropy (8bit):	5.394232486761965
Encrypted:	false
SSDEEP:	1536:5P1vk7i6GUHdXXeyQazBu+4HhiO2AEeLNFoqqhJ7SerN5sVI6xcBgPv7E+nzms9d:A4Ud4qhJvNPqcB47MfWWca98HrB
MD5:	5790EAD7AD3BA27397AEDFA3D263B867
SHA1:	8130544C215FE5D1EC081D83461BF4A711E74882
SHA-256:	2ECD295D295BEC062CEDEBE177E54B9D6B19FC0A841DC5C178C654C9CCFF09C0
SHA-512:	781ACEDC99DE4CE8D53D9B43A158C645EAB1B23DFDFD6B57B3C442B11ACC4A344E0D5B0067D4B78BB173ABBDED75FB91C410F2B5A58F71D438AA6266D048D98A
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.11.2 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.2",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	4098
Entropy (8bit):	3.5211641034895043
Encrypted:	false
SSDEEP:	48:KU3Ui4eMJEyGGthBPWmBjVlYteZ60VvAZ8HdccdPpFBx3mY:KUEiMEyNtKIjVl+eZ60Vvu8Hdcavr3mY
MD5:	60E0A00953805F4034F76B246323580A
SHA1:	2D4C9C1683C27EC1D2E5FD41F85263D3308E26A9
SHA-256:	6D4BFC379F8F81D76A205639AC01B9E876AA346C3EEC763D2C0CE8C5B709A2FE
SHA-512:	777398F4077359434F70BCE4DAB4181F7292DFA2877F9A7C3A667579464EA15206D4E14F0B4A618182B789A9AE56219283B15F78712BBB313F9136E5E2C19FE5
Malicious:	false
Reputation:	low
URL:	https://adservices.brandcdn.com/pixel/cv?aid=110315&cv_ck=f51dbd93-2c9d-4f0c-a4da-f9e5b5526a5e&m=www.garwoodsheating.com&r=www.garwoodsheating.com
Preview:	<!DOCTYPE html>.<html>. <meta charset="UTF-8">. <head></head>..<body>. <script type="text/javascript">. function getParameterByName(name). {. if(typeof window.location != "undefined"). {. var url = window.location.href;. name = name.replace(/[\[\]]/g, "\\$&");. var regex = new RegExp("[?&]" + name + "(=([^&#]*)\|&\|#\|$)"),. results = regex.exec(url);. if (!results) return '';. if (!results[2]) return '';. return decodeURIComponent(results[2].replace(/\+/g, " "));. }. }. function generateUUID().

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10075)
Category:	dropped
Size (bytes):	273639
Entropy (8bit):	5.407791771882002
Encrypted:	false
SSDEEP:	6144:jpuay/Jfu00LsNgYCsGsRtO2ChghmAt+Bgirns/aMeloQf/V:jpuay/Jfu00DYC2ChghmY+Bgirns/aM+
MD5:	429E2C94AD6F3495539A7ABF95C6E608
SHA1:	2F6A84081093967BAA50E00D4DF7F8CC45CDD19D
SHA-256:	0B73D8C2668C726BB234CA3E92CE1FD27A00FCE21B84B68004FE67F8148A3507
SHA-512:	E190B37E45F489C28D0E3808F2227F9349069E0413F87AFB607AEAB7332197011D3D2B3D9FC9B7AE74C38863704BAC55A0F86349232C06AC518673F703C52B37
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('common', function(_){var Iia,Hia,Kia,Qia,Tia,$ia,aja,dja,Ir,eja,Jr,fja,Kr,gja,Lr,Or,Qr,ija,kja,jja,mja,nja,pja,ys,rja,tja,uja,Js,yja,pt,Hja,Jja,Ija,Nja,Oja,Rja,Sja,Tja,Ut,$t,Yja,au,du,Zja,eu,$ja,hu,fka,tu,jka,uu,kka,lka,nka,pka,oka,rka,qka,mka,ska,tka,zu,uka,ala,ela,gla,ila,wla,Vla,Yla,bma,cma,kma,lma,mma,nma,rma,pma,qx,rx,tma,uma,vma,wma,yma,jw,kw,zma,fla,iw,lw,Nia,Oia,jla,Pia,Xia,Zia,Ema,Fma,Gma,Hma,Ima,yx,$v,Lma,Mma,Nma,Pma,Cla,Ula,Nla,vja,Ds;.Iia=function(a){const b=[];let c=a.length;var d=a[c-1];let e;if(_.Vg(d)){c--;e={};var f=0;for(const g in d)d[g]!=null&&(e[g]=Hia(d[g],a,g),f++);f\|\|(e=void 0)}for(d=0;d<c;d++)f=a[d],f!=null&&(b[d]=Hia(f,a,d+1));e&&b.push(e);return b};Hia=function(a,b,c){a instanceof _.mh&&(a=a.Eg(b,+c));return Array.isArray(a)?Iia(a):typeof a==="boolean"?a?1:0:typeof a==="number"?isNaN(a)\|\|a===Infinity\|\|a===-Infinity?String(a):a:a instanceof Uint8Array?_.cc(a):a instanceof _.jc?_.qc(a):a};_.Sq=function(a){return!!a.handled};._.Jia=funct

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16276, version 1.6554
Category:	downloaded
Size (bytes):	16276
Entropy (8bit):	7.978971220338421
Encrypted:	false
SSDEEP:	384:Toz1YI/cxJpTNQz7KqCfIugqTx6vi+YWmd6HlzfxP8eA:Toz1YI/kuzVCfxtwoWmbj
MD5:	73437AD44345F889F45E27C428D618D8
SHA1:	578D7B5FF3816F7F666984E303364C81BE0771D0
SHA-256:	F164941997FBC7F7ED7D2A7C3E86B997D647F1910D93FDC2462DD86FD5AFFA48
SHA-512:	2E315C3BC63C62059EA08E03971D6B947C996703FA91744A4B342651E28AB8631E8C5F011A5598A23AA0A25126409F109748932261666EA988DA4A2A537B4601
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v13/k3k702ZOKiLJc3WVjuplzOgdm0LZdjqr5-oayXSOefg.woff2
Preview:	wOF2......?........0..?..............................t.`..L....`.....x..Z.6.$..l.....<.. ..\..(..x.#~.D..6%)!.m.X..bT...Ju.#.............v2..m......U.0K&../bU.i+R...>..twi3... sa'..h6e8..<...f...9.D.-......Y(.t...ESg@R..l.\|.3ZFE<./Bj.OB"..RC..cF{....}...$\|.M....=b.w..u.A-.M~......s.{..?..I.T...G}..$k.xz...9...~j....9...d...R...&c.."..:u...t:R.t...e..{.....\|%81ezj....._..MLD{.L[.mt.....R........h0...Eg.`...6b....1g.......sa.\..6..K..M.i4......7..8.6wWtW........A..M..K..d...{...2.kB..,@U8..F.....j...A.R.H.5+...]C.L.qQ.,....$>`K.Fr:..}..VR...WM.,..#.6._.H..%.p....i....kz.........Xg~.##C.....k....8..!<...u.)\....Vjn.;d...pc........$...EP..D$.....N.H..c.{.B....dS:6.}...aQY<...CT[&"....gyX.0...y.2.....4t...py.R.izk..).EX.....C!r....{S.$0....k...9K.@]#c\|..vf..M{[... ..w..>t...3~.4.F2.d}.$.ciql/HK3...H!C.[A. ..{V.FZ....s....u).2e..e.z..3-...D..,../....~.U...t/.......e....+...se.Q.=....A6.t.6.&...$....f7.\|.~a.].b#.^....9.>. ....Y.}....<.....I^%.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 31 x 31
Category:	dropped
Size (bytes):	2599
Entropy (8bit):	7.243513533180385
Encrypted:	false
SSDEEP:	48:YIH4iuXMyxlHFwMp6mghQzZMp6mLw3HOoMp6mLJ/DJ9Mp6mrtJYMPzbL3VL18U4D:PH4iuXMwHFwMpNzZMpHwrMpHJ/19MpXg
MD5:	0C4A35715C83DF7E952869FF3A0DA728
SHA1:	3EFC4D45B6972BC11CCF867233FDCFBE8A0A501D
SHA-256:	256AF37CCBED537C5FDA1AC05A825BC513CE10B928D5A4779755F76D41EB5318
SHA-512:	8EC56429687B1B2C0B486B265872B62383CC3E2F73DF1A22745D48E5594F41E9B83114CC9CF0AB384B74D400A900223B1DA81DE1282FCF1F16733FF90F3CF8A7
Malicious:	false
Reputation:	low
Preview:	GIF89a.............--->>>HHHQQQ&&&AAAWWW...)))KKKSSSGGG222...MMM+++............888www]]]......}}}...666......................................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,...........@.pH.....`R. ..th8 .W.e..4<Sib.-k..K'<T,.f4..`.....+..yXg{.w.Q.o..X.........h...Dd....a....e.Ty..vky.BVe..vC..p..y..C.yFp..Q.pGpP.C.pHp..pIp....pJ......e......X.......e.....p...X....%..ia6....'_S".jt...EY.<..-..z..h..*AY. ....I8..q.r.J6c.....N..8/...f...s......!.......,...........@.pH......@....th8 .W..z0L......#...P.0g..B.`..e7....f. .Q.mx[.........[.....Dbd...j..x....B..iti...BV[..tC.......f..C.....c..C...gc..D....c.......c.......[...cL...cM...cN..[O...fPba..LB.-.N.....!..t....."..`Q...$}..`.........b..J,{.q.G.....V.....x.I....:A..!.......,...........@.pH......@....th8 .W..z0L......#...P.0g..B.`..e7....fusD.mx[.........[e.iCbd...j...X.T..jif^.V[..tC..[...f..C.fFc..Q.[Gc..D.cHc...cIc..B.cJ..

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 87 x 88, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1553
Entropy (8bit):	7.306960419089528
Encrypted:	false
SSDEEP:	48:lXLHXtWRyWLOQUvvvseOfeh7BMA6oGZxPI/abuHDdw:l7HoRfaQCvUeCeh7BMA6oYxPviHC
MD5:	406A15AECB74E414D7545A63E913D2C1
SHA1:	02C14BB55BBEE940A6678F388354F399BB904594
SHA-256:	77092D37297F9594C30213AD769ECFEDCC5A40590B040BAAC467CA0FC21E0521
SHA-512:	1EF95A0E2DFF90E362FF609CD997B5DFC4E08685E62DE93E54F51E5E4DA4B7EA42F0D1926CEF0E9A3C305C05A8CF5C58CE2B7808562825B9FDF8F508514CB8E5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...W...X......@......PLTE......................................................................................................................................................................................................................................................................................................................................................................................................e.M....FtRNS........... "#$%*-01567DGHIQRYZ........................................{......IDAT.....C.w........f[n...-.a:...r2>'(h.x.2uj.C&..@..?.N....;..\|...._.O...g..`"8..vy..hh...I.q{.}.f.0..^7].._..B.;t-..0l.{]T...j.tR.n......e.....sm#pl.........>9..8.2.FN4.P.@3..4...4QM>\.......A.\A....Cu...#.{...W....+..Or.. .(...7..<tz.Nk.F...L...3...q.9v..p+...l./..f.......C0..K.%\.J.i...d....rQ._..gqf.Y7Yi...Ab).z....`.U[0.m$.?.`.+fwri.+..e.UoQ.'......M.....w..4.2..G.....cU....U...p.e.>..C...<0.j......P....2...@.!....%f.2@a.U2J.rQV..p.4!A.EB.0+M.fA..f....k.;.P

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 316 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3098
Entropy (8bit):	7.912773244142862
Encrypted:	false
SSDEEP:	96:NSB98X+V+j0dvAzzp5Xjuk7PDFDKJKr87:NSkA9of9Lx1U
MD5:	32B3482D736E1D1A000584EAE78B54B9
SHA1:	5A3B81462E3D13636C3FEE9ACA53DDF7B9C73E70
SHA-256:	7241D8B9AA80AFF7C06D29EA3A30105781B65037E2F3AF97998A2CBCE3FF08DC
SHA-512:	6F6B626465BD0E8DCCA0C81864BE9F282753ED61495C4FD0229D07FD58809FB5C6B53FF03FA481929986145AFE72A4471BBBDF7D5DC404E09D82BF342BFD4ABD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...$........D....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..].r....^]..T.hW~..E.T....z.]&N.s....L...'80Q(b.H.R.Lm.o.....eU.R.DO...A...0X...Bqoo.........7..G......h...../..^K.].....Ce&...y..."........8./zI..p..7..D>........1~s.@..O..[.iQ.......7..\|...V.a,....J.."..a.a1.........p...W..J......3.^!.H..v..%..w.m.o...x....\|....B.~..?..................x..3...x....O<p...r.m...........m...o.OW.}...}\|..-M...X.I.\.`.@.......[....J...J....ljP..F..Ie...&.A....kn.aA....+.:'U.k.WHI.g....^Pg.5...y...{..c.B.YY..Zr.?..Y..q..m..h.....R...<M.#a...U%..n.Sjw.Q'Y.$L...3@'d......g...H....B..J..^QP....-..O...j..J.X..2..:d...).J..............W.>\|~...}..AT.&..~...0......C..Yw%H.[.......hsS....M..[......9..fd......,1..N..^....)5.~.x.Z...Vld.(4)..:...A..,...u...S^-.,?.P.p...H...'\|*...N........i..y...8.QY'...d.w...A"u....B..A>Gu...\|.MepL....L..4.<z....(mh.[.@...iM....7...N%..7...f......e..5}...)^]..u...Pi.O.,."._Y..J...`.....).[XXu..3

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 152, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21425
Entropy (8bit):	7.966148151408537
Encrypted:	false
SSDEEP:	384:BnFr8FUr7V2Po11bxNnid8S+7SGG3JJdI/ROLznPqrVeYXnLNTiY:BFwEwo1rLPZujP8XnLNWY
MD5:	CDF827FEC33D1C736381002A95DB1FAA
SHA1:	48FC242C73715D2609EC6E5D5E3E59D1E6FCE9CB
SHA-256:	5DDCC47721843C63298CA276F09427A068FD3236A0FCC6E25982359A12B604DC
SHA-512:	947F451DFAF6A22DE5EB522EB469A9B3EB632ABAE0A0D57675FE95D90B6F29A323D8113FE08D4B70FE7182D0AF260E05C8C5406C404A6AB55759B8DBA92D9963
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/products/GeneralAire-humidifier.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 Windows" xmpMM:InstanceID="xmp.iid:CCA8F56E9CF911E59F908D07A62CE385" xmpMM:DocumentID="xmp.did:CCA8F56F9CF911E59F908D07A62CE385"> <xmpRights:UsageTerms> <rdf:Alt> <rdf:li xml:lang="x-default"/> </rdf:Alt> </xmpRights:UsageTerms> <dc:rights> <rdf:Alt/> </dc:rights> <dc:creator> <rdf:Seq>

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22128
Entropy (8bit):	7.620597098091008
Encrypted:	false
SSDEEP:	384:IqLiTmbi9KikpS5iLHRM2I1w7mCeeDp2akqvuPcogegwQk+0XHF2oyJ46Z:IqLiTwiCSeHCG7teeDp2akqaGNsHFNkt
MD5:	B1B5376A73E0A593C32EB03FD963B48D
SHA1:	DD7D4264856779AAF1A26AD746FEA0BFC4E4BB30
SHA-256:	0466E8681C2370BC47739F30C39A37B2C65312F97062CD93D1B64B184876FC9A
SHA-512:	54002B502C933F053F4E4D6BB78DF300CB5046BDF4303FDACA2D6244740DB24CD527F8F5E4752AD02FD7A62AC00B6E1FC2B824DA723BEBE3F14E1FFB2B493BD5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....tEXtSoftware.Adobe ImageReadyq.e<...OiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:05:41 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". xmpRights:WebStatement="". photoshop:AuthorsPosition="">. <dc:rights>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </dc:rights>. <dc:creator>. <rdf:Seq>. <rdf:li>Photographer: John Fleck 01/27/2011</rdf:li>. </rdf:Seq>. </dc:creator>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </dc:title>. <xmpRights:UsageTerms>. <

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	dropped
Size (bytes):	68576
Entropy (8bit):	5.602892476468539
Encrypted:	false
SSDEEP:	768:Ezk+1J7u4EUTc9M0Wsc96p/D9ImESWU3/9UUfC6fn8gR8RLye6JHEc:YD0Wg/9JCRLTEkc
MD5:	BB199389BE1EF396166C451AEB0712E7
SHA1:	F73E2F8354F32BCF5798BF5F1D02872C76ABA935
SHA-256:	BEE140B74784814204D80324B9FB63C6BE3E242D5C64D2D72522B46004E7CECD
SHA-512:	A4E3F4AFD8C82AA83AA6BE304490D3153E97DEF079AA1FE8837F98343F29B78D88F98869F9B6806635EB06E1A648DFAA4EBA27B0FB1ACB5EE2A66361B61601C2
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;/.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././. SPDX-License-Identifier: Apache-2.0./.'use strict';var Eib=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.TQ(a)},Fib=function(a){g.$o(a);.for(var b=0;b<a.hg.length;b++){var c=a.hg[b],d=a.ez[b];if(d!==c.version)return!0;if(!g.Yo(c)\|\|c.Vm)if(c.Vm\|\|c.v_!==g.cp)(c.P1(c)\|\|Fib(c))&&c.Q1(c),c.Vm=!1,c.v_=g.cp;if(d!==c.version)return!0}return!1},f4=function(a){var b=g.Wo(a);.a={};return a[Symbol.dispose]=function(){g.Wo(b)},a},Gib=function(){var a=Object.assign({},g.Tbb);.Object.getOwnPropertyNames(g.Tbb).forEach(function(b){g.fp[b]!==void 0&&(a[b]=g.fp[b])});.return a},Hib=function(){return{I:"svg",.Y:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},W:[{I:"path",Fc:!0,N:"ytp-svg-fill",Y:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 633, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	44846
Entropy (8bit):	7.903798094745186
Encrypted:	false
SSDEEP:	768:MAKXR1xDORNFJ+weox4Z/4dCDPjAmFGSIffFoQNvh6pXIEYx:MAKnxK6wJY4dCwpSy7o2x
MD5:	39EE3DD84F496A0B3D7B58C9E0599DD5
SHA1:	BDE068A003628777AC648AB1285C61761BFFCEC8
SHA-256:	B8E8C5D279E974CE6B5BC5974A5C8596F13C273D6AA98D8DCB150B79C8F8D9E8
SHA-512:	4BFAF1B204AA0877A766317DCB6082B1FD17AE469D09C9E3A6A1C15A1026A83234F75A1FF828BE91C34A61BB152128EEF4AF01688611EE8F590643DFD15199BF
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/0014360DEA000413/images/Garwood-BBB-Torch-2021Winner.png
Preview:	.PNG........IHDR.......y......5.H....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.163858, 2019/03/06-03:18:36 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop Elements 18.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:3DE3E84D2B7F11ECBE0FAF98559D9C47" xmpMM:DocumentID="xmp.did:3DE3E84E2B7F11ECBE0FAF98559D9C47"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3DE3E84B2B7F11ECBE0FAF98559D9C47" stRef:documentID="xmp.did:3DE3E84C2B7F11ECBE0FAF98559D9C47"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>k.......IDATx........t..d..e..b...]J.AJ....H.R..(.E.B.....w).www..f.?..p.Nr.=''.I..y.3ps.I........2...

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1154, components 3
Category:	downloaded
Size (bytes):	318936
Entropy (8bit):	7.98276377517724
Encrypted:	false
SSDEEP:	6144:gk4Dz/9JeCQghm/OTQhcZh90CI7qZyaptUyMxYMlMViXH:pQz/9Itgh8hOECI7qjtU9xYMiwXH
MD5:	2A34B05194893C31C082D0D7BAB7BC54
SHA1:	DD75BD782748BFC0A0D55F0733FEA7E6FEF17D92
SHA-256:	61CBF725D99CE729765B3C77FCD43CED938AEAE1DCCD74759359287AB4D1103A
SHA-512:	CCA690F33E4A2C3D998EC48CBAE0B2FC76E2DBB889BA957EE3EC92E3EAB4D4D82C40C2B09115E7973A6A68175F7FCED3ED63E94D96F36302BF49C2ACA4E275C0
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/rotator/bryant-installer-03.jpg
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:9961caa3-4de3-4628-a981-18d93a4e1f97" xmpMM:DocumentID="xmp.did:C96E576827E511E59900FB16BADF50FD" xmpMM:InstanceID="xmp.iid:C96E576727E511E59900FB16BADF50FD" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:50607007-69be-4465-8607-ea5b0ad72110" stRef:documentID="xmp.did:9961caa3-4de3-4628-a981-18d93a4e1f97"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 235, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	61614
Entropy (8bit):	7.990670305434861
Encrypted:	true
SSDEEP:	1536:CV9pDNUMc8CJE59YSxPmYiwQlevI5v8OPoTHMNp:CV9pDNUl8Culj9Da8OPnH
MD5:	41F0B1EAB5C10C4CEFDDEBB1159EA4B5
SHA1:	6C52D70D82014B1CED45072F896D1AC7FE5C0D8C
SHA-256:	D3AA745974F97CB80EAF76135FDC2ACD9251105C168BD4EEFF80C09380F4108D
SHA-512:	8026CEA50AC7FE4EA73FC4946EA82352640A8E5AFF54C458EAC56F3A171B6967D979C2DCE3A173AAB1371C416545C8D313FF67A850EB9BA9BE31F588BAFD0F7D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,................tEXtSoftware.Adobe ImageReadyq.e<...PIDATx....d.U%x.......U....[.n.V. .#a...F `.`5.,..\|\|.F..,.A;.a..V.H. ....Vw...&+}...>..{.....2.}...eeddd.....{.=..}..#<.#<............+<.#<.#........+<.#<..u~.......".F.E...V..E.f..O.C.e.I.4.ToY.H...._..\.....%...N. 3.Z.M..Cq.$.S<FT.u.f.....$..u2.(%....G.d.J...S<..Z.M....8...5...rZ%.\...}..x........%l..U.\|.F>.m;fR.e..5(.N.....Q.T.....R~a..t.y^..Q.\...d..q(...5')f_\.h6...,Z._.l6Em~].......9.Uj.s.R..u.->.u.....0..b..#.o....D(.N..d.&..5r:...&...,..P(P__..?..6m.H.H......u....[...{.n..V:}.4.v.md...Q.?...~ZXX...c.U.y\,...{...G..+....)J$.488H....={..U...iz......o..n..&..^.........P.R.w..]...O.....R.$......o.N}.}433..{.....w.......>L.o.k.....>.a...h4J[.n...%.d2..&&&h.m\|]4.U.Uy...^......y.~.z......7..y..;wn.?w..\|._...r9...7<.UW]51<<\|/?.9>..499)......0.L..dQ.........s.e..^.87.B.b.67m.D.N.\|...&....\|.V.}.....^.N.^:`.Gx..+.!`...`...x.&1.@.iiq...-..{N.<y...drn~..Z...[-.<}&...

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32047)
Category:	downloaded
Size (bytes):	95931
Entropy (8bit):	5.394232486761965
Encrypted:	false
SSDEEP:	1536:5P1vk7i6GUHdXXeyQazBu+4HhiO2AEeLNFoqqhJ7SerN5sVI6xcBgPv7E+nzms9d:A4Ud4qhJvNPqcB47MfWWca98HrB
MD5:	5790EAD7AD3BA27397AEDFA3D263B867
SHA1:	8130544C215FE5D1EC081D83461BF4A711E74882
SHA-256:	2ECD295D295BEC062CEDEBE177E54B9D6B19FC0A841DC5C178C654C9CCFF09C0
SHA-512:	781ACEDC99DE4CE8D53D9B43A158C645EAB1B23DFDFD6B57B3C442B11ACC4A344E0D5B0067D4B78BB173ABBDED75FB91C410F2B5A58F71D438AA6266D048D98A
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.11.2/jquery.min.js
Preview:	/! jQuery v1.11.2 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.2",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (668)
Category:	downloaded
Size (bytes):	22084
Entropy (8bit):	4.967423115331579
Encrypted:	false
SSDEEP:	384:BFtp4qXrK5fGlH+ocR0S6N1E+79zUbR2dbozPfI5:hN7a+79VdozI5
MD5:	7FBE76CDAC6093784895BB4989203E5A
SHA1:	68E2602C02181B61EEBC9E1DCCB0A38377FA5DF7
SHA-256:	326B994EC59C7334F52211FBD5AA909A36B98D1717CB798BFCD3AF8D4CBDB6CA
SHA-512:	209F816471A54F82B8DECA81194CC9F74A5CC5F9111035593D9C5E7B14628152FCAF3770FE0C8921F9436A131D373070C389345B1A72696A42D8F2D051698C51
Malicious:	false
Reputation:	low
URL:	https://local.demandforce.com/v2/b/font/font-awesome/css/font-awesome.min.css
Preview:	@font-face{font-family:'FontAwesome';src:url('../font/fontawesome-webfont.eot?v=3.2.1');src:url('../font/fontawesome-webfont.eot?#iefix&v=3.2.1') format('embedded-opentype'),url('../font/fontawesome-webfont.woff?v=3.2.1') format('woff'),url('../font/fontawesome-webfont.ttf?v=3.2.1') format('truetype'),url('../font/fontawesome-webfont.svg#fontawesomeregular?v=3.2.1') format('svg');font-weight:normal;font-style:normal;}[class^="icon-"],[class=" icon-"]{font-family:FontAwesome;font-weight:normal;font-style:normal;text-decoration:inherit;-webkit-font-smoothing:antialiased;margin-right:.3em;}.[class^="icon-"]:before,[class=" icon-"]:before{text-decoration:inherit;display:inline-block;speak:none;}..icon-large:before{vertical-align:-10%;font-size:1.3333333333333333em;}.a [class^="icon-"],a [class=" icon-"]{display:inline;}.[class^="icon-"].icon-fixed-width,[class*=" icon-"].icon-fixed-width{display:inline-block;width:1.1428571428571428em;text-align:right;padding-right:0.2857142857142857em

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65466)
Category:	downloaded
Size (bytes):	632239
Entropy (8bit):	6.067834105722422
Encrypted:	false
SSDEEP:	12288:1dKDxJpNi/5A4N3YpDvapdI27L3Sddzier6LyI7:1ADxJp61N3YpDgV7L3Sde
MD5:	B87C4F94551E5B3EF017E8887F659340
SHA1:	BE83AFCF3DC6631738AF46B1328E960B4A61FA20
SHA-256:	7720A5819BA24455BCDE73EC9415A686FCD38D0CCF1AFF87B8681B03590E2D78
SHA-512:	F80E19215671410E509201BA81D6804363D4DB9B26ABA0C3850332B45F773CA5AFF41ED6A04CF08DF40623A9EB91A07E444F07927B0CEEFA3EAE3F61DC5A1931
Malicious:	false
Reputation:	low
URL:	https://local.demandforce.com/v2/b/javascripts/main.js
Preview:	/! For license information please see main.js.LICENSE.txt /.(()=>{var e={9747:()=>{!function(){function e(e){return e.replace(/<.[^<>]?>/g," ").replace(/ \| /gi," ").replace(/[.(),;:!?%#$'"_+=\/\-]/g,"")}jQuery.validator.addMethod("maxWords",(function(t,a,n){return this.optional(a)\|\|e(t).match(/\b\w+\b/g).length<=n}),jQuery.validator.format("Please enter {0} words or less.")),jQuery.validator.addMethod("minWords",(function(t,a,n){return this.optional(a)\|\|e(t).match(/\b\w+\b/g).length>=n}),jQuery.validator.format("Please enter at least {0} words.")),jQuery.validator.addMethod("rangeWords",(function(t,a,n){var i=e(t),s=/\b\w+\b/g;return this.optional(a)\|\|i.match(s).length>=n[0]&&i.match(s).length<=n[1]}),jQuery.validator.format("Please enter between {0} and {1} words."))}(),jQuery.validator.addMethod("letterswithbasicpunc",(function(e,t){return this.optional(t)\|\|/^[a-z\-.,()'"\s]+$/i.test(e)}),"Letters or punctuation only please"),jQuery.validator.addMethod("alphanumeric",(f

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1861)
Category:	dropped
Size (bytes):	5014
Entropy (8bit):	5.27114804189568
Encrypted:	false
SSDEEP:	96:aqcCzS5Wv6ayCkkzkMlzq7t2E7NuDombiiYqmRUwOrFWW0bq0n:SQr6aynykaq7tjR0NbiiYqHrqp
MD5:	B483B60F41B96379E5D61EF60481E957
SHA1:	29ED31328C9D787BA1323391FE05C5140E265BAE
SHA-256:	B37C9B05A0282FA8E54F9F596F6FBDA9CA32F735AB2259252793ECE815FBF25F
SHA-512:	B48691FA8ABD89DB1E9B2627A29A456D5073D4AA06479FA1FFFE77E520EF4BB519DE6AC34E0E895913CD0E0006BEC122F471BB07E362DCF1980F3F154A2E2927
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('stats', function(_){var r1a=function(a,b){return new _.mJa(a,b)},s1a=function(a,b,c,d){const e={};e.host=document.location&&document.location.host\|\|window.location.host;e.v=a.split(".")[1]\|\|a;e.fv=a;e.r=Math.round(1/b);c&&(e.client=c);d&&(e.key=d);return e},u1a=function(a){if(a instanceof oR\|\|a instanceof t1a\|\|a instanceof pR)return a;if(typeof a.next=="function")return new oR(()=>a);if(typeof a[Symbol.iterator]=="function")return new oR(()=>a[Symbol.iterator]());if(typeof a.dt=="function")return new oR(()=>a.dt());.throw Error("Not an iterator or iterable.");},qR=function(a,b){this.Fg={};this.Eg=[];this.Hg=this.size=0;var c=arguments.length;if(c>1){if(c%2)throw Error("Uneven number of arguments");for(var d=0;d<c;d+=2)this.set(arguments[d],arguments[d+1])}else if(a)if(a instanceof qR)for(c=a.Eo(),d=0;d<c.length;d++)this.set(c[d],a.get(c[d]));else for(d in a)this.set(d,a[d])},v1a=function(a,b){return a===b},sR=function(a){if(a.size!=a.Eg.length){for(var b=0,c=0;

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	dropped
Size (bytes):	211525
Entropy (8bit):	5.537022243607768
Encrypted:	false
SSDEEP:	3072:0zRhbIGc3kWhH1ZF0dSncEjCPfrgiG8m9s3rOXk9nRUccW:URo3k4VFJviks3qXk9nR51
MD5:	EEA56E03129E6464850811DAE1B848A4
SHA1:	6920B7C28A2A759A8316AA38B54E4F9AACE3FD6D
SHA-256:	5421BE02575C66EFBA144C45EA7D8C0768A935EDD4105ACAAAB3E4A1DFCBD0B2
SHA-512:	7354B48A9F6B781B9B13045E9D7DB15F6CBB72F30E675C38CE3B7956A37895F84E3247561F5E4D733FB8A6897547C93A28ABBF8FA201618C25F587A34AB6778F
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"}],. "tags":[{"function":"__rep","vtp_containerId":"UA-28767219-1","vtp_remoteConfig":["map"],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__c",[46,"a"],[36,[17,[15,"a"],"value"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__c":{"2":true,"4":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__c":{}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__c".,."__e"..]...}....};.....var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=typeof Object.defineProperties=="function"?Object.defineProperty:f

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7387)
Category:	downloaded
Size (bytes):	7451
Entropy (8bit):	5.155146349032467
Encrypted:	false
SSDEEP:	96:6ZEUg1O6k7LN3IEB+0S+Mq0fSLt8gUOxRO+IAukn6rOuN3ORRR0y93zDQKo2bae:GXVR7Z7+ep+eRxtu9dAYwue
MD5:	830FCFF5669006F2A10A2CD4D2824845
SHA1:	3AEAFAEF54B60595395CECD2CA395D9EFDDACE41
SHA-256:	5719C969FA9325B3ED5E22A6AE8F9E68A5D899BCF591030CAAAA42D5D5B250D1
SHA-512:	EBFF342AA663F7FAB9B8293C8682D97B00805A01AD06CD095253DD340242A96E4200DB45FC3BA0B8CCD2F4A2E4833837752129A8AA4BF481F0961E21FD71E8C9
Malicious:	false
Reputation:	low
URL:	https://local.demandforce.com/v2/b/javascripts/lib/pickadate/picker.js
Preview:	/! For license information please see picker.js.LICENSE.txt /.!function(e){"function"==typeof define&&define.amd?define("picker",["jquery"],e):"object"==typeof exports?module.exports=e(require("jquery")):this.Picker=e(jQuery)}((function(e){var t=e(window),n=e(document),o=e(document.documentElement);function r(t,d,s,c){if(!t)return r;var u=!1,f={id:t.id\|\|"P"+Math.abs(~~(Math.random()*new Date))},l=s?e.extend(!0,{},s.defaults,c):c\|\|{},p=e.extend({},r.klasses(),l.klass),m=e(t),g=function(){return this.start()},h=g.prototype={constructor:g,$node:m,start:function(){return f&&f.start?h:(f.methods={},f.start=!0,f.open=!1,f.type=t.type,t.autofocus=t==document.activeElement,t.readOnly=!l.editable,t.id=t.id\|\|f.id,"text"!=t.type&&(t.type="text"),h.component=new s(h,l),h.$root=e(r._.node("div",v(),p.picker,'id="'+t.id+'_root"')),h.$root.on({focusin:function(e){h.$root.removeClass(p.focused),e.stopPropagation()},"mousedown click":function(n){var o=n.target;o!=h.$root.children()[0]&&(n.stopPropaga

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 152, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21425
Entropy (8bit):	7.966148151408537
Encrypted:	false
SSDEEP:	384:BnFr8FUr7V2Po11bxNnid8S+7SGG3JJdI/ROLznPqrVeYXnLNTiY:BFwEwo1rLPZujP8XnLNWY
MD5:	CDF827FEC33D1C736381002A95DB1FAA
SHA1:	48FC242C73715D2609EC6E5D5E3E59D1E6FCE9CB
SHA-256:	5DDCC47721843C63298CA276F09427A068FD3236A0FCC6E25982359A12B604DC
SHA-512:	947F451DFAF6A22DE5EB522EB469A9B3EB632ABAE0A0D57675FE95D90B6F29A323D8113FE08D4B70FE7182D0AF260E05C8C5406C404A6AB55759B8DBA92D9963
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 Windows" xmpMM:InstanceID="xmp.iid:CCA8F56E9CF911E59F908D07A62CE385" xmpMM:DocumentID="xmp.did:CCA8F56F9CF911E59F908D07A62CE385"> <xmpRights:UsageTerms> <rdf:Alt> <rdf:li xml:lang="x-default"/> </rdf:Alt> </xmpRights:UsageTerms> <dc:rights> <rdf:Alt/> </dc:rights> <dc:creator> <rdf:Seq>

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1554)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.237809027430955
Encrypted:	false
SSDEEP:	24:qL3o6DTEq78IHZT7hkFNbueVKpjFOtfgBvc/ck2/XuvUnyAvfumwJyARH:qL3bDQq7NR7mFNYjCCrk2qUny2h4yE
MD5:	2F1E1DB40C4359BC292FF97583D220AF
SHA1:	7C7628DDC3DFA7B537D03F37C4495047739DDE40
SHA-256:	BC530C3C75BB87677CB79D645697759EA411AB9CA7BA55CB28D5E040FF44F603
SHA-512:	40DCDC2662807772C0F7A67D5FF8643CD294A69BBAF2F06AC4676C8D250478C7F916278B8E21770A3677600238C6C0EB7F6D64AE750BBBF0B25F6DEA5011F8D3
Malicious:	false
Reputation:	low
Preview:	function addLoadEvent(e){var n=window.onload;"function"!=typeof window.onload?window.onload=e:window.onload=function(){n&&n(),e()}}function generateUUID(){var e=(new Date).getTime();return window.performance&&"function"==typeof window.performance.now&&(e+=performance.now()),"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(n){var o=(e+16Math.random())%16\|0;return e=Math.floor(e/16),("x"==n?o:3&o\|8).toString(16)})}function getCookie(e){for(var n=e+"=",o=document.cookie.split(";"),d=0;d<o.length;d++){for(var t=o[d];" "==t.charAt(0);)t=t.substring(1);if(0==t.indexOf(n))return t.substring(n.length,t.length)}return""}function setCookie(e,n,o){var d=new Date;d.setTime(d.getTime()+24o6060*1e3);var t="expires="+d.toUTCString();document.cookie=e+"="+n+"; "+t+"; SameSite=None; Secure; path=/"}addLoadEvent(function(){if(null!=document.body){var e=getCookie("brandcdn_uid"),n="";void 0!==document.referrer&&document.referrer.length>2&&(n=document.referrer.split("/")[2]);var o=locat

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (522)
Category:	downloaded
Size (bytes):	21000
Entropy (8bit):	4.706474869217339
Encrypted:	false
SSDEEP:	384:flJuE+K2GYkxEeYczHkkLsvSx2e8H2Km0vppE/:flJFvYkvlkkLsvSx2eKm0BpE/
MD5:	D00C54618B5167F441DB2D9F92180060
SHA1:	9665F64EE4736E71977DCB174EFD67FCDD879AC2
SHA-256:	6D214A4E18F09399943067EBB95007CF8384E2B5998AB1CC00C5A0534ADFCF12
SHA-512:	AB6F52CB5CCD63C8FB89D767C64AF3F481ADAB03B29E7392E0337D642FF04A1E429E05E52D6B0771BB3A5B73801545443C116C78D7B20A968ED6BB7382F42878
Malicious:	false
Reputation:	low
URL:	https://local.demandforce.com/b/garwoodsheatingandcoolingi/reviews.page?
Preview:	<link rel="dns-prefetch" href="//www.google-analytics.com">.<link rel="dns-prefetch" href="//cdn.mxpnl.com">.<link rel="dns-prefetch" href="//www.inspectlet.com">. <script>. (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]\|\|function(){. (i[r].q=i[r].q\|\|[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),. m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m). })(window,document,'script','//www.google-analytics.com/analytics.js','ga');. ga('create', 'UA-28301432-3', 'auto');. ga('require', 'displayfeatures');. ga('send', 'pageview');. </script>. <script>var __insp=__insp\|\|[];__insp.push(['wid',1344245760]);(function(){function __ldinsp(){var insp=document.createElement('script');insp.type='text/javascript';insp.async=true;insp.id="inspsync";insp.src=('https:'==document.location.protocol?'https':'http')+'://www.inspectlet.com/inspectlet-jq.js';var x=document.getElementsByTagName('script')[0];x.parentNode.insertB

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 35, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3415
Entropy (8bit):	7.924379536815121
Encrypted:	false
SSDEEP:	48:0V4PF3I3eHBdHybDV6FCDkd0lO38OvDQITBt6O3561lXiq+CWoW2ggKCHvR:0StKeKhAm8bQITmTiqFWoWTqR
MD5:	88AF5BBF167D676A4C467A1034901362
SHA1:	68B1D318BE47F146425F52C5075B84A5EB9A5134
SHA-256:	6DF5D76FEAC88C9267A9D53C5ABF9F8CA8D99DA124DD6202078F92341962F7D3
SHA-512:	7DE20C6C3E7E43256A07126B440EAAE712899CF16752BA340C0074746D9940955243A4D2EC5B8A95E55B80FC6269C6C796457A3CC5C16FDAADA18DBEBD92FC29
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/logos/credit-cards-mastercard.png
Preview:	.PNG........IHDR...8...#........F....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..YytT....2.L&.LV..da7..D..zd..p..Z{...........=.s...-...V.U..DD.`.......u&.}...3JB......3g.y.......O(^..!.O...>N....}.I9.jx......%.6.@....h..A.....0...`,z.0..t......#.#Z^.u.J.N....(..Yt.6-...@....zT4#&....L........!.. ..lr..S.....P..jFD.p..I.(..]...y.....X\4..E15X.i.Z.D.....5y..>.&....\|.v.......\|}.5.:.....9...Q..w;<..........=cP.V.S.....`.........D}t.z.....cQ.i,.=...v...K".u^..I.......s..}...[2a%....JIZ3.M:.....n.....!....C.4..l./.oW....3...I..F.e.FHr....t..P.t..B..X.D@.$_..........;'}....#..DD3C.....3..\.Z.?..DEw.....FD.......v#U.q...!...T...g!...n-<.%.....@u.S........R ..[.w......g.......UK."cR.Q..8.#LN'.l.W...$i.S3.... ....S...A.....$..E'-!..I3.7..k.=.BG..+@&p...Y.5.....F..z..;...E...*.j."M.-..R.\G\D..X..Q..A...<6.m.-.!my.5,....."-...Q-@..(..9.p.a.....^..........x.[N.....8@...J/..ORh..,..ga#rHBTw.?.#..>Y..[1..0J&MXY\|..U.Fw.EqT.. .53X.L..A.a.Y.!.....'....

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	148
Entropy (8bit):	5.213464573488337
Encrypted:	false
SSDEEP:	3:ILcndk1szKYo0pKfikykhjHic/C1+MarkPHynvAw3sR8TMPTVSk:IL/smIkykxiT1+t8SsuTMd
MD5:	F5CE0C0AE867527DE9E54C53048616CA
SHA1:	E9F74E09DBA037A76045AC6C752789FB4EFFDB39
SHA-256:	1E942AFD69D602648281AFBEC1C955BCDE7BE2FF1A31C257921AD56BCD423B9F
SHA-512:	4E8D6E206B1499F691B9A85989CBF7B3E322BF80F619CF0CCE23BA5C7C8423F774A70C906DDBED368CC5483EE144CFD50F9EF67F1BDF2EAE280B36619B9BCA5C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSSAkxt1sdtVdGHRIFDWV5tzoSBQ14bxIZEgUNU_J1YRIFDZTUWx4SBQ1GZxV9EgUNVbv1bxIFDWOu7SESBQ28hddSEgUNU1pHxQ==?alt=proto
Preview:	Cm0KCw1lebc6GgQIBxgBCgsNeG8SGRoECAkYAQoLDVPydWEaBAgNGAEKCw2U1FseGgQIHhgBCgsNRmcVfRoECCEYAQoLDVW79W8aBAgiGAEKCw1jru0hGgQIIxgBCgcNvIXXUhoACgcNU1pHxRoA

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 462 x 210, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	26217
Entropy (8bit):	7.963504493032036
Encrypted:	false
SSDEEP:	768:EajUZwzHo/tK7JWRserzdP6393kaaegBdTKsI:9jib/tK7JQH9sUpjBy
MD5:	649110D16B76D830D3A797FE285DECAE
SHA1:	BAAC98FF0117FB027A57AF1837567D49C89E27D1
SHA-256:	77A12B43F0D1AF16599366BF810134E4A365F4D2A804A5A23CDBB2E083D91980
SHA-512:	E13A0F340ADD0E6880F8C0D94A8EC9A8E4DDAEE797F04F30432E6254CB2FE79FF1EABE791FB895FD96E17658EABF6CF06004467AFA28EBC46961BC998BD268D6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............. .....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-11-01T11:19:17-05:00" xmp:MetadataDate="2018-11-01T11:19:17-05:00" xmp:ModifyDate="2018-11-01T11:19:17-05:00" xmpMM:InstanceID="xmp.iid:625d3ba8-86cc-8e40-9474-4c5625a9ead5" xmpMM:DocumentID="adobe:docid:photoshop:fe62ed0e-b5f8-6c45-844c-7d9f6e7a30a8" xmpMM:OriginalDocumentID="xmp.did:60987f70-8db5-dc47-bec5-a1056bae80d1" photoshop:Co

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13824
Entropy (8bit):	7.974791656327818
Encrypted:	false
SSDEEP:	384:2BEsF1Eh3PHdhdkX2YkqgTDwUV6+lIRmUPAb:2lAhfdhdUjkqgTDTlgmiAb
MD5:	BB9B3BE1E8EA2B96CCC8B6D8A8DEDCB4
SHA1:	64165B9249CB984DC196B5A839D2DBEE30B3CEB4
SHA-256:	3ECE730277538A2C023CE5349E64FBEC6F0DBC5486F62CEE605A26AFE171B6D2
SHA-512:	7D28A43C5231F4D07AA927D5FCFE99D14DA5D05195D45AB43AF969E1AF5761A4F9B8513ABF9B7605B0FA6711F77D40F38E6F0989E9948187DCC530AEC9DB34CE
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/core/images/Bryant/bryant-fad-white-tagline.png
Preview:	.PNG........IHDR.......x......O......tEXtSoftware.Adobe ImageReadyq.e<..5.IDATx..].\|...~.w...m...lS.8..z1.H..j0.Z @...P..$T.b0$..0.......cl.n.mY.$.......ou....$KF.........7.}..aY.u.......VW.p`.....G.o...kOT.\./....p.@....V.r]...F.......\Wv..W...\.q..u.j.v..f.....&..\.....0C....+..@.y....H.Z.-.......K ....\......U$^ I..q}..t..t..s.....u.....y...Dr......Q.t.$....v.&8.u..s}..X?lI.3..8..r..W.@_q...[.......f.`.q=.@..!..p..8Z...S).z......EB.....L.@.u."j.....^....`u\...?..J....;._@......;.K!.2..Wp=..d......\....k\?....'..........Gs.j....=...0.j.w\.......i..Hv.*..b.....e...L.b..\M..4.Gi.M...6....s....Y.N...+\..t.....\.F..!+...OpI..S....f3?-...(..4(..s.....M...8...D>.i...FNvK....,.}mN....b.....%...\/..'Xj.....W.....$I./'..C<O...5.J7Q..c.N......z..R...%.,.,..Q..\|...'=B....lq.U..".........6.!.4{.....s...5...~..Z...............x....&H ..(R......r.(.o.DZ....M.Z(.o.Q...QXh...k...g.,.KFn.[.....\|..p.V....m.O.X............._..UUM..C).)m.....B..Cu7.I./

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	43080
Entropy (8bit):	7.995374891142614
Encrypted:	true
SSDEEP:	768:eXZWXigpGMuR08ARLSOEsQiAq1M3owewuTc9ETNakGcRr7s5egTa9W8WW6e53unE:EWSFMx8DRiAq1ZwOciTNamr47cW8WWfo
MD5:	CEBA7AEBE407E84D7990A443D3CAE66E
SHA1:	7D8D800741C0A288FF605C8B71109CC822EA7FAA
SHA-256:	DA5D23CE3B24AC6DF11AD1FE3A9024A47CBE236972D7EC178C71BFD6160EE22D
SHA-512:	A6B4AF9D0054C8ABE597A843EBBF3C60DAC170C0F6C0BABF9469D327BE5E14C5D1FC5BD5ABD3728C6C8D3F4A26A809E5DC1EA7F180B6A9FD9CE51A9E3F6B0C8C
Malicious:	false
Reputation:	low
Preview:	RIFF@...WEBPVP8 4...0........>5..B.!!.M. .D..\|/....9....A.7......(..._....M.......o..t?......q.....o...?.>..T.s........./y.._.>...z..Q.w.9.O./.g...'......?...:.2..........w....w.#...?...y.._Q.~^.g...o.?.;......w...?.}..X........4......P.3<F.%...W.?..F.>.3&.....;..2i.......3&.....;..2i.......3&.....;..2i.......3&.....;..2i.......uZ.a.7.......].=.~0..K>c..\...\..#..4-......_.t._Q%....z..US..c^.c.[.c[..U..G.......b.).R@j...<!@l. wP#..E..a`...R..p...uX'.:..N......,....j.D.+eY.C..a\....$.Kk.d...s"....({.k.:......J...d..i.L.~..O.. K%.?.J.f...}...7.c...t.X.....K...9L7....+T..."@i...'.......`.B$...xe.]Zk..z.k..@\~0q...h.\.r-...l...).EX...:r...@.+4...T.`+...Hw\|..4Xv~.....V...Z,h.whq.A}....0rVA'...7N.!.nA6...P.Zq\|./'b.V..q......Ts.q...,..(.OTqG..k..cz..C.-.SB[_...Ef..........@!..@.t..si.2?......v....{.D..u..$1e.v.N.X.C\.=g..W.Ao./.+o..87-.......\...$8]....X?_.@....J.y...j..an.IX.k.\|...S../.<nD.U.FN.^...=J...6.=...BX..p.W..n.:c.J".)...s.fS..IJA)....N..

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 135 x 83, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7529
Entropy (8bit):	7.927931847808942
Encrypted:	false
SSDEEP:	192:VwYNI2ydjI/tCrEZmfGHoU+IvfOjGw/jJKa/LDj+:VwUI2ydStCIZDuIvfUGwjJL/LDj+
MD5:	A096543538B6903BE7119CC50A1BBFCA
SHA1:	5E410633A77C106DF5FD89B04C96F40DD5CFC50D
SHA-256:	A23F999F2D499792D05311EF01E6C41EFE83A66B27A750126137178C274E9F31
SHA-512:	72A43A1FFAF5F27A784253F6FDD0288DBA087373B55F46028A186AACA669D1B5927E123E0735D34C1455C6679B26C24DE1CCF759D2AFBFDA21CAEDF86D50820C
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/logos/bbb-a-plus-badge.png
Preview:	.PNG........IHDR.......S......H.3....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:809E005C9A9C11E593EE88C0C6ED511E" xmpMM:DocumentID="xmp.did:809E005D9A9C11E593EE88C0C6ED511E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:809E005A9A9C11E593EE88C0C6ED511E" stRef:documentID="xmp.did:809E005B9A9C11E593EE88C0C6ED511E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>g_N}....IDATx..].X..^ .(..7b.X.F4v,D...5^.....&j..^S4.v-Oc...c.x..,.'..5...$.(.(`y._.=...9.. .9......=3{.{.......

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 35, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2334
Entropy (8bit):	7.903445127094226
Encrypted:	false
SSDEEP:	48:0PDEKHkFjVGF4YJdZaLQLcKHRWFmEiTqfs2iMOyx3jDnXaHIZId0HzZvmXw+Rl+e:0PQcGjVGRJf+QLcKxWF+qfeuZXaCIcds
MD5:	4DE368009DF9CEE449E27DAE9142283E
SHA1:	963BA14CACDBBADCC29152971814ED3ED09D2126
SHA-256:	70B6A01CAD6BB3FB8B8CAD2166D45646FAB8DE715874DEDBD8EC27A35E96B2C2
SHA-512:	4929DBFD582FD5B603F31FCC595CEC8B4765ADAAE3C12E6791D8C3BB37F79C5AEC7CBC9C440B5233BCB9A1171C4697C4DE2384787E43CF63FBF7D2873B18391D
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/logos/credit-cards-discover.png
Preview:	.PNG........IHDR...8...#........F....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..YilU.....{...`.... 0P...H .-...(..$....?..."J.)?..b...E.!@.%....1.c............o......B(...4...;3.\|s..........#....b.V...+...O......fy...Y..lF.L../.....x.s.,..h4.RD.er...,o...M f.O{n.....?....Q.^.5......U.#"".>......6...v..?..=.....j..C`s..A..t...{`7A.7h.............F.....r...>......>.4......-.)S0u.T$&&"##....:.......m7n.1c.`....u..B.v...c.....#;;.N.#...r..$....}.....G...B.;...].18.g...e....y..=.'O.z..U.8q.3f.......}.....565.....=.={.S'..<X.#.c.........p..A.Y..K.,..I.t`.^.~.N...Z..EEEHKK.S.U...%....?Q.s...~...">6._...].t..e.............F.Bll.N..g1m.4.k.N'.6>.m..R....\.\|.l..dff..,X....0..0.K.s..a.n.:.E.s...v....w.M..r..7..V....6Rc.._....CM.....n2..72....&&&....s..V.Z.[.n.....:..k......v..0J.[x..A...Zg.e.9.......w.1.......$.......U..$5..Y...`.U..G. ...N......8...z.^.7n...C1~.x.....q..=.DB&.2...o..5kV...J.'.H0,7o.xK.A.s...x.:u.G..EII.R........?.L.`

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13824
Entropy (8bit):	7.974791656327818
Encrypted:	false
SSDEEP:	384:2BEsF1Eh3PHdhdkX2YkqgTDwUV6+lIRmUPAb:2lAhfdhdUjkqgTDTlgmiAb
MD5:	BB9B3BE1E8EA2B96CCC8B6D8A8DEDCB4
SHA1:	64165B9249CB984DC196B5A839D2DBEE30B3CEB4
SHA-256:	3ECE730277538A2C023CE5349E64FBEC6F0DBC5486F62CEE605A26AFE171B6D2
SHA-512:	7D28A43C5231F4D07AA927D5FCFE99D14DA5D05195D45AB43AF969E1AF5761A4F9B8513ABF9B7605B0FA6711F77D40F38E6F0989E9948187DCC530AEC9DB34CE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......x......O......tEXtSoftware.Adobe ImageReadyq.e<..5.IDATx..].\|...~.w...m...lS.8..z1.H..j0.Z @...P..$T.b0$..0.......cl.n.mY.$.......ou....$KF.........7.}..aY.u.......VW.p`.....G.o...kOT.\./....p.@....V.r]...F.......\Wv..W...\.q..u.j.v..f.....&..\.....0C....+..@.y....H.Z.-.......K ....\......U$^ I..q}..t..t..s.....u.....y...Dr......Q.t.$....v.&8.u..s}..X?lI.3..8..r..W.@_q...[.......f.`.q=.@..!..p..8Z...S).z......EB.....L.@.u."j.....^....`u\...?..J....;._@......;.K!.2..Wp=..d......\....k\?....'..........Gs.j....=...0.j.w\.......i..Hv.*..b.....e...L.b..\M..4.Gi.M...6....s....Y.N...+\..t.....\.F..!+...OpI..S....f3?-...(..4(..s.....M...8...D>.i...FNvK....,.}mN....b.....%...\/..'Xj.....W.....$I./'..C<O...5.J7Q..c.N......z..R...%.,.,..Q..\|...'=B....lq.U..".........6.!.4{.....s...5...~..Z...............x....&H ..(R......r.(.o.DZ....M.Z(.o.Q...QXh...k...g.,.KFn.[.....\|..p.V....m.O.X............._..UUM..C).)m.....B..Cu7.I./

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.8456631498513816
Encrypted:	false
SSDEEP:	3:YLbSE+DDUViY:YqD4iY
MD5:	DAE6182E6253E84CA88FDAE0E0914344
SHA1:	1AAB7841F85D2CF4BE71AAD06E42ABB769DEA670
SHA-256:	421BB32FD236C6BAC180085C2485A214EBA0E3124718CDBE4C99CE7EF70A99CD
SHA-512:	77ABC63A46A1263543DF9478A981381DB2691C4902B49B2C4B7BF2F7FA3C38373E29750C1E54A52C35F86713A92787BFCA397CEF78B0059DC7721F8BAED1C1F8
Malicious:	false
Reputation:	low
Preview:	{"noinspectlet":"refreshcache"}

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 35, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2539
Entropy (8bit):	7.897177595009707
Encrypted:	false
SSDEEP:	48:0X8o2WSfVltipfjaK2hrcmvL9K/ZU/MZ8ZCO6mlMbRZQKk3:0X8o2WSVGaRhnL92Gk1wlMbRZ23
MD5:	779E4410BF1F7349A6ECCF987E5F29C7
SHA1:	6558DEBFF509BA0E72891A9C76D477F649EDAB08
SHA-256:	34EA58185923F3658EEAE74388A1571D2D8FAC7ABBEF435821E874B227499B5A
SHA-512:	178782B4160983BF492C6D11F25588E4C86A9C7D2AAAC78F73129CEC79B7626754C3A702C1D54CD5CAD727140668D5F30AF3D0B438FCDA65362D76D5FE518823
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/logos/credit-cards-visa.png
Preview:	.PNG........IHDR...8...#........F....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..Yi.Uw....m.....0.@....@E...V(v1..6Q..5.~0M4....`....i..-X..D.A..m...Cg...y..z.y..#.`"...w...;..~../J.=.........}.t..#...JW...)......>..;.@o.V.~\|..y(Ys[~.....b5T.r5Q..>..P..t.!..[..r.3@(.Cc..wn....:.\..:;k.k..J..Lf..1z..W...$..}M.h..."..m..lL...J.f......Xh.v..Ew.U..PR.Sux...../...D..(......(LrTI....................d(........\.5.w...Q..:.X...YS...U5X.....E....6(.A.........m.5\..)..N..?..C...C.u..Q....x...O..(....N.....A./..+.....x.......D..`..I.C..x....t...(h.O4c..O1.H.8..?....T!D....m.p.,A.C/...B..7......FD.@x....v....B.. @.!..l.I.......X.l.d.........\dy...(.\|....e.z.e%F ..gd..Fc;.F.........N.s.'`..Q`>m..k..].W...P=.......m.....p..t..k.,.K..eM..3m.S)...!....(+.C..O.uQ6...,.e......}....R.t.]qG.2......Nuy.<t/I[..=p..].~...%.n*s...JVQ.S...U.jE,.)/..wq........N.....(2..'B8\|...2.Y.$....5..}....$s..$...@..8......./...Z.o..#.Q.....<........!.?vE@.=....3..;...%/.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12911
Entropy (8bit):	7.911922126370381
Encrypted:	false
SSDEEP:	384:gmnTBoaZnt0tARo+0wjWlCv4GMqTnoMPsSwPQFLaO/K31:xEy6lp2ckb/k1
MD5:	AB3615EDE14FB34517DEF9F65686512F
SHA1:	1F5BEEA40AE44097173D0F002324DD0AB2F16264
SHA-256:	FC23968871BFDD332DF8BF8A92837E02297D8EFBDAE82E40D54C8A9C083D937E
SHA-512:	5B46CBA26F6C772D60F459B3DA233A7E8A8E2A10A3517774DCC43EE47C7D5D02D51A2CE2E875F8CF80F133B5BC85C8FEBF595D455E04E9A339B56CA342664C60
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmp:CreateDate="2019-01-21T10:39:34-06:00" xmp:ModifyDate="2019-03-01T09:20:57-06:00" xmp:MetadataDate="2019-03-01T09:20:57-06:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:18aeb1f4-4ae9-4d7a-ba73-b48045394dbb" xmpMM:DocumentID="adobe:docid:photoshop:8391c6cd-b30c-3742-a148-a47db34d5

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1154, components 3
Category:	downloaded
Size (bytes):	459160
Entropy (8bit):	7.984061659009761
Encrypted:	false
SSDEEP:	12288:sSlI2qMC2/iGUd4xsaBTGyxeBEX2oc2/k2JqEauT:dsgiGxsaGVokMIuT
MD5:	44D7198514DAC8A401DA8E4DB451B181
SHA1:	120D8D1C141C516E6A9455AAEC6F8C49160814B9
SHA-256:	440A37B0515B914794D222B8972C53ED4130D5F8C1B5DE4864CF993FAECF6144
SHA-512:	2C3EB0BD39A0F44B8C733C793B53225188F093377F498D12E4CAF55BC984FBCF01632FDC237DD10FDD9F4FB176F1EC2839427764CF3292D0D9E32F356343C830
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/0014360DEA000413/images/rotator-van.jpg
Preview:	......Exif..II*.................Ducky.......(......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:9961caa3-4de3-4628-a981-18d93a4e1f97" xmpMM:DocumentID="xmp.did:C4DCEC9D9AAD11E59121F13F99643A6D" xmpMM:InstanceID="xmp.iid:C4DCEC9C9AAD11E59121F13F99643A6D" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5b7f4663-cc30-43ca-b719-9f04365c44c6" stRef:documentID="xmp.did:9961caa3-4de3-4628-a981-18d93a4e1f97"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1932
Entropy (8bit):	5.213051869692102
Encrypted:	false
SSDEEP:	48:xtYurWR8X1mOrBJBjqsgoji1UjbRGtZ0f8bntO:QyWRfe21soZJbtO
MD5:	56A5F65FA11F636947A943001EF36E60
SHA1:	F9E272E5CB108845E947EC2A05C91D568A84F894
SHA-256:	991D5C05970B036AC3F5205D951930894C6E675D9842877B54E64F68B9E3E560
SHA-512:	34BFD2B139DD643C6F8EABD0635F39C69F527D3B765E45A77B8CCE5D2B603CED97E1661F1603F0558AE4932AC9B480333D3B65D9D0E769777D1E1A3689E6158E
Malicious:	false
Reputation:	low
Preview:	.var sendTargetToFrame = function(){. document.getElementById('reviews-widget').contentWindow.postMessage({"target":location.origin},"https://local.demandforce.com");.};.var iframe = '<div><iframe id="reviews-widget" allowTransparency="true" src ="#" width="100%" height="1280" style="max-width: 610px;" frameborder="no" scrolling="auto" onLoad="sendTargetToFrame();"></iframe></div>'.var iframeSrc = "https://local.demandforce.com/b/garwoodsheatingandcoolingi/reviews.page?";.var d3cp_link_addreview;.var d3cp_link_scheduler;.var d3_review_level;.//if d3cp_link_addreview or d3cp_link_scheduler are passed in by the business, pass that to our page.if(d3cp_link_addreview){. iframeSrc = iframeSrc.concat("&d3cp_link_addreview=").concat(d3cp_link_addreview);.}.if(d3cp_link_scheduler){. iframeSrc = iframeSrc.concat("&d3cp_link_scheduler=").concat(d3cp_link_scheduler);.}.if(d3_review_level){. iframeSrc = iframeSrc.concat("&d3_review_level=").concat(d3_review_level);.}.document.write(ifram

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 150, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	18619
Entropy (8bit):	7.982580518151483
Encrypted:	false
SSDEEP:	384:+gUQ45RSJsxmkTpHAYQr/ea12MDDW18ghe8V1624HeF5:+XXikTpgpr/etQS8ghTVY+f
MD5:	F6276D6C723BB61BB22A50D2135E1962
SHA1:	6631039A91165072D267FB77FB786E782354AD39
SHA-256:	2FFFFE553413524D01D73D82D05998345A522606B4DB7B9EDFDC2B220ED1A150
SHA-512:	A24276C56A7BA25FA70AE76F6ABCECC931E01546C9D8D914A53D50D0CC861D5C7197703B615E0C0885932CA17A01594DD1C4A0280789446C2BFE6CB481D2D399
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/0014360DEA000413/images/ameren-logo.png
Preview:	.PNG........IHDR...............PN....tEXtSoftware.Adobe ImageReadyq.e<..H]IDATx..].\|........{.$............(>.S..>E.{W...DE..M@@zo!...l6...;3ww2.M....~{~....;w...s...;.2L&.....ia..;.....d2.....S.Z.^T.^T+...z"s.....0b.s.O~.8.............b.n2.F&..C........D......]...oU.tF.@.5b.....F. ...u.Jm...lK1.y...p....5&zJ.w..d4.0&.......h-:R..r..f..c`<&....,.......7.8...:.O).i.vT^j..&...=.p.F.a.....dj.i.r...MW.u.........A.t+..........7RR...3.?..M.Bo3.....bt@%....u.7..f.YI...+.J.#.DJ..`.^m...\|.DO&P..?....h2...1pS.G......Zl.X2.J.c...g.Pz....:N.w...d...dt4..XL..4.U..DrS.L......J.F...5.1...'.c?`.pX...l.....[.2`u.....T.mQ<..............C..I....2....Ne...Rc....@..v+....XF#.M...{........&...0.........Z......Nci..X.......&...4.7..z-<.D....\.(...`.F.!.L`1.......wV....N.. ...b...G.eB`..+&+.db0..m....:.#A.E.xfFL.u?Y,NcW.....[W.}.^T.dq.....,#.......^.qa.^...W..l+.cF...d.J/.Oo......t.,c....5:4.].a..B.o.O....\.L"z..?Z...6...,.#.../N.=.R..5...u....}O.+.M..c.Q..

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.976663363230767
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKYQCpM0Waee:PLKdXNQKQ7L
MD5:	899F3616D1031A5633D9A0F4CA491B2D
SHA1:	129580E3399BE36658BB5164AD4C187E97EE12B3
SHA-256:	D4FE562B542385ED27C0A5B044F51B790B51CF0A57A265BD63BF51D94B570197
SHA-512:	3B5819AA67ABD91C54E395407E9FF01FBFC95490E86EB1AC9A5F22F30C7C6FCC359B6550450AAEDBCAF2D23037DDBAB09ADA5BE3FD227188FF828E5EC40F41DA
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 1380, version 1.0
Category:	downloaded
Size (bytes):	1380
Entropy (8bit):	7.3037706743203845
Encrypted:	false
SSDEEP:	24:IgOu0UjAzqx3dB4ukwkGLTZ2hCJglrujOXZRrzt8Z8DcxLlMRSWIUhP/6f:IgOpUMzaBrkZG8CJgNsK1z6ZAGlEFV6f
MD5:	B7C9E1E479DE3B53F1E4E30EBAC2403A
SHA1:	AF91C12F0F406A4F801AEB3B398768FE41D8F864
SHA-256:	26726BAC4060ABB1226E6CEEBC1336E84930FE7A7AF1B3895A109D067F5B5DCC
SHA-512:	976F6E9D65859B1A5E3BBD426441E6885D1912F5694F40E2897B10F46B3BD0C7D940F7917A6050D6BB8CDEAAA5E5F0332391D3D398F6C21CE27299DFC7036911
Malicious:	false
Reputation:	low
URL:	https://core-dot-sos-apps.appspot.com/fonts/slick/slick.woff
Preview:	wOFFOTTO...d.......\........................CFF ..............V.FFTM...8........m..GDEF...T....... .2..OS/2...p...R...`P...cmap.......P...b".D.head...........6..1.hhea...D.......$....hmtx...`.........J.Jmaxp...p..........P.name...x.......n.'..post...T....... ....x.=..o.A..g)['..V 6A..k{7z.w..u.,....B..?x.;[X,...X..HP...H.'x.Mz.YJ.$o...y...7.....0......1..g........0......!t.j./.....Zy.'..T..@.^...'P8.x...>f.E..J....).z...Q'o...mC...QQ.=G._.@../...F...TU.d..PM.q..F.........}..8.:.9k.4I...v.7q.(..#4EQ.~.q(.....[..7q7.dK'..Z.&..,.6.D.dE.G.W..#o....\|Op...{...j5H.l.[-..4....b/k...A.V..\|.(I.r..Lm..K8.g.y.8.../...<..\|;...........................+..T.j...HP$.N.[.U..._.6F.2...2...p....=;c......T..1.j..f.4,.......t<4..#....Y8D....F/a]_I.i)NRN..m.8..i)%."..:.....i65.....5..t&......x........x.c```d..s.o....+.a4.Zy....x.c`d``..b...`b`.B.0.....v.7x.c`fb`...............2H2.0001.r2.A...#.R`...4.....D.I...?`.c...6.D...m.J..F.7.....x.c```f.`..F.......\|... ......d30$*(

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1554)
Category:	downloaded
Size (bytes):	1555
Entropy (8bit):	5.237809027430955
Encrypted:	false
SSDEEP:	24:qL3o6DTEq78IHZT7hkFNbueVKpjFOtfgBvc/ck2/XuvUnyAvfumwJyARH:qL3bDQq7NR7mFNYjCCrk2qUny2h4yE
MD5:	2F1E1DB40C4359BC292FF97583D220AF
SHA1:	7C7628DDC3DFA7B537D03F37C4495047739DDE40
SHA-256:	BC530C3C75BB87677CB79D645697759EA411AB9CA7BA55CB28D5E040FF44F603
SHA-512:	40DCDC2662807772C0F7A67D5FF8643CD294A69BBAF2F06AC4676C8D250478C7F916278B8E21770A3677600238C6C0EB7F6D64AE750BBBF0B25F6DEA5011F8D3
Malicious:	false
Reputation:	low
URL:	https://adservices.brandcdn.com/pixel/cv_pixel.js
Preview:	function addLoadEvent(e){var n=window.onload;"function"!=typeof window.onload?window.onload=e:window.onload=function(){n&&n(),e()}}function generateUUID(){var e=(new Date).getTime();return window.performance&&"function"==typeof window.performance.now&&(e+=performance.now()),"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(n){var o=(e+16Math.random())%16\|0;return e=Math.floor(e/16),("x"==n?o:3&o\|8).toString(16)})}function getCookie(e){for(var n=e+"=",o=document.cookie.split(";"),d=0;d<o.length;d++){for(var t=o[d];" "==t.charAt(0);)t=t.substring(1);if(0==t.indexOf(n))return t.substring(n.length,t.length)}return""}function setCookie(e,n,o){var d=new Date;d.setTime(d.getTime()+24o6060*1e3);var t="expires="+d.toUTCString();document.cookie=e+"="+n+"; "+t+"; SameSite=None; Secure; path=/"}addLoadEvent(function(){if(null!=document.body){var e=getCookie("brandcdn_uid"),n="";void 0!==document.referrer&&document.referrer.length>2&&(n=document.referrer.split("/")[2]);var o=locat

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	194449
Entropy (8bit):	5.631178033848175
Encrypted:	false
SSDEEP:	3072:OX6D3l7VQWNpuvvnIN40RVHL0fpZfL6vO+wLUaBTeFgN67bpHiUB5wACXI1Vj0De:OX6Dl7TpuvvIN40RlL0fpZfevODUaBCH
MD5:	D24159D6B6EFFD13D0C781CBB950D73C
SHA1:	25204616AD3B9E787ED1C62CACC935AA79E5BF45
SHA-256:	FAF393CFCF0DD3586BC5B4D4DAF75755215C8F8642FD117A184D44328E056A00
SHA-512:	22B5682CAD051B71B12BF006004521BB9A860273B25B2E966FB65369BFCABA826574E7F91F0587E5742862C069755DCE8F66DD90EB14FC7FB29F293188E818FF
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/10/util.js
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Xwa,Ywa,$wa,bxa,TB,cxa,dxa,fxa,VB,XB,gxa,YB,ZB,hxa,bC,jxa,fC,hC,iC,jC,kC,lC,nC,kxa,pC,lxa,sC,uC,vC,wC,nxa,oxa,xC,pxa,AC,DC,EC,qxa,HC,txa,IC,KC,LC,vxa,wxa,xxa,zxa,RC,Bxa,SC,Dxa,TC,Fxa,Exa,Gxa,Hxa,Ixa,Jxa,Kxa,Lxa,Mxa,Nxa,Oxa,Pxa,Qxa,Rxa,Sxa,Txa,Uxa,Vxa,Wxa,Xxa,Yxa,XC,aya,ZC,bya,cya,dya,eya,fya,gya,hya,iya,jya,kya,lya,nya,pya,rya,tya,vya,xya,zya,Bya,Dya,Fya,Gya,Hya,Iya,Jya,Kya,Lya,Mya,$C,Nya,Oya,Pya,Qya,Rya,Sya,Uya,bD,cD,Vya,Wya,Xya,Yya,Zya,$ya,aza,bza,cza,dza,eza,dD,fza,eD,gza,hza,iza,jza,kza,lza,.mza,fD,nza,gD,oza,pza,qza,rza,sza,tza,uza,vza,wza,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Gza,Iza,Jza,Kza,Mza,iD,Nza,Oza,Pza,Qza,Rza,Sza,Wza,Xza,Zza,bAa,cAa,dAa,tD,eAa,uD,fAa,vD,gAa,hAa,ED,FD,jAa,HD,ID,JD,lAa,mAa,nAa,MD,ND,PD,QD,oAa,RD,TD,pAa,rAa,sAa,yAa,zAa,ZD,DAa,HAa,IAa,JAa,bE,KAa,MAa,NAa,OAa,PAa,eE,RAa,XAa,pE,$Aa,ZAa,qE,aBa,sE,cBa,dBa,eBa,gBa,hBa,QE,jBa,RE,kBa,lBa,mBa,nBa,TE,pBa,oBa,

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 150, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	18619
Entropy (8bit):	7.982580518151483
Encrypted:	false
SSDEEP:	384:+gUQ45RSJsxmkTpHAYQr/ea12MDDW18ghe8V1624HeF5:+XXikTpgpr/etQS8ghTVY+f
MD5:	F6276D6C723BB61BB22A50D2135E1962
SHA1:	6631039A91165072D267FB77FB786E782354AD39
SHA-256:	2FFFFE553413524D01D73D82D05998345A522606B4DB7B9EDFDC2B220ED1A150
SHA-512:	A24276C56A7BA25FA70AE76F6ABCECC931E01546C9D8D914A53D50D0CC861D5C7197703B615E0C0885932CA17A01594DD1C4A0280789446C2BFE6CB481D2D399
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............PN....tEXtSoftware.Adobe ImageReadyq.e<..H]IDATx..].\|........{.$............(>.S..>E.{W...DE..M@@zo!...l6...;3ww2.M....~{~....;w...s...;.2L&.....ia..;.....d2.....S.Z.^T.^T+...z"s.....0b.s.O~.8.............b.n2.F&..C........D......]...oU.tF.@.5b.....F. ...u.Jm...lK1.y...p....5&zJ.w..d4.0&.......h-:R..r..f..c`<&....,.......7.8...:.O).i.vT^j..&...=.p.F.a.....dj.i.r...MW.u.........A.t+..........7RR...3.?..M.Bo3.....bt@%....u.7..f.YI...+.J.#.DJ..`.^m...\|.DO&P..?....h2...1pS.G......Zl.X2.J.c...g.Pz....:N.w...d...dt4..XL..4.U..DrS.L......J.F...5.1...'.c?`.pX...l.....[.2`u.....T.mQ<..............C..I....2....Ne...Rc....@..v+....XF#.M...{........&...0.........Z......Nci..X.......&...4.7..z-<.D....\.(...`.F.!.L`1.......wV....N.. ...b...G.eB`..+&+.db0..m....:.#A.E.xfFL.u?Y,NcW.....[W.}.^T.dq.....,#.......^.qa.^...W..l+.cF...d.J/.Oo......t.,c....5:4.].a..B.o.O....\.L"z..?Z...6...,.#.../N.=.R..5...u....}O.+.M..c.Q..

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://d.agkn.com/pixel/10751/?che=1729811015772&ip=173.254.250.71
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	264
Entropy (8bit):	5.2772438857697095
Encrypted:	false
SSDEEP:	6:1naC/BIZymWfwOyYp+3yVRoGvihaYmO5w/sNgist++T:FmizIiV+6iZLekNdU
MD5:	BDEAB66118B19CDACE215A1CA55DF846
SHA1:	1DD404275C4F366E71D433AE05525C95BCFF7F8E
SHA-256:	5EBBE6B659820F1C0470130247EEB36582508958D82D154ABEB0B646605DC305
SHA-512:	6AD5C569F74DC1570E07B6E162F3C7DDAF9E02A6C8F77D074DCA408B8C876FF2DDA747F30787E867297B6A65ABDE3D12CC966F0FFA2794F519C33881AD7A9AFC
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSOglqVgoWfhEJ2xIFDU-7kaoSBQ32LRYkEgUNwfKEIxIFDSzOxGQSBQ2U1FseEgUNMYofKRIFDVNaR8USSAkxt1sdtVdGHRIFDWV5tzoSBQ14bxIZEgUNU_J1YRIFDZTUWx4SBQ1GZxV9EgUNVbv1bxIFDWOu7SESBQ28hddSEgUNU1pHxQ==?alt=proto
Preview:	ClMKCw1Pu5GqGgQIAxgBCgsN9i0WJBoECG0YAQoLDcHyhCMaBAgNGAEKCw0szsRkGgQICRgBCgsNlNRbHhoECB4YAQoHDTGKHykaAAoHDVNaR8UaAAptCgsNZXm3OhoECAcYAQoLDXhvEhkaBAgJGAEKCw1T8nVhGgQIDRgBCgsNlNRbHhoECB4YAQoLDUZnFX0aBAghGAEKCw1Vu/VvGgQIIhgBCgsNY67tIRoECCMYAQoHDbyF11IaAAoHDVNaR8UaAA==

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	dropped
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 462 x 210, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	28294
Entropy (8bit):	7.9326277147932425
Encrypted:	false
SSDEEP:	384:bulnWSEDxfe9O3HiU19VhvaHxnE+fks7JG5repz/FwIvTth1xWo1nfK6vM29791V:6lWJH3iuy1dclezqi1xWS1bIhbZkQle7
MD5:	3DE6E9402BA2F80B6E4CDCBC7FD20AD6
SHA1:	7334C810B81E274255A9112A47823F1C44DA49BE
SHA-256:	2E1A222A50A2BF286E52328CE24D20B4A605B4F029969D8D7ED39CE580B2C653
SHA-512:	6ECAB1A829F4C4C7D6DC151B15FF00663DEFF36CC7D86174A24933E74CD564ABF298A94D9B570A254FEE8E88DF4C24904B86CFF4506A9E5E67FAFACB84692A98
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............. .....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:tiff="http://ns.adobe.com/tiff/1.0/" xmlns:exif="http://ns.adobe.com/exif/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-11-01T12:41:37-05:00" xmp:MetadataDate="2018-11-30T13:34:26-06:00" xmp:ModifyDate="2018-11-30T13:34:26-06:00" photoshop:ColorMode="3" dc:format="image/png" xmpMM:InstanceID="xmp.iid:2b068d2

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	76
Entropy (8bit):	4.615072823597829
Encrypted:	false
SSDEEP:	3:xPU9n73Kun/CohziCnkiuqcInYn:xPU5z96oFkivcIYn
MD5:	D6DBA64C06F98B9492EC83C782923F8A
SHA1:	2AAAC1AB646BA749BCDFE8242DE80244A288737A
SHA-256:	F2C873F5783EF7A75E3ECB2010B242FE7C4DA7A0722DCC7C14CD280C63323C02
SHA-512:	89C163E8EC6B98F8263C5BC7D18CC0C13119F02524186684D2B7E46DD2BA961CB5A4925446C4A02616A9231C4C85F7E67B571ED9C5EF45C2F2AB04D42E9B086E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSMwkPR6dJeYqvTxIFDU-7kaoSBQ32LRYkEgUNwfKEIxIFDSzOxGQSBQ2U1FseEgUNMYofKQ==?alt=proto
Preview:	CjYKBw1Pu5GqGgAKBw32LRYkGgAKBw3B8oQjGgAKBw0szsRkGgAKBw2U1FseGgAKBw0xih8pGgA=

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 144, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	27351
Entropy (8bit):	7.986969411678174
Encrypted:	false
SSDEEP:	768:GKv0Z0jooCVQK3th0tqTP2NrvxrL44rJdByWcL+h:iqMF93LWDpJjkWqA
MD5:	E8FE1759B428C5F58A9F36E418228A51
SHA1:	8F0862AD9FBF3B0A6456E248789E2B4FEE472ABC
SHA-256:	578B385399C1037299469AD0DBDD050032D62083999E4E486DFA0DB546072715
SHA-512:	5BA493A38E357D0547CD01647E7EEC8BD33BC17B2D563C7B80686B6B0690774B065358E5931A2D108F95B8B10399698C584D53662BC1609D9BAF374B7BC99C3F
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/products/bryant-air-conditioner.png
Preview:	.PNG........IHDR..............X......tEXtSoftware.Adobe ImageReadyq.e<..jyIDATx..i.m.u&..9.N5.o...GR".IQ.5K.,K.;..t.H`$.8....`.F....v#I.A....nY.d.nKV.eK.E..8K.g>....V...;{M{.S..P.d...........o............y...x...x...x...x....(^..}.....0..!.rx..a~n...>..W.`ss....`~~.^z.yX]=.......,,,...5...x4..`...s.h4......~.?~...n.(+...!<.....O\|.....O.....n......;.y..[...Hc'.q...bRN..g...e..._...7+mY..lR.M[N...8.....V..7....d.MMMu[.V.jz..nwv.....s.3.s.....G....._..ffg..lB.....v.m.....f..=rd...S[G...^]98<u...w.....<.+++....9XY^...O.I..[n..~.w~..y.i\|......w.?f...=.gn...x.1..?...._..........Eh...Gz...u...2..w...cX?...0..5.Eqwz.}......^..F......roH.[../...*[._..p5._[..1.......&4-g@+h}..hXF.._..gF....MV..W.EQ......\|C...{)..m...5...~..K/..{avv........F...W.{.e.........\\.?..y}.=......V.E_.>..?...w.d2y.s.?.;..s....ve...>..V....nF........O6$5.S..1.4....D.,.....{,..^.:.Q.E.-.[..Mr....f+..b..N....?6k.....{..{.......=...J.....S..33[./_..cs...v.k..9T.....B{j../...lny...?.E...a

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53809)
Category:	downloaded
Size (bytes):	55108
Entropy (8bit):	5.755438656237703
Encrypted:	false
SSDEEP:	1536:jsb1Yv0Bw0j4yJfXWmq6NP0AS83YrVa3v4hJrqDmnP:WY10EyJf3kMY5wuJmDmnP
MD5:	CEB396A867E89A0762DA369994CD94FF
SHA1:	30181415A732A1372BB12F303533C52C8FBCF83F
SHA-256:	22DE77078397174E303A42D2C2F1B489D3D39529368405F0C45994588BCBC444
SHA-512:	E8F9D0F8712A386D589E0F64FF54219ADEDEE3E69B68BA158A78750A66DDE851C3D8FE07DADBA00B5FDDB19A52C4B7BBE8B6E55E0E348B3F98B8D67B7B0E4558
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/It53B4OXF04wOkLSwvG0idPTlSk2hAXwxFmUWIvLxEQ.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function Q(H){return H}var E=function(H){return Q.call(this,H)},b=this\|\|self,W=function(H,u,V,z,A,P,I,v,B,Z,r,D){for(D=21,Z=94;;)try{if(D==H)break;else if(D==37)Z=94,D=88;else if(D==V)b.console[A](r.message),D=z;else if(D==u)Z=2,v=B.createPolicy(P,{createHTML:E,createScript:E,createScriptURL:E}),D=z;else if(D==54)D=B&&B.createPolicy?u:79;else if(D==88)D=b.console?V:z;else{if(D==79)return v;if(D==z)return Z=94,v;D==21&&(B=b.trustedTypes,v=I,D=54)}}catch(n){if(Z==94)throw n;Z==2&&(r=n,D=37)}};(0,eval)(function(H,u){return(u=W(18,25,31,16,"error","ad",null))&&H.eval(u.createScript("1"))===1?function(V){return u.createScript(V)}:function(V){return""+V}}(b)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/jso

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53809)
Category:	dropped
Size (bytes):	55108
Entropy (8bit):	5.755438656237703
Encrypted:	false
SSDEEP:	1536:jsb1Yv0Bw0j4yJfXWmq6NP0AS83YrVa3v4hJrqDmnP:WY10EyJf3kMY5wuJmDmnP
MD5:	CEB396A867E89A0762DA369994CD94FF
SHA1:	30181415A732A1372BB12F303533C52C8FBCF83F
SHA-256:	22DE77078397174E303A42D2C2F1B489D3D39529368405F0C45994588BCBC444
SHA-512:	E8F9D0F8712A386D589E0F64FF54219ADEDEE3E69B68BA158A78750A66DDE851C3D8FE07DADBA00B5FDDB19A52C4B7BBE8B6E55E0E348B3F98B8D67B7B0E4558
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function Q(H){return H}var E=function(H){return Q.call(this,H)},b=this\|\|self,W=function(H,u,V,z,A,P,I,v,B,Z,r,D){for(D=21,Z=94;;)try{if(D==H)break;else if(D==37)Z=94,D=88;else if(D==V)b.console[A](r.message),D=z;else if(D==u)Z=2,v=B.createPolicy(P,{createHTML:E,createScript:E,createScriptURL:E}),D=z;else if(D==54)D=B&&B.createPolicy?u:79;else if(D==88)D=b.console?V:z;else{if(D==79)return v;if(D==z)return Z=94,v;D==21&&(B=b.trustedTypes,v=I,D=54)}}catch(n){if(Z==94)throw n;Z==2&&(r=n,D=37)}};(0,eval)(function(H,u){return(u=W(18,25,31,16,"error","ad",null))&&H.eval(u.createScript("1"))===1?function(V){return u.createScript(V)}:function(V){return""+V}}(b)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/jso

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 31 x 31
Category:	downloaded
Size (bytes):	2599
Entropy (8bit):	7.243513533180385
Encrypted:	false
SSDEEP:	48:YIH4iuXMyxlHFwMp6mghQzZMp6mLw3HOoMp6mLJ/DJ9Mp6mrtJYMPzbL3VL18U4D:PH4iuXMwHFwMpNzZMpHwrMpHJ/19MpXg
MD5:	0C4A35715C83DF7E952869FF3A0DA728
SHA1:	3EFC4D45B6972BC11CCF867233FDCFBE8A0A501D
SHA-256:	256AF37CCBED537C5FDA1AC05A825BC513CE10B928D5A4779755F76D41EB5318
SHA-512:	8EC56429687B1B2C0B486B265872B62383CC3E2F73DF1A22745D48E5594F41E9B83114CC9CF0AB384B74D400A900223B1DA81DE1282FCF1F16733FF90F3CF8A7
Malicious:	false
Reputation:	low
URL:	https://core-dot-sos-apps.appspot.com/images/core/loader.gif
Preview:	GIF89a.............--->>>HHHQQQ&&&AAAWWW...)))KKKSSSGGG222...MMM+++............888www]]]......}}}...666......................................................................................................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,...........@.pH.....`R. ..th8 .W.e..4<Sib.-k..K'<T,.f4..`.....+..yXg{.w.Q.o..X.........h...Dd....a....e.Ty..vky.BVe..vC..p..y..C.yFp..Q.pGpP.C.pHp..pIp....pJ......e......X.......e.....p...X....%..ia6....'_S".jt...EY.<..-..z..h..*AY. ....I8..q.r.J6c.....N..8/...f...s......!.......,...........@.pH......@....th8 .W..z0L......#...P.0g..B.`..e7....f. .Q.mx[.........[.....Dbd...j..x....B..iti...BV[..tC.......f..C.....c..C...gc..D....c.......c.......[...cL...cM...cN..[O...fPba..LB.-.N.....!..t....."..`Q...$}..`.........b..J,{.q.G.....V.....x.I....:A..!.......,...........@.pH......@....th8 .W..z0L......#...P.0g..B.`..e7....fusD.mx[.........[e.iCbd...j...X.T..jif^.V[..tC..[...f..C.fFc..Q.[Gc..D.cHc...cIc..B.cJ..

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 138, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2214
Entropy (8bit):	7.383943518524816
Encrypted:	false
SSDEEP:	48:3X/HXJ3Vp5S2OicM6wju4EeDm4zEJnr2UrcgYwl7:3vHxz5S2OiCCosQJnrVggRl7
MD5:	75581AD2110558F3239CFBD7C991666D
SHA1:	F73EBCA997C183B0BB38D093F416316CE151A9CE
SHA-256:	74E13E0F896AACE6BAB29678E9C9202283936770AEC4C2185530960E8B184B91
SHA-512:	5337E08B4514110E8CCF02E8F08577FF586D75EE17D2D615AB9C98E4399E03E0E506E2C33D7501F4D5E6FC08AF074F36AE56566309C650F1971C1A1167E05011
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............BY"V....PLTE......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................x...._tRNS............ "+56<BCMNOSTUV[^_`cfghjkstvwx{.....................................................y...."IDAT.....CSW......Q)"..h.m..( Z@.miK...[F4..K..6YR..PA..UvH....,7..s..<.......I....w.......F}...W?=..-.._[ ..k..9..d~\..[...gR.e.U....W.eP......=I.r....<(=M..-.C...Kn.*.A...........<..[.G......2.....p.M.9.].W.d.C....8G....,.279..1..r..#...l....xt..]i......1...+.....y...\%-_C..........b+.l..mXk.H...P...{z.a.G.....ExO......S.E.xO.5....P4..m#.[..<.m..;.PH.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	44
Entropy (8bit):	2.6968929824182477
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHht:/+t
MD5:	354857DE9229BAE15647FBC6364A4B19
SHA1:	F23E9C4FADC2E01BF323E90E5C1459BB6CF4F917
SHA-256:	5ECB58845A9AC30E4EB4B18EB0E7431BA1FB195CE035309735EFAEE67421C7A3
SHA-512:	D734513CE24E1684C2729E7D1C65764498AB06913553237F9FB0E3D252178A0CF06FF02E45592DCB996D9D757D6549ABF78667E5525E9687ECEB6645E4B45951
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;.

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18277)
Category:	dropped
Size (bytes):	18897
Entropy (8bit):	5.668931243578904
Encrypted:	false
SSDEEP:	384:a4PzmcmvXAxSvxff+9VWhunFMLpNYUECcgmrunaeC5NTBU+JzrW:ZCHv1fcnewizaeyrm
MD5:	6B937DF7FC11C029A2DB0C4DF88E69E0
SHA1:	3429FEF3FD96FED39CDE8378C0573A5C2EB4E9A5
SHA-256:	F49FCE9719C08B38CC24DFDF67C251623D0F57831ED84031D4255C9F2C21D929
SHA-512:	A69A8BE8D9E1195685BDD329D04B56AE60FC10312FBB4ACF66C5A48AA55B7CF65D76E73ABDAE531031483ACB95AB09C1099E70778A9229B1D0E0985F35A3FEC4
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var H=function(O,A){if((A=(O=null,l).trustedTypes,!A)\|\|!A.createPolicy)return O;try{O=A.createPolicy("bg",{createHTML:z,createScript:z,createScriptURL:z})}catch(U){l.console&&l.console.error(U.message)}return O},l=this\|\|self,z=function(O){return O};(0,eval)(function(O,A){return(A=H())&&O.eval(A.createScript("1"))===1?function(U){return A.createScript(U)}:function(U){return""+U}}(l)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var OQ=function(A,O){function z(){this.j=(this.n=0,[])}return[(A=((z.prototype.us=function(U,H){(this.n++,this.j.length)<50?this.j.push(U):(H=Math.floor(Math.random()*this.n),H<50&&(this.j[H]=U))},z.prototype).vL=function(){if(this.n===0)return[0,0];return[(this.j.sort(function(U,H){return U-H}),this.n),this.j[this.j.length>>1]]},O=new z,new z),function(U){(O.us(U),A).us(U)}),

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1932
Entropy (8bit):	5.213051869692102
Encrypted:	false
SSDEEP:	48:xtYurWR8X1mOrBJBjqsgoji1UjbRGtZ0f8bntO:QyWRfe21soZJbtO
MD5:	56A5F65FA11F636947A943001EF36E60
SHA1:	F9E272E5CB108845E947EC2A05C91D568A84F894
SHA-256:	991D5C05970B036AC3F5205D951930894C6E675D9842877B54E64F68B9E3E560
SHA-512:	34BFD2B139DD643C6F8EABD0635F39C69F527D3B765E45A77B8CCE5D2B603CED97E1661F1603F0558AE4932AC9B480333D3B65D9D0E769777D1E1A3689E6158E
Malicious:	false
Reputation:	low
URL:	https://local.demandforce.com/b/garwoodsheatingandcoolingi/reviews.widget
Preview:	.var sendTargetToFrame = function(){. document.getElementById('reviews-widget').contentWindow.postMessage({"target":location.origin},"https://local.demandforce.com");.};.var iframe = '<div><iframe id="reviews-widget" allowTransparency="true" src ="#" width="100%" height="1280" style="max-width: 610px;" frameborder="no" scrolling="auto" onLoad="sendTargetToFrame();"></iframe></div>'.var iframeSrc = "https://local.demandforce.com/b/garwoodsheatingandcoolingi/reviews.page?";.var d3cp_link_addreview;.var d3cp_link_scheduler;.var d3_review_level;.//if d3cp_link_addreview or d3cp_link_scheduler are passed in by the business, pass that to our page.if(d3cp_link_addreview){. iframeSrc = iframeSrc.concat("&d3cp_link_addreview=").concat(d3cp_link_addreview);.}.if(d3cp_link_scheduler){. iframeSrc = iframeSrc.concat("&d3cp_link_scheduler=").concat(d3cp_link_scheduler);.}.if(d3_review_level){. iframeSrc = iframeSrc.concat("&d3_review_level=").concat(d3_review_level);.}.document.write(ifram

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8924)
Category:	dropped
Size (bytes):	8993
Entropy (8bit):	5.129466866639177
Encrypted:	false
SSDEEP:	192:dUlEMlaGVM6s6q5VuqFsEikJyPEUhDw4HHFe:dIrHVNiVuq+EiPFw4nk
MD5:	5F03A332EEDF68CFB897CB7C575C5D53
SHA1:	BF31372544EBF0E975540E54BB98C21222BF83F5
SHA-256:	F758925F5FC978849C2CF4BC21F1C8D52DBCDDF98ACF86102FD727CF7CE200AE
SHA-512:	D728D7A52ADF2860D26E5942C5330E0E1904EE7581CCCDA19FAD9B664FA646DDED8322925E9EE6F9287245409FC099608D801BC4F29A7D78992E8F06F5E25041
Malicious:	false
Reputation:	low
Preview:	/! For license information please see picker.time.js.LICENSE.txt /.!function(t){"function"==typeof define&&define.amd?define(["picker","jquery"],t):"object"==typeof exports?module.exports=t(require("./picker.js"),require("jquery")):t(Picker,jQuery)}((function(t,e){var i,r=60,n=1440,a=t._;function s(t,e){var i,r=this,n=t.$node[0].value,a=t.$node.data("value"),s=a\|\|n,o=a?e.formatSubmit:e.format;r.settings=e,r.$node=t.$node,r.queue={interval:"i",min:"measure create",max:"measure create",now:"now create",select:"parse create validate",highlight:"parse create validate",view:"parse create validate",disable:"deactivate",enable:"activate"},r.item={},r.item.clear=null,r.item.interval=e.interval\|\|30,r.item.disable=(e.disable\|\|[]).slice(0),r.item.enable=-(!0===(i=r.item.disable)[0]?i.shift():-1),r.set("min",e.min).set("max",e.max).set("now"),s?r.set("select",s,{format:o,fromValue:!!n}):r.set("select",null).set("highlight",r.item.now),r.key={40:1,38:-1,39:1,37:-1,go:function(t){r.set("highlight"

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=3064, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4592], baseline, precision 8, 600x600, components 3
Category:	dropped
Size (bytes):	232362
Entropy (8bit):	7.903107650533088
Encrypted:	false
SSDEEP:	6144:zcnfiqKS2Ae02OGECLAEtjEfULR1fDI8vT6p:IKqKce02OGDcLsjLT6p
MD5:	D6E35121F3D00B283C56CFDA18DFBF0F
SHA1:	8486BAA86C8D2F55E1097DFDAA0F4E0400DEA38E
SHA-256:	B1DBE3091BCB6F8557EC6E58896C44ECCF5A60E19E643C447DA4F1523B3B4982
SHA-512:	D673064A11AEC459BEDDD615CB5D0B28B9BB924A46AAB9A9938830A1DADF50F2368A4255760A6E6961D32EA0B3CCBEA1A979BB4083E9C231408773F85A3AA672
Malicious:	false
Reputation:	low
Preview:	......Exif..MM.*.......................................................................................................(...........1.....$.....2..........i.............$............'.......'.Adobe Photoshop CC 2019 (Macintosh).2019:07:15 09:11:31...........0231.......................X...........X...............................r...........z.(.................................k.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.......o..d..:B...l..,f...)......9...mM<.I....9......n./H...6.F:.. .f..?

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://d.agkn.com/pixel/10751/?che=1729811014669&ip=173.254.250.71
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11870
Entropy (8bit):	7.97838993481524
Encrypted:	false
SSDEEP:	192:D8ZcT7NLk9pZ9VlSOxIzXV9ubT6jbDVekfp3m/uvQgzwG4bysCjvH6EGML:D8iT7NLsf9SrO0hegzNeys2vHDx
MD5:	0FDC473C9B42A6FABE1A79F5826AAE68
SHA1:	9089F6D4DAEE7137C978F309DA5CAEA3CF496E90
SHA-256:	142B68A7308295BB837963A9172E6D63A0C80AD7B79304931B96DD624828B6B6
SHA-512:	7B504C1B814D3E9F77E05514E0A45175C1AA402A8D41D6DF6CB0DC768467D410AEE8C64ED8DBB21E3074AA18218F4EFEFE8842176EFD5ED3C91BB442C6723D95
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<..R....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..}...W...2...[.j...\|....c.6.f..m......a .X....6..X`g7v&b....Y....e0..\|b....eI.d.j.[....+...........*.Z.....2.........?q..~.9...z\.i..q.Mh.... ...A.........!..'..\|B.rQ.. 4..;......Q?k.F....t..s.#....]e.....~z._l...@p^.D..[.....nz~..t./.F.!n;.w.....JH.#.....+...S..,.a2...&~E...7&..D.6...F>.W.in-_.4!.$.{...Fl..7.K.P~C#n..:.c.... ....A.....]. .N"M.......e.4...P _.C.......;....P\....0L.2...i... 3.-.Wo.F..4.w.5.3"&........F6..#..D..f6....u.z...G....T.!..doQq.`.X.S.7 ..#;:..!d'..9....aC>...xJ......1.E!..H>....DX........_CQM\}...2[....v<.c..h..A.A..<..W^e.@ .`.F?...b..............g/E1.d6...UXu..$.:.. .r....h.(...[..}..4.[0.g..[..E..Q...'._ <..k.$[AG...n'.0.h.......\{....f..x............A.....1.E&.@...~.0...M.....Z.f.V....DBG...ot.d.!/....E1TT.u+Z..Q.q....'....n.'.....H..R.OBW.uH............m[..GQ.9k%..6.(.8..9..l..9...-.@j..h......V...&Y.....nN."t~m.0E.. .

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18028, version 1.589
Category:	downloaded
Size (bytes):	18028
Entropy (8bit):	7.988319422898098
Encrypted:	false
SSDEEP:	384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgV:Y22oeKjlCnm9+1y8gA
MD5:	448C34A56D699C29117ADC64C43AFFEB
SHA1:	CA35B697D99CAE4D1B60F2D60FCD37771987EB07
SHA-256:	FE185D11A49676890D47BB783312A0CDA5A44C4039214094E7957B4C040EF11C
SHA-512:	3811804F56EC3C82F0BEF35DE0A9250E546A1E357FB59E2784F610D638FEC355A27B480E3F796243C0E3D3743BE3EADDA8F9064C2B5B49577E16B7E40EFCDB83
Malicious:	false
Reputation:	low
URL:	https://core-dot-sos-apps.appspot.com/fonts/bootstrap/glyphicons-halflings-regular.woff2
Preview:	wOF2......Fl.......\..F....M....................?FFTM.. .`..r.......$..e.6.$..t..0.. .."..Q?webf..e.5...@..?....... ..t............,3+.2q..F..YO...&>..b.m.5.Z..H$..Y....{.H.jd......%....y"......+.@..]..e..{...v..Nc.)..n...?~?.h...._.&i..........?.>..^K .v.-.c.1....2K..y..,'n....(.3Ewi.B....&.....T.lh.0M.....d.Y.r...nti.].yur........VXsj.....gMn...H.W..... r2.>iT`V7..R(.......+.o6.'c..B.....4..........T.]a[Qd<3wq8,...rTI..8....0>E.?.E...#..7'.....S...oc..._.7&#.+)....+4a..A6.c..y...f(b.F.....$;{ YA.1vP-tG........".....C.f- W.......uK.K..#.....*K.<... (.......Z.`...[.%.Y.T..{%..$....s{o.........vt"p..4`.....}o.`....'n.e.>..G.5s.z._N...PK.vmU...{z............."3`l.....W#..^.@+.,.c..ko..AO.p.nu...z.zJ).......1.}...O=.....x.R..`.J.`.q....Us/.+.k.v.1xl....j.l..El.\nD.....V.....jg.{Zd..z7...5..!.xm.5o.[....u..&..1.H.BkA...qr..R........(\gh....7...y.=.H.Z.UPh..$8.Rg.....z.g..N:...1u.$.....>R.]......."..f7....K.^.'...3.+E/..^.YU5].NB......8..+.

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1494), with no line terminators
Category:	dropped
Size (bytes):	1494
Entropy (8bit):	5.758973963340876
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJl46+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtQ1vS1y:VKEcimKo7LmvtUjPKtX7+1vQZ/rLrwUG
MD5:	41A69F721484EFB2144F54835E6FD0B6
SHA1:	ECFF8B908C27035E20A7FC3FB538A33A01C2D14A
SHA-256:	709950CA803CC9D243635113A2FBE17329B9CBD5993A7CAFBE125AA783754DF9
SHA-512:	6B318219C7BD324BA3EA8970419066B333F36D150304C0E836EDC87FD09AF8C0D8C44331D562ED360E69F0BD70D218E16212EE453B92B53DF3BEACBB22423932
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('CaptchaCallback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1923), with no line terminators
Category:	downloaded
Size (bytes):	1923
Entropy (8bit):	5.126154158418992
Encrypted:	false
SSDEEP:	48:NxPi4CjASZCvrNkC1oXKNM13ecG+xaUKV4tCOd/necGK:vPi4CjAGeKC6T1uIaUsmeG
MD5:	E2CBC3B33A1A1197AEB60DF462787DE4
SHA1:	EFC0212EB78C2C3AAEC4FD9904E29DD0AA483AA9
SHA-256:	A75FE200A9F82A4BF5C03A5CC9501E4E1407CA1022253543AA8C0BE861F38C7C
SHA-512:	783FBC82346B32DDA7400ACE3E7AC01064C1A6202951C8AA47B5FDFF0742CC3F332A86EE97E7B1C643A1650E357176B61F57B6FFC0ECD3590ED2A6A05EF1ECE7
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/scripts/main.min.js?v=1729028189770
Preview:	$(document).ready(function(){$(".topics-show").click(function(e){e.preventDefault();e=$(this).attr("href");$(e).toggleClass("hidden-xs show"),$("#block-topic-buttons").toggleClass("hidden-xs show"),$(".topics-show .glyphicon").toggleClass("glyphicon-triangle-top"),$(".topics-show .glyphicon").toggleClass("glyphicon-triangle-bottom")}),$(".special-offers-dropdown h2").on("click",function(){$(".special-offers-revealed").slideToggle(300,function(){"block"==$(".special-offers-revealed").css("display")?($(".special-offers-dropdown h2").html('<small>Hide Special Offers  <span class="glyphicon glyphicon-triangle-top" aria-hidden="true"></span></small>'),$(".special-offers-revealed").addClass("special-offers-visible")):($(".special-offers-dropdown h2").html('<small>See Special Offers  <span class="glyphicon glyphicon-triangle-bottom" aria-hidden="true"></span></small>'),$(".special-offers-revealed").removeClass("special-offers-visible"))})}),$(".carousel").carousel({interva

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.3336655487943405
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+5Gfjul2g1p:6v/lhPfA/UY7ulVp
MD5:	978C1BEE49D7AD5FC1A4D81099B13E18
SHA1:	AFCB011CFE6B924F202EE9544F17F631B32A01B1
SHA-256:	93AE7D494FAD0FB30CBF3AE746A39C4BC7A0F8BBF87FBB587A3F3C01F3C5CE20
SHA-512:	81F251D1CA407945457425B681A96D1E7743706FAFA47ACE26F5F569E69337E9AAF726BFF1A854B1A5A47A22E55C4BD285A4D21F695D126DA631A1C891D10F48
Malicious:	false
Reputation:	low
URL:	https://adservices.brandcdn.com/pixel/cv_confirm.png?aid=110315&buid=f51dbd93-2c9d-4f0c-a4da-f9e5b5526a5e&m=www.garwoodsheating.com&r=www.garwoodsheating.com&oid=19982838
Preview:	.PNG........IHDR.....................IDATx.c..........1q....IEND.B`.

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 462 x 210, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18953
Entropy (8bit):	7.936331547097677
Encrypted:	false
SSDEEP:	384:b6anf1STskQetSblI9SEhlAymlO0vQreXaW1UpP3tpUhU:ua9HNpKSzy/VKXaW1U4U
MD5:	230018AD48B693F768E86CB517EE35C2
SHA1:	932DC0BE9406D8818A3D9E4300F08D3843FE75B6
SHA-256:	15D0840113DB75E329C86D32E03E7858135EC687596860C8E73113C4BF79599B
SHA-512:	6894DEC9763B7D01594487013873BD77D6E3CB57292B974EC77E26392736DBCFEE60EA7CB5F97C5F3C42A2B3B6412019B6757C8AE216B492B9E8A75498E45CC8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............. .....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-11-01T10:55:58-05:00" xmp:MetadataDate="2018-11-01T10:55:58-05:00" xmp:ModifyDate="2018-11-01T10:55:58-05:00" xmpMM:InstanceID="xmp.iid:dfb64eab-3cc8-e747-a270-48a047d65f6b" xmpMM:DocumentID="adobe:docid:photoshop:fb02653c-18fe-1a4a-bc9c-0a5de8b45650" xmpMM:OriginalDocumentID="xmp.did:bdda0811-fcd5-5d41-8d1f-50958ecf5c1b" photoshop:Co

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	327705
Entropy (8bit):	5.580772724471399
Encrypted:	false
SSDEEP:	6144:f4ACRo3k4ayjgBvi8ECFqXk9nw+eKBBNy2U3R:QAC2krykBKQWh
MD5:	23F55B3A7D0280668F3F48BD37FB98FD
SHA1:	EC1C369BB5204952EC1D30374DAF9667351295DC
SHA-256:	0DFF52DC899C0634A1FE0D52CB06960686074A1FF3D0B0832192154866DEF307
SHA-512:	DFA9469771F83D567854B66034BB10A96FFC8115F3029600AE2F9883DF6DFFD6E3B749A6E6F5F81AACD4457701EAB593ED9D233B279B196EA5C33096876F4F40
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1923), with no line terminators
Category:	dropped
Size (bytes):	1923
Entropy (8bit):	5.126154158418992
Encrypted:	false
SSDEEP:	48:NxPi4CjASZCvrNkC1oXKNM13ecG+xaUKV4tCOd/necGK:vPi4CjAGeKC6T1uIaUsmeG
MD5:	E2CBC3B33A1A1197AEB60DF462787DE4
SHA1:	EFC0212EB78C2C3AAEC4FD9904E29DD0AA483AA9
SHA-256:	A75FE200A9F82A4BF5C03A5CC9501E4E1407CA1022253543AA8C0BE861F38C7C
SHA-512:	783FBC82346B32DDA7400ACE3E7AC01064C1A6202951C8AA47B5FDFF0742CC3F332A86EE97E7B1C643A1650E357176B61F57B6FFC0ECD3590ED2A6A05EF1ECE7
Malicious:	false
Reputation:	low
Preview:	$(document).ready(function(){$(".topics-show").click(function(e){e.preventDefault();e=$(this).attr("href");$(e).toggleClass("hidden-xs show"),$("#block-topic-buttons").toggleClass("hidden-xs show"),$(".topics-show .glyphicon").toggleClass("glyphicon-triangle-top"),$(".topics-show .glyphicon").toggleClass("glyphicon-triangle-bottom")}),$(".special-offers-dropdown h2").on("click",function(){$(".special-offers-revealed").slideToggle(300,function(){"block"==$(".special-offers-revealed").css("display")?($(".special-offers-dropdown h2").html('<small>Hide Special Offers  <span class="glyphicon glyphicon-triangle-top" aria-hidden="true"></span></small>'),$(".special-offers-revealed").addClass("special-offers-visible")):($(".special-offers-dropdown h2").html('<small>See Special Offers  <span class="glyphicon glyphicon-triangle-bottom" aria-hidden="true"></span></small>'),$(".special-offers-revealed").removeClass("special-offers-visible"))})}),$(".carousel").carousel({interva

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	30658
Entropy (8bit):	7.992981991039087
Encrypted:	true
SSDEEP:	768:1PaU1Ju4zxkDmxIrKkeRwupyMc46BQTyKrSsXTa1ug:1/7u4zxmmU6RqMcHqGBsO1n
MD5:	8C41AF1AAF6B8A53CCDA0F2DCC82CDF0
SHA1:	743C18E219DB221ACD956978EA6436A587B697F6
SHA-256:	63BE2CF64867A18DFBF5F4F886E78E6292E19DF54AFF5FD88C5F72D297D84231
SHA-512:	7050178DCC1BBE9ACCE73AB80CB1A2CB6C8F8C8FE781A03560138799A659443992D77BA4A6EA0E711EF5CB793C45BFC5269FCFEC004285FCB8B847D07587CFEF
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/J_kzFgju7PA/sddefault.webp
Preview:	RIFF.w..WEBPVP8 .w...a.......>q0.F$."!......en....p..5...b..._......>..I...{...........6.f~...w.?w.......".......g?....g........#..z.~s...j6...S.O:....O.^...\|............O.~t.">....m... 5....B..C...P..P../T ..;.... 5....B..C...P..P../T ..;.... 5....B..C..d........d..y.._.n\|.....Q%........Dk.[b.MG.k@.r.\|-_.G...%_...3.En4z:.TK..=.......'8A....%.b.2P....1..}S......Qe.c .rw...PO.. /{.J..i:....O.:N. ....lpNf.u..X}.W..+p.......GhM.....E..r;S.?_P...N.L..3.M[.S......i...E......%...'\|...........Q...jK/......^.j.]-E.o..CF?/..%..<..g ..Q.F_..x..{.&A...\nf....$C.y3..X..B.d..R..b\|...}..r.g..............Q.glN...1.y.8..X...pLU.).i..&....u..s.!.../....w...]Sm..v.8....qq.2..PXH.5....u...<.\|.`..G.........YznY(.r.B.d...x<5##..._...j.u\|F...O5.^..w.J.....6.Z..j....R.>.=..\|.fr..u..]h....3.'.R!.[..*....jQ...".y....e..x.:.(...{..........l....>.>..$w4.1..n....C........e.J<r".D.F!.....J..........:....d.'.H...-..d..P7S....#..W/4....N.(5.t....\.......>.".L6.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2188)
Category:	dropped
Size (bytes):	57899
Entropy (8bit):	5.522455573366164
Encrypted:	false
SSDEEP:	768:etkIzpGt8BbK1WYyk37g4KzbamUmIz3MFeV65sHqVbwxE4Fv:etkMGOKzp0Fzba7mIY/wxHFv
MD5:	40BFFB471FB2F71902C292A6764692DB
SHA1:	CD042D148E78D93D506395B1222F071AFF6F3610
SHA-256:	3A1AE68D835D095297598E1964665FED616649A20FD7D3BFDC6A97C9B468ACD6
SHA-512:	2F3F4E418B053D43BC2FE7150AF36DCF65195A5E3847972EBF8F3AB8809B9378CD3D34DEFBD629BC3A2C2DE15E7D14A6963BB34CAB68F342BC480D0A64ABE02B
Malicious:	false
Reputation:	low
Preview:	(function(){var n,ba;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this),ha=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},la={};function u(a,b,c){if(!c\|\|a!=null){c=la[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in q?f=q:f=fa;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ha&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?da(q,d,{configurable:!0,writable:!0,value:b}):b!==c&

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11609
Entropy (8bit):	7.971898581143118
Encrypted:	false
SSDEEP:	192:8SDS0tKg9E05TO7/DltN/KfVYshlce1aubgNK8FYvf4fuiJGn8FUp:7JXE05qDDzkfqsZbsb+vAfuiJq8FUp
MD5:	A847A0FC41CEFDCA0DB0D898D08C230E
SHA1:	DDCF8AA350971CD80E2788C3BB5AA953525AC782
SHA-256:	38A819A245C0ECEC8592139F56C1C058859ECD8FE694551084CFA4F97704A135
SHA-512:	F9FB8A4C3B03244ECC736AC3A4FC83BB0E1D8D3223117DC8FE4DE0A491CA42391DC7A7B0305F9DB28EAAD4B82666164E2E0539959A1AEBB99C37679DEAC5DB37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<..R....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65466)
Category:	dropped
Size (bytes):	632239
Entropy (8bit):	6.067834105722422
Encrypted:	false
SSDEEP:	12288:1dKDxJpNi/5A4N3YpDvapdI27L3Sddzier6LyI7:1ADxJp61N3YpDgV7L3Sde
MD5:	B87C4F94551E5B3EF017E8887F659340
SHA1:	BE83AFCF3DC6631738AF46B1328E960B4A61FA20
SHA-256:	7720A5819BA24455BCDE73EC9415A686FCD38D0CCF1AFF87B8681B03590E2D78
SHA-512:	F80E19215671410E509201BA81D6804363D4DB9B26ABA0C3850332B45F773CA5AFF41ED6A04CF08DF40623A9EB91A07E444F07927B0CEEFA3EAE3F61DC5A1931
Malicious:	false
Reputation:	low
Preview:	/! For license information please see main.js.LICENSE.txt /.(()=>{var e={9747:()=>{!function(){function e(e){return e.replace(/<.[^<>]?>/g," ").replace(/ \| /gi," ").replace(/[.(),;:!?%#$'"_+=\/\-]/g,"")}jQuery.validator.addMethod("maxWords",(function(t,a,n){return this.optional(a)\|\|e(t).match(/\b\w+\b/g).length<=n}),jQuery.validator.format("Please enter {0} words or less.")),jQuery.validator.addMethod("minWords",(function(t,a,n){return this.optional(a)\|\|e(t).match(/\b\w+\b/g).length>=n}),jQuery.validator.format("Please enter at least {0} words.")),jQuery.validator.addMethod("rangeWords",(function(t,a,n){var i=e(t),s=/\b\w+\b/g;return this.optional(a)\|\|i.match(s).length>=n[0]&&i.match(s).length<=n[1]}),jQuery.validator.format("Please enter between {0} and {1} words."))}(),jQuery.validator.addMethod("letterswithbasicpunc",(function(e,t){return this.optional(t)\|\|/^[a-z\-.,()'"\s]+$/i.test(e)}),"Letters or punctuation only please"),jQuery.validator.addMethod("alphanumeric",(f

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4804), with no line terminators
Category:	dropped
Size (bytes):	4804
Entropy (8bit):	5.821957725049159
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUsOuSxWch2+:1DY0hf1bT47OIqWb1zOuSYch2+
MD5:	BC97C56AA6FD393C69EBFE1B975F4D70
SHA1:	B81A6AF089A2CF7E23D6B09E483FA96841B3F45B
SHA-256:	302F65F534B2F1B7F6A3449F35F38B861F31AE6AD33DD684E0E74D7D6E322A51
SHA-512:	10E81E12624827B749EA40B367EB797991051C44671C73829B6AA41F184C0B658E1DDC25C32C7A0EA695227972D75329F99433B3713C69194FFB7CC864165518
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://d.agkn.com/pixel/10751/?che=1729811015842&ip=173.254.250.71
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 135 x 83, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7529
Entropy (8bit):	7.927931847808942
Encrypted:	false
SSDEEP:	192:VwYNI2ydjI/tCrEZmfGHoU+IvfOjGw/jJKa/LDj+:VwUI2ydStCIZDuIvfUGwjJL/LDj+
MD5:	A096543538B6903BE7119CC50A1BBFCA
SHA1:	5E410633A77C106DF5FD89B04C96F40DD5CFC50D
SHA-256:	A23F999F2D499792D05311EF01E6C41EFE83A66B27A750126137178C274E9F31
SHA-512:	72A43A1FFAF5F27A784253F6FDD0288DBA087373B55F46028A186AACA669D1B5927E123E0735D34C1455C6679B26C24DE1CCF759D2AFBFDA21CAEDF86D50820C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......S......H.3....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:809E005C9A9C11E593EE88C0C6ED511E" xmpMM:DocumentID="xmp.did:809E005D9A9C11E593EE88C0C6ED511E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:809E005A9A9C11E593EE88C0C6ED511E" stRef:documentID="xmp.did:809E005B9A9C11E593EE88C0C6ED511E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>g_N}....IDATx..].X..^ .(..7b.X.F4v,D...5^.....&j..^S4.v-Oc...c.x..,.'..5...$.(.(`y._.=...9.. .9......=3{.{.......

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18277)
Category:	downloaded
Size (bytes):	18897
Entropy (8bit):	5.668931243578904
Encrypted:	false
SSDEEP:	384:a4PzmcmvXAxSvxff+9VWhunFMLpNYUECcgmrunaeC5NTBU+JzrW:ZCHv1fcnewizaeyrm
MD5:	6B937DF7FC11C029A2DB0C4DF88E69E0
SHA1:	3429FEF3FD96FED39CDE8378C0573A5C2EB4E9A5
SHA-256:	F49FCE9719C08B38CC24DFDF67C251623D0F57831ED84031D4255C9F2C21D929
SHA-512:	A69A8BE8D9E1195685BDD329D04B56AE60FC10312FBB4ACF66C5A48AA55B7CF65D76E73ABDAE531031483ACB95AB09C1099E70778A9229B1D0E0985F35A3FEC4
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/9J_OlxnAizjMJN_fZ8JRYj0PV4Me2EAx1CVcnywh2Sk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var H=function(O,A){if((A=(O=null,l).trustedTypes,!A)\|\|!A.createPolicy)return O;try{O=A.createPolicy("bg",{createHTML:z,createScript:z,createScriptURL:z})}catch(U){l.console&&l.console.error(U.message)}return O},l=this\|\|self,z=function(O){return O};(0,eval)(function(O,A){return(A=H())&&O.eval(A.createScript("1"))===1?function(U){return A.createScript(U)}:function(U){return""+U}}(l)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var OQ=function(A,O){function z(){this.j=(this.n=0,[])}return[(A=((z.prototype.us=function(U,H){(this.n++,this.j.length)<50?this.j.push(U):(H=Math.floor(Math.random()*this.n),H<50&&(this.j[H]=U))},z.prototype).vL=function(){if(this.n===0)return[0,0];return[(this.j.sort(function(U,H){return U-H}),this.n),this.j[this.j.length>>1]]},O=new z,new z),function(U){(O.us(U),A).us(U)}),

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 329, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	103009
Entropy (8bit):	7.993394744585247
Encrypted:	true
SSDEEP:	1536:b+jreE9yhgtaAg8aW4QUSUyW7HMaxW5j/6jvN7SGv0DNbofCgWE3D1:qfe/Afg8djUSU7zY5j/ESGsDNbACvEz1
MD5:	63DB671C370F118B44DA6226E9761EAD
SHA1:	08A979CD471DB904F68929BA60F37CE4E8EC28E8
SHA-256:	67621F5A688B7CB38417150AB4B6148209B3759E97AD2EE27AE9A58FBC7E20F2
SHA-512:	593DAAE49A1BE0F2D269AD37AD819B6535022EB26BA97A76380C19EB4C747FA0EF478305B7810DF5FE2E2DE04EF0100BE62DABB9C1D75D67CBE887BEC7B7C16A
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/0014360DEA000413/images/Bryant-Circle-of-Champions.png
Preview:	.PNG........IHDR.......I.......{+....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.163858, 2019/03/06-03:18:36 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop Elements 18.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:DED28E687D5411EB90C4B879D7E639AD" xmpMM:DocumentID="xmp.did:DED28E697D5411EB90C4B879D7E639AD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DED28E667D5411EB90C4B879D7E639AD" stRef:documentID="xmp.did:DED28E677D5411EB90C4B879D7E639AD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>._,\....IDATx..W.$.&....:"....U(.@hM.M.%..{D....}..y.?..k.k.k#zf..M..$..(..u.......=.GU..H.,...~a.....

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 201, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11439
Entropy (8bit):	7.913170712923855
Encrypted:	false
SSDEEP:	192:4Su7FhknqILnnqFXuVDNkPAfjv/Zdxi2mJKJ2q7dU3kKtcod1RB1Ssx444:/uYnquncuVDOP+vk2Uey0KtcJsx8
MD5:	0D997BEFA021E143940B496DCD7A8BF0
SHA1:	B386CE8D27063CFAFD9BB3D01327971FFEAE4A5E
SHA-256:	16CA9D0DAA0F769BDFE8DA173138CA78854F8B2EC03CB4D8E57A5C483C429A49
SHA-512:	9643C2D73818227706393BC00ECF9F81C82DB676F090C0B3B4EAD2D4AABE479B3D43375E58C5805A0807E191621F5CB45FE936A1B5F6E1089C1AE70252D48694
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/google-reviews.png
Preview:	.PNG........IHDR.............f.};....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-11-02T08:52:04-05:00" xmp:MetadataDate="2018-11-02T08:52:04-05:00" xmp:ModifyDate="2018-11-02T08:52:04-05:00" xmpMM:InstanceID="xmp.iid:9f9b9ec9-8f0b-a447-8b07-4c2314297311" xmpMM:DocumentID="adobe:docid:photoshop:72d35ee3-c1db-7e4d-ac2d-0085e22ac816" xmpMM:OriginalDocumentID="xmp.did:482a1738-159c-a14c-9a3a-5faf303c95b1" dc:format="i

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 138, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2526
Entropy (8bit):	7.470691059241823
Encrypted:	false
SSDEEP:	48:3X/HXJ3Vpjwyil4UcUDSM8Fc/92PTGh1MMlYxSJwOU/X:3vHxzA4U1SPucShCMlYxSJZmX
MD5:	83DDF3EB2BD631B4B7FB6E1CA0319566
SHA1:	800289418D934ACE6411E927B8A1B82A70FD5951
SHA-256:	F20814C61A8037DCC394479044808A20804CC4BDEF9E83D88B150CD043384854
SHA-512:	DD740007951F4B52C172C5DE86BC5AA2DB5DAE1B145E10EE3B3039D0D8EC36348A3C53FC880D5893DB6F71AD068BCD6148C45DC1D6EBB7B947E24C0983787B73
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/images/icon-gears.png
Preview:	.PNG........IHDR.............BY"V....PLTE......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................x...._tRNS............ "+56<BCMNOSTUV[^_`cfghjkstvwx{.....................................................y....ZIDAT.....C........Q)..h.mw.7..Pk[.RVp7eE..oB..!$...........g7.d&.df.......2.,.....Om..'..[g.O.W.<m......?.....k.c.....yu5}^I...m.....\[Af:.C.4...8..d.S..i.I2....E....n..$.7......%.:G.....d.s6.dk #X...w,.[u...VM:... ...K}/..[O:\z..=.D%...C._..]..RI......\.../P.j.0....Tm.Il.T.K.L.f.b...R...T.....S...}..>i...5.&...E.B..Z.N.-..u...h..C.;'.C....$..^.[....9&w

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1154, components 3
Category:	dropped
Size (bytes):	318936
Entropy (8bit):	7.98276377517724
Encrypted:	false
SSDEEP:	6144:gk4Dz/9JeCQghm/OTQhcZh90CI7qZyaptUyMxYMlMViXH:pQz/9Itgh8hOECI7qjtU9xYMiwXH
MD5:	2A34B05194893C31C082D0D7BAB7BC54
SHA1:	DD75BD782748BFC0A0D55F0733FEA7E6FEF17D92
SHA-256:	61CBF725D99CE729765B3C77FCD43CED938AEAE1DCCD74759359287AB4D1103A
SHA-512:	CCA690F33E4A2C3D998EC48CBAE0B2FC76E2DBB889BA957EE3EC92E3EAB4D4D82C40C2B09115E7973A6A68175F7FCED3ED63E94D96F36302BF49C2ACA4E275C0
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......2......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:9961caa3-4de3-4628-a981-18d93a4e1f97" xmpMM:DocumentID="xmp.did:C96E576827E511E59900FB16BADF50FD" xmpMM:InstanceID="xmp.iid:C96E576727E511E59900FB16BADF50FD" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:50607007-69be-4465-8607-ea5b0ad72110" stRef:documentID="xmp.did:9961caa3-4de3-4628-a981-18d93a4e1f97"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=3064, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=4592], baseline, precision 8, 600x600, components 3
Category:	downloaded
Size (bytes):	232362
Entropy (8bit):	7.903107650533088
Encrypted:	false
SSDEEP:	6144:zcnfiqKS2Ae02OGECLAEtjEfULR1fDI8vT6p:IKqKce02OGDcLsjLT6p
MD5:	D6E35121F3D00B283C56CFDA18DFBF0F
SHA1:	8486BAA86C8D2F55E1097DFDAA0F4E0400DEA38E
SHA-256:	B1DBE3091BCB6F8557EC6E58896C44ECCF5A60E19E643C447DA4F1523B3B4982
SHA-512:	D673064A11AEC459BEDDD615CB5D0B28B9BB924A46AAB9A9938830A1DADF50F2368A4255760A6E6961D32EA0B3CCBEA1A979BB4083E9C231408773F85A3AA672
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/default/review.jpg
Preview:	......Exif..MM.*.......................................................................................................(...........1.....$.....2..........i.............$............'.......'.Adobe Photoshop CC 2019 (Macintosh).2019:07:15 09:11:31...........0231.......................X...........X...............................r...........z.(.................................k.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.......o..d..:B...l..,f...)......9...mM<.I....9......n./H...6.F:.. .f..?

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547)
Category:	downloaded
Size (bytes):	1085
Entropy (8bit):	5.095179729031514
Encrypted:	false
SSDEEP:	24:2+FuqJkpCimRkjEsJXLquLGkbmT1uqd81DmbXqSgumaCuH+ZpLy/:zz9imkoS9GJTtweqSLUpLy/
MD5:	DC654778115261E448E78E94F11BBD0D
SHA1:	C56D8FB4585682563F497BEDA19146ACBD4FED93
SHA-256:	E23BA820186A8BFF62D9F310C1428ED6A987683018EC99414073F1E2CBA4B265
SHA-512:	DA7A880EBAE6981FF5B16B7BC9FC06F4A0F0B2CEDF7487A50AE61C3275055C58DE82B053355B6A0D8B3A01C2A14C7BADDE552B8A6788B17F0B4AE15A6B82BC93
Malicious:	false
Reputation:	low
URL:	https://tag.brandcdn.com/autoscript/Garwoods_Heating_and_Cooling.js
Preview:	(function() {let elem3 = document.createElement("iframe");elem3.width = '0';elem3.height = '0';elem3.name = true;elem3.frameborder = '0';elem3.style = 'display:none;';elem3.scrolling = 'no';elem3.src = '//insight.adsrvr.org/tags/jsac74j/s4sw4zh/iframe';document.body.appendChild(elem3);let elem4 = document.createElement("img");elem4.height = '1';elem4.width = '1';elem4.style = 'display:none; border-style:none;';elem4.alt = true;elem4.src = '//insight.adsrvr.org/track/evnt/?adv=jsac74j&ct=0:s4sw4zh&fmt=3';document.body.appendChild(elem4);})();.(function() {let elem7 = document.createElement("img");elem7.height = '1';elem7.width = '1';elem7.style = 'display:none; border-style:none;';elem7.alt = true;elem7.src = '//insight.adsrvr.org/track/conv/?adv=jsac74j&ct=0:capyj8y&fmt=3';document.body.appendChild(elem7);})();.(function() {if(typeof(adv_id) == "object"){ adv_id.push(110315);} else {adv_id = [110315];}s=document.createElement("script");s.type="text/javascript",s.src="//adservices.brand

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 35, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2334
Entropy (8bit):	7.903445127094226
Encrypted:	false
SSDEEP:	48:0PDEKHkFjVGF4YJdZaLQLcKHRWFmEiTqfs2iMOyx3jDnXaHIZId0HzZvmXw+Rl+e:0PQcGjVGRJf+QLcKxWF+qfeuZXaCIcds
MD5:	4DE368009DF9CEE449E27DAE9142283E
SHA1:	963BA14CACDBBADCC29152971814ED3ED09D2126
SHA-256:	70B6A01CAD6BB3FB8B8CAD2166D45646FAB8DE715874DEDBD8EC27A35E96B2C2
SHA-512:	4929DBFD582FD5B603F31FCC595CEC8B4765ADAAE3C12E6791D8C3BB37F79C5AEC7CBC9C440B5233BCB9A1171C4697C4DE2384787E43CF63FBF7D2873B18391D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...#........F....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..YilU.....{...`.... 0P...H .-...(..$....?..."J.)?..b...E.!@.%....1.c............o......B(...4...;3.\|s..........#....b.V...+...O......fy...Y..lF.L../.....x.s.,..h4.RD.er...,o...M f.O{n.....?....Q.^.5......U.#"".>......6...v..?..=.....j..C`s..A..t...{`7A.7h.............F.....r...>......>.4......-.)S0u.T$&&"##....:.......m7n.1c.`....u..B.v...c.....#;;.N.#...r..$....}.....G...B.;...].18.g...e....y..=.'O.z..U.8q.3f.......}.....565.....=.={.S'..<X.#.c.........p..A.Y..K.,..I.t`.^.~.N...Z..EEEHKK.S.U...%....?Q.s...~...">6._...].t..e.............F.Bll.N..g1m.4.k.N'.6>.m..R....\.\|.l..dff..,X....0..0.K.s..a.n.:.E.s...v....w.M..r..7..V....6Rc.._....CM.....n2..72....&&&....s..V.Z.[.n.....:..k......v..0J.[x..A...Zg.e.9.......w.1.......$.......U..$5..Y...`.U..G. ...N......8...z.^.7n...C1~.x.....q..=.DB&.2...o..5kV...J.'.H0,7o.xK.A.s...x.:u.G..EII.R........?.L.`

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22128
Entropy (8bit):	7.620597098091008
Encrypted:	false
SSDEEP:	384:IqLiTmbi9KikpS5iLHRM2I1w7mCeeDp2akqvuPcogegwQk+0XHF2oyJ46Z:IqLiTwiCSeHCG7teeDp2akqaGNsHFNkt
MD5:	B1B5376A73E0A593C32EB03FD963B48D
SHA1:	DD7D4264856779AAF1A26AD746FEA0BFC4E4BB30
SHA-256:	0466E8681C2370BC47739F30C39A37B2C65312F97062CD93D1B64B184876FC9A
SHA-512:	54002B502C933F053F4E4D6BB78DF300CB5046BDF4303FDACA2D6244740DB24CD527F8F5E4752AD02FD7A62AC00B6E1FC2B824DA723BEBE3F14E1FFB2B493BD5
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/products/bryant-gas-furnace.png
Preview:	.PNG........IHDR.............<.q.....tEXtSoftware.Adobe ImageReadyq.e<...OiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:05:41 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". xmpRights:WebStatement="". photoshop:AuthorsPosition="">. <dc:rights>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </dc:rights>. <dc:creator>. <rdf:Seq>. <rdf:li>Photographer: John Fleck 01/27/2011</rdf:li>. </rdf:Seq>. </dc:creator>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </dc:title>. <xmpRights:UsageTerms>. <

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=15, height=1274, bps=0, PhotometricIntepretation=RGB, manufacturer=SONY, model=NEX-VG20E, orientation=upper-left, width=1920], baseline, precision 8, 600x600, components 3
Category:	downloaded
Size (bytes):	256353
Entropy (8bit):	7.950735648563406
Encrypted:	false
SSDEEP:	6144:O1Y1oQMNAOW7zADFAbVlUWHt6YSrtKkY3MS1z0rJ8N:QqDMNAxcDFAbVlUAwdYt14rJO
MD5:	C2D2D6F43B5D9A3AD652524F59A77C6E
SHA1:	195D5D1300BA238A78DDC4FAFDF186A34EDE783A
SHA-256:	38EC0F69B3579D46CC9238FE72075581AF85DA855C2766139E1612D1B20F8052
SHA-512:	70848CF855DDCDC4790DDA55C368C711C8134C20AF63DD68686B364DF38311F2905A011B798D61DA4FFC5B6D6DA3C5158FFACEB57C42284AA6815EC16F106BE0
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/default/videos.jpg
Preview:	....!.Exif..MM.*...............................................................................................................................(...........1.....$.....2.......................i.........(... ......SONY.NEX-VG20E.......'.......'.Adobe Photoshop CC 2019 (Macintosh).2019:07:24 09:25:12........d..........................'..................0231.................................................................................X...........X.4.....................d...8....2016:06:13 18:54:55..e`...B@.K.f..B@...N....E 18-200mm F3.5-6.3 OSS............................n...........v.(.....................~...........$.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'.....

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (64951), with CRLF line terminators
Category:	downloaded
Size (bytes):	465450
Entropy (8bit):	4.944133942845841
Encrypted:	false
SSDEEP:	1536:9w+xlMHHwL8RwIzXmTkBhA+/6Zk58E1fy5YaPI5Y7JUcaAhGpXo+U59QAGo+RNUX:fcwIzq+/6F7+UncG3g1pFq3
MD5:	F3EE543AE0F6BC3BB63A303E8A9BB799
SHA1:	9B2F338ED3ECC90E262CC484C282E205B04F8676
SHA-256:	AD95078526B9526FE1C1D607E2C7B3D166D5A3FB2111E9331D7351EB07A7DECF
SHA-512:	23E9C4C4E6D651B99193A69CA0D0E17EF57FAFBFD67487E6400ED1D7668024BAF2353FFF537E4FC505F06BC9BC60191A46E8085D70C635B893BDD67FA98B7842
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/about/reviews/
Preview:	..<!doctype html>..<html lang="en">....<head>.. <meta charset="utf-8">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <meta name="msvalidate.01" content="9E3403CCBB82E1EA5F6789288E1A7AA8">.... <meta name="description" content="Comments from our customers about the quality of our work and team near Edwardsville, IL">.. <title>Garwood's Heating & Cooling, Inc., Reviews - Edwardsville, IL 62025</title>.. <meta name="keywords" content="" />.... <style>.. @charset "UTF-8";button,html,input,select,textarea{color:#222}body{font-size:1em;line-height:1.4}a{color:#00e}a:visited{color:#551a8b}a:hover{color:#06e}textarea{resize:vertical}.nocallout{-webkit-touch-callout:none}.pressed{background-color:rgba(0,0,0,.7)}textarea[contenteditable]{-webkit-appearance:none}.gifhidden{left:-100%;position:absolute}.ir{background-color:transparent;background-repeat:no-repeat;border:0;direction:ltr

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
Preview:	{}.

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29967
Entropy (8bit):	7.988710194229013
Encrypted:	false
SSDEEP:	768:XB62vGbmWCO3QhMPmZD/lu8vZTWoAgi+YkULyF:x0SFZD9tvZ+gULa
MD5:	BF9C6A2965A60E71D9FBDD1256412539
SHA1:	0DB3CB71147C3AA14D9729FC6A968E59C3A27E8B
SHA-256:	60A73B6BD268237E16BB2FD815B540E1EB098087CAF4B1B9823A7D525B164B4B
SHA-512:	0D6C9976C4D9714C036AC40BA9CBD13A3BC64D790A2656192FB98AD10650D963FFC61770D10A3EC2763C0962F074F461E09DB5D1D49B9BE3BF688113343C82B2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....tEXtSoftware.Adobe ImageReadyq.e<..t.IDATx..y.d.q.V...{...y...`.........(..I..b.JbY..G.#..\|qb9....)...%Y.$...O... ......Y0.>o.z_...9....o......5.xo..r..:U...U.PJ..m.v.o...l.6.k.)X..M..m.6.k.)X..M..m.6.k.)X..M..m.6.k.)X..M..m.6.k.)X...{7os..w.z..o.....4..@.7..S...!.i....(..S. ..Ou.z.>.....H.....?....K..".l.;.O.s.J?H.I~.>...S..g)../.2..-....NCuq...g`p.v....Jy...6@.........!~_.&G..\.C.Q.b..W,..(/..S=.J...8. ..^u&W...<d2Y..1.q......nA:[.L6....RYhW...... _..... .N......7.5%..+..x...08<.....h.;...A.?....n.:.....u:.[.y^:.J..........Y.C\.t.r..^........+$.P*.@.>..m....b......X.......~).@....\.^.^.8...Z.....`...........^g.....8-t.k....J..R..}..wz.../.`............i0w.....(i.3../.....x`..h.OPqq.....H...o6Z..r}....,..pA..._9..v{...8.Y%E.6......2...."!.....H..0).lX.H\...x. .h....wi?....^.H..............&..u=^..Je..,.K..}&....t..... ,6....9... j..f..?...C..%%.R....F...d.t.Z...N.~..z........>.....{..o..G.....gP....

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 137, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13394
Entropy (8bit):	7.92188811976553
Encrypted:	false
SSDEEP:	384:QDNnWixmeTVU7gbUR0LX+45J2DgeaXchx8AA8tw2SoGaNEiXfl0:wNFZUULH2DgeN8iNSoGr
MD5:	2FF55F74DF1B46FD28BDF7836A529AFF
SHA1:	0F241DB524E87E4953B037C2A24D40A62C4FEBD9
SHA-256:	17D8BB9F0C5B198CE0624034F69248F840037A860E75C2ADF1D57FE1084C23FE
SHA-512:	D5212F4AF72C05ED1391F01D6BBAFD21A748C2D46BE5803B4F6860AD5E6F4EF4B26D1B813CB4CFED79E40706A23177BD5F8EBC92584E8AB596E49D09F7FB80AD
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/review-app-google-logo.png
Preview:	.PNG........IHDR...............n+....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2019-01-17T08:39:38-06:00" xmp:ModifyDate="2019-02-28T11:51:35-06:00" xmp:MetadataDate="2019-02-28T11:51:35-06:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:0cfa2928-6136-a246-8c94-c81822027e11" xmpMM:DocumentID="xmp.did:6fdde624-1cb3-6b42-8e0c-1e93c8635354" xmpMM:Origi

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	1.584962500721156
Encrypted:	false
SSDEEP:	3:P:P
MD5:	8A80554C91D9FCA8ACB82F023DE02F11
SHA1:	5F36B2EA290645EE34D943220A14B54EE5EA5BE5
SHA-256:	CA3D163BAB055381827226140568F3BEF7EAAC187CEBD76878E0B63E9E442356
SHA-512:	CA4B6DEFB8ADCC010050BC8B1BB8F8092C4928B8A0FBA32146ABCFB256E4D91672F88CA2CDF6210E754E5B8AC5E23FB023806CCD749AC8B701F79A691F03C87A
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/mapsjs/gen_204?csp_test=true
Preview:	{}.

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547)
Category:	dropped
Size (bytes):	1085
Entropy (8bit):	5.095179729031514
Encrypted:	false
SSDEEP:	24:2+FuqJkpCimRkjEsJXLquLGkbmT1uqd81DmbXqSgumaCuH+ZpLy/:zz9imkoS9GJTtweqSLUpLy/
MD5:	DC654778115261E448E78E94F11BBD0D
SHA1:	C56D8FB4585682563F497BEDA19146ACBD4FED93
SHA-256:	E23BA820186A8BFF62D9F310C1428ED6A987683018EC99414073F1E2CBA4B265
SHA-512:	DA7A880EBAE6981FF5B16B7BC9FC06F4A0F0B2CEDF7487A50AE61C3275055C58DE82B053355B6A0D8B3A01C2A14C7BADDE552B8A6788B17F0B4AE15A6B82BC93
Malicious:	false
Reputation:	low
Preview:	(function() {let elem3 = document.createElement("iframe");elem3.width = '0';elem3.height = '0';elem3.name = true;elem3.frameborder = '0';elem3.style = 'display:none;';elem3.scrolling = 'no';elem3.src = '//insight.adsrvr.org/tags/jsac74j/s4sw4zh/iframe';document.body.appendChild(elem3);let elem4 = document.createElement("img");elem4.height = '1';elem4.width = '1';elem4.style = 'display:none; border-style:none;';elem4.alt = true;elem4.src = '//insight.adsrvr.org/track/evnt/?adv=jsac74j&ct=0:s4sw4zh&fmt=3';document.body.appendChild(elem4);})();.(function() {let elem7 = document.createElement("img");elem7.height = '1';elem7.width = '1';elem7.style = 'display:none; border-style:none;';elem7.alt = true;elem7.src = '//insight.adsrvr.org/track/conv/?adv=jsac74j&ct=0:capyj8y&fmt=3';document.body.appendChild(elem7);})();.(function() {if(typeof(adv_id) == "object"){ adv_id.push(110315);} else {adv_id = [110315];}s=document.createElement("script");s.type="text/javascript",s.src="//adservices.brand

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14932, version 1.6554
Category:	downloaded
Size (bytes):	14932
Entropy (8bit):	7.981380766785907
Encrypted:	false
SSDEEP:	192:EkPY8ITCaWrimop+ehFp2caGiyY6jXfCL2FM4kDCfENTRm3mmJbZxQwNyQ9ipOB1:Ep8yWumozpiydCKFDkDC6R0fQAP1
MD5:	A4F574E1E769E5045EA68C337E088B35
SHA1:	E1CA258ADF7BB56C8E0FA8528D31E17E0932945A
SHA-256:	78C7C95D97FCDEF7C696CD9E705C2838C5BBF37201B211CB12951FDAE16E476C
SHA-512:	C0574A4F69542FE87900C205E3D2F85F563954B59757231871552E959B295809C832FFD41F8038FDB260D6A113AAE0F8BEA9318558FD223CBF287B0D3205DB87
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v13/PRmiXeptR36kaC0GEAetxolIZu-HDpmDIZMigmsroc4.woff2
Preview:	wOF2......:T.......,..9..............................t.`..L..,..`.....0..'.6.$..l.....<.. .....(....1s...O.Ao..f.x.:..O......q.e.....%...M.......U#..H...A..r.....(G[4....IP..2.R..sL.e.d[.....O...;.\.M'B..K.AH.....3I'@.#.../..N7...~......i..FD<...........b.....p.,\|..'E.O..o..n....D-V....OM^4:y...~wgg."bI=.x.D<.Fo..'..C..b.7x3...pNL..S..+.N.KG.}.D..T..f?.g..Y.fm...4.. ..@...#...9.?#..a.F;...C.....q......R.......7.\.\|$..N.1.........e;k..{.$tY......"\@.uv`.Q.T.{.......t..h.4Z..s.Zt. ...`g.V...v..}..=...[........p.X.@.n3q....Cs{.a...Q...&.<..x.o{-..y.qb..C~.Klg.I......p...r..p.@0T..P... .ow ...o.@".L..4d.f8....h...o..)....2[....]....SU..3.d....y.....X..Pq.....(..3..Mo M).#....X.Q y.iA..............c....57;=;....."....k%..9...!Q.(..n.w.$x..K2...x.L..$p.fv.../.!.nc@rJ`{..oN...SlSnS..u..d.gZ.#...0nY.\^...B. ..%.n..._7].....'.'u.KSc........].u.alk...e^^-.q...TR.b....I........ .[l.@.B....nNM.........;:. nI4..i/8.C\.()J..3.F........p ....v9X".eL.%>^...m

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.3336655487943405
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+5Gfjul2g1p:6v/lhPfA/UY7ulVp
MD5:	978C1BEE49D7AD5FC1A4D81099B13E18
SHA1:	AFCB011CFE6B924F202EE9544F17F631B32A01B1
SHA-256:	93AE7D494FAD0FB30CBF3AE746A39C4BC7A0F8BBF87FBB587A3F3C01F3C5CE20
SHA-512:	81F251D1CA407945457425B681A96D1E7743706FAFA47ACE26F5F569E69337E9AAF726BFF1A854B1A5A47A22E55C4BD285A4D21F695D126DA631A1C891D10F48
Malicious:	false
Reputation:	low
URL:	https://adservices.brandcdn.com/pixel/cv_confirm.png?aid=110315&buid=f51dbd93-2c9d-4f0c-a4da-f9e5b5526a5e&m=www.garwoodsheating.com&r=www.garwoodsheating.com&oid=99015731
Preview:	.PNG........IHDR.....................IDATx.c..........1q....IEND.B`.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	2465253
Entropy (8bit):	5.604761762161178
Encrypted:	false
SSDEEP:	24576:jsTgC1Me+2jqKysDjruL6c0k51E48zHb+SE1eFB0Qz8eCKw8:MgCSeVjqK1uL6c081E48zHbG1eF77
MD5:	77F7EC3C450E2DBFE1561C62C29911EF
SHA1:	D562F7EE024474BE54B25B3597E5C17092B5C301
SHA-256:	54B101FCE082404E0DE1863335580836163B3A760986267D192BBF069E9B005A
SHA-512:	4F6CEA1020295DEF119D218579A65C631E974B0306F4D6BD04DDA9E1FE1F6E430FA9563B22F9EF11640154858A72D79872226472BE0D063C593182EA210CC503
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/fb725ac8/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	dropped
Size (bytes):	2465253
Entropy (8bit):	5.604761762161178
Encrypted:	false
SSDEEP:	24576:jsTgC1Me+2jqKysDjruL6c0k51E48zHb+SE1eFB0Qz8eCKw8:MgCSeVjqK1uL6c081E48zHbG1eF77
MD5:	77F7EC3C450E2DBFE1561C62C29911EF
SHA1:	D562F7EE024474BE54B25B3597E5C17092B5C301
SHA-256:	54B101FCE082404E0DE1863335580836163B3A760986267D192BBF069E9B005A
SHA-512:	4F6CEA1020295DEF119D218579A65C631E974B0306F4D6BD04DDA9E1FE1F6E430FA9563B22F9EF11640154858A72D79872226472BE0D063C593182EA210CC503
Malicious:	false
Reputation:	low
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 89, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	936
Entropy (8bit):	7.454532440239675
Encrypted:	false
SSDEEP:	24:jaMRCZb5cfGHseil9r7FJmR8jk0D4HoBFuDjG:jgZb5cfGHsd2akhSgK
MD5:	2351DAF0323AE622415D02FCD31C5ADF
SHA1:	326C1D0F0556B535F216FC2E8515BB40B1279245
SHA-256:	F31C67381133B0250E94E8C2EFE1DEEFE36FC75CBB9558B386B43ADFD9E16E6D
SHA-512:	765F0C7BDEFB751F3F7439285E0A3B938EC00CA2793A9345B332995C200A106343BAF36B300597BF93B02099683E0679C9E4CA084DA64AD8D21873861678119B
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/images/topic-healthy-home.png
Preview:	.PNG........IHDR.......Y........ ...3PLTE......................................................G....tRNS.. 0@P`p........#.......IDATh..... ....Q#F...i.X..t....v.-..(..w../. ..f.f.../....{..@{.........5.5..`......b...%.@.p$hG8.."...%............^..&...........MOa.G..K?j#.......Y/.`\a}.%..?m..&kb.,.....}Z9.....cs.x{Y................M...K.h(..E.,...Vz.......\.......I...C..;..;..M.E..3P.H.$........R...D...$.O.e..........y+P....:..B.....UU....y..=;W.Py. X.t3.:.t@...c........TDD8.PL....13.[.....P../.9.(Dd.X.xRv$.....Q "Sx1.....DC...-xg.l..:.B=.~..6. j~....zT......O.N.......8...`......kA. .4.mH..gk"s97r.[.......sa<.V..\y ...'.....:....0.K.+...F....&.q../...u............2:.).$iB(..r....^U.x..%...F....:..zt.....@'M..X.@#..KGD].\..-..........$..,-..+f.......(.....T[..l.@..U.1.a_.]+....,Qq....h.?.....)T...Y..0...7..4......Wl.</Z....._W..{Z.]........S{.`...iP....~.Lo.4....\|.G.......IEND.B`.

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1494), with no line terminators
Category:	downloaded
Size (bytes):	1494
Entropy (8bit):	5.758973963340876
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZJl46+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtQ1vS1y:VKEcimKo7LmvtUjPKtX7+1vQZ/rLrwUG
MD5:	41A69F721484EFB2144F54835E6FD0B6
SHA1:	ECFF8B908C27035E20A7FC3FB538A33A01C2D14A
SHA-256:	709950CA803CC9D243635113A2FBE17329B9CBD5993A7CAFBE125AA783754DF9
SHA-512:	6B318219C7BD324BA3EA8970419066B333F36D150304C0E836EDC87FD09AF8C0D8C44331D562ED360E69F0BD70D218E16212EE453B92B53DF3BEACBB22423932
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?onload=CaptchaCallback&render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('CaptchaCallback');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1527
Entropy (8bit):	7.086298091274089
Encrypted:	false
SSDEEP:	24:X41h4SHWwjx82lY2T3UV2tRyJ3V2ekOGWgZpvuXvFBUKEPf/sN3sSu:mKS2Nn2wxJ36OjQvu/7UvceSu
MD5:	B42837A5EF5427BE3AF0760C228F0E3C
SHA1:	2E112927A2C2328606441E82595AAE56F1DA183D
SHA-256:	71FC0DBD7E93AE48C3855D04DEC1E539C8D8A2F27CD199BFFE5B518E0A22936A
SHA-512:	045A9B47AF9026D88D549445292A5D892C2C1ED60473449F34144A43559687EE703098F2C7014D5C6F22C7B9758E1530AE83A14A8104A665E6261815AAD3F593
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P... ......3.l....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:90B288E9702411E3A94EDBAEF0A343B4" xmpMM:DocumentID="xmp.did:90B288EA702411E3A94EDBAEF0A343B4"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:90B288E7702411E3A94EDBAEF0A343B4" stRef:documentID="xmp.did:90B288E8702411E3A94EDBAEF0A343B4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>#..W...jIDATx..XK..0.E..p..e..p.*=..A..G..0T.r7\.......i.3.1..,..tU.5y$y.t.[..w..x[kk.(...K........'....1...}......7.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 15, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	713
Entropy (8bit):	7.653716701894823
Encrypted:	false
SSDEEP:	12:6v/7oSrXi7pbB6QPObnvBBlhxY80MiAjSisoNFpfJS1sqLsPSJ90WW8Bd9:HyX4bB6oOHuLLAjJLS2A9g8V
MD5:	71DFBF3742CA8B64A03C4F1BB2023EB0
SHA1:	8F06DE350EEA263A8680BE200A3963BDEEA9B5C6
SHA-256:	AC1CF06CD68D1A7E19D1A85D7C1D6A85C3797E444D7B8C0E496FCE34770EB743
SHA-512:	2657C18EE390720A5A1A548148BEC675C9F5E8D8797180578969CEF74EB130436B9E6AD27FF5DBA16F64115EF315F31158076876BA9E195504952950FA598A99
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/images/favicon.ico
Preview:	.PNG........IHDR..............sO/....tEXtSoftware.Adobe ImageReadyq.e<...kIDATx..Kk.Q....L2y.I....A.........M.[......Wn\..W.....T..R.....`..Ji..I'M.$.i&3.........{.9.y].q.M #.-..b........_.i.....0.,r...T...../.@Y.R-.........d.T<..b.-..4..;v<...k.@.....w........4..z.=.x.kw.9.7........,3wz..<]y..3.6.+..H.....&K..mc.A...H..X%....`.7.n..x.....L...~.$`.Z.A.+.lY.bh...nc.M.W......Q.VK..O.;B....E.1>.....I%h.G.J......p..U.6Pf.>.....T.h4H"..:..nu:dR1.U..~..~ J...c<y.2...6..NMP......p....K.(.j.....I.Z.`W.T2.2}.<{..0ui......v..._&....,1K.].g9{f..\?.[.=...`W\..=.....<...+....7qL...................h,. \|.,..Y.L..8[.i.~.....Qz{+...xK..<.z.]@....R.k.`...~.1.l.@>....._.....e..d_....IEND.B`.

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4702), with no line terminators
Category:	downloaded
Size (bytes):	4702
Entropy (8bit):	5.812703754059288
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUuOmSUBq+:1DY0hf1bT47OIqWb1dOmSt+
MD5:	6D9F875124854708914E37F4BC2471BD
SHA1:	5935A45E4845DBD57F645B81BCF49C8B80FFDCB5
SHA-256:	6F6FE5D0A420A59B4B6A7B45144846FF71F1CCDC9E5879C4BB876D8C471D1939
SHA-512:	761E3991086FBFBCBC87D1CF266C06338C4B635E4916E1AB43AA72687153ABB871BC328342BD0B96420948B97B29F28B96EDCC5B5893DE7C01BFE833D2989FC9
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/834731891/?random=1729810968152&cv=9&fst=1729810968152&num=1&label=wLPuCJfyk3UQ8_6DjgM&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465926%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.garwoodsheating.com%2F&tiba=Garwood%27s%20Heating%20%26%20Cooling%2C%20Inc.%2C%20Air%20Conditioner%20%26%20Furnace%20Repair%20%26%20Service%20%7C%20Edwardsville%2C%20IL%2062025&hn=www.googleadservices.com&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 144, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	27351
Entropy (8bit):	7.986969411678174
Encrypted:	false
SSDEEP:	768:GKv0Z0jooCVQK3th0tqTP2NrvxrL44rJdByWcL+h:iqMF93LWDpJjkWqA
MD5:	E8FE1759B428C5F58A9F36E418228A51
SHA1:	8F0862AD9FBF3B0A6456E248789E2B4FEE472ABC
SHA-256:	578B385399C1037299469AD0DBDD050032D62083999E4E486DFA0DB546072715
SHA-512:	5BA493A38E357D0547CD01647E7EEC8BD33BC17B2D563C7B80686B6B0690774B065358E5931A2D108F95B8B10399698C584D53662BC1609D9BAF374B7BC99C3F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......tEXtSoftware.Adobe ImageReadyq.e<..jyIDATx..i.m.u&..9.N5.o...GR".IQ.5K.,K.;..t.H`$.8....`.F....v#I.A....nY.d.nKV.eK.E..8K.g>....V...;{M{.S..P.d...........o............y...x...x...x...x....(^..}.....0..!.rx..a~n...>..W.`ss....`~~.^z.yX]=.......,,,...5...x4..`...s.h4......~.?~...n.(+...!<.....O\|.....O.....n......;.y..[...Hc'.q...bRN..g...e..._...7+mY..lR.M[N...8.....V..7....d.MMMu[.V.jz..nwv.....s.3.s.....G....._..ffg..lB.....v.m.....f..=rd...S[G...^]98<u...w.....<.+++....9XY^...O.I..[n..~.w~..y.i\|......w.?f...=.gn...x.1..?...._..........Eh...Gz...u...2..w...cX?...0..5.Eqwz.}......^..F......roH.[../...*[._..p5._[..1.......&4-g@+h}..hXF.._..gF....MV..W.EQ......\|C...{)..m...5...~..K/..{avv........F...W.{.e.........\\.?..y}.=......V.E_.>..?...w.d2y.s.?.;..s....ve...>..V....nF........O6$5.S..1.4....D.,.....{,..^.:.Q.E.-.[..Mr....f+..b..N....?6k.....{..{.......=...J.....S..33[./_..cs...v.k..9T.....B{j../...lny...?.E...a

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 89, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1235
Entropy (8bit):	7.641779670266347
Encrypted:	false
SSDEEP:	24:jJAbNOU7O7wyUZp7bbDAbg08NO/goTsV6dLJXLYarwV3z+i67Vfcg8R:jJgvXyUT7zAkAg8rdLJsz7gVkbR
MD5:	E2DE5EFD5270E32F2BF05AB893698E86
SHA1:	ACBEDEC87F5F757C1176A9FA36CE95CF6A14951A
SHA-256:	C2A303F19C92F09B87800F2EB940AE027B5B6206351E15ED3B824C3C8AB454E7
SHA-512:	5D8C11D0F93F8ACCE5B5DA43FDC8C043B44AEE95CE5D6AA1FFAF105F27FFE8DBC8191E529A16DA1C01A01EEC5E2251E9B0999C09669AD94728EB2CF005B472EC
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/images/topic-new-system.png
Preview:	.PNG........IHDR.......Y........ ...3PLTE......................................................G....tRNS.. 0@P`p........#......?IDATh....(...D@....i{..Uu.W....+Z..!...........$.. .....`W'.V. .@2z......./...pU..5...iE.....f.@t..D.M...Lphw..v.h.....Q.....r.A..l. ..h.....p..S..Bt.#.D.D.ND...X'.H.....z.#Q..F. ....=.X..Z+...U.......!..be....#.....M .2.:..@.P./..V#h.F..).....@..F.!.zb..2.q2..f.o..o..$..9n....'....."..X.2....NK...h....nr....z.{K......B8.K..$""r'.DD. .2..83...\@.gjK.......B..I..OZ-3..Q6[........h.....f.....@\|(""......B.;A.!.......`.`.g...?..\..=.)...F..H......g..3..%J.+]...7~`.c......aOS....\H..m\|C.F.... 9C..Adff6...........0..J...@.!. .&..0m$....B....@Zye{...Rg~G@>.u.`....&....LD....v.....r...-...<.m...o...O..%D......D.....KDt..4..p.....(.....~h...h+.......j6qu.s..]..&...d.y...a.\td.....m.Bp..+.Z..=..@...N...L..l.. .^....23.-...75.*r.j.-.a6...t..q%.....}.2.i...RO...._........T...\|.."...8...`{....b^.JJ..k..A .....W.........iocU6

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4720), with no line terminators
Category:	dropped
Size (bytes):	4720
Entropy (8bit):	5.818787329143706
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUuOmSUBUl+:1DY0hf1bT47OIqWb1dOmSn+
MD5:	F2440999FCCD4273C02D87FE48B2F016
SHA1:	CF0C27C85E07836169B5A4D6CCFC13A12670E4A4
SHA-256:	1498F612FC583B4827ADABD6DDCA60D0B2A2B6F3DAAEE61D60A2B287E4C101E9
SHA-512:	A9D9DAA13FDFDE00D5036B889AA8EE4F7A3AAFCD7E97F8D9A618232428EF54B56181EAC91FEF5ACFE5A9D4E392D3AD224A1568230C371D3F47B414D5A1AEE369
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1861)
Category:	downloaded
Size (bytes):	5014
Entropy (8bit):	5.27114804189568
Encrypted:	false
SSDEEP:	96:aqcCzS5Wv6ayCkkzkMlzq7t2E7NuDombiiYqmRUwOrFWW0bq0n:SQr6aynykaq7tjR0NbiiYqHrqp
MD5:	B483B60F41B96379E5D61EF60481E957
SHA1:	29ED31328C9D787BA1323391FE05C5140E265BAE
SHA-256:	B37C9B05A0282FA8E54F9F596F6FBDA9CA32F735AB2259252793ECE815FBF25F
SHA-512:	B48691FA8ABD89DB1E9B2627A29A456D5073D4AA06479FA1FFFE77E520EF4BB519DE6AC34E0E895913CD0E0006BEC122F471BB07E362DCF1980F3F154A2E2927
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/10/stats.js
Preview:	google.maps.__gjsload__('stats', function(_){var r1a=function(a,b){return new _.mJa(a,b)},s1a=function(a,b,c,d){const e={};e.host=document.location&&document.location.host\|\|window.location.host;e.v=a.split(".")[1]\|\|a;e.fv=a;e.r=Math.round(1/b);c&&(e.client=c);d&&(e.key=d);return e},u1a=function(a){if(a instanceof oR\|\|a instanceof t1a\|\|a instanceof pR)return a;if(typeof a.next=="function")return new oR(()=>a);if(typeof a[Symbol.iterator]=="function")return new oR(()=>a[Symbol.iterator]());if(typeof a.dt=="function")return new oR(()=>a.dt());.throw Error("Not an iterator or iterable.");},qR=function(a,b){this.Fg={};this.Eg=[];this.Hg=this.size=0;var c=arguments.length;if(c>1){if(c%2)throw Error("Uneven number of arguments");for(var d=0;d<c;d+=2)this.set(arguments[d],arguments[d+1])}else if(a)if(a instanceof qR)for(c=a.Eo(),d=0;d<c.length;d++)this.set(c[d],a.get(c[d]));else for(d in a)this.set(d,a[d])},v1a=function(a,b){return a===b},sR=function(a){if(a.size!=a.Eg.length){for(var b=0,c=0;

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	downloaded
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 138, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2214
Entropy (8bit):	7.383943518524816
Encrypted:	false
SSDEEP:	48:3X/HXJ3Vp5S2OicM6wju4EeDm4zEJnr2UrcgYwl7:3vHxz5S2OiCCosQJnrVggRl7
MD5:	75581AD2110558F3239CFBD7C991666D
SHA1:	F73EBCA997C183B0BB38D093F416316CE151A9CE
SHA-256:	74E13E0F896AACE6BAB29678E9C9202283936770AEC4C2185530960E8B184B91
SHA-512:	5337E08B4514110E8CCF02E8F08577FF586D75EE17D2D615AB9C98E4399E03E0E506E2C33D7501F4D5E6FC08AF074F36AE56566309C650F1971C1A1167E05011
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/images/icon-wrench.png
Preview:	.PNG........IHDR.............BY"V....PLTE......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................x...._tRNS............ "+56<BCMNOSTUV[^_`cfghjkstvwx{.....................................................y...."IDAT.....CSW......Q)"..h.m..( Z@.miK...[F4..K..6YR..PA..UvH....,7..s..<.......I....w.......F}...W?=..-.._[ ..k..9..d~\..[...gR.e.U....W.eP......=I.r....<(=M..-.C...Kn.*.A...........<..[.G......2.....p.M.9.].W.d.C....8G....,.279..1..r..#...l....xt..]i......1...+.....y...\%-_C..........b+.l..mXk.H...P...{z.a.G.....ExO......S.E.xO.5....P4..m#.[..<.m..;.PH.

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 67 x 100, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	699
Entropy (8bit):	7.50029669163707
Encrypted:	false
SSDEEP:	12:6v/7J/vwJh7MyAxCjah3X/FGZV8EZb23yt5OO86XMjwzHMIb2PMw:ywJh7jI3dGZGzyTOO866wzZ2kw
MD5:	101BE076D35ACE24DA8009D1531DE809
SHA1:	3F5FE180BD3F91B7C9B05181804E8CBADF524399
SHA-256:	BA9C68AF8EAA7963F746CDF9FA89D95503B6966B80EFD2F856C23E185816E893
SHA-512:	D23813496AF4475436AE70C051319790459ECB61D930865C24CC0CE4EEE96B0464266C55D3BE0A18DF4B98FFFF64778C978F30383422E92202E1954A3C4B5F99
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/images/cubes.png
Preview:	.PNG........IHDR...C...d...../M.....PLTE..........................................6.=....tRNS..........)3=G.(V7...2IDATH..U...@..O..H...W.\8.)..R.R..lHq...W.n.HW...D.} .n..w....U}...i.^..X.6.....}3ofg.A.m\.......lC>....L..yE.'....H...u..G....[...;"..yzJ...<V.I.1M...D)$1`+H...s.P.ej.(3...0...$.9.XJ...0.r..E!Ng.P.~C!..........3.'\|Jx...;...X..,.GMB...Vh.+3J..^c....@.7:...2..U....i3.\|a.......Tsc&.1./..h.$..\|D.W...U...^.J../.}.w....S~.{....dh`.F./I...>.i^L.>....E.qP"1..B.rwy.eQ...i.3......L.w}.....o....%6..z.3..l.....2.k....{~E.1w...oH6l..o.......?....F./.2i_,.EFru)w'..T..v7.q&T.V...{,.e..-...mM..f?...e.n...3..j.u.$..Zn......S..zZ.."...K.n.u....g..sW...Y....IEND.B`.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	548545
Entropy (8bit):	5.169594155502304
Encrypted:	false
SSDEEP:	12288:qld21uRPtHF2DlpHct4aG0vCyev7+HpeD1T/+X1x6YajVh8:C14i
MD5:	2E4B940659B06FFC483E7AD526530AEB
SHA1:	019EB1DEC32336DF507A68B52971109F6CB4F8A1
SHA-256:	FB3CD16ED5D68F5D9B1E1EBB0047B027C2F34CCD1323F8AC709C6D31122D9B02
SHA-512:	AEDFBF889ED378DD292AA6F66E61C883629AF539EBB603B8203E1C36BA1FCCF71C146F3201488E36B462E0959B670D215165AFF4DB8ACC784523FFC5F0AAD7B9
Malicious:	false
Reputation:	low
URL:	https://local.demandforce.com/v2/b/stylesheets/main.css
Preview:	@charset "utf-8";..pace .pace-progress {. background: #FFF;. position: fixed;. z-index: 2000;. top: 0;. left: 0;. height: 2px;. -webkit-transition: width 1s;. -moz-transition: width 1s;. -o-transition: width 1s;. transition: width 1s;.}..pace-inactive {. display: none;.}.html,.body,.div,.span,.applet,.object,.iframe,.h1,.h2,.h3,.h4,.h5,.h6,.p,.blockquote,.pre,.a,.abbr,.acronym,.address,.big,.cite,.code,.del,.dfn,.em,.img,.ins,.kbd,.q,.s,.samp,.small,.strike,.strong,.sub,.sup,.tt,.var,.b,.u,.i,.center,.dl,.dt,.dd,.ol,.ul,.li,.fieldset,.form,.label,.legend,.table,.caption,.tbody,.tfoot,.thead,.tr,.th,.td,.article,.aside,.canvas,.details,.embed,.figure,.figcaption,.footer,.header,.hgroup,.menu,.nav,.output,.ruby,.section,.summary,.time,.mark,.audio,.video {. margin: 0;. padding: 0;. border: 0;. font-family: inherit;. font-size: 100%;. vertical-align: baseline;.}.html {. line-height: 1;.}.ol,.ul {. list-style: none;.}.table {. border-collapse: collapse;. border-spacing

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	79242
Entropy (8bit):	6.019706801697464
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOI3buhXwW4nxM:mGRFauOxLA/+IcTOZX/
MD5:	68DF4E65BB75C72BB2DE801EEBEEC9C9
SHA1:	76462F14972C57A6DDD6EB1FE624EF226A7DBC37
SHA-256:	AF772A1084C1E08E7A7B0A650DE797CB14337EA9BA8FEE556BD44DB8E0DBE1DE
SHA-512:	3482D7A1803045B83001BB180548E8E125D8F48386DE46804CB4BCE6B842C545282966A7E6F0F137C2661328C4D0D99A6301A302312591F03728135FADDE211C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 316 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3098
Entropy (8bit):	7.912773244142862
Encrypted:	false
SSDEEP:	96:NSB98X+V+j0dvAzzp5Xjuk7PDFDKJKr87:NSkA9of9Lx1U
MD5:	32B3482D736E1D1A000584EAE78B54B9
SHA1:	5A3B81462E3D13636C3FEE9ACA53DDF7B9C73E70
SHA-256:	7241D8B9AA80AFF7C06D29EA3A30105781B65037E2F3AF97998A2CBCE3FF08DC
SHA-512:	6F6B626465BD0E8DCCA0C81864BE9F282753ED61495C4FD0229D07FD58809FB5C6B53FF03FA481929986145AFE72A4471BBBDF7D5DC404E09D82BF342BFD4ABD
Malicious:	false
Reputation:	low
URL:	https://local.demandforce.com/v2/b/images/demandforce_logo_pms-sm.png
Preview:	.PNG........IHDR...<...$........D....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..].r....^]..T.hW~..E.T....z.]&N.s....L...'80Q(b.H.R.Lm.o.....eU.R.DO...A...0X...Bqoo.........7..G......h...../..^K.].....Ce&...y..."........8./zI..p..7..D>........1~s.@..O..[.iQ.......7..\|...V.a,....J.."..a.a1.........p...W..J......3.^!.H..v..%..w.m.o...x....\|....B.~..?..................x..3...x....O<p...r.m...........m...o.OW.}...}\|..-M...X.I.\.`.@.......[....J...J....ljP..F..Ie...&.A....kn.aA....+.:'U.k.WHI.g....^Pg.5...y...{..c.B.YY..Zr.?..Y..q..m..h.....R...<M.#a...U%..n.Sjw.Q'Y.$L...3@'d......g...H....B..J..^QP....-..O...j..J.X..2..:d...).J..............W.>\|~...}..AT.&..~...0......C..Yw%H.[.......hsS....M..[......9..fd......,1..N..^....)5.~.x.Z...Vld.(4)..:...A..,...u...S^-.,?.P.p...H...'\|*...N........i..y...8.QY'...d.w...A"u....B..A>Gu...\|.MepL....L..4.<z....(mh.[.@...iM....7...N%..7...f......e..5}...)^]..u...Pi.O.,."._Y..J...`.....).[XXu..3

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 201, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17801
Entropy (8bit):	7.949645153623929
Encrypted:	false
SSDEEP:	384:/TaneyET+k78Ixl3JozW5cvjqQ+MsW9yrb1FMlwOT+YmipgP4+IS:raeP7nl5kP0j1FEwu1yv9
MD5:	649D432062A7840CAA940F3AC1168327
SHA1:	07E139DFC3E02171F2C6A4247A0288D34A5D90EC
SHA-256:	DC730D15FAC9E66109370D8539E537D3638DB99A998F986A36C6E97712681F50
SHA-512:	8C8953E9F6A3375811E19A7A1D7FF17B06925260BD770F03E3D25C8383B0BBA69958DD46CD0406875BEF9480441BF014DB15A5A0ED0B09132107DF48835C0D52
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/sos-reviews.png
Preview:	.PNG........IHDR.............f.};....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-11-02T08:53:50-05:00" xmp:MetadataDate="2018-11-02T08:53:50-05:00" xmp:ModifyDate="2018-11-02T08:53:50-05:00" xmpMM:InstanceID="xmp.iid:f4458d18-2f58-2b43-8378-87e62574c633" xmpMM:DocumentID="adobe:docid:photoshop:3d7d4aa4-2be2-ca4e-9ac5-374ba2386747" xmpMM:OriginalDocumentID="xmp.did:8f5f26cc-1c36-714f-8938-b69422077f9f" photoshop:Co

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1251)
Category:	downloaded
Size (bytes):	6274
Entropy (8bit):	5.574825561225863
Encrypted:	false
SSDEEP:	192:QKEBW0wUmfP55WnMFlOoRXcPDmYHdAxXlh:QKEBdwUmfP55WnKRrwCHh
MD5:	03B98497E346C99F6790FDC60FD666A7
SHA1:	13CD887389C2F51662A89FBBCA3BC3E880087DF2
SHA-256:	7C8B0E3793C3851545EA26BA73BF8AD40635A25EF33C18311F39ABE1A361618F
SHA-512:	DD317EAD574530C57B3DFE615BEFFC8E38C0F4F9D0C5D450A05E8A315365371C06065680191C11000E2B287455045E9C6BD779A5350DAF1D3A343F94E8D71F05
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps-api-v3/api/js/58/10/geocoder.js
Preview:	google.maps.__gjsload__('geocoder', function(_){var AQa=function(a){const b=_.Wj({address:_.ip,bounds:_.gk(_.nl),location:_.gk(_.qk),language:_.ip,region:_.ip,latLng:_.gk(_.qk),country:_.ip,partialmatch:_.jp,newForwardGeocoder:_.jp,newReverseGeocoder:_.jp,extraComputations:_.gk(_.ak(_.Zj(zQa))),fulfillOnZeroResults:_.jp,componentRestrictions:_.gk(_.Wj({route:_.gk(_.kp),locality:_.gk(_.kp),administrativeArea:_.gk(_.kp),postalCode:_.gk(_.kp),country:_.gk(_.kp)})),placeId:_.ip});return _.fk(c=>b(c),function(c){if(c.placeId){if(c.address)throw _.Uj("cannot set both placeId and address");.if(c.latLng)throw _.Uj("cannot set both placeId and latLng");if(c.location)throw _.Uj("cannot set both placeId and location");if(c.componentRestrictions)throw _.Uj("cannot set both placeId and componentRestrictions");}return c})(a)},BQa=function(a){function b(c){if(typeof c==="object"&&c!==null)for(const d in c)if(d==="display_name"){const e=c.display_name,f=Object.keys(e);f.length===2&&f.includes("text")&

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1154, components 3
Category:	dropped
Size (bytes):	459160
Entropy (8bit):	7.984061659009761
Encrypted:	false
SSDEEP:	12288:sSlI2qMC2/iGUd4xsaBTGyxeBEX2oc2/k2JqEauT:dsgiGxsaGVokMIuT
MD5:	44D7198514DAC8A401DA8E4DB451B181
SHA1:	120D8D1C141C516E6A9455AAEC6F8C49160814B9
SHA-256:	440A37B0515B914794D222B8972C53ED4130D5F8C1B5DE4864CF993FAECF6144
SHA-512:	2C3EB0BD39A0F44B8C733C793B53225188F093377F498D12E4CAF55BC984FBCF01632FDC237DD10FDD9F4FB176F1EC2839427764CF3292D0D9E32F356343C830
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......(......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:9961caa3-4de3-4628-a981-18d93a4e1f97" xmpMM:DocumentID="xmp.did:C4DCEC9D9AAD11E59121F13F99643A6D" xmpMM:InstanceID="xmp.iid:C4DCEC9C9AAD11E59121F13F99643A6D" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5b7f4663-cc30-43ca-b719-9f04365c44c6" stRef:documentID="xmp.did:9961caa3-4de3-4628-a981-18d93a4e1f97"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.3336655487943405
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+5Gfjul2g1p:6v/lhPfA/UY7ulVp
MD5:	978C1BEE49D7AD5FC1A4D81099B13E18
SHA1:	AFCB011CFE6B924F202EE9544F17F631B32A01B1
SHA-256:	93AE7D494FAD0FB30CBF3AE746A39C4BC7A0F8BBF87FBB587A3F3C01F3C5CE20
SHA-512:	81F251D1CA407945457425B681A96D1E7743706FAFA47ACE26F5F569E69337E9AAF726BFF1A854B1A5A47A22E55C4BD285A4D21F695D126DA631A1C891D10F48
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c..........1q....IEND.B`.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29967
Entropy (8bit):	7.988710194229013
Encrypted:	false
SSDEEP:	768:XB62vGbmWCO3QhMPmZD/lu8vZTWoAgi+YkULyF:x0SFZD9tvZ+gULa
MD5:	BF9C6A2965A60E71D9FBDD1256412539
SHA1:	0DB3CB71147C3AA14D9729FC6A968E59C3A27E8B
SHA-256:	60A73B6BD268237E16BB2FD815B540E1EB098087CAF4B1B9823A7D525B164B4B
SHA-512:	0D6C9976C4D9714C036AC40BA9CBD13A3BC64D790A2656192FB98AD10650D963FFC61770D10A3EC2763C0962F074F461E09DB5D1D49B9BE3BF688113343C82B2
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/products/bryant-hybrid-heat.png
Preview:	.PNG........IHDR.............<.q.....tEXtSoftware.Adobe ImageReadyq.e<..t.IDATx..y.d.q.V...{...y...`.........(..I..b.JbY..G.#..\|qb9....)...%Y.$...O... ......Y0.>o.z_...9....o......5.xo..r..:U...U.PJ..m.v.o...l.6.k.)X..M..m.6.k.)X..M..m.6.k.)X..M..m.6.k.)X..M..m.6.k.)X...{7os..w.z..o.....4..@.7..S...!.i....(..S. ..Ou.z.>.....H.....?....K..".l.;.O.s.J?H.I~.>...S..g)../.2..-....NCuq...g`p.v....Jy...6@.........!~_.&G..\.C.Q.b..W,..(/..S=.J...8. ..^u&W...<d2Y..1.q......nA:[.L6....RYhW...... _..... .N......7.5%..+..x...08<.....h.;...A.?....n.:.....u:.[.y^:.J..........Y.C\.t.r..^........+$.P*.@.>..m....b......X.......~).@....\.^.^.8...Z.....`...........^g.....8-t.k....J..R..}..wz.../.`............i0w.....(i.3../.....x`..h.OPqq.....H...o6Z..r}....,..pA..._9..v{...8.Y%E.6......2...."!.....H..0).lX.H\...x. .h....wi?....^.H..............&..u=^..Je..,.K..}&....t..... ,6....9... j..f..?...C..%%.R....F...d.t.Z...N.~..z........>.....{..o..G.....gP....

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 43572, version 1.0
Category:	downloaded
Size (bytes):	43572
Entropy (8bit):	7.991846190596049
Encrypted:	true
SSDEEP:	768:9aVzVymSbSDcPi1iyD9m9ySj+H2fmwsTtxNXfmQZKQ6srdeujlLANRWOvClvztaO:KVyW6i1iyD9Epj+umwsxmir6soCKvXvY
MD5:	B683029BAFE0305AC2234038A03E1541
SHA1:	12F8C193902E99348493ACE32E498031BF79B654
SHA-256:	18E6B5FF511B90EDF098E62AC45ED9D6673A3EEE10165D0DE4164D4D02A3A77F
SHA-512:	44823904027DD2E901429BFF1672132600AE6895486EBCFD3B97A5315635104BB1D555F614DC5FDCA9645B01C65056D2D55842351B1324290C163A2451307E46
Malicious:	false
Reputation:	low
URL:	https://local.demandforce.com/v2/b/font/font-awesome/font/fontawesome-webfont.woff?v=3.2.1
Preview:	wOFF.......4......4.........................FFTM...D........epa.GDEF...`....... ....OS/2.......>...`..z.cmap....... ...j.5..gasp................glyf............2..head.......1...6.\."hhea...........$....hmtx................loca............q...maxp........... ....name.......f....<.e.post...0........2...webf...,.........RQ..........=.......T.0......<.x.c`d``..b...`b`d`dl..,`........x.c`f}.8............B3.3D..8AAeQ1....W.6..@>...2.bDR......R....x...J.Q...n~. {...(.f.@}....ZR.X..H...!.e..$.6AD.tV...$Y.,.L...n\..l...s.....!...FrR.(...T....D)..6.P.......~.../..6.....h......}.c,.8..E."5iHkH.D.....G_x.F.%....&...).q.....W6.$e.........3.f.l.....?.z]7....gy..x..x..9..+&m.X.....G.I?.....)..O..".......M........H.....2tn........x...\|T..0~.s..;..Y..d2.d.$d..Y............ ..(.....j...]..j..jW}mkW...m..^...?[!s.....$$.}....{.}=..s.s......x...N.l....!.....v2.]....q.8.....3................H(.Oe.!....H.:. =.R..r.x.7..O..on.6z..1*..`t......s....`.cub.......J.$.C..^.8..

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 1796, version 1.0
Category:	downloaded
Size (bytes):	1796
Entropy (8bit):	5.409668949148663
Encrypted:	false
SSDEEP:	24:PY0SZVDd1oxEv6md4gOznud49ugps/EJiXeGJiXDl3phliRren6c8XrMbl:cfv6mdFknudkTG/ZXeDXDfjip1cI
MD5:	D473B273E15EC0C8721CFD464ECAB07A
SHA1:	B2735A8FA0907916C722A4F022E14078447D9869
SHA-256:	CE79BEE15C8795BB7BEE159131318308B432133F4268F2531EB9F2790C95BDA5
SHA-512:	B95DC132C9ACFBD6C46746FB5D604DEB2EC435E17D99F3A603F1419A6C0D9FF38364E1BAE22028C745EB3246B5C732CACC11811BB044C840D9D7CDC8CF43A862
Malicious:	false
Reputation:	low
URL:	https://core-dot-sos-apps.appspot.com/fonts/raty.woff
Preview:	wOFFOTTO....................................CFF ..............H.OS/2...x...`...`.#..cmap.......\...\.K..gasp...4............head...<...6...6.Jmqhhea...t...$...$....hmtx.......$...$...amaxp..............P.name...............post....... ... .............raty......:.............S.......S......k...t......................x.............$)ratyratyu0u1u20uE600uE601uF005uF006uF123...........................J.............................................................v.........OOO.........vv.........NOO.........v...........O..................O.............................................3.CC.3.3.C......C.3....m.z{........].]]........{...........]....................]...........{........]].].........g.o..........#&..#...............................G............................##................#......................#v.........g...Q......U..U....y.7v......R....s........#&..#.........................G............................##................#......................#v.........g...^.....

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 56 x 35, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2539
Entropy (8bit):	7.897177595009707
Encrypted:	false
SSDEEP:	48:0X8o2WSfVltipfjaK2hrcmvL9K/ZU/MZ8ZCO6mlMbRZQKk3:0X8o2WSVGaRhnL92Gk1wlMbRZ23
MD5:	779E4410BF1F7349A6ECCF987E5F29C7
SHA1:	6558DEBFF509BA0E72891A9C76D477F649EDAB08
SHA-256:	34EA58185923F3658EEAE74388A1571D2D8FAC7ABBEF435821E874B227499B5A
SHA-512:	178782B4160983BF492C6D11F25588E4C86A9C7D2AAAC78F73129CEC79B7626754C3A702C1D54CD5CAD727140668D5F30AF3D0B438FCDA65362D76D5FE518823
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...8...#........F....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..Yi.Uw....m.....0.@....@E...V(v1..6Q..5.~0M4....`....i..-X..D.A..m...Cg...y..z.y..#.`"...w...;..~../J.=.........}.t..#...JW...)......>..;.@o.V.~\|..y(Ys[~.....b5T.r5Q..>..P..t.!..[..r.3@(.Cc..wn....:.\..:;k.k..J..Lf..1z..W...$..}M.h..."..m..lL...J.f......Xh.v..Ew.U..PR.Sux...../...D..(......(LrTI....................d(........\.5.w...Q..:.X...YS...U5X.....E....6(.A.........m.5\..)..N..?..C...C.u..Q....x...O..(....N.....A./..+.....x.......D..`..I.C..x....t...(h.O4c..O1.H.8..?....T!D....m.p.,A.C/...B..7......FD.@x....v....B.. @.!..l.I.......X.l.d.........\dy...(.\|....e.z.e%F ..gd..Fc;.F.........N.s.'`..Q`>m..k..].W...P=.......m.....p..t..k.,.K..eM..3m.S)...!....(+.C..O.uQ6...,.e......}....R.t.]qG.2......Nuy.<t/I[..=p..].~...%.n*s...JVQ.S...U.jE,.)/..wq........N.....(2..'B8\|...2.Y.$....5..}....$s..$...@..8......./...Z.o..#.Q.....<........!.?vE@.=....3..;...%/.

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 371 x 371, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	59094
Entropy (8bit):	7.991525968190523
Encrypted:	true
SSDEEP:	1536:ED2x2PqfUiJr32weAeDzzewlrTcOTYSULOt8:qK6yPrafxlT1Tzi
MD5:	5472E6C64AA75FD32ECF527D22374851
SHA1:	12EDEECD2BA710228A4033C2C075AE24D94353F3
SHA-256:	EE5E52A45F3E8EC8BDDEAD62C8AD5CD95DECE9CF72EF6CD02566FDA7DA6CE952
SHA-512:	EF73781620F59B63338AB043C34EEC0A91AA6006140ACA35EF1FAB22EC7ACC6272FEC388E15F8C95E93A0B0DBFBF829730C1109B39660BAF01F5D453F24A8C28
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...s...s...........pHYs...........~... .IDATx...@T...}I,.....kb...^..;..E.&.Dc.......{/..{..."..V.;J......[.QP@......w...3g....o....oe....o...a..o.....9o....o.....o.q....o.q....o..V.`~.eK.x.7..q....o.q.s..V.!i.K.......9o...5 .7....J.7i.H[D....HC.7...I[JZ.xM..........V.`^.F..x+P..).=DH.MZ..z.m..m..}"i.I.&........6.s.J;..I.$Z.#H..&..r.N..."z...}q...Q#G"f...../..AI)..S.;~.1..#j.hD...k..v.{w.w..&.~.h.&m(i]H3.}.7.s.J3...V.../......M.....d..q.>w.T....X...&!Re.....E.H..8..+Nx..q.s..V..KZ7.D.".._ii....b......`faSk7..=.WQ.>..i..[.,.k.!.gO\n..u....e_....}.........".&.L...H...6..s.,^...%(>,..+V..wu.,..].....D...{......."..rZ..:0.Q.1.wtH...[.zh(s5E..-....\|.3....9.9o..2.II]..2j.I..........I.5..p........<.....l....Z.t....m.R....+6W.D_;.;.9.y....+...[.............b.(..{p.s.s.W......_.e.s4....l..gE..]9..v...a.a^. .L.w...p....{'Np2.q=8....;..`....9.9..v(a..^..\|.x.H...P.+f..D.......u.s......JH.....$.*.b..e.....o....B<N7.0.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65471)
Category:	dropped
Size (bytes):	192811
Entropy (8bit):	5.323525560023918
Encrypted:	false
SSDEEP:	3072:5zZjuNi1N+x6lIyVSfdyAme+X5nv6tZxekHZryoaC:5zluNiCx6lINkAmrlv6V5eoD
MD5:	6C7AB871F7F55224DE0AE7526DA87401
SHA1:	07C5B1CA23E5E312B51AF1C3074BD1C3F89BBCB5
SHA-256:	5D554121551DF68E414C85920B6541D2E92251A189FF19A4B1F8DFFE97CE1CB5
SHA-512:	6F635CB4FD1A318037A26FC8A98682F21237242D22CB112618DF8B2B9FDD9423929625B5B2141EF43BE2FB76480FB88249F4730F3E1B2C162EA32BA302CE73F5
Malicious:	false
Reputation:	low
Preview:	if(!window.__insp \|\| typeof window.__insp.loaded != 'boolean'){..!function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){var n=[],r=e.document,i=n.slice,o=n.concat,s=n.push,a=n.indexOf,u={},l=u.toString,c=u.hasOwnProperty,f={},p=function(e,t){return new p.fn.init(e,t)},d=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,h=/^-ms-/,g=/-([\da-z])/gi,v=function(e,t){return t.toUpperCase()};function m(e){var t=!!e&&"length"in e&&e.length,n=p.type(e);return"function"!==n&&!p.isWindow(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&t>0&&t-1 in e)}p.fn=p.prototype={jquery:"2.2.4",constructor:p,selector:"",length:0,toArray:function(){return i.call(this)},get:function(e){return null!=e?e<0?this[e+this.length]:this[e]:i.call(this)},pushStack:function(e){var t=p.merge(this.constructor(),e);return t.prevObjec

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	dropped
Size (bytes):	120879
Entropy (8bit):	5.46517427003263
Encrypted:	false
SSDEEP:	3072:108jX1zmSnRdKanojnsf9Xyx7txlEx0irIuS8/f0Ria:+IrnRdKanojnsf9Xyx7txlEx0irIuS88
MD5:	EEF0D1FC271AF0135707D1C1BCC322C7
SHA1:	77230FCE10DF38177FBA160C60A95A47EAE57ADC
SHA-256:	92ABE234BCDA152286D15436C897C576E19EC2F0A3C0BB58F5FB93059B8C8549
SHA-512:	36DFCCB0EC4D424C52EF53935A8A2C41CEF0CE7914C293EE097798D112A5DCFA27F4948A08C177BE7882FD3F17724D18C01946170BDFDE288A88C43A9B3D5793
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var g7=function(a){g.Hk(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.Za()).toString(36));return a},h7=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.oha(a.D,b,c)},Dsb=function(a){if(a instanceof g.tn)return a;.if(typeof a.Mm=="function")return a.Mm(!1);if(g.Sa(a)){var b=0,c=new g.tn;c.next=function(){for(;;){if(b>=a.length)return g.t1;if(b in a)return g.un(a[b++]);b++}};.return c}throw Error("Not implemented");},Esb=function(a,b,c){if(g.Sa(a))g.kc(a,b,c);.else for(a=Dsb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},Fsb=function(a,b){var c=[];.Esb(b,function(d){try{var e=g.Vp.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.sma(e)&&c.push(d)},a);.return c},Gsb=function(a,b){Fsb(a,b).forEach(function(c){g.Vp.prototype.remove.call(this,c)},a)},Hsb=function(a){if(a.qa){if(a.qa.locationOverri

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 89, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1235
Entropy (8bit):	7.641779670266347
Encrypted:	false
SSDEEP:	24:jJAbNOU7O7wyUZp7bbDAbg08NO/goTsV6dLJXLYarwV3z+i67Vfcg8R:jJgvXyUT7zAkAg8rdLJsz7gVkbR
MD5:	E2DE5EFD5270E32F2BF05AB893698E86
SHA1:	ACBEDEC87F5F757C1176A9FA36CE95CF6A14951A
SHA-256:	C2A303F19C92F09B87800F2EB940AE027B5B6206351E15ED3B824C3C8AB454E7
SHA-512:	5D8C11D0F93F8ACCE5B5DA43FDC8C043B44AEE95CE5D6AA1FFAF105F27FFE8DBC8191E529A16DA1C01A01EEC5E2251E9B0999C09669AD94728EB2CF005B472EC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Y........ ...3PLTE......................................................G....tRNS.. 0@P`p........#......?IDATh....(...D@....i{..Uu.W....+Z..!...........$.. .....`W'.V. .@2z......./...pU..5...iE.....f.@t..D.M...Lphw..v.h.....Q.....r.A..l. ..h.....p..S..Bt.#.D.D.ND...X'.H.....z.#Q..F. ....=.X..Z+...U.......!..be....#.....M .2.:..@.P./..V#h.F..).....@..F.!.zb..2.q2..f.o..o..$..9n....'....."..X.2....NK...h....nr....z.{K......B8.K..$""r'.DD. .2..83...\@.gjK.......B..I..OZ-3..Q6[........h.....f.....@\|(""......B.;A.!.......`.`.g...?..\..=.)...F..H......g..3..%J.+]...7~`.c......aOS....\H..m\|C.F.... 9C..Adff6...........0..J...@.!. .&..0m$....B....@Zye{...Rg~G@>.u.`....&....LD....v.....r...-...<.m...o...O..%D......D.....KDt..4..p.....(.....~h...h+.......j6qu.s..]..&...d.y...a.\td.....m.Bp..+.Z..=..@...N...L..l.. .^....23.-...75.*r.j.-.a6...t..q%.....}.2.i...RO...._........T...\|.."...8...`{....b^.JJ..k..A .....W.........iocU6

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18713
Entropy (8bit):	7.969170354765344
Encrypted:	false
SSDEEP:	384:dnQB3tffNXMVXe420Sx/Wk5oSTMu/SkLE31bpjw9k2sUlfzWvedOZS:du5fNXUe4qxevSMZjJ9wGsRSgB
MD5:	C8C6AA70284910DCA8838A26BF256C78
SHA1:	0182071C8263FDE662DB0D5F37A4D0EB5BED6766
SHA-256:	11DC5E121554F2CD8204C58EAF186054F1240EDC6EA351AED831DB4AB48B3A3F
SHA-512:	E5A9F3C2A7AFDF3456A2F35BF6DB4531C0483288A6D5EF3EA8295778B444E1AECA364D8E74DBC8354D75DE911C1725DA208F38ACFE9F1E148B96BE91C15F5424
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="uuid:8DA59291CDBB11DD81A7D2CB53B91267" xmpMM:DocumentID="xmp.did:4CC1C7019F3111E398F189FC0ADBF076" xmpMM:InstanceID="xmp.iid:4CC1C7009F3111E398F189FC0ADBF076" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e9b54eca-1e92-b849-9dc9-67061933d5af" stRef:documentID="xmp.did:02801174072068118F62B73EBA1A189D"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">NATE_3D_mstr</rdf:li

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 371 x 371, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	59094
Entropy (8bit):	7.991525968190523
Encrypted:	true
SSDEEP:	1536:ED2x2PqfUiJr32weAeDzzewlrTcOTYSULOt8:qK6yPrafxlT1Tzi
MD5:	5472E6C64AA75FD32ECF527D22374851
SHA1:	12EDEECD2BA710228A4033C2C075AE24D94353F3
SHA-256:	EE5E52A45F3E8EC8BDDEAD62C8AD5CD95DECE9CF72EF6CD02566FDA7DA6CE952
SHA-512:	EF73781620F59B63338AB043C34EEC0A91AA6006140ACA35EF1FAB22EC7ACC6272FEC388E15F8C95E93A0B0DBFBF829730C1109B39660BAF01F5D453F24A8C28
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/0014360DEA000413/images/garwoods-logo-v2.png
Preview:	.PNG........IHDR...s...s...........pHYs...........~... .IDATx...@T...}I,.....kb...^..;..E.&.Dc.......{/..{..."..V.;J......[.QP@......w...3g....o....oe....o...a..o.....9o....o.....o.q....o.q....o..V.`~.eK.x.7..q....o.q.s..V.!i.K.......9o...5 .7....J.7i.H[D....HC.7...I[JZ.xM..........V.`^.F..x+P..).=DH.MZ..z.m..m..}"i.I.&........6.s.J;..I.$Z.#H..&..r.N..."z...}q...Q#G"f...../..AI)..S.;~.1..#j.hD...k..v.{w.w..&.~.h.&m(i]H3.}.7.s.J3...V.../......M.....d..q.>w.T....X...&!Re.....E.H..8..+Nx..q.s..V..KZ7.D.".._ii....b......`faSk7..=.WQ.>..i..[.,.k.!.gO\n..u....e_....}.........".&.L...H...6..s.,^...%(>,..+V..wu.,..].....D...{......."..rZ..:0.Q.1.wtH...[.zh(s5E..-....\|.3....9.9o..2.II]..2j.I..........I.5..p........<.....l....Z.t....m.R....+6W.D_;.;.9.y....+...[.............b.(..{p.s.s.W......_.e.s4....l..gE..]9..v...a.a^. .L.w...p....{'Np2.q=8....;..`....9.9..v(a..^..\|.x.H...P.+f..D.......u.s......JH.....$.*.b..e.....o....B<N7.0.

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 302 x 66, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10417
Entropy (8bit):	7.880984331656399
Encrypted:	false
SSDEEP:	192:ZS17F8kn7KHIwWHFeXPbr/KBrTjgSvIoFG4LEKb0GTJWK/C1p2AtLllEQsJnbaoT:A1Nn7KHx+ArMr4Sgos4Ln0ut0p3RbEQ6
MD5:	B53E8E746776B9450C0C684B868F8E76
SHA1:	D19BD16BA7F8BBB8E757355BBCBDDCB2FFDDC81C
SHA-256:	9ACC7CCFACD5A105985374B4D1A35C56F859B7F568E423A626C1471E0BB66AC9
SHA-512:	3B078E24CDD7C7B9AD61FECC0A7499C9C2DA53FF8A5506C3D472C652DB08670D9455A393C8D1A4EF65F2C20146BE2F9FF493A78AE43686E4AC36EFA256228F04
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......B.......;.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-08-02T11:27:50-05:00" xmp:ModifyDate="2018-08-03T13:36:26-05:00" xmp:MetadataDate="2018-08-03T13:36:26-05:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:4dd6fd66-4eef-ed4d-91b1-c0346fae8d3d" xmpMM:DocumentID="adobe:docid:photoshop:54dbc9d0-e0e6-8b48-afb6-4bf8301bd44

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.976663363230767
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKYQCpM0Waee:PLKdXNQKQ7L
MD5:	899F3616D1031A5633D9A0F4CA491B2D
SHA1:	129580E3399BE36658BB5164AD4C187E97EE12B3
SHA-256:	D4FE562B542385ED27C0A5B044F51B790B51CF0A57A265BD63BF51D94B570197
SHA-512:	3B5819AA67ABD91C54E395407E9FF01FBFC95490E86EB1AC9A5F22F30C7C6FCC359B6550450AAEDBCAF2D23037DDBAB09ADA5BE3FD227188FF828E5EC40F41DA
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js');

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12911
Entropy (8bit):	7.911922126370381
Encrypted:	false
SSDEEP:	384:gmnTBoaZnt0tARo+0wjWlCv4GMqTnoMPsSwPQFLaO/K31:xEy6lp2ckb/k1
MD5:	AB3615EDE14FB34517DEF9F65686512F
SHA1:	1F5BEEA40AE44097173D0F002324DD0AB2F16264
SHA-256:	FC23968871BFDD332DF8BF8A92837E02297D8EFBDAE82E40D54C8A9C083D937E
SHA-512:	5B46CBA26F6C772D60F459B3DA233A7E8A8E2A10A3517774DCC43EE47C7D5D02D51A2CE2E875F8CF80F133B5BC85C8FEBF595D455E04E9A339B56CA342664C60
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/logos/google-g-icon.png
Preview:	.PNG........IHDR.............<.q.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmp:CreateDate="2019-01-21T10:39:34-06:00" xmp:ModifyDate="2019-03-01T09:20:57-06:00" xmp:MetadataDate="2019-03-01T09:20:57-06:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:18aeb1f4-4ae9-4d7a-ba73-b48045394dbb" xmpMM:DocumentID="adobe:docid:photoshop:8391c6cd-b30c-3742-a148-a47db34d5

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12591)
Category:	dropped
Size (bytes):	12660
Entropy (8bit):	5.182948187095638
Encrypted:	false
SSDEEP:	192:64jc2UbRgm0Yv1XiRG+3XaEEBvx2mD2ObEXH+aVKQJrsUWV3pdo60:6WcXGm0hapBvxdDrDakTUmT0
MD5:	B47F2C820A0C744AAD0A3C477E8D0239
SHA1:	F1086DD9182A354AD16FA1AC3B0D67471B91D460
SHA-256:	621D2A2AE41AEE9776A0C15EA84AC5208D0E222795B4D22F4B04F01590444ABC
SHA-512:	E4FBD1A5F52F52EEA65F1035551310E6570746F3510D1BBEC1ADCA06232CA2FBD1C33F7612652E3F361B70FF4D17AD1F79C1C02B8BE78D0BA4417B788844FBB4
Malicious:	false
Reputation:	low
Preview:	/! For license information please see picker.date.js.LICENSE.txt /.!function(e){"function"==typeof define&&define.amd?define(["picker","jquery"],e):"object"==typeof exports?module.exports=e(require("./picker.js"),require("jquery")):e(Picker,jQuery)}((function(e,t){var a,n=e._;function i(e,t){var a,n=this,i=e.$node[0],r=i.value,o=e.$node.data("value"),s=o\|\|r,l=o?t.formatSubmit:t.format,c=function(){return i.currentStyle?"rtl"==i.currentStyle.direction:"rtl"==getComputedStyle(e.$root[0]).direction};n.settings=t,n.$node=e.$node,n.queue={min:"measure create",max:"measure create",now:"now create",select:"parse create validate",highlight:"parse navigate create validate",view:"parse create validate viewset",disable:"deactivate",enable:"activate"},n.item={},n.item.clear=null,n.item.disable=(t.disable\|\|[]).slice(0),n.item.enable=-(!0===(a=n.item.disable)[0]?a.shift():-1),n.set("min",t.min).set("max",t.max).set("now"),s?n.set("select",s,{format:l}):n.set("select",null).set("highlight",n.item.n

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1527
Entropy (8bit):	7.086298091274089
Encrypted:	false
SSDEEP:	24:X41h4SHWwjx82lY2T3UV2tRyJ3V2ekOGWgZpvuXvFBUKEPf/sN3sSu:mKS2Nn2wxJ36OjQvu/7UvceSu
MD5:	B42837A5EF5427BE3AF0760C228F0E3C
SHA1:	2E112927A2C2328606441E82595AAE56F1DA183D
SHA-256:	71FC0DBD7E93AE48C3855D04DEC1E539C8D8A2F27CD199BFFE5B518E0A22936A
SHA-512:	045A9B47AF9026D88D549445292A5D892C2C1ED60473449F34144A43559687EE703098F2C7014D5C6F22C7B9758E1530AE83A14A8104A665E6261815AAD3F593
Malicious:	false
Reputation:	low
URL:	https://local.demandforce.com/v2/c0b0c90bb9e5e2274496.png
Preview:	.PNG........IHDR...P... ......3.l....tEXtSoftware.Adobe ImageReadyq.e<...#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c014 79.151481, 2013/03/13-12:09:15 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmpMM:InstanceID="xmp.iid:90B288E9702411E3A94EDBAEF0A343B4" xmpMM:DocumentID="xmp.did:90B288EA702411E3A94EDBAEF0A343B4"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:90B288E7702411E3A94EDBAEF0A343B4" stRef:documentID="xmp.did:90B288E8702411E3A94EDBAEF0A343B4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>#..W...jIDATx..XK..0.E..p..e..p.*=..A..G..0T.r7\.......i.3.1..,..tU.5y$y.t.[..w..x[kk.(...K........'....1...}......7.

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 67 x 100, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	699
Entropy (8bit):	7.50029669163707
Encrypted:	false
SSDEEP:	12:6v/7J/vwJh7MyAxCjah3X/FGZV8EZb23yt5OO86XMjwzHMIb2PMw:ywJh7jI3dGZGzyTOO866wzZ2kw
MD5:	101BE076D35ACE24DA8009D1531DE809
SHA1:	3F5FE180BD3F91B7C9B05181804E8CBADF524399
SHA-256:	BA9C68AF8EAA7963F746CDF9FA89D95503B6966B80EFD2F856C23E185816E893
SHA-512:	D23813496AF4475436AE70C051319790459ECB61D930865C24CC0CE4EEE96B0464266C55D3BE0A18DF4B98FFFF64778C978F30383422E92202E1954A3C4B5F99
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...C...d...../M.....PLTE..........................................6.=....tRNS..........)3=G.(V7...2IDATH..U...@..O..H...W.\8.)..R.R..lHq...W.n.HW...D.} .n..w....U}...i.^..X.6.....}3ofg.A.m\.......lC>....L..yE.'....H...u..G....[...;"..yzJ...<V.I.1M...D)$1`+H...s.P.ej.(3...0...$.9.XJ...0.r..E!Ng.P.~C!..........3.'\|Jx...;...X..,.GMB...Vh.+3J..^c....@.7:...2..U....i3.\|a.......Tsc&.1./..h.$..\|D.W...U...^.J../.}.w....S~.{....dh`.F./I...>.i^L.>....E.qP"1..B.rwy.eQ...i.3......L.w}.....o....%6..z.3..l.....2.k....{~E.1w...oH6l..o.......?....F./.2i_,.EFru)w'..T..v7.q&T.V...{,.e..-...mM..f?...e.n...3..j.u.$..Zn......S..zZ.."...K.n.u....g..sW...Y....IEND.B`.

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	703325
Entropy (8bit):	5.306845374558168
Encrypted:	false
SSDEEP:	6144:H2s6wxnzCZ75QsKcTnGPp5UPB0rB8W97kRsFpW8/kGBoGYjxhbVwx4H:N32KcTGPpMXWXvM1Gwx3wxi
MD5:	DD805194FF6BFAD52EF1E3A75B24AD2E
SHA1:	9417CDAF63D9F209E472AF3DC083045ED39BBCDF
SHA-256:	18E6371CF275C9CA4B7F9E59D01E280205DE5062F07E0D34015B966FBEE4D3B4
SHA-512:	6D3FA5EDF7466F8274CFE29141C794B083AD47502FDCE58463EA11987A9D6A2D4C584EB1849573D19A450D0CC2B404E41EB8B73DB8AF71148D08C0DB92C53E2E
Malicious:	false
Reputation:	low
URL:	https://core-dot-sos-apps.appspot.com/scripts/core.min.js?v=1729790355
Preview:	if(!function(t,e){"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(t.document)return e(t);throw new Error("jQuery requires a window with a document")}:e(t)}("undefined"!=typeof window?window:this,function(f,R){var u=[],c=u.slice,L=u.concat,H=u.push,z=u.indexOf,i={},$=i.toString,m=i.hasOwnProperty,g={},t="1.11.1",w=function(t,e){return new w.fn.init(t,e)},W=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,j=/^-ms-/,q=/-([\da-z])/gi,B=function(t,e){return e.toUpperCase()};function U(t){var e=t.length,i=w.type(t);return"function"!==i&&!w.isWindow(t)&&(!(1!==t.nodeType\|\|!e)\|\|("array"===i\|\|0===e\|\|"number"==typeof e&&0<e&&e-1 in t))}w.fn=w.prototype={jquery:t,constructor:w,selector:"",length:0,toArray:function(){return c.call(this)},get:function(t){return null!=t?t<0?this[t+this.length]:this[t]:c.call(this)},pushStack:function(t){var t=w.merge(this.constructor(),t);return t.prevObject=this,t.context=this.context,t},each:function(t,e){return w.each

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	dropped
Size (bytes):	194449
Entropy (8bit):	5.631178033848175
Encrypted:	false
SSDEEP:	3072:OX6D3l7VQWNpuvvnIN40RVHL0fpZfL6vO+wLUaBTeFgN67bpHiUB5wACXI1Vj0De:OX6Dl7TpuvvIN40RlL0fpZfevODUaBCH
MD5:	D24159D6B6EFFD13D0C781CBB950D73C
SHA1:	25204616AD3B9E787ED1C62CACC935AA79E5BF45
SHA-256:	FAF393CFCF0DD3586BC5B4D4DAF75755215C8F8642FD117A184D44328E056A00
SHA-512:	22B5682CAD051B71B12BF006004521BB9A860273B25B2E966FB65369BFCABA826574E7F91F0587E5742862C069755DCE8F66DD90EB14FC7FB29F293188E818FF
Malicious:	false
Reputation:	low
Preview:	google.maps.__gjsload__('util', function(_){/.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var Xwa,Ywa,$wa,bxa,TB,cxa,dxa,fxa,VB,XB,gxa,YB,ZB,hxa,bC,jxa,fC,hC,iC,jC,kC,lC,nC,kxa,pC,lxa,sC,uC,vC,wC,nxa,oxa,xC,pxa,AC,DC,EC,qxa,HC,txa,IC,KC,LC,vxa,wxa,xxa,zxa,RC,Bxa,SC,Dxa,TC,Fxa,Exa,Gxa,Hxa,Ixa,Jxa,Kxa,Lxa,Mxa,Nxa,Oxa,Pxa,Qxa,Rxa,Sxa,Txa,Uxa,Vxa,Wxa,Xxa,Yxa,XC,aya,ZC,bya,cya,dya,eya,fya,gya,hya,iya,jya,kya,lya,nya,pya,rya,tya,vya,xya,zya,Bya,Dya,Fya,Gya,Hya,Iya,Jya,Kya,Lya,Mya,$C,Nya,Oya,Pya,Qya,Rya,Sya,Uya,bD,cD,Vya,Wya,Xya,Yya,Zya,$ya,aza,bza,cza,dza,eza,dD,fza,eD,gza,hza,iza,jza,kza,lza,.mza,fD,nza,gD,oza,pza,qza,rza,sza,tza,uza,vza,wza,xza,yza,zza,Aza,Bza,Cza,Dza,Eza,Fza,Gza,Iza,Jza,Kza,Mza,iD,Nza,Oza,Pza,Qza,Rza,Sza,Wza,Xza,Zza,bAa,cAa,dAa,tD,eAa,uD,fAa,vD,gAa,hAa,ED,FD,jAa,HD,ID,JD,lAa,mAa,nAa,MD,ND,PD,QD,oAa,RD,TD,pAa,rAa,sAa,yAa,zAa,ZD,DAa,HAa,IAa,JAa,bE,KAa,MAa,NAa,OAa,PAa,eE,RAa,XAa,pE,$Aa,ZAa,qE,aBa,sE,cBa,dBa,eBa,gBa,hBa,QE,jBa,RE,kBa,lBa,mBa,nBa,TE,pBa,oBa,

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 144, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12818
Entropy (8bit):	7.979465046816014
Encrypted:	false
SSDEEP:	384:8eaGtu1+k3Qr4LLu7FUjcn4xdOwYUatyN6XB:85GtuUkgnGewYAc
MD5:	FD8212C7AA90434B365B3B605BB4D444
SHA1:	DE3C5EBF0C274BB3ACB4C31E1792683E8D755695
SHA-256:	927FF5500BBF4BB18D214BBC4D2974C5CDB1C36A4C061737028C30B0F62D9941
SHA-512:	80F46B7F05CEE782E0FA2E3D075EB735E536A6CDE4F421F2032F4AC8450D4C3C527B3D336A6B715F6F681671A6B8055BB05D2B5383147FE13CEA6FE164963310
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/products/bryant-fan-coil.png
Preview:	.PNG........IHDR..............X......tEXtSoftware.Adobe ImageReadyq.e<..1.IDATx..}..].u.9..o..;%...K.Mj.$.I./@`$N.....mQ.@.....4i..-.&q..p.6i./u.+.c.v..5$.r .v.5.-Y.Bq..y.....3..h..{..43o..8.{.\|.;....G}..!.?A}.....X.Q..>..V}l.#.Ho.....#...$.r........g.\|..y..z...........+.....6.]...[..I..V.&..o.s..[.....~...b..pu........+...&:....AQ...\9....Y.#. %A.g.n6`br....`..,t.-h.......?...>.V...f...T.....e..8q.8.v...=w.>..O.b..w.<..o......a..z.j........y...j.Q.Q.@I..../.z.....^==.......oU@....8u.4...F.)..^...4......\.p....q.n...E)...G.n..S.^j4.s.~..u.3.9.~....B,......F.D./..\|....X..@s.......\|..o....KK7+`..R.<...3S@.rP@Y....2\|...$....d..N!2u.0.dY..W.+...Hm.r......B..}..a)i.......+.........p.....k4..Wo.ie.....)u.....J]...\|./~..{...3..d0..a0,`8..7.@.}s.........FE.E..V..u}.,.W}...p.......^.N....2.,....L.T=.\|.Yu>i...LB../<.,P9.-..?P....\...G...>v.{........[...s.F}X..N.....g..7ss..ER...R...........H.i4.)`...@.r....p..82_...y.P.W`1...A.Nu.H..I[;..

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15572, version 1.6554
Category:	downloaded
Size (bytes):	15572
Entropy (8bit):	7.9810164149550245
Encrypted:	false
SSDEEP:	384:js8NoiTYZhWLvKuU4dX+XD3lk8M4RedEEHluh/:DoiP+4dX+T3OCRkE6I9
MD5:	E64CAB167BBDC04807429D10873901A0
SHA1:	AFC44700053C9A28F9AB26F6AEC4862AC1D0795D
SHA-256:	60F9B5203842A4FE2D52F7C96F3C57B755BBF8F347535469739BCC6F95A9C4B5
SHA-512:	9812A394D05F56B70C1DE57FF6CCD46E15C2DB99A003138A0CC2210D08303746969A269F37583A6BE14C706C645FB923136E4231B3ED1FB47FCAF6209884CEAC
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v13/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2
Preview:	wOF2......<........8..<p.............................t.`..L.."..4.....D..B.6.$..l.....<.. ..2..(.....w..;[...C.[%[.v.(T..E.q@..g.....yI..%X."h.u..O...)nb.A1..hC.V.@CN....~.e..........el<..s.....8.9..5B./(..%.k..4Ji.:.....C".o)&.......T.......K....R...R(.......G.T..'.6...?......j.o..,..T.I.&..]..g..@.B. ....P&...m..Q.r..S..=Q.1.....2r......*D....9.._......?.6f..F.......^.r0.7..W.dY..$.......\.x...{..%.-....g.K>.>.Y. ..AtAti@..q..&y..).)..(+..aC.......d....Xy..T_.[.l}K..DN...A..Ug.....,..J5....".&.F..@.v:..pM5......}..,.AD.~..m.....#..%./B]..E-..Xv;.i..r..h.e..O..V..1P...`>.S...../.jUb....Gq.9@..x..O.v\.........A..'...5.,..A...p...".&.4...S>.-)l.Bo.'5?4S3...14J.]H.^....\|!......L....... (....R:/II..FP....@...SN.7.....D.K1Wv..M..../MO6x..2B........Q. ....^B0+&..i..xZ.GS......:.2.....d...)..x...l!.>r.............TJ.S..4....E.).sN.e. .2..p.I1..&...$....Z..0E.t..G..............vkp..h"...iH@.B..[...D.,0..e.....AN....r..w.......L

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	1101
Entropy (8bit):	7.272614158238896
Encrypted:	false
SSDEEP:	24:iIU7HRJ/x6e3mpNx0xAzRi6VyigLavWSR/Is:BYRR3mXx0xA46VYLAWS9Is
MD5:	B9389EC50CBF52353268C5733287AEC3
SHA1:	E9F96DF8A6BF124BD5CC54F0A74F2D893EF0E127
SHA-256:	F1AB26D1E2FEAF4389A46C90FD63E9F8BF2D0BC17A410196CCC453A0260D8545
SHA-512:	1EA8FD125F172C50CD88B9F261EF6630FDBC83AF675C42BBB57116D8B412D973854FFB41F2DB355B98CC28EA01AC1DF266BDECD8B500374840ED9C255E050DAF
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................D.D.......................................+.............................!"1.2QBRaqr3...............................1.......................A.!1Qa.q....."2..Rb.................?..O..`. .... .... .... .... ...L.,..7)J.. .o ...yH?....$.w."Z..U.....g.-q..l.k:.....dxCf.....\..^_..V.q?.~......m>.$.{r4....I..!]{..M.E..}g..kju..6..A..D...r.iN..&...E..\O...... .........tLD..~...)Q.........s_.h.....:..e5o..9K\-..h].e;x.}3.}._..V.{...+..y.....t@a...I..8.u'oQIeJ/......'NY.....m..jz.+5..6......l.G.R...'..-4........%$.LdS.. ....o.%......Wi.R...dq...h]..{. ..ouub...=.x~...P.R......g.Jce....y.........]....]......h.5J.w......7p..........a...N..l.......'..%Hc...1v.....~.o]?O....e-....... .... .AWk.-X../U..kw..T...C..P.K..F....\[m..ZJ.#.......Y.).AFo.^...L..K...C..#.*<......=....TRH.=P..(.N.h.+M.=8.=..g.

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 87 x 88, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1553
Entropy (8bit):	7.306960419089528
Encrypted:	false
SSDEEP:	48:lXLHXtWRyWLOQUvvvseOfeh7BMA6oGZxPI/abuHDdw:l7HoRfaQCvUeCeh7BMA6oYxPviHC
MD5:	406A15AECB74E414D7545A63E913D2C1
SHA1:	02C14BB55BBEE940A6678F388354F399BB904594
SHA-256:	77092D37297F9594C30213AD769ECFEDCC5A40590B040BAAC467CA0FC21E0521
SHA-512:	1EF95A0E2DFF90E362FF609CD997B5DFC4E08685E62DE93E54F51E5E4DA4B7EA42F0D1926CEF0E9A3C305C05A8CF5C58CE2B7808562825B9FDF8F508514CB8E5
Malicious:	false
Reputation:	low
URL:	https://www.garwoodsheating.com/images/icon-gear-wrench.png
Preview:	.PNG........IHDR...W...X......@......PLTE......................................................................................................................................................................................................................................................................................................................................................................................................e.M....FtRNS........... "#$%*-01567DGHIQRYZ........................................{......IDAT.....C.w........f[n...-.a:...r2>'(h.x.2uj.C&..@..?.N....;..\|...._.O...g..`"8..vy..hh...I.q{.}.f.0..^7].._..B.;t-..0l.{]T...j.tR.n......e.....sm#pl.........>9..8.2.FN4.P.@3..4...4QM>\.......A.\A....Cu...#.{...W....+..Or.. .(...7..<tz.Nk.F...L...3...q.9v..p+...l./..f.......C0..K.%\.J.i...d....rQ._..gqf.Y7Yi...Ab).z....`.U[0.m$.?.`.+fwri.+..e.UoQ.'......M.....w..4.2..G.....cU....U...p.e.>..C...<0.j......P....2...@.!....%f.2@a.U2J.rQV..p.4!A.EB.0+M.fA..f....k.;.P

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-KQMZSWM9K6&gacid=1386283618.1729810968&gtm=45je4al0v899685487za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533421~101686685~101823848&z=257853734
Preview:	<html></html>

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 462 x 210, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	26217
Entropy (8bit):	7.963504493032036
Encrypted:	false
SSDEEP:	768:EajUZwzHo/tK7JWRserzdP6393kaaegBdTKsI:9jib/tK7JQH9sUpjBy
MD5:	649110D16B76D830D3A797FE285DECAE
SHA1:	BAAC98FF0117FB027A57AF1837567D49C89E27D1
SHA-256:	77A12B43F0D1AF16599366BF810134E4A365F4D2A804A5A23CDBB2E083D91980
SHA-512:	E13A0F340ADD0E6880F8C0D94A8EC9A8E4DDAEE797F04F30432E6254CB2FE79FF1EABE791FB895FD96E17658EABF6CF06004467AFA28EBC46961BC998BD268D6
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/yelp-button.png
Preview:	.PNG........IHDR.............. .....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-11-01T11:19:17-05:00" xmp:MetadataDate="2018-11-01T11:19:17-05:00" xmp:ModifyDate="2018-11-01T11:19:17-05:00" xmpMM:InstanceID="xmp.iid:625d3ba8-86cc-8e40-9474-4c5625a9ead5" xmpMM:DocumentID="adobe:docid:photoshop:fe62ed0e-b5f8-6c45-844c-7d9f6e7a30a8" xmpMM:OriginalDocumentID="xmp.did:60987f70-8db5-dc47-bec5-a1056bae80d1" photoshop:Co

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7387)
Category:	dropped
Size (bytes):	7451
Entropy (8bit):	5.155146349032467
Encrypted:	false
SSDEEP:	96:6ZEUg1O6k7LN3IEB+0S+Mq0fSLt8gUOxRO+IAukn6rOuN3ORRR0y93zDQKo2bae:GXVR7Z7+ep+eRxtu9dAYwue
MD5:	830FCFF5669006F2A10A2CD4D2824845
SHA1:	3AEAFAEF54B60595395CECD2CA395D9EFDDACE41
SHA-256:	5719C969FA9325B3ED5E22A6AE8F9E68A5D899BCF591030CAAAA42D5D5B250D1
SHA-512:	EBFF342AA663F7FAB9B8293C8682D97B00805A01AD06CD095253DD340242A96E4200DB45FC3BA0B8CCD2F4A2E4833837752129A8AA4BF481F0961E21FD71E8C9
Malicious:	false
Reputation:	low
Preview:	/! For license information please see picker.js.LICENSE.txt /.!function(e){"function"==typeof define&&define.amd?define("picker",["jquery"],e):"object"==typeof exports?module.exports=e(require("jquery")):this.Picker=e(jQuery)}((function(e){var t=e(window),n=e(document),o=e(document.documentElement);function r(t,d,s,c){if(!t)return r;var u=!1,f={id:t.id\|\|"P"+Math.abs(~~(Math.random()*new Date))},l=s?e.extend(!0,{},s.defaults,c):c\|\|{},p=e.extend({},r.klasses(),l.klass),m=e(t),g=function(){return this.start()},h=g.prototype={constructor:g,$node:m,start:function(){return f&&f.start?h:(f.methods={},f.start=!0,f.open=!1,f.type=t.type,t.autofocus=t==document.activeElement,t.readOnly=!l.editable,t.id=t.id\|\|f.id,"text"!=t.type&&(t.type="text"),h.component=new s(h,l),h.$root=e(r._.node("div",v(),p.picker,'id="'+t.id+'_root"')),h.$root.on({focusin:function(e){h.$root.removeClass(p.focused),e.stopPropagation()},"mousedown click":function(n){var o=n.target;o!=h.$root.children()[0]&&(n.stopPropaga

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 15, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	713
Entropy (8bit):	7.653716701894823
Encrypted:	false
SSDEEP:	12:6v/7oSrXi7pbB6QPObnvBBlhxY80MiAjSisoNFpfJS1sqLsPSJ90WW8Bd9:HyX4bB6oOHuLLAjJLS2A9g8V
MD5:	71DFBF3742CA8B64A03C4F1BB2023EB0
SHA1:	8F06DE350EEA263A8680BE200A3963BDEEA9B5C6
SHA-256:	AC1CF06CD68D1A7E19D1A85D7C1D6A85C3797E444D7B8C0E496FCE34770EB743
SHA-512:	2657C18EE390720A5A1A548148BEC675C9F5E8D8797180578969CEF74EB130436B9E6AD27FF5DBA16F64115EF315F31158076876BA9E195504952950FA598A99
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............sO/....tEXtSoftware.Adobe ImageReadyq.e<...kIDATx..Kk.Q....L2y.I....A.........M.[......Wn\..W.....T..R.....`..Ji..I'M.$.i&3.........{.9.y].q.M #.-..b........_.i.....0.,r...T...../.@Y.R-.........d.T<..b.-..4..;v<...k.@.....w........4..z.=.x.kw.9.7........,3wz..<]y..3.6.+..H.....&K..mc.A...H..X%....`.7.n..x.....L...~.$`.Z.A.+.lY.bh...nc.M.W......Q.VK..O.;B....E.1>.....I%h.G.J......p..U.6Pf.>.....T.h4H"..:..nu:dR1.U..~..~ J...c<y.2...6..NMP......p....K.(.j.....I.Z.`W.T2.2}.<{..0ui......v..._&....,1K.].g9{f..\?.[.=...`W\..=.....<...+....7qL...................h,. \|.,..Y.L..8[.i.~.....Qz{+...xK..<.z.]@....R.k.`...~.1.l.@>....._.....e..d_....IEND.B`.

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 129 x 89, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1419
Entropy (8bit):	7.695866995765983
Encrypted:	false
SSDEEP:	24:j0zPt2AHGvOUuy6x3nazr1QmzNoEuWJup78OngwoHWo/NRKEMM:j0sAHEbMwpDoEuWJUFpa7MM
MD5:	0FF73A75927B0093DEBC6F7CDA4B9D34
SHA1:	5B75D52E1B342907D6D2FDB286ED09221C642F9A
SHA-256:	06432C7AB1F89CCC5ED03FD8EB3FE9D4905C126E3BE4A847C50E85BD696759B3
SHA-512:	0B370FADA1B7685980CD846ECACBA43FC194AAE76F25A4E5204273886B06C33176648C35DE550B469B3A340BEFB73B6261CA799DDDE959CCC740A14420F5A0C9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Y........ ...3PLTE......................................................G....tRNS.. 0@P`p........#.......IDATh.....E.........>`0...].......+.aK..k_....ve.._..^N......@.u....%...Kd...\|\|..}7...,....k.qWt..../.....d.....r&......Z....WV..2..B......M...K.GA.9.@~v.d.a "...y...g..95.g.. ?...7.Hr...m..e...E.x........i....\|.J.3..L.Q.E.>_.6O....._..3.\.E...U.(.!>..&_.Ds..f.......:.aKbe-oq.y...Q/....W.~.M>.g3Rv....\|YE....&>...."....!.R..f...C7..x./..+..V.,...o.H]..M.....X..Qa.H..F!=...S.....T.....\|.c..E.f.-.93.7F..,.@...l._...j._4........k_.....5...rum.t1CC.m.9.^.s....r...........L........Ms.SG...e.8.]3.~&PU.BW.....]..+.6-h.EU..I...?..O..U5..`.......a"...`..t} ...]mh..Y....."./X..U......m......w.\#.""2......[..#Ah......;A.C ".4?.J`..4..H.K4.,"...oM..J....-?...^=1...D"W..u,..n%...5.....7.............\|#.0' . ..e.0.F.x.............t......;.....C..y...I.Y..[.x.L......O.7............R.4....*..@6/.z.....L.z.y.(x.%..y. "DDFDfr..I;..~E..u".M

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	68
Entropy (8bit):	4.3336655487943405
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tJ8/V+5Gfjul2g1p:6v/lhPfA/UY7ulVp
MD5:	978C1BEE49D7AD5FC1A4D81099B13E18
SHA1:	AFCB011CFE6B924F202EE9544F17F631B32A01B1
SHA-256:	93AE7D494FAD0FB30CBF3AE746A39C4BC7A0F8BBF87FBB587A3F3C01F3C5CE20
SHA-512:	81F251D1CA407945457425B681A96D1E7743706FAFA47ACE26F5F569E69337E9AAF726BFF1A854B1A5A47A22E55C4BD285A4D21F695D126DA631A1C891D10F48
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................IDATx.c..........1q....IEND.B`.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	downloaded
Size (bytes):	211525
Entropy (8bit):	5.537001832927561
Encrypted:	false
SSDEEP:	3072:0zRhbIGc3kWhI1ZF0dSncEjCPfrgiG8m9s3rOXk9nRUccW:URo3k4cFJviks3qXk9nR51
MD5:	5BDF0FD98C5290C6CED19E7773716418
SHA1:	108838A5AABE6AA1FAC6E90B42584D1AD9D808E7
SHA-256:	A293511CD90C5923C0EEC305A0317B13643711F42160348564DD45EC14C3E081
SHA-512:	D1DB344EEC925D63810030C892C7A56099ED23D7674878233B0E023449B7CA51ECBF07C072FA4D34E1D2C35D1B9F2689D13586336F8BC4313CBFF51783C3C3D8
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-28767219-1&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"c"}],. "tags":[{"function":"__rep","vtp_containerId":"UA-28767219-1","vtp_remoteConfig":["map"],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__c",[46,"a"],[36,[17,[15,"a"],"value"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__c":{"2":true,"4":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__c":{}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__c".,."__e"..]...}....};.....var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=typeof Object.defineProperties=="function"?Object.defineProperty:f

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	43080
Entropy (8bit):	7.995374891142614
Encrypted:	true
SSDEEP:	768:eXZWXigpGMuR08ARLSOEsQiAq1M3owewuTc9ETNakGcRr7s5egTa9W8WW6e53unE:EWSFMx8DRiAq1ZwOciTNamr47cW8WWfo
MD5:	CEBA7AEBE407E84D7990A443D3CAE66E
SHA1:	7D8D800741C0A288FF605C8B71109CC822EA7FAA
SHA-256:	DA5D23CE3B24AC6DF11AD1FE3A9024A47CBE236972D7EC178C71BFD6160EE22D
SHA-512:	A6B4AF9D0054C8ABE597A843EBBF3C60DAC170C0F6C0BABF9469D327BE5E14C5D1FC5BD5ABD3728C6C8D3F4A26A809E5DC1EA7F180B6A9FD9CE51A9E3F6B0C8C
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/NpMhKZDN7Js/sddefault.webp
Preview:	RIFF@...WEBPVP8 4...0........>5..B.!!.M. .D..\|/....9....A.7......(..._....M.......o..t?......q.....o...?.>..T.s........./y.._.>...z..Q.w.9.O./.g...'......?...:.2..........w....w.#...?...y.._Q.~^.g...o.?.;......w...?.}..X........4......P.3<F.%...W.?..F.>.3&.....;..2i.......3&.....;..2i.......3&.....;..2i.......3&.....;..2i.......uZ.a.7.......].=.~0..K>c..\...\..#..4-......_.t._Q%....z..US..c^.c.[.c[..U..G.......b.).R@j...<!@l. wP#..E..a`...R..p...uX'.:..N......,....j.D.+eY.C..a\....$.Kk.d...s"....({.k.:......J...d..i.L.~..O.. K%.?.J.f...}...7.c...t.X.....K...9L7....+T..."@i...'.......`.B$...xe.]Zk..z.k..@\~0q...h.\.r-...l...).EX...:r...@.+4...T.`+...Hw\|..4Xv~.....V...Z,h.whq.A}....0rVA'...7N.!.nA6...P.Zq\|./'b.V..q......Ts.q...,..(.OTqG..k..cz..C.-.SB[_...Ef..........@!..@.t..si.2?......v....{.D..u..$1e.v.N.X.C\.=g..W.Ao./.+o..87-.......\...$8]....X?_.@....J.y...j..an.IX.k.\|...S../.<nD.U.FN.^...=J...6.=...BX..p.W..n.:c.J".)...s.fS..IJA)....N..

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8924)
Category:	downloaded
Size (bytes):	8993
Entropy (8bit):	5.129466866639177
Encrypted:	false
SSDEEP:	192:dUlEMlaGVM6s6q5VuqFsEikJyPEUhDw4HHFe:dIrHVNiVuq+EiPFw4nk
MD5:	5F03A332EEDF68CFB897CB7C575C5D53
SHA1:	BF31372544EBF0E975540E54BB98C21222BF83F5
SHA-256:	F758925F5FC978849C2CF4BC21F1C8D52DBCDDF98ACF86102FD727CF7CE200AE
SHA-512:	D728D7A52ADF2860D26E5942C5330E0E1904EE7581CCCDA19FAD9B664FA646DDED8322925E9EE6F9287245409FC099608D801BC4F29A7D78992E8F06F5E25041
Malicious:	false
Reputation:	low
URL:	https://local.demandforce.com/v2/b/javascripts/lib/pickadate/picker.time.js
Preview:	/! For license information please see picker.time.js.LICENSE.txt /.!function(t){"function"==typeof define&&define.amd?define(["picker","jquery"],t):"object"==typeof exports?module.exports=t(require("./picker.js"),require("jquery")):t(Picker,jQuery)}((function(t,e){var i,r=60,n=1440,a=t._;function s(t,e){var i,r=this,n=t.$node[0].value,a=t.$node.data("value"),s=a\|\|n,o=a?e.formatSubmit:e.format;r.settings=e,r.$node=t.$node,r.queue={interval:"i",min:"measure create",max:"measure create",now:"now create",select:"parse create validate",highlight:"parse create validate",view:"parse create validate",disable:"deactivate",enable:"activate"},r.item={},r.item.clear=null,r.item.interval=e.interval\|\|30,r.item.disable=(e.disable\|\|[]).slice(0),r.item.enable=-(!0===(i=r.item.disable)[0]?i.shift():-1),r.set("min",e.min).set("max",e.max).set("now"),s?r.set("select",s,{format:o,fromValue:!!n}):r.set("select",null).set("highlight",r.item.now),r.key={40:1,38:-1,39:1,37:-1,go:function(t){r.set("highlight"

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 138, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2526
Entropy (8bit):	7.470691059241823
Encrypted:	false
SSDEEP:	48:3X/HXJ3Vpjwyil4UcUDSM8Fc/92PTGh1MMlYxSJwOU/X:3vHxzA4U1SPucShCMlYxSJZmX
MD5:	83DDF3EB2BD631B4B7FB6E1CA0319566
SHA1:	800289418D934ACE6411E927B8A1B82A70FD5951
SHA-256:	F20814C61A8037DCC394479044808A20804CC4BDEF9E83D88B150CD043384854
SHA-512:	DD740007951F4B52C172C5DE86BC5AA2DB5DAE1B145E10EE3B3039D0D8EC36348A3C53FC880D5893DB6F71AD068BCD6148C45DC1D6EBB7B947E24C0983787B73
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............BY"V....PLTE......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................x...._tRNS............ "+56<BCMNOSTUV[^_`cfghjkstvwx{.....................................................y....ZIDAT.....C........Q)..h.mw.7..Pk[.RVp7eE..oB..!$...........g7.d&.df.......2.,.....Om..'..[g.O.W.<m......?.....k.c.....yu5}^I...m.....\[Af:.C.4...8..d.S..i.I2....E....n..$.7......%.:G.....d.s6.dk #X...w,.[u...VM:... ...K}/..[O:\z..=.D%...C._..]..RI......\.../P.j.0....Tm.Il.T.K.L.f.b...R...T.....S...}..>i...5.&...E.B..Z.N.-..u...h..C.;'.C....$..^.[....9&w

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	dropped
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 135 x 89, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1421
Entropy (8bit):	7.698817345087714
Encrypted:	false
SSDEEP:	24:dB4ryNoXKD9shjIPrN4Qnn8aYBdnWbFXa1VJ4fURU4Qww9STBlw8E4JozSE:bKaOu9pPCQnn8asoBqXm4QXwTBlxJozT
MD5:	F75F8C6FEBA873B212028A5D0EC90F7F
SHA1:	4B9C1911DFADFA02EE6E76DE59B4EC7B8C6F470D
SHA-256:	727383264861E2F7E030E90C602B5F4FB53D1F78717DFD85449BE10CBCC70A49
SHA-512:	CE6EE5F4962E895480380E33E3946F812277B0C55BE98E16BD725DF45A4EB7EA37C3D693B86D8C0F481ABAE4E50B6983BBF34090BB3A72B43BC2399277337B1D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Y.....#..g...3PLTE......................................................G....tRNS.. 0@P`p........#.......IDATh....(.E. F....k.!...ctQ.....rYA.~.......Pd L.0......D3.........X..\|..z....w\|.G.....0.1.......%...d.1.q.X@r.Y.\|.?hG.^=........8.y......5..S....?........0>.&\|..x."..qcf^?.7.%^'..+....4.DM::...}v.z...^..W.lg`.f..>jo1....p\|.....E...muu_..0gkN.yn:W..{.9.&tK....RfeR..sz./9n.w...OV>m8u..i.XV..~.7~.....{.T...Q..h'K.-5?8-8+..z.)..j..:a...........\|;!......G...... .H.."....H..[...$.A.`.....".%..Io}.......@..I+~........,...O..%.0.....w8....H.P.m@$:. ]....m!...l....r.33..l.V&..2....&..03.'.......W...S...z ..:....S..\|x.P..l.?...(..^8L...#.........6.t..d.\I..s.Y.H.z...cs.lA......5.]9j...b _...Q.....s..S./..>..5X.p.....].N.....=.:n...O.....0..j...e.v.H....i...s.b.w.C....M..BD.1o...\.c...Q.......i............R...Y.1+....,aEv/m....Fv...C..T;..@..........k.r.Zi]r..O8l'..J.u<....d.Pd...&...DM..r....J^9.5...".{.1.....n).

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	68576
Entropy (8bit):	5.602892476468539
Encrypted:	false
SSDEEP:	768:Ezk+1J7u4EUTc9M0Wsc96p/D9ImESWU3/9UUfC6fn8gR8RLye6JHEc:YD0Wg/9JCRLTEkc
MD5:	BB199389BE1EF396166C451AEB0712E7
SHA1:	F73E2F8354F32BCF5798BF5F1D02872C76ABA935
SHA-256:	BEE140B74784814204D80324B9FB63C6BE3E242D5C64D2D72522B46004E7CECD
SHA-512:	A4E3F4AFD8C82AA83AA6BE304490D3153E97DEF079AA1FE8837F98343F29B78D88F98869F9B6806635EB06E1A648DFAA4EBA27B0FB1ACB5EE2A66361B61601C2
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/fb725ac8/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././. SPDX-License-Identifier: Apache-2.0./.'use strict';var Eib=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.TQ(a)},Fib=function(a){g.$o(a);.for(var b=0;b<a.hg.length;b++){var c=a.hg[b],d=a.ez[b];if(d!==c.version)return!0;if(!g.Yo(c)\|\|c.Vm)if(c.Vm\|\|c.v_!==g.cp)(c.P1(c)\|\|Fib(c))&&c.Q1(c),c.Vm=!1,c.v_=g.cp;if(d!==c.version)return!0}return!1},f4=function(a){var b=g.Wo(a);.a={};return a[Symbol.dispose]=function(){g.Wo(b)},a},Gib=function(){var a=Object.assign({},g.Tbb);.Object.getOwnPropertyNames(g.Tbb).forEach(function(b){g.fp[b]!==void 0&&(a[b]=g.fp[b])});.return a},Hib=function(){return{I:"svg",.Y:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},W:[{I:"path",Fc:!0,N:"ytp-svg-fill",Y:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4736), with no line terminators
Category:	downloaded
Size (bytes):	4736
Entropy (8bit):	5.82116474650763
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUyOwS3VVP+:1DY0hf1bT47OIqWb1JOwSlVP+
MD5:	9DA6C873BE93AB669F4EEE17B25E0701
SHA1:	A3274C84F2BB0764B4A96F760DC13684BF54E48E
SHA-256:	FB7AC3A488822EDF4D775DDDE80577527B8FD3AFD2CAD622BA9EB625627719A8
SHA-512:	CB1A4A7C92EF8E82FAE6AA5CB736ADD7AA1329DF2C7E4C87473D6D51E450821DCE7C8570C99C6D71C6B30C362B41BBB9B308F5956CB15824DCEA56FF1D911FB1
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/834731891/?random=1729810987607&cv=9&fst=1729810987607&num=1&label=wLPuCJfyk3UQ8_6DjgM&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=2&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.garwoodsheating.com%2Fabout%2Freviews%2F&ref=https%3A%2F%2Fwww.garwoodsheating.com%2F&tiba=Garwood%27s%20Heating%20%26%20Cooling%2C%20Inc.%2C%20Reviews%20-%20Edwardsville%2C%20IL%2062025&hn=www.googleadservices.com&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	5.0676532245147
Encrypted:	false
SSDEEP:	3:ZbxOAnacUyvnBIcf2rHymWfW3OiCMqsYb/xii+n3Tn:1naC/BIZymWfwOyYp+3T
MD5:	028B41CD95789426D81992D1894E7D9A
SHA1:	7DD758C7470F7915152E7F82612A7FF7C594F080
SHA-256:	C0CAD3F7F297CC8040D60D9C38F8EA6F19A061A585B3F4276E5D7BE35252CECE
SHA-512:	8A30F21D9622C7725CFEF6B73233B0320CBDCF307F2046168FBFAF8FC9F5B385BE2F32E8F43A08D2FF9CB7EF5438411F57016461E3BF71B063DE1E1CBD38D6D1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSOglqVgoWfhEJ2xIFDU-7kaoSBQ32LRYkEgUNwfKEIxIFDSzOxGQSBQ2U1FseEgUNMYofKRIFDVNaR8U=?alt=proto
Preview:	ClMKCw1Pu5GqGgQIAxgBCgsN9i0WJBoECG0YAQoLDcHyhCMaBAgNGAEKCw0szsRkGgQICRgBCgsNlNRbHhoECB4YAQoHDTGKHykaAAoHDVNaR8UaAA==

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	327624
Entropy (8bit):	5.58052928730717
Encrypted:	false
SSDEEP:	6144:f4ACRo3k4a2rgBvi8ECFqXk9nw+eFBBNy2U33:QAC2kr2MBKnWH
MD5:	919B6B518405A1A191B6AD833A03E4FF
SHA1:	138E30F5FFA7204984C6252C46510C0DC5330995
SHA-256:	42E4D1C5BE70DB5570C544E7527F79E089BEAEC0ABB5A52A5B61D30C872233DB
SHA-512:	1625E6819CD5A38C7C4F9674F36C70B45D4D967E1C0591DEB26005CCDFF8DFAD90D92059019726B9221EF796E9DA4F6C55DF0BCC097E2863F24AA926EDD138B4
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-KQMZSWM9K6
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":14,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"",

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	downloaded
Size (bytes):	557225
Entropy (8bit):	5.682542013673887
Encrypted:	false
SSDEEP:	6144:OgpQyxlMBfak0xzcDYXR1iFPlXmN8gQxDtX5ZidRuUWWIlRoPlh5ZVgJP/pFUvR:Ogiy/MyxzPv+PlJ8dYUWllRqa0
MD5:	1D3C12EF7348978206413B2C985D0E37
SHA1:	4C8BF7428BA9FF2C3F9E54C05065604D5C4D6A4C
SHA-256:	5AB8F962752071D61B4C1613F2126EAD5A5969B0157509532CB1CC43D1C0486D
SHA-512:	0B544007426B2F5A7D5EA806CF2DC94E1D7C79DDD67D14E5D0D527CC367DD42BE0300D9AF32592D9BF59683183E7085C502C49D233ACB10F8AFB07A2B5463266
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0./.var S=function(){return[function(I,w,X,a,c,C,V){if(I>>(((C=[44,"K",27],I)&C[0])==I&&b.call(this,w),1)>=11&&(I^78)<C[2])if(typeof X.dispose=="function")X.dispose();else for(a in X)X[a]=w;return((I^50)>>3==3&&(X[C[1]]=c?U[18](18,w,a,!0):a,X[C[1]]&&(X[C[1]]=X[C[1]].replace(/:$/,"")),V=X),I\|24)==I&&(V=X.firstElementChild!==void 0?X.firstElementChild:k[26](19,1,w,X.firstChild)),V},function(I,w,X,a,c,C,V,z,g,l,d,R,F,Y){return((((I-9&7)>=(Y=["S",4,70],Y[1])&&I-8<20&&!w.K&&(w.K=new Map,w[Y[0]]=0,w.H&&f[49](12,.1,null,0,"&",function(N,Z){w.add(decodeURI

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 123, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	23414
Entropy (8bit):	7.988012360793272
Encrypted:	false
SSDEEP:	384:AkNNlKKbJRpzMDfXt97UkW7stksP9fKG1k4QDOLbdSNBgA8RG/ERk8tm8lqaAl77:AkNz/bJvADf/UkCslfKs/Fb4AAt+/qhH
MD5:	65F18A3D64102559ED17F015F83472CD
SHA1:	2A6BFED9834BBB3391C5CE1C2D735C7D8467F4C1
SHA-256:	8DEE9C0B29C06E3CCEEC8FA9F9AABA9E54C06B9B620977FE753884FE5BCAC6F9
SHA-512:	5B76AE38416B1566ACF72B23060C4CBC7F3F0CF58B6055755054879DFB9DC5D9CFD31F967BCFB370F52936A13D5C7DCC76B07C045C6DE7C142303440A503BE15
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/images/products/bryant-thermostat.png
Preview:	.PNG........IHDR.......{.......y.....tEXtSoftware.Adobe ImageReadyq.e<..[.IDATx.....Wu.....}S..K%.4.Ri...K...b...E.....q7k.,.v...m{..'..r.4..^Yil'i....(. .h@..R.4..R...U.....>{......+.$bg.\x.7............."..0...3S.~.....\|..h...7....@p....i...?........q........>........A..0~..C.=..O.....\.w..C3Fh....Q.K......K.Qn....4..l...t....k...J.w#.....?#...^..O?...........Z~%..y^.=.K~M.C..B..{{...q..4^f.n!.. ~.......0..W.+...i..N.;;._...`.7l^.kG{...CY.!..0j..Z...[.(n.i..c.v..mnj...F...a.s.K...,....k......ZQN ^7.)......Y......Cky........V..?Gz........E......E.....v.....,..X.+.x_.5qc..^..Z....:.n.U....V...r..e.6....._..\|.KtK.JM..(P...(X.z....^...A...Z.]..^M\|.=G..n>~.(..o......>.$g..qs..-<.o.7..c :..Bu..S..YZ^~......t.. .1.mz....b..m."......}x^PY8_..t....\|.....7t....Fa.....^..oT^.\|....3...M.T..a]..K.k.}/Z.......{........R.`.s..9k..<..s"1t....Y..O.d.n,w.W..XI'.0.....-.s.T.....kn....V..A.U.\._..h..a8.............}Y...*.......S.N../.....(X..(~....c.7j5..

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 201, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11439
Entropy (8bit):	7.913170712923855
Encrypted:	false
SSDEEP:	192:4Su7FhknqILnnqFXuVDNkPAfjv/Zdxi2mJKJ2q7dU3kKtcod1RB1Ssx444:/uYnquncuVDOP+vk2Uey0KtcJsx8
MD5:	0D997BEFA021E143940B496DCD7A8BF0
SHA1:	B386CE8D27063CFAFD9BB3D01327971FFEAE4A5E
SHA-256:	16CA9D0DAA0F769BDFE8DA173138CA78854F8B2EC03CB4D8E57A5C483C429A49
SHA-512:	9643C2D73818227706393BC00ECF9F81C82DB676F090C0B3B4EAD2D4AABE479B3D43375E58C5805A0807E191621F5CB45FE936A1B5F6E1089C1AE70252D48694
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............f.};....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-11-02T08:52:04-05:00" xmp:MetadataDate="2018-11-02T08:52:04-05:00" xmp:ModifyDate="2018-11-02T08:52:04-05:00" xmpMM:InstanceID="xmp.iid:9f9b9ec9-8f0b-a447-8b07-4c2314297311" xmpMM:DocumentID="adobe:docid:photoshop:72d35ee3-c1db-7e4d-ac2d-0085e22ac816" xmpMM:OriginalDocumentID="xmp.did:482a1738-159c-a14c-9a3a-5faf303c95b1" dc:format="i

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10655)
Category:	downloaded
Size (bytes):	241699
Entropy (8bit):	5.643549995023595
Encrypted:	false
SSDEEP:	6144:88K6Ghs0cH4nYEZUMUmFwjlHltuIy/QLZb4joTbx2hdLlSneZj3Yri0WUo2w8:88K6Ghs0cH4nYEZymFwjZltuIy/QLZbB
MD5:	2AF94D8D69999FFE40A9D3B407990E35
SHA1:	32E07E167A2AE0B4A78DE831A3F43A4047B1D145
SHA-256:	AB34273048609C4080E03C8DFD2C3C8A6A35E13E4E7CA72D06B9BEB4E559DF6A
SHA-512:	4F09A7DEAFD48B1778DB4A08C27F220CCE3466415DD4A9A8054DF707D7144D4F30D604050C2E35D012CCD54065A3DB8740E561437F9C04B8AD49FC239FE3111C
Malicious:	false
Reputation:	low
URL:	https://maps.googleapis.com/maps/api/js?key=AIzaSyAj0ZTOCqzE6HqMX_Xf3T5NvXFT_RP9qjc&libraries=visualization&callback=initMap
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["https://khms0.googleapis.com/kh?v=989\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=989\u0026hl=en-US\u0026"],null,null,null,1,"989",["https://khms0.google.com/kh?v=989\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=989\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["https://khms0.googleapis.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.googleapis.com/kh?v=163\u0026hl=en-US\u0026"],null,null,null,null,"163",["https://khms0.google.com/kh?v=163\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=163\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetv

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4804), with no line terminators
Category:	downloaded
Size (bytes):	4804
Entropy (8bit):	5.8143710266854125
Encrypted:	false
SSDEEP:	96:1gWUfvlcY021mvn1blhad7OIJoodnbUp2dEjkRUsOuSxWcpd+:1DY0hf1bT47OIqWb1zOuSYc3+
MD5:	8257696A348739D9394246240AFC89CC
SHA1:	BF0DF1540D4EB9177B6A6E09551769CA517BC01E
SHA-256:	B5F3DBB2ED31F3C07556B3A74BA55A9D91C360799352A6A9C1423029FAA3200C
SHA-512:	9F764851366E67CA88FDB38B36516CD934F2DF83619B9C178D9B8B35D01CB49F542EF3C41E50E3D1A83C92AF08251D8C78B37DBC20BCB3A90A0CAEB987303A47
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/834731891/?random=1729811010889&cv=9&fst=1729811010889&num=1&label=wLPuCJfyk3UQ8_6DjgM&guid=ON&resp=GooglemKTybQhCsO&eid=375603261%2C466465925%2C512247838&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=3&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.garwoodsheating.com%2Fheating-air-conditioning-products%2F&ref=https%3A%2F%2Fwww.garwoodsheating.com%2Fabout%2Freviews%2F&tiba=Garwood%27s%20Heating%20%26%20Cooling%2C%20Inc.%2C%20Furnaces%20%26%20Air%20Conditioners%20-%20Edwardsville%2C%20IL%2C%20Bryant&hn=www.googleadservices.com&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))break a;g=g[f]}c=c[c.length-1];d=p&&d==="es6"?g[c]:null;b=b(d);b!=null&&(a?h(t,c,{configurable:!0,writable:!0,value:b}):b!==d&&(v[c]===void 0&&(a=Math.random()*1E9>>>0,v[c]=p?m.Symbol(c):"$jscp$"+a+"$"+c),h(g,v[c],{co

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11609
Entropy (8bit):	7.971898581143118
Encrypted:	false
SSDEEP:	192:8SDS0tKg9E05TO7/DltN/KfVYshlce1aubgNK8FYvf4fuiJGn8FUp:7JXE05qDDzkfqsZbsb+vAfuiJq8FUp
MD5:	A847A0FC41CEFDCA0DB0D898D08C230E
SHA1:	DDCF8AA350971CD80E2788C3BB5AA953525AC782
SHA-256:	38A819A245C0ECEC8592139F56C1C058859ECD8FE694551084CFA4F97704A135
SHA-512:	F9FB8A4C3B03244ECC736AC3A4FC83BB0E1D8D3223117DC8FE4DE0A491CA42391DC7A7B0305F9DB28EAAD4B82666164E2E0539959A1AEBB99C37679DEAC5DB37
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/sos-websvc/files/mobile/images/facebook.png
Preview:	.PNG........IHDR.............<..R....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	703325
Entropy (8bit):	5.306845374558168
Encrypted:	false
SSDEEP:	6144:H2s6wxnzCZ75QsKcTnGPp5UPB0rB8W97kRsFpW8/kGBoGYjxhbVwx4H:N32KcTGPpMXWXvM1Gwx3wxi
MD5:	DD805194FF6BFAD52EF1E3A75B24AD2E
SHA1:	9417CDAF63D9F209E472AF3DC083045ED39BBCDF
SHA-256:	18E6371CF275C9CA4B7F9E59D01E280205DE5062F07E0D34015B966FBEE4D3B4
SHA-512:	6D3FA5EDF7466F8274CFE29141C794B083AD47502FDCE58463EA11987A9D6A2D4C584EB1849573D19A450D0CC2B404E41EB8B73DB8AF71148D08C0DB92C53E2E
Malicious:	false
Reputation:	low
URL:	https://core-dot-sos-apps.appspot.com/scripts/core.min.js?v=1729776912
Preview:	if(!function(t,e){"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(t.document)return e(t);throw new Error("jQuery requires a window with a document")}:e(t)}("undefined"!=typeof window?window:this,function(f,R){var u=[],c=u.slice,L=u.concat,H=u.push,z=u.indexOf,i={},$=i.toString,m=i.hasOwnProperty,g={},t="1.11.1",w=function(t,e){return new w.fn.init(t,e)},W=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,j=/^-ms-/,q=/-([\da-z])/gi,B=function(t,e){return e.toUpperCase()};function U(t){var e=t.length,i=w.type(t);return"function"!==i&&!w.isWindow(t)&&(!(1!==t.nodeType\|\|!e)\|\|("array"===i\|\|0===e\|\|"number"==typeof e&&0<e&&e-1 in t))}w.fn=w.prototype={jquery:t,constructor:w,selector:"",length:0,toArray:function(){return c.call(this)},get:function(t){return null!=t?t<0?this[t+this.length]:this[t]:c.call(this)},pushStack:function(t){var t=w.merge(this.constructor(),t);return t.prevObject=this,t.context=this.context,t},each:function(t,e){return w.each

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 137, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13394
Entropy (8bit):	7.92188811976553
Encrypted:	false
SSDEEP:	384:QDNnWixmeTVU7gbUR0LX+45J2DgeaXchx8AA8tw2SoGaNEiXfl0:wNFZUULH2DgeN8iNSoGr
MD5:	2FF55F74DF1B46FD28BDF7836A529AFF
SHA1:	0F241DB524E87E4953B037C2A24D40A62C4FEBD9
SHA-256:	17D8BB9F0C5B198CE0624034F69248F840037A860E75C2ADF1D57FE1084C23FE
SHA-512:	D5212F4AF72C05ED1391F01D6BBAFD21A748C2D46BE5803B4F6860AD5E6F4EF4B26D1B813CB4CFED79E40706A23177BD5F8EBC92584E8AB596E49D09F7FB80AD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............n+....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2019-01-17T08:39:38-06:00" xmp:ModifyDate="2019-02-28T11:51:35-06:00" xmp:MetadataDate="2019-02-28T11:51:35-06:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:0cfa2928-6136-a246-8c94-c81822027e11" xmpMM:DocumentID="xmp.did:6fdde624-1cb3-6b42-8e0c-1e93c8635354" xmpMM:Origi

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 123, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	23414
Entropy (8bit):	7.988012360793272
Encrypted:	false
SSDEEP:	384:AkNNlKKbJRpzMDfXt97UkW7stksP9fKG1k4QDOLbdSNBgA8RG/ERk8tm8lqaAl77:AkNz/bJvADf/UkCslfKs/Fb4AAt+/qhH
MD5:	65F18A3D64102559ED17F015F83472CD
SHA1:	2A6BFED9834BBB3391C5CE1C2D735C7D8467F4C1
SHA-256:	8DEE9C0B29C06E3CCEEC8FA9F9AABA9E54C06B9B620977FE753884FE5BCAC6F9
SHA-512:	5B76AE38416B1566ACF72B23060C4CBC7F3F0CF58B6055755054879DFB9DC5D9CFD31F967BCFB370F52936A13D5C7DCC76B07C045C6DE7C142303440A503BE15
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......{.......y.....tEXtSoftware.Adobe ImageReadyq.e<..[.IDATx.....Wu.....}S..K%.4.Ri...K...b...E.....q7k.,.v...m{..'..r.4..^Yil'i....(. .h@..R.4..R...U.....>{......+.$bg.\x.7............."..0...3S.~.....\|..h...7....@p....i...?........q........>........A..0~..C.=..O.....\.w..C3Fh....Q.K......K.Qn....4..l...t....k...J.w#.....?#...^..O?...........Z~%..y^.=.K~M.C..B..{{...q..4^f.n!.. ~.......0..W.+...i..N.;;._...`.7l^.kG{...CY.!..0j..Z...[.(n.i..c.v..mnj...F...a.s.K...,....k......ZQN ^7.)......Y......Cky........V..?Gz........E......E.....v.....,..X.+.x_.5qc..^..Z....:.n.U....V...r..e.6....._..\|.KtK.JM..(P...(X.z....^...A...Z.]..^M\|.=G..n>~.(..o......>.$g..qs..-<.o.7..c :..Bu..S..YZ^~......t.. .1.mz....b..m."......}x^PY8_..t....\|.....7t....Fa.....^..oT^.\|....3...M.T..a]..K.k.}/Z.......{........R.`.s..9k..<..s"1t....Y..O.d.n,w.W..XI'.0.....-.s.T.....kn....V..A.U.\._..h..a8.............}Y...*.......S.N../.....(X..(~....c.7j5..

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14968, version 1.6554
Category:	downloaded
Size (bytes):	14968
Entropy (8bit):	7.98040439320052
Encrypted:	false
SSDEEP:	384:ml38VoPwpuv2lQu9aukgXteJfgV8ELKMJICsWZ:mlseP299XXEmiEG+bZ
MD5:	2868C329F2C9DE786CBC4A5B6989AE08
SHA1:	E75607BA1417181397C700775B84303D5A2957B9
SHA-256:	31E017ACD3E7F361B8415D08E478B431A47929954AA974FF871BE87BF8D374BA
SHA-512:	5CE549F5F84F0F7B3991D92BF32283826712A5580D841B1D735B71715D8B59DB45333D8FD2E885988E01CBFD27332A8BE3997D758ECD7E1E6D92CE9E5F222D5F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v13/xjAJXh38I15wypJXxuGMBo4P5ICox8Kq3LLUNMylGO4.woff2
Preview:	wOF2......:x..........:..............................t.`..L.. ..4.....T..H.6.$..l.....<.. ..l..(.....r...v......M.U]..H..q."._.(...........J:D&..P.O..F.@G2.I$...naA...!.........M.[i1.d"..1..G..%B.<.2..?...K^..gA..D."i.;(,.......K;.7.t:../.?.n.g..70..^y.........vd..I..c.......M.'.^~..%....U........2t"..X.9......P@....@..=W.~g....t.v....GM.m.#x..#.1oR.{r..&..........S?.4...st;.V..B=......T.).r..dO..T..a.[4...T.^.>....@& ..H.........o.s(j....E..].2.z~.2.......-U(...a.0<...9...;.Qw..m.A.:..Y....o $...d..........("..-_......ze.. .[...pI.....(a:......t...'m...m..^B..(...D,.%.h:1L.N...'..\$..$.H..)OPZRk+0...[r...r.J......T.3.Z.$..n..\|C.$.T..$...t3..q.1.8......G....).5.y.........../........[[..`.............5.<..x.!(..!.'.<.r..NH.q...l...YU/!.5.4...K...U.=v......%.W. X...ei...2.ut.v.5..D.`a..z.`R.ES..gaG'6~.U1bG.]y....V~.8..}.T.......o^.}wzJ ..0.t.."..fy.{..m;.....{&D.e.h..T.....C.6.,#..4Ik....G..\.b......RkEa.9.._3..T.5..9...4ie.*..S. .8....E!..

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	703325
Entropy (8bit):	5.306845374558168
Encrypted:	false
SSDEEP:	6144:H2s6wxnzCZ75QsKcTnGPp5UPB0rB8W97kRsFpW8/kGBoGYjxhbVwx4H:N32KcTGPpMXWXvM1Gwx3wxi
MD5:	DD805194FF6BFAD52EF1E3A75B24AD2E
SHA1:	9417CDAF63D9F209E472AF3DC083045ED39BBCDF
SHA-256:	18E6371CF275C9CA4B7F9E59D01E280205DE5062F07E0D34015B966FBEE4D3B4
SHA-512:	6D3FA5EDF7466F8274CFE29141C794B083AD47502FDCE58463EA11987A9D6A2D4C584EB1849573D19A450D0CC2B404E41EB8B73DB8AF71148D08C0DB92C53E2E
Malicious:	false
Reputation:	low
Preview:	if(!function(t,e){"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(t.document)return e(t);throw new Error("jQuery requires a window with a document")}:e(t)}("undefined"!=typeof window?window:this,function(f,R){var u=[],c=u.slice,L=u.concat,H=u.push,z=u.indexOf,i={},$=i.toString,m=i.hasOwnProperty,g={},t="1.11.1",w=function(t,e){return new w.fn.init(t,e)},W=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,j=/^-ms-/,q=/-([\da-z])/gi,B=function(t,e){return e.toUpperCase()};function U(t){var e=t.length,i=w.type(t);return"function"!==i&&!w.isWindow(t)&&(!(1!==t.nodeType\|\|!e)\|\|("array"===i\|\|0===e\|\|"number"==typeof e&&0<e&&e-1 in t))}w.fn=w.prototype={jquery:t,constructor:w,selector:"",length:0,toArray:function(){return c.call(this)},get:function(t){return null!=t?t<0?this[t+this.length]:this[t]:c.call(this)},pushStack:function(t){var t=w.merge(this.constructor(),t);return t.prevObject=this,t.context=this.context,t},each:function(t,e){return w.each

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 462 x 210, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19410
Entropy (8bit):	7.957062030287544
Encrypted:	false
SSDEEP:	384:bfanFzTIf9LrCCCu9nzd30WtcVV8Cr/ESNzmY85gBApe9VZnAbC4oAm:raq1C0kWyv8Cr7Nyv5EA49/AO4oAm
MD5:	A50A8D36397ECEF2A4F4A57D41F17EC6
SHA1:	217F7AF63EB83F8BA1CD3969CD155B5A671B492D
SHA-256:	44F51DD05AADF0299C17EC2D21F1B97AA5ECEF5FA2F6CC43379A05DAB5C56C67
SHA-512:	55EFB7A636244182501AD98B917331A41C2BDCCFC5DEB3DE56CB00556BB6DAA55A0C641A5ED265A178719FD5D9F75B19A42C34BDEC8964C17B0D7C59CAFD7C3D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............. .....pHYs................UiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)" xmp:CreateDate="2018-11-01T10:52:10-05:00" xmp:MetadataDate="2018-11-01T10:52:10-05:00" xmp:ModifyDate="2018-11-01T10:52:10-05:00" xmpMM:InstanceID="xmp.iid:e632845b-8726-be4b-a252-2799428fec03" xmpMM:DocumentID="adobe:docid:photoshop:b2d4bfa4-b83a-1e40-a4a7-2cac883351ef" xmpMM:OriginalDocumentID="xmp.did:e836e92b-d7a3-294a-b98b-0f35e802a8c9" photoshop:Co

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2188)
Category:	downloaded
Size (bytes):	57899
Entropy (8bit):	5.522455573366164
Encrypted:	false
SSDEEP:	768:etkIzpGt8BbK1WYyk37g4KzbamUmIz3MFeV65sHqVbwxE4Fv:etkMGOKzp0Fzba7mIY/wxHFv
MD5:	40BFFB471FB2F71902C292A6764692DB
SHA1:	CD042D148E78D93D506395B1222F071AFF6F3610
SHA-256:	3A1AE68D835D095297598E1964665FED616649A20FD7D3BFDC6A97C9B468ACD6
SHA-512:	2F3F4E418B053D43BC2FE7150AF36DCF65195A5E3847972EBF8F3AB8809B9378CD3D34DEFBD629BC3A2C2DE15E7D14A6963BB34CAB68F342BC480D0A64ABE02B
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion.js
Preview:	(function(){var n,ba;function ca(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var fa=ea(this),ha=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},la={};function u(a,b,c){if(!c\|\|a!=null){c=la[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in q?f=q:f=fa;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ha&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?da(q,d,{configurable:!0,writable:!0,value:b}):b!==c&

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 01:02:43.752608061 CEST	192.168.2.6	1.1.1.1	0x5543	Standard query (0)	garwoodsheating.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:43.752856016 CEST	192.168.2.6	1.1.1.1	0xeafc	Standard query (0)	garwoodsheating.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:43.770903111 CEST	192.168.2.6	1.1.1.1	0x8a71	Standard query (0)	garwoodsheating.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:43.771131992 CEST	192.168.2.6	1.1.1.1	0xe2c	Standard query (0)	garwoodsheating.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:44.616715908 CEST	192.168.2.6	1.1.1.1	0xcea	Standard query (0)	www.garwoodsheating.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:44.616853952 CEST	192.168.2.6	1.1.1.1	0xaa86	Standard query (0)	www.garwoodsheating.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:45.671637058 CEST	192.168.2.6	1.1.1.1	0x2e97	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:45.671977043 CEST	192.168.2.6	1.1.1.1	0x6aad	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:47.631764889 CEST	192.168.2.6	1.1.1.1	0x5dc6	Standard query (0)	tag.brandcdn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:47.631934881 CEST	192.168.2.6	1.1.1.1	0xd09a	Standard query (0)	tag.brandcdn.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:49.042206049 CEST	192.168.2.6	1.1.1.1	0xb3fa	Standard query (0)	core-dot-sos-apps.appspot.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.042496920 CEST	192.168.2.6	1.1.1.1	0xc859	Standard query (0)	core-dot-sos-apps.appspot.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:49.511234999 CEST	192.168.2.6	1.1.1.1	0xe1dc	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.511512995 CEST	192.168.2.6	1.1.1.1	0xd5ae	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:49.532960892 CEST	192.168.2.6	1.1.1.1	0xc2be	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.533106089 CEST	192.168.2.6	1.1.1.1	0x27a	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 01:02:49.594574928 CEST	192.168.2.6	1.1.1.1	0x111	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.594711065 CEST	192.168.2.6	1.1.1.1	0x33ec	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Oct 25, 2024 01:02:49.608475924 CEST	192.168.2.6	1.1.1.1	0x57f2	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.608622074 CEST	192.168.2.6	1.1.1.1	0x6b6a	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:49.678286076 CEST	192.168.2.6	1.1.1.1	0xe5a6	Standard query (0)	tag.brandcdn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.678478956 CEST	192.168.2.6	1.1.1.1	0x2db2	Standard query (0)	tag.brandcdn.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:50.120029926 CEST	192.168.2.6	1.1.1.1	0xea3b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.120161057 CEST	192.168.2.6	1.1.1.1	0xd400	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:50.136077881 CEST	192.168.2.6	1.1.1.1	0xfd87	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.136234999 CEST	192.168.2.6	1.1.1.1	0x6a91	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 01:02:50.141410112 CEST	192.168.2.6	1.1.1.1	0x2c75	Standard query (0)	adservices.brandcdn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.141546011 CEST	192.168.2.6	1.1.1.1	0xa6b2	Standard query (0)	adservices.brandcdn.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:50.143356085 CEST	192.168.2.6	1.1.1.1	0xd2e5	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.143469095 CEST	192.168.2.6	1.1.1.1	0x1730	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Oct 25, 2024 01:02:50.307900906 CEST	192.168.2.6	1.1.1.1	0x76db	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.308217049 CEST	192.168.2.6	1.1.1.1	0xa94	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 01:02:50.489980936 CEST	192.168.2.6	1.1.1.1	0x3752	Standard query (0)	www.garwoodsheating.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.493387938 CEST	192.168.2.6	1.1.1.1	0xad9d	Standard query (0)	www.garwoodsheating.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:50.688091040 CEST	192.168.2.6	1.1.1.1	0xd843	Standard query (0)	d1eoo1tco6rr5e.cloudfront.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.688221931 CEST	192.168.2.6	1.1.1.1	0x9de9	Standard query (0)	d1eoo1tco6rr5e.cloudfront.net	65	IN (0x0001)	false
Oct 25, 2024 01:02:51.121027946 CEST	192.168.2.6	1.1.1.1	0xcfd7	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.121155977 CEST	192.168.2.6	1.1.1.1	0xf2d4	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Oct 25, 2024 01:02:51.475430965 CEST	192.168.2.6	1.1.1.1	0x836d	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.475749016 CEST	192.168.2.6	1.1.1.1	0x50a9	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:52.666419029 CEST	192.168.2.6	1.1.1.1	0x3727	Standard query (0)	adservices.brandcdn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:52.666640997 CEST	192.168.2.6	1.1.1.1	0x5592	Standard query (0)	adservices.brandcdn.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:52.669985056 CEST	192.168.2.6	1.1.1.1	0x2bb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:52.670126915 CEST	192.168.2.6	1.1.1.1	0xfb7a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:52.754690886 CEST	192.168.2.6	1.1.1.1	0xb6cc	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:52.754831076 CEST	192.168.2.6	1.1.1.1	0x377a	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 01:02:54.336133003 CEST	192.168.2.6	1.1.1.1	0x7f71	Standard query (0)	sos-apps.appspot.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:54.336338043 CEST	192.168.2.6	1.1.1.1	0x577e	Standard query (0)	sos-apps.appspot.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:56.380366087 CEST	192.168.2.6	1.1.1.1	0x72d6	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:56.380623102 CEST	192.168.2.6	1.1.1.1	0xb35d	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Oct 25, 2024 01:02:58.027748108 CEST	192.168.2.6	1.1.1.1	0xff75	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.027934074 CEST	192.168.2.6	1.1.1.1	0x5ba1	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:58.033332109 CEST	192.168.2.6	1.1.1.1	0x3d31	Standard query (0)	core-dot-sos-apps.appspot.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.033552885 CEST	192.168.2.6	1.1.1.1	0xf339	Standard query (0)	core-dot-sos-apps.appspot.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:58.040694952 CEST	192.168.2.6	1.1.1.1	0x3763	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.040990114 CEST	192.168.2.6	1.1.1.1	0x6a64	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:58.106565952 CEST	192.168.2.6	1.1.1.1	0x50c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.106719971 CEST	192.168.2.6	1.1.1.1	0x3479	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:58.229219913 CEST	192.168.2.6	1.1.1.1	0x263b	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.229496002 CEST	192.168.2.6	1.1.1.1	0x48c7	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:58.243458033 CEST	192.168.2.6	1.1.1.1	0xe848	Standard query (0)	sos-apps.appspot.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.243655920 CEST	192.168.2.6	1.1.1.1	0xa602	Standard query (0)	sos-apps.appspot.com	65	IN (0x0001)	false
Oct 25, 2024 01:02:58.414494038 CEST	192.168.2.6	1.1.1.1	0xafc9	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.414743900 CEST	192.168.2.6	1.1.1.1	0x825b	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 01:02:59.384015083 CEST	192.168.2.6	1.1.1.1	0x7a9a	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:59.384229898 CEST	192.168.2.6	1.1.1.1	0x2167	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 01:02:59.384531021 CEST	192.168.2.6	1.1.1.1	0x3a39	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:59.384706020 CEST	192.168.2.6	1.1.1.1	0x9184	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 01:02:59.403666973 CEST	192.168.2.6	1.1.1.1	0xe506	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:59.403784990 CEST	192.168.2.6	1.1.1.1	0x3ed4	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:00.009517908 CEST	192.168.2.6	1.1.1.1	0x8b66	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.009769917 CEST	192.168.2.6	1.1.1.1	0x648	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Oct 25, 2024 01:03:00.485054016 CEST	192.168.2.6	1.1.1.1	0x3bee	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.485232115 CEST	192.168.2.6	1.1.1.1	0x50e4	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:00.761077881 CEST	192.168.2.6	1.1.1.1	0x522b	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.761549950 CEST	192.168.2.6	1.1.1.1	0x573e	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:00.998045921 CEST	192.168.2.6	1.1.1.1	0x3ea4	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.998375893 CEST	192.168.2.6	1.1.1.1	0xac93	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:01.517868996 CEST	192.168.2.6	1.1.1.1	0xf591	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.518074036 CEST	192.168.2.6	1.1.1.1	0x3919	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:01.519448996 CEST	192.168.2.6	1.1.1.1	0x124f	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.519597054 CEST	192.168.2.6	1.1.1.1	0xb84f	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Oct 25, 2024 01:03:02.254750013 CEST	192.168.2.6	1.1.1.1	0xf141	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:02.254884958 CEST	192.168.2.6	1.1.1.1	0x45c0	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:03.959867001 CEST	192.168.2.6	1.1.1.1	0x888d	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:03.960170031 CEST	192.168.2.6	1.1.1.1	0x423a	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:05.829623938 CEST	192.168.2.6	1.1.1.1	0x4431	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:05.830086946 CEST	192.168.2.6	1.1.1.1	0xb1	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:06.055480957 CEST	192.168.2.6	1.1.1.1	0x82f6	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:06.055636883 CEST	192.168.2.6	1.1.1.1	0x32e9	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:06.734916925 CEST	192.168.2.6	1.1.1.1	0xf247	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:06.735327005 CEST	192.168.2.6	1.1.1.1	0x4b9e	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Oct 25, 2024 01:03:09.196826935 CEST	192.168.2.6	1.1.1.1	0xd663	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:09.197143078 CEST	192.168.2.6	1.1.1.1	0x8cb6	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:09.314687967 CEST	192.168.2.6	1.1.1.1	0xb4bc	Standard query (0)	www.demandforce.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:09.315094948 CEST	192.168.2.6	1.1.1.1	0xc52	Standard query (0)	www.demandforce.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:10.132721901 CEST	192.168.2.6	1.1.1.1	0x26ab	Standard query (0)	www.demandforced3.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:10.132839918 CEST	192.168.2.6	1.1.1.1	0x40ab	Standard query (0)	www.demandforced3.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:10.996440887 CEST	192.168.2.6	1.1.1.1	0x21a2	Standard query (0)	su.addthis.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:10.996440887 CEST	192.168.2.6	1.1.1.1	0x4ca8	Standard query (0)	su.addthis.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:10.997489929 CEST	192.168.2.6	1.1.1.1	0x524d	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:10.997828007 CEST	192.168.2.6	1.1.1.1	0xa08e	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:11.012667894 CEST	192.168.2.6	1.1.1.1	0x9cf5	Standard query (0)	local.demandforce.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:11.013614893 CEST	192.168.2.6	1.1.1.1	0x8191	Standard query (0)	local.demandforce.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:11.068727970 CEST	192.168.2.6	1.1.1.1	0x8b83	Standard query (0)	su.addthis.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:11.068727970 CEST	192.168.2.6	1.1.1.1	0xe556	Standard query (0)	su.addthis.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:12.793508053 CEST	192.168.2.6	1.1.1.1	0x9150	Standard query (0)	local.demandforce.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:12.793661118 CEST	192.168.2.6	1.1.1.1	0x9f19	Standard query (0)	local.demandforce.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:12.849737883 CEST	192.168.2.6	1.1.1.1	0x7d70	Standard query (0)	local.demandforce.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:12.849941015 CEST	192.168.2.6	1.1.1.1	0x4206	Standard query (0)	local.demandforce.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:13.772986889 CEST	192.168.2.6	1.1.1.1	0x5fdb	Standard query (0)	cdn.mxpnl.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:13.773108959 CEST	192.168.2.6	1.1.1.1	0xbd7a	Standard query (0)	cdn.mxpnl.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:13.773507118 CEST	192.168.2.6	1.1.1.1	0x1c6d	Standard query (0)	www.inspectlet.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:13.773668051 CEST	192.168.2.6	1.1.1.1	0xc2b4	Standard query (0)	www.inspectlet.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:15.782108068 CEST	192.168.2.6	1.1.1.1	0xf18a	Standard query (0)	secure-gl.imrworldwide.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:15.782249928 CEST	192.168.2.6	1.1.1.1	0x442f	Standard query (0)	secure-gl.imrworldwide.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:17.120542049 CEST	192.168.2.6	1.1.1.1	0xb14e	Standard query (0)	secure-gl.imrworldwide.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:17.120698929 CEST	192.168.2.6	1.1.1.1	0x58f6	Standard query (0)	secure-gl.imrworldwide.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:20.770071983 CEST	192.168.2.6	1.1.1.1	0x907d	Standard query (0)	adservices.brandcdn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:20.770378113 CEST	192.168.2.6	1.1.1.1	0x42d6	Standard query (0)	adservices.brandcdn.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:21.510081053 CEST	192.168.2.6	1.1.1.1	0xc06b	Standard query (0)	cdn.inspectlet.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:21.510397911 CEST	192.168.2.6	1.1.1.1	0xc29d	Standard query (0)	cdn.inspectlet.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:23.109654903 CEST	192.168.2.6	1.1.1.1	0xd9b1	Standard query (0)	cdn.inspectlet.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:23.110080957 CEST	192.168.2.6	1.1.1.1	0xcac9	Standard query (0)	cdn.inspectlet.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:25.492037058 CEST	192.168.2.6	1.1.1.1	0xc90d	Standard query (0)	hn.inspectlet.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:25.492386103 CEST	192.168.2.6	1.1.1.1	0xb948	Standard query (0)	hn.inspectlet.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:26.510132074 CEST	192.168.2.6	1.1.1.1	0x722	Standard query (0)	hn.inspectlet.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:26.510732889 CEST	192.168.2.6	1.1.1.1	0xbe21	Standard query (0)	hn.inspectlet.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:33.456440926 CEST	192.168.2.6	1.1.1.1	0x493b	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:33.457143068 CEST	192.168.2.6	1.1.1.1	0x8ba8	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:34.611820936 CEST	192.168.2.6	1.1.1.1	0xb41d	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:34.612118006 CEST	192.168.2.6	1.1.1.1	0xb9a9	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:34.823019028 CEST	192.168.2.6	1.1.1.1	0x95d6	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:34.823646069 CEST	192.168.2.6	1.1.1.1	0x54d6	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:35.972862005 CEST	192.168.2.6	1.1.1.1	0x1839	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:35.973257065 CEST	192.168.2.6	1.1.1.1	0xcde3	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Oct 25, 2024 01:03:36.201908112 CEST	192.168.2.6	1.1.1.1	0x177a	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:36.202078104 CEST	192.168.2.6	1.1.1.1	0x8d91	Standard query (0)	d.agkn.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 01:02:43.765579939 CEST	1.1.1.1	192.168.2.6	0x5543	No error (0)	garwoodsheating.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:43.765579939 CEST	1.1.1.1	192.168.2.6	0x5543	No error (0)	garwoodsheating.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:43.765625000 CEST	1.1.1.1	192.168.2.6	0xeafc	No error (0)	garwoodsheating.com			65	IN (0x0001)	false
Oct 25, 2024 01:02:43.779010057 CEST	1.1.1.1	192.168.2.6	0x8a71	No error (0)	garwoodsheating.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:43.779010057 CEST	1.1.1.1	192.168.2.6	0x8a71	No error (0)	garwoodsheating.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:43.956891060 CEST	1.1.1.1	192.168.2.6	0xe2c	No error (0)	garwoodsheating.com			65	IN (0x0001)	false
Oct 25, 2024 01:02:44.626413107 CEST	1.1.1.1	192.168.2.6	0xcea	No error (0)	www.garwoodsheating.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:44.626413107 CEST	1.1.1.1	192.168.2.6	0xcea	No error (0)	www.garwoodsheating.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:44.626935959 CEST	1.1.1.1	192.168.2.6	0xaa86	No error (0)	www.garwoodsheating.com			65	IN (0x0001)	false
Oct 25, 2024 01:02:45.678910017 CEST	1.1.1.1	192.168.2.6	0x2e97	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:45.679006100 CEST	1.1.1.1	192.168.2.6	0x6aad	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 01:02:47.652681112 CEST	1.1.1.1	192.168.2.6	0xd09a	No error (0)	tag.brandcdn.com	di8doh40j4s30.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:47.727555990 CEST	1.1.1.1	192.168.2.6	0x5dc6	No error (0)	tag.brandcdn.com	di8doh40j4s30.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:47.727555990 CEST	1.1.1.1	192.168.2.6	0x5dc6	No error (0)	di8doh40j4s30.cloudfront.net		18.66.147.109	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:47.727555990 CEST	1.1.1.1	192.168.2.6	0x5dc6	No error (0)	di8doh40j4s30.cloudfront.net		18.66.147.22	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:47.727555990 CEST	1.1.1.1	192.168.2.6	0x5dc6	No error (0)	di8doh40j4s30.cloudfront.net		18.66.147.116	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:47.727555990 CEST	1.1.1.1	192.168.2.6	0x5dc6	No error (0)	di8doh40j4s30.cloudfront.net		18.66.147.72	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.051518917 CEST	1.1.1.1	192.168.2.6	0xb3fa	No error (0)	core-dot-sos-apps.appspot.com		172.217.16.148	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.518423080 CEST	1.1.1.1	192.168.2.6	0xe1dc	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:49.518423080 CEST	1.1.1.1	192.168.2.6	0xe1dc	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.518423080 CEST	1.1.1.1	192.168.2.6	0xe1dc	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.518423080 CEST	1.1.1.1	192.168.2.6	0xe1dc	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.518423080 CEST	1.1.1.1	192.168.2.6	0xe1dc	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.540534019 CEST	1.1.1.1	192.168.2.6	0xc2be	No error (0)	td.doubleclick.net		142.250.186.34	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.602010012 CEST	1.1.1.1	192.168.2.6	0x111	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.602010012 CEST	1.1.1.1	192.168.2.6	0x111	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.602010012 CEST	1.1.1.1	192.168.2.6	0x111	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.602010012 CEST	1.1.1.1	192.168.2.6	0x111	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.615572929 CEST	1.1.1.1	192.168.2.6	0x57f2	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.616899967 CEST	1.1.1.1	192.168.2.6	0x6b6a	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:49.616899967 CEST	1.1.1.1	192.168.2.6	0x6b6a	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Oct 25, 2024 01:02:49.704498053 CEST	1.1.1.1	192.168.2.6	0x2db2	No error (0)	tag.brandcdn.com	di8doh40j4s30.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:49.719044924 CEST	1.1.1.1	192.168.2.6	0xe5a6	No error (0)	tag.brandcdn.com	di8doh40j4s30.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:49.719044924 CEST	1.1.1.1	192.168.2.6	0xe5a6	No error (0)	di8doh40j4s30.cloudfront.net		18.66.147.116	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.719044924 CEST	1.1.1.1	192.168.2.6	0xe5a6	No error (0)	di8doh40j4s30.cloudfront.net		18.66.147.22	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.719044924 CEST	1.1.1.1	192.168.2.6	0xe5a6	No error (0)	di8doh40j4s30.cloudfront.net		18.66.147.72	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:49.719044924 CEST	1.1.1.1	192.168.2.6	0xe5a6	No error (0)	di8doh40j4s30.cloudfront.net		18.66.147.109	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.127151966 CEST	1.1.1.1	192.168.2.6	0xea3b	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.127175093 CEST	1.1.1.1	192.168.2.6	0xd400	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 01:02:50.143431902 CEST	1.1.1.1	192.168.2.6	0x6a91	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 25, 2024 01:02:50.144396067 CEST	1.1.1.1	192.168.2.6	0xfd87	No error (0)	googleads.g.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.150402069 CEST	1.1.1.1	192.168.2.6	0xd2e5	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.150402069 CEST	1.1.1.1	192.168.2.6	0xd2e5	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.150402069 CEST	1.1.1.1	192.168.2.6	0xd2e5	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.150402069 CEST	1.1.1.1	192.168.2.6	0xd2e5	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.167891026 CEST	1.1.1.1	192.168.2.6	0x2c75	No error (0)	adservices.brandcdn.com	prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:50.167891026 CEST	1.1.1.1	192.168.2.6	0x2c75	No error (0)	prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com		52.9.171.8	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.167891026 CEST	1.1.1.1	192.168.2.6	0x2c75	No error (0)	prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com		54.67.88.236	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.178877115 CEST	1.1.1.1	192.168.2.6	0xa6b2	No error (0)	adservices.brandcdn.com	prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:50.315910101 CEST	1.1.1.1	192.168.2.6	0x76db	No error (0)	stats.g.doubleclick.net		64.233.184.157	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.315910101 CEST	1.1.1.1	192.168.2.6	0x76db	No error (0)	stats.g.doubleclick.net		64.233.184.154	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.315910101 CEST	1.1.1.1	192.168.2.6	0x76db	No error (0)	stats.g.doubleclick.net		64.233.184.156	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.315910101 CEST	1.1.1.1	192.168.2.6	0x76db	No error (0)	stats.g.doubleclick.net		64.233.184.155	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.503380060 CEST	1.1.1.1	192.168.2.6	0x3752	No error (0)	www.garwoodsheating.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.503380060 CEST	1.1.1.1	192.168.2.6	0x3752	No error (0)	www.garwoodsheating.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:50.530983925 CEST	1.1.1.1	192.168.2.6	0xad9d	No error (0)	www.garwoodsheating.com			65	IN (0x0001)	false
Oct 25, 2024 01:02:50.701610088 CEST	1.1.1.1	192.168.2.6	0xd843	No error (0)	d1eoo1tco6rr5e.cloudfront.net		13.225.83.200	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128482103 CEST	1.1.1.1	192.168.2.6	0xcfd7	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128482103 CEST	1.1.1.1	192.168.2.6	0xcfd7	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128482103 CEST	1.1.1.1	192.168.2.6	0xcfd7	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128482103 CEST	1.1.1.1	192.168.2.6	0xcfd7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.210.142.7	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128482103 CEST	1.1.1.1	192.168.2.6	0xcfd7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.221.135	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128482103 CEST	1.1.1.1	192.168.2.6	0xcfd7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.76.121.43	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128482103 CEST	1.1.1.1	192.168.2.6	0xcfd7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.217.253.102	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128482103 CEST	1.1.1.1	192.168.2.6	0xcfd7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.240.122	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128482103 CEST	1.1.1.1	192.168.2.6	0xcfd7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.229.50.82	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128482103 CEST	1.1.1.1	192.168.2.6	0xcfd7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.48.129.25	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128482103 CEST	1.1.1.1	192.168.2.6	0xcfd7	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.254.132.151	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128989935 CEST	1.1.1.1	192.168.2.6	0xf2d4	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128989935 CEST	1.1.1.1	192.168.2.6	0xf2d4	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:51.128989935 CEST	1.1.1.1	192.168.2.6	0xf2d4	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:51.483021975 CEST	1.1.1.1	192.168.2.6	0x836d	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:52.677097082 CEST	1.1.1.1	192.168.2.6	0x2bb	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:52.677357912 CEST	1.1.1.1	192.168.2.6	0xfb7a	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 01:02:52.697777033 CEST	1.1.1.1	192.168.2.6	0x3727	No error (0)	adservices.brandcdn.com	prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:52.697777033 CEST	1.1.1.1	192.168.2.6	0x3727	No error (0)	prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com		52.9.171.8	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:52.697777033 CEST	1.1.1.1	192.168.2.6	0x3727	No error (0)	prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com		54.67.88.236	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:52.703125000 CEST	1.1.1.1	192.168.2.6	0x5592	No error (0)	adservices.brandcdn.com	prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:52.762677908 CEST	1.1.1.1	192.168.2.6	0x377a	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 25, 2024 01:02:52.762829065 CEST	1.1.1.1	192.168.2.6	0xb6cc	No error (0)	googleads.g.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:54.345998049 CEST	1.1.1.1	192.168.2.6	0x7f71	No error (0)	sos-apps.appspot.com		172.217.16.148	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:56.387492895 CEST	1.1.1.1	192.168.2.6	0x72d6	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:56.387492895 CEST	1.1.1.1	192.168.2.6	0x72d6	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:56.387492895 CEST	1.1.1.1	192.168.2.6	0x72d6	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:56.387492895 CEST	1.1.1.1	192.168.2.6	0x72d6	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035298109 CEST	1.1.1.1	192.168.2.6	0x5ba1	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035298109 CEST	1.1.1.1	192.168.2.6	0x5ba1	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.035310030 CEST	1.1.1.1	192.168.2.6	0xff75	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.042973995 CEST	1.1.1.1	192.168.2.6	0x3d31	No error (0)	core-dot-sos-apps.appspot.com		172.217.18.20	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.048290968 CEST	1.1.1.1	192.168.2.6	0x3763	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:58.048664093 CEST	1.1.1.1	192.168.2.6	0x6a64	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:58.113859892 CEST	1.1.1.1	192.168.2.6	0x50c	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.114414930 CEST	1.1.1.1	192.168.2.6	0x3479	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 01:02:58.238373041 CEST	1.1.1.1	192.168.2.6	0x48c7	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:58.238529921 CEST	1.1.1.1	192.168.2.6	0x263b	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:58.252679110 CEST	1.1.1.1	192.168.2.6	0xe848	No error (0)	sos-apps.appspot.com		142.250.185.116	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:58.421710014 CEST	1.1.1.1	192.168.2.6	0xafc9	No error (0)	cm.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:59.391195059 CEST	1.1.1.1	192.168.2.6	0x7a9a	No error (0)	googleads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:59.391299009 CEST	1.1.1.1	192.168.2.6	0x2167	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Oct 25, 2024 01:02:59.392241001 CEST	1.1.1.1	192.168.2.6	0x3a39	No error (0)	static.doubleclick.net		216.58.206.70	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:59.410902977 CEST	1.1.1.1	192.168.2.6	0xe506	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:59.410902977 CEST	1.1.1.1	192.168.2.6	0xe506	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.193	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:02:59.410927057 CEST	1.1.1.1	192.168.2.6	0x3ed4	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:59.861773968 CEST	1.1.1.1	192.168.2.6	0x9577	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:02:59.861773968 CEST	1.1.1.1	192.168.2.6	0x9577	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.017221928 CEST	1.1.1.1	192.168.2.6	0x8b66	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.017221928 CEST	1.1.1.1	192.168.2.6	0x8b66	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.017221928 CEST	1.1.1.1	192.168.2.6	0x8b66	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.017221928 CEST	1.1.1.1	192.168.2.6	0x8b66	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.492523909 CEST	1.1.1.1	192.168.2.6	0x3bee	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.768296957 CEST	1.1.1.1	192.168.2.6	0x522b	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:00.768296957 CEST	1.1.1.1	192.168.2.6	0x522b	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.768296957 CEST	1.1.1.1	192.168.2.6	0x522b	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.768296957 CEST	1.1.1.1	192.168.2.6	0x522b	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.768296957 CEST	1.1.1.1	192.168.2.6	0x522b	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.768296957 CEST	1.1.1.1	192.168.2.6	0x522b	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.768296957 CEST	1.1.1.1	192.168.2.6	0x522b	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:00.768296957 CEST	1.1.1.1	192.168.2.6	0x522b	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.005197048 CEST	1.1.1.1	192.168.2.6	0x3ea4	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:01.005197048 CEST	1.1.1.1	192.168.2.6	0x3ea4	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.005197048 CEST	1.1.1.1	192.168.2.6	0x3ea4	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.005197048 CEST	1.1.1.1	192.168.2.6	0x3ea4	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.005197048 CEST	1.1.1.1	192.168.2.6	0x3ea4	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.005197048 CEST	1.1.1.1	192.168.2.6	0x3ea4	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.005197048 CEST	1.1.1.1	192.168.2.6	0x3ea4	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.005197048 CEST	1.1.1.1	192.168.2.6	0x3ea4	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.005197048 CEST	1.1.1.1	192.168.2.6	0x3ea4	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.005197048 CEST	1.1.1.1	192.168.2.6	0x3ea4	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.005197048 CEST	1.1.1.1	192.168.2.6	0x3ea4	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.005197048 CEST	1.1.1.1	192.168.2.6	0x3ea4	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.005197048 CEST	1.1.1.1	192.168.2.6	0x3ea4	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.525657892 CEST	1.1.1.1	192.168.2.6	0x3919	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:01.525834084 CEST	1.1.1.1	192.168.2.6	0xf591	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:01.525834084 CEST	1.1.1.1	192.168.2.6	0xf591	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.97	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:01.527101040 CEST	1.1.1.1	192.168.2.6	0x124f	No error (0)	static.doubleclick.net		216.58.206.38	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:02.262137890 CEST	1.1.1.1	192.168.2.6	0xf141	No error (0)	play.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:03.968085051 CEST	1.1.1.1	192.168.2.6	0x888d	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:05.836848021 CEST	1.1.1.1	192.168.2.6	0x4431	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:05.836848021 CEST	1.1.1.1	192.168.2.6	0x4431	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:05.836848021 CEST	1.1.1.1	192.168.2.6	0x4431	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:05.836848021 CEST	1.1.1.1	192.168.2.6	0x4431	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:05.836848021 CEST	1.1.1.1	192.168.2.6	0x4431	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:05.836848021 CEST	1.1.1.1	192.168.2.6	0x4431	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:05.836848021 CEST	1.1.1.1	192.168.2.6	0x4431	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:05.836848021 CEST	1.1.1.1	192.168.2.6	0x4431	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:06.062567949 CEST	1.1.1.1	192.168.2.6	0x82f6	No error (0)	play.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:06.742808104 CEST	1.1.1.1	192.168.2.6	0xf247	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:06.742808104 CEST	1.1.1.1	192.168.2.6	0xf247	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:06.742808104 CEST	1.1.1.1	192.168.2.6	0xf247	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:06.742808104 CEST	1.1.1.1	192.168.2.6	0xf247	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:09.204103947 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:09.204103947 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:09.204103947 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:09.204103947 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:09.204103947 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:09.204103947 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:09.204103947 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:09.204103947 CEST	1.1.1.1	192.168.2.6	0xd663	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:09.327902079 CEST	1.1.1.1	192.168.2.6	0xb4bc	No error (0)	www.demandforce.com		104.18.35.35	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:09.327902079 CEST	1.1.1.1	192.168.2.6	0xb4bc	No error (0)	www.demandforce.com		172.64.152.221	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:09.328030109 CEST	1.1.1.1	192.168.2.6	0xc52	No error (0)	www.demandforce.com			65	IN (0x0001)	false
Oct 25, 2024 01:03:10.145646095 CEST	1.1.1.1	192.168.2.6	0x26ab	No error (0)	www.demandforced3.com		172.64.153.110	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:10.145646095 CEST	1.1.1.1	192.168.2.6	0x26ab	No error (0)	www.demandforced3.com		104.18.34.146	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:10.146419048 CEST	1.1.1.1	192.168.2.6	0x40ab	No error (0)	www.demandforced3.com			65	IN (0x0001)	false
Oct 25, 2024 01:03:11.004607916 CEST	1.1.1.1	192.168.2.6	0x524d	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:11.004607916 CEST	1.1.1.1	192.168.2.6	0x524d	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:11.024125099 CEST	1.1.1.1	192.168.2.6	0x9cf5	No error (0)	local.demandforce.com		98.158.198.91	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:11.072452068 CEST	1.1.1.1	192.168.2.6	0x4ca8	No error (0)	su.addthis.com	m.addthisedge.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:11.072452068 CEST	1.1.1.1	192.168.2.6	0x4ca8	No error (0)	m.addthisedge.com	ds-m.addthisedge.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:11.157119036 CEST	1.1.1.1	192.168.2.6	0x21a2	No error (0)	su.addthis.com	m.addthisedge.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:11.157119036 CEST	1.1.1.1	192.168.2.6	0x21a2	No error (0)	m.addthisedge.com	ds-m.addthisedge.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:11.172075033 CEST	1.1.1.1	192.168.2.6	0x8b83	No error (0)	su.addthis.com	m.addthisedge.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:11.172075033 CEST	1.1.1.1	192.168.2.6	0x8b83	No error (0)	m.addthisedge.com	ds-m.addthisedge.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:11.234308958 CEST	1.1.1.1	192.168.2.6	0xe556	No error (0)	su.addthis.com	m.addthisedge.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:11.234308958 CEST	1.1.1.1	192.168.2.6	0xe556	No error (0)	m.addthisedge.com	ds-m.addthisedge.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:11.417614937 CEST	1.1.1.1	192.168.2.6	0xa08e	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:11.417614937 CEST	1.1.1.1	192.168.2.6	0xa08e	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:12.803361893 CEST	1.1.1.1	192.168.2.6	0x9150	No error (0)	local.demandforce.com		98.158.198.91	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:12.857124090 CEST	1.1.1.1	192.168.2.6	0x7d70	No error (0)	local.demandforce.com		98.158.198.91	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:13.780299902 CEST	1.1.1.1	192.168.2.6	0x5fdb	No error (0)	cdn.mxpnl.com		130.211.5.208	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:13.780299902 CEST	1.1.1.1	192.168.2.6	0x5fdb	No error (0)	cdn.mxpnl.com		35.186.235.23	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:13.782222033 CEST	1.1.1.1	192.168.2.6	0xc2b4	No error (0)	www.inspectlet.com			65	IN (0x0001)	false
Oct 25, 2024 01:03:13.783118963 CEST	1.1.1.1	192.168.2.6	0x1c6d	No error (0)	www.inspectlet.com		172.67.10.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:13.783118963 CEST	1.1.1.1	192.168.2.6	0x1c6d	No error (0)	www.inspectlet.com		104.22.56.245	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:13.783118963 CEST	1.1.1.1	192.168.2.6	0x1c6d	No error (0)	www.inspectlet.com		104.22.57.245	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:15.789352894 CEST	1.1.1.1	192.168.2.6	0xf18a	No error (0)	secure-gl.imrworldwide.com	d8ghbpr3r4dzt.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:15.789352894 CEST	1.1.1.1	192.168.2.6	0xf18a	No error (0)	d8ghbpr3r4dzt.cloudfront.net		13.33.187.97	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:15.789352894 CEST	1.1.1.1	192.168.2.6	0xf18a	No error (0)	d8ghbpr3r4dzt.cloudfront.net		13.33.187.85	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:15.789352894 CEST	1.1.1.1	192.168.2.6	0xf18a	No error (0)	d8ghbpr3r4dzt.cloudfront.net		13.33.187.112	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:15.789352894 CEST	1.1.1.1	192.168.2.6	0xf18a	No error (0)	d8ghbpr3r4dzt.cloudfront.net		13.33.187.70	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:15.790599108 CEST	1.1.1.1	192.168.2.6	0x442f	No error (0)	secure-gl.imrworldwide.com	d8ghbpr3r4dzt.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:17.127873898 CEST	1.1.1.1	192.168.2.6	0xb14e	No error (0)	secure-gl.imrworldwide.com	d8ghbpr3r4dzt.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:17.127873898 CEST	1.1.1.1	192.168.2.6	0xb14e	No error (0)	d8ghbpr3r4dzt.cloudfront.net		13.33.187.112	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:17.127873898 CEST	1.1.1.1	192.168.2.6	0xb14e	No error (0)	d8ghbpr3r4dzt.cloudfront.net		13.33.187.85	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:17.127873898 CEST	1.1.1.1	192.168.2.6	0xb14e	No error (0)	d8ghbpr3r4dzt.cloudfront.net		13.33.187.70	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:17.127873898 CEST	1.1.1.1	192.168.2.6	0xb14e	No error (0)	d8ghbpr3r4dzt.cloudfront.net		13.33.187.97	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:17.128310919 CEST	1.1.1.1	192.168.2.6	0x58f6	No error (0)	secure-gl.imrworldwide.com	d8ghbpr3r4dzt.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:20.797395945 CEST	1.1.1.1	192.168.2.6	0x42d6	No error (0)	adservices.brandcdn.com	prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:20.798379898 CEST	1.1.1.1	192.168.2.6	0x907d	No error (0)	adservices.brandcdn.com	prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:20.798379898 CEST	1.1.1.1	192.168.2.6	0x907d	No error (0)	prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com		52.9.171.8	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:20.798379898 CEST	1.1.1.1	192.168.2.6	0x907d	No error (0)	prod-adservices-prod-alb-lb-213069934.us-west-1.elb.amazonaws.com		54.67.88.236	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:21.517548084 CEST	1.1.1.1	192.168.2.6	0xc06b	No error (0)	cdn.inspectlet.com		104.22.56.245	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:21.517548084 CEST	1.1.1.1	192.168.2.6	0xc06b	No error (0)	cdn.inspectlet.com		104.22.57.245	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:21.517548084 CEST	1.1.1.1	192.168.2.6	0xc06b	No error (0)	cdn.inspectlet.com		172.67.10.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:21.519932985 CEST	1.1.1.1	192.168.2.6	0xc29d	No error (0)	cdn.inspectlet.com			65	IN (0x0001)	false
Oct 25, 2024 01:03:23.117078066 CEST	1.1.1.1	192.168.2.6	0xd9b1	No error (0)	cdn.inspectlet.com		172.67.10.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:23.117078066 CEST	1.1.1.1	192.168.2.6	0xd9b1	No error (0)	cdn.inspectlet.com		104.22.56.245	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:23.117078066 CEST	1.1.1.1	192.168.2.6	0xd9b1	No error (0)	cdn.inspectlet.com		104.22.57.245	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:23.118957043 CEST	1.1.1.1	192.168.2.6	0xcac9	No error (0)	cdn.inspectlet.com			65	IN (0x0001)	false
Oct 25, 2024 01:03:25.510087967 CEST	1.1.1.1	192.168.2.6	0xb948	No error (0)	hn.inspectlet.com			65	IN (0x0001)	false
Oct 25, 2024 01:03:25.510734081 CEST	1.1.1.1	192.168.2.6	0xc90d	No error (0)	hn.inspectlet.com		172.67.10.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:25.510734081 CEST	1.1.1.1	192.168.2.6	0xc90d	No error (0)	hn.inspectlet.com		104.22.57.245	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:25.510734081 CEST	1.1.1.1	192.168.2.6	0xc90d	No error (0)	hn.inspectlet.com		104.22.56.245	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:26.517800093 CEST	1.1.1.1	192.168.2.6	0x722	No error (0)	hn.inspectlet.com		104.22.57.245	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:26.517800093 CEST	1.1.1.1	192.168.2.6	0x722	No error (0)	hn.inspectlet.com		172.67.10.172	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:26.517800093 CEST	1.1.1.1	192.168.2.6	0x722	No error (0)	hn.inspectlet.com		104.22.56.245	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:26.519519091 CEST	1.1.1.1	192.168.2.6	0xbe21	No error (0)	hn.inspectlet.com			65	IN (0x0001)	false
Oct 25, 2024 01:03:33.463953018 CEST	1.1.1.1	192.168.2.6	0x493b	No error (0)	aa.agkn.com	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:33.463953018 CEST	1.1.1.1	192.168.2.6	0x493b	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		34.248.126.201	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:33.463953018 CEST	1.1.1.1	192.168.2.6	0x493b	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		54.73.194.101	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:33.464641094 CEST	1.1.1.1	192.168.2.6	0x8ba8	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:34.619544029 CEST	1.1.1.1	192.168.2.6	0xb9a9	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:34.619744062 CEST	1.1.1.1	192.168.2.6	0xb41d	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:34.619744062 CEST	1.1.1.1	192.168.2.6	0xb41d	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		35.157.170.10	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:34.619744062 CEST	1.1.1.1	192.168.2.6	0xb41d	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		18.196.177.92	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:34.830519915 CEST	1.1.1.1	192.168.2.6	0x95d6	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:34.830519915 CEST	1.1.1.1	192.168.2.6	0x95d6	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:34.830519915 CEST	1.1.1.1	192.168.2.6	0x95d6	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.194.77.216	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:34.830519915 CEST	1.1.1.1	192.168.2.6	0x95d6	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		3.75.161.9	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:34.831192017 CEST	1.1.1.1	192.168.2.6	0x54d6	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:34.831192017 CEST	1.1.1.1	192.168.2.6	0x54d6	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:35.980264902 CEST	1.1.1.1	192.168.2.6	0x1839	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:35.980264902 CEST	1.1.1.1	192.168.2.6	0x1839	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:35.980264902 CEST	1.1.1.1	192.168.2.6	0x1839	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.194.77.216	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:35.980264902 CEST	1.1.1.1	192.168.2.6	0x1839	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		3.75.161.9	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:35.991861105 CEST	1.1.1.1	192.168.2.6	0xcde3	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:35.991861105 CEST	1.1.1.1	192.168.2.6	0xcde3	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:36.209377050 CEST	1.1.1.1	192.168.2.6	0x177a	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:36.209377050 CEST	1.1.1.1	192.168.2.6	0x177a	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:36.209377050 CEST	1.1.1.1	192.168.2.6	0x177a	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.194.77.216	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:36.209377050 CEST	1.1.1.1	192.168.2.6	0x177a	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		3.75.161.9	A (IP address)	IN (0x0001)	false
Oct 25, 2024 01:03:36.220750093 CEST	1.1.1.1	192.168.2.6	0x8d91	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 01:03:36.220750093 CEST	1.1.1.1	192.168.2.6	0x8d91	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	53228	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:43 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 39 46 47 36 34 4f 4f 37 68 45 6d 47 49 71 78 39 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 61 62 63 38 63 64 30 62 35 66 36 66 36 64 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 9FG64OO7hEmGIqx9.1Context: 4abc8cd0b5f6f6d0
2024-10-24 23:02:43 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-24 23:02:43 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 39 46 47 36 34 4f 4f 37 68 45 6d 47 49 71 78 39 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 61 62 63 38 63 64 30 62 35 66 36 66 36 64 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 62 6e 64 4d 53 45 51 2f 6d 33 65 77 6f 72 4a 65 35 77 37 74 66 54 53 72 75 6a 39 38 55 2f 33 72 41 30 39 4e 59 32 30 4c 4b 52 63 36 69 39 6d 62 42 2b 6d 35 67 49 4a 64 4d 35 46 66 39 46 79 53 59 4d 66 30 75 57 6f 53 78 6d 4f 54 55 4a 71 51 65 43 76 63 2b 35 5a 77 56 6d 35 77 6f 54 2b 42 64 76 69 44 65 33 55 65 55 61 33 30 56 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 9FG64OO7hEmGIqx9.2Context: 4abc8cd0b5f6f6d0<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAbndMSEQ/m3eworJe5w7tfTSruj98U/3rA09NY20LKRc6i9mbB+m5gIJdM5Ff9FySYMf0uWoSxmOTUJqQeCvc+5ZwVm5woT+BdviDe3UeUa30V
2024-10-24 23:02:43 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 39 46 47 36 34 4f 4f 37 68 45 6d 47 49 71 78 39 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 61 62 63 38 63 64 30 62 35 66 36 66 36 64 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 9FG64OO7hEmGIqx9.3Context: 4abc8cd0b5f6f6d0<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-24 23:02:43 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-24 23:02:43 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6f 50 66 6a 46 6d 79 35 72 45 2b 69 33 41 42 4e 49 38 7a 35 50 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: oPfjFmy5rE+i3ABNI8z5PA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	53231	188.114.96.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:44 UTC	662	OUT	GET / HTTP/1.1 Host: garwoodsheating.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:44 UTC	1028	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 24 Oct 2024 23:02:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: use-prod-apps=1; path=/ location: https://www.garwoodsheating.com/ x-cloud-trace-context: 80175c03ca4f65c9779cb6c9ebe447ff;o=1 pragma: no-cache expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XKLIHxnai6zb4a93Nst7quMjBNMAA9cUfJyo2C%2FqsR%2BaVOpyylAmWkR%2FOSdvKrDsZkO7x6cwOAKQkDVIas61kvY%2BFZWNdzgfrrFnDCVQ0cQ%2BueqHeWleoiF4RNtirl%2Fs87ws24Yj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98a00febeb02-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1029&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1240&delivery_rate=2419381&cwnd=238&unsent_bytes=0&cid=68ce7c276cdcb88e&ts=213&x=0"
2024-10-24 23:02:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	53236	188.114.97.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:45 UTC	666	OUT	GET / HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:46 UTC	958	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding Set-Cookie: use-prod-apps=1; path=/ x-cloud-trace-context: a6f2a56a8f427b5607e10232ac04996b Cache-Control: private expires: Thu, 24 Oct 2024 23:02:46 GMT cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3vAsd7VXXrRyqTubzOyg2mnXkC0DUGEe%2FrKb1NRwudLZMnwORlLr1jmqB1wNN7MIwDDFKH1vKHynSOr%2Bj66QK92MM%2Fo6k5kKNVX1V4sWVegaDPJunyyx6Cgax1Ae4AxzPhZg1USBx3JXzA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98a95ff0358d-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1183&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1244&delivery_rate=2419381&cwnd=251&unsent_bytes=0&cid=665583020622d8c2&ts=297&x=0"
2024-10-24 23:02:46 UTC	411	IN	Data Raw: 32 30 63 61 0d 0a 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 39 Data Ascii: 20ca<!doctype html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="msvalidate.01" content="9
2024-10-24 23:02:46 UTC	1369	IN	Data Raw: 61 6e 63 65 20 6f 66 20 42 72 79 61 6e 74 20 66 75 72 6e 61 63 65 73 2c 20 41 43 20 28 41 2f 43 29 2c 20 68 65 61 74 20 70 75 6d 70 73 2c 20 64 75 63 74 6c 65 73 73 2c 20 67 65 6f 74 68 65 72 6d 61 6c 20 66 6f 72 20 70 65 6f 70 6c 65 20 6e 65 61 72 20 6d 65 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 47 61 72 77 6f 6f 64 27 73 20 48 65 61 74 69 6e 67 20 26 20 43 6f 6f 6c 69 6e 67 2c 20 49 6e 63 2e 2c 20 41 69 72 20 43 6f 6e 64 69 74 69 6f 6e 65 72 20 26 20 46 75 72 6e 61 63 65 20 52 65 70 61 69 72 20 26 20 53 65 72 76 69 63 65 20 7c 20 45 64 77 61 72 64 73 76 69 6c 6c 65 2c 20 49 4c 20 36 32 30 32 35 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0d 0a 0d Data Ascii: ance of Bryant furnaces, AC (A/C), heat pumps, ductless, geothermal for people near me"> <title>Garwood's Heating & Cooling, Inc., Air Conditioner & Furnace Repair & Service \| Edwardsville, IL 62025</title> <meta name="keywords" content="" />
2024-10-24 23:02:46 UTC	1369	IN	Data Raw: 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 66 6e 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 68 31 7b 66 6f 6e 74 Data Ascii: -block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font
2024-10-24 23:02:46 UTC	1369	IN	Data Raw: 6e 63 65 3a 6e 6f 6e 65 7d 66 69 65 6c 64 73 65 74 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 73 69 6c 76 65 72 3b 6d 61 72 67 69 6e 3a 30 20 32 70 78 3b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 36 32 35 65 6d 20 2e 37 35 65 6d 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 6f 70 74 67 72 6f 75 70 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 74 64 2c 74 68 7b 70 61 64 64 69 6e 67 3a 30 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 21 69 6d 70 6f 72 74 61 6e Data Ascii: nce:none}fieldset{border:1px solid silver;margin:0 2px;padding:.35em .625em .75em}textarea{overflow:auto}optgroup{font-weight:700}table{border-collapse:collapse;border-spacing:0}td,th{padding:0}@media print{*,:after,:before{background:transparent!importan
2024-10-24 23:02:46 UTC	1369	IN	Data Raw: 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 63 6f 72 65 2d 64 6f 74 2d 73 6f 73 2d 61 70 70 73 2e 61 70 70 73 70 6f 74 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 68 74 74 70 73 3a 2f 2f 63 6f 72 65 2d 64 6f 74 2d 73 6f 73 2d 61 70 70 73 2e 61 70 70 73 70 6f 74 2e 63 6f 6d 2f 66 6f 6e 74 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 74 74 66 29 20 66 6f 72 6d Data Ascii: lyphicons-halflings-regular.woff2) format("woff2"),url(https://core-dot-sos-apps.appspot.com/fonts/bootstrap/glyphicons-halflings-regular.woff) format("woff"),url(https://core-dot-sos-apps.appspot.com/fonts/bootstrap/glyphicons-halflings-regular.ttf) form
2024-10-24 23:02:46 UTC	1369	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 69 67 6e 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 39 Data Ascii: ntent:"\e013"}.glyphicon-remove:before{content:"\e014"}.glyphicon-zoom-in:before{content:"\e015"}.glyphicon-zoom-out:before{content:"\e016"}.glyphicon-off:before{content:"\e017"}.glyphicon-signal:before{content:"\e018"}.glyphicon-cog:before{content:"\e019
2024-10-24 23:02:46 UTC	1146	IN	Data Raw: 22 5c 65 30 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 68 65 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 77 69 64 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 6c 69 67 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a Data Ascii: "\e046"}.glyphicon-font:before{content:"\e047"}.glyphicon-bold:before{content:"\e048"}.glyphicon-italic:before{content:"\e049"}.glyphicon-text-height:before{content:"\e050"}.glyphicon-text-width:before{content:"\e051"}.glyphicon-align-left:before{content:
2024-10-24 23:02:46 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 39 22 7d 2e 67 6c Data Ascii: 7ffabefore{content:"\e074"}.glyphicon-forward:before{content:"\e075"}.glyphicon-fast-forward:before{content:"\e076"}.glyphicon-step-forward:before{content:"\e077"}.glyphicon-eject:before{content:"\e078"}.glyphicon-chevron-left:before{content:"\e079"}.gl
2024-10-24 23:02:46 UTC	1369	IN	Data Raw: 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 30 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 30 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 33 22 7d 2e 67 6c Data Ascii: .glyphicon-plane:before{content:"\e108"}.glyphicon-calendar:before{content:"\e109"}.glyphicon-random:before{content:"\e110"}.glyphicon-comment:before{content:"\e111"}.glyphicon-magnet:before{content:"\e112"}.glyphicon-chevron-up:before{content:"\e113"}.gl
2024-10-24 23:02:46 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 72 69 65 66 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 75 6c 6c 73 63 72 65 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 64 61 73 68 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 70 65 72 63 6c 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 72 74 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 69 6e 6b 3a 62 Data Ascii: ontent:"\e138"}.glyphicon-briefcase:before{content:"\e139"}.glyphicon-fullscreen:before{content:"\e140"}.glyphicon-dashboard:before{content:"\e141"}.glyphicon-paperclip:before{content:"\e142"}.glyphicon-heart-empty:before{content:"\e143"}.glyphicon-link:b

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	53235	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:46 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:46 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:46 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 23 Oct 2024 06:30:03 GMT ETag: "0x8DCF32C20D7262E" x-ms-request-id: 39f98116-901e-0015-0fb5-25b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230246Z-15b8d89586f42m673h1quuee4s00000003tg000000005437 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:46 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-24 23:02:46 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-24 23:02:46 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-24 23:02:46 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-24 23:02:46 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-24 23:02:46 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-24 23:02:47 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-24 23:02:47 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-24 23:02:47 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-24 23:02:47 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	53238	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:47 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 23:02:47 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=236575 Date: Thu, 24 Oct 2024 23:02:47 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	53242	18.66.147.109	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:48 UTC	565	OUT	GET /autoscript/Garwoods_Heating_and_Cooling.js HTTP/1.1 Host: tag.brandcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:49 UTC	587	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1085 Connection: close Date: Thu, 24 Oct 2024 23:02:50 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 21 Oct 2024 18:33:19 GMT ETag: "dc654778115261e448e78e94f11bbd0d" x-amz-server-side-encryption: AES256 x-amz-version-id: QXfxiy2GxScSGmwkJ6EE5xBmlUkZf009 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 87fae571c6ea0d7d1101b71cc2131bba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: Zdj4qtQSSufPKx9mViN4OmF23seSQ1ce0WcIGBf2Ut0CJFXK5qH8Iw==
2024-10-24 23:02:49 UTC	1085	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 6c 65 74 20 65 6c 65 6d 33 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 65 6c 65 6d 33 2e 77 69 64 74 68 20 3d 20 27 30 27 3b 65 6c 65 6d 33 2e 68 65 69 67 68 74 20 3d 20 27 30 27 3b 65 6c 65 6d 33 2e 6e 61 6d 65 20 3d 20 74 72 75 65 3b 65 6c 65 6d 33 2e 66 72 61 6d 65 62 6f 72 64 65 72 20 3d 20 27 30 27 3b 65 6c 65 6d 33 2e 73 74 79 6c 65 20 3d 20 27 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 27 3b 65 6c 65 6d 33 2e 73 63 72 6f 6c 6c 69 6e 67 20 3d 20 27 6e 6f 27 3b 65 6c 65 6d 33 2e 73 72 63 20 3d 20 27 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 61 67 73 2f 6a 73 61 63 37 34 6a 2f 73 34 73 77 34 7a 68 2f 69 66 72 61 6d 65 27 3b 64 6f Data Ascii: (function() {let elem3 = document.createElement("iframe");elem3.width = '0';elem3.height = '0';elem3.name = true;elem3.frameborder = '0';elem3.style = 'display:none;';elem3.scrolling = 'no';elem3.src = '//insight.adsrvr.org/tags/jsac74j/s4sw4zh/iframe';do

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	53249	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:48 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:48 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 8bb6e00a-f01e-003c-3fef-248cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230248Z-15b8d89586ffsjj9qb0gmb1stn00000003ug000000009zpx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:49 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	53245	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:48 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:48 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 52fc638d-b01e-0070-36c5-201cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230248Z-16849878b78nx5sne3fztmu6xc00000000p000000000d4r6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:49 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	53246	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:48 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:48 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fdb61705-b01e-0001-2f09-2246e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230248Z-16849878b78fmrkt2ukpvh9wh400000008c00000000077aw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:49 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	53247	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:48 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:49 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:48 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 1a9c8bfd-301e-0000-1fee-25eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230248Z-16849878b786wvrz321uz1cknn000000089000000000th23 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:02:49 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	53248	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:48 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:48 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230248Z-16849878b785jsrm4477mv3ezn0000000860000000010hm6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:49 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	53250	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:49 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 23:02:49 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=236573 Date: Thu, 24 Oct 2024 23:02:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 23:02:49 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	65027	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:49 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:49 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:49 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 83a5bbbc-601e-005c-5bad-24f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230249Z-15b8d89586fbt6nf34bm5uw08n00000003n0000000004drq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:49 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	65029	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:49 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:49 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230249Z-16849878b785f8wh85a0w3ennn000000086000000000wunh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:49 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	65024	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:49 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:49 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:49 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e5fe76b8-601e-0050-2e06-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230249Z-17c5cb586f6qt228zy1nuwhy2g00000001p000000000a63n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:49 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	65026	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:49 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:49 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:49 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: d2ec1471-a01e-0032-1827-261949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230249Z-17c5cb586f6f69jxsre6kx2wmc00000001xg00000000b22c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:49 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	65028	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:49 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:49 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:49 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b0d76b6d-d01e-002b-3e84-2525fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230249Z-16849878b78bcpfn2qf7sm6hsn000000018000000000hn43 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:49 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	65025	172.217.16.148	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:49 UTC	568	OUT	GET /scripts/core.min.js?v=1729776912 HTTP/1.1 Host: core-dot-sos-apps.appspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:50 UTC	427	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * vary: Accept-Encoding Date: Thu, 24 Oct 2024 23:02:50 GMT Expires: Thu, 24 Oct 2024 23:12:50 GMT Cache-Control: public, max-age=600 ETag: "A3elYw" X-Cloud-Trace-Context: c86f34eb974e049af65c4b11ebb31b3d Content-Type: application/javascript Server: Google Frontend Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:50 UTC	1378	IN	Data Raw: 33 63 34 66 0d 0a 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 6f 63 75 6d 65 6e 74 3f 65 28 74 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 65 28 74 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 7d 3a 65 28 74 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 Data Ascii: 3c4fif(!function(t,e){"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(t.document)return e(t);throw new Error("jQuery requires a window with a document")}:e(t)}("undefined"!=typeof window?window:t
2024-10-24 23:02:50 UTC	1378	IN	Data Raw: 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 75 6c 6c 29 7d 2c 70 75 73 68 3a 48 2c 73 6f 72 74 3a 75 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 75 2e 73 70 6c 69 63 65 7d 2c 77 2e 65 78 74 65 6e 64 3d 77 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 2c 69 2c 6e 2c 73 2c 74 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 61 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 26 26 28 6c 3d 6f 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 7c 7c 7b 7d 2c 61 2b 2b 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6f 7c 7c 77 2e 69 73 46 75 6e 63 74 69 6f 6e 28 6f 29 7c 7c 28 6f 3d 7b 7d 29 2c 61 3d 3d Data Ascii: his.constructor(null)},push:H,sort:u.sort,splice:u.splice},w.extend=w.fn.extend=function(){var t,e,i,n,s,t,o=arguments[0]\|\|{},a=1,r=arguments.length,l=!1;for("boolean"==typeof o&&(l=o,o=arguments[a]\|\|{},a++),"object"==typeof o\|\|w.isFunction(o)\|\|(o={}),a==
2024-10-24 23:02:50 UTC	1378	IN	Data Raw: 65 63 53 63 72 69 70 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 2e 65 76 61 6c 2e 63 61 6c 6c 28 66 2c 74 29 7d 29 28 74 29 7d 2c 63 61 6d 65 6c 43 61 73 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 6a 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 71 2c 42 29 7d 2c 6e 6f 64 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 6e 6f 64 65 4e 61 6d 65 26 26 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 6e 2c 73 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 2c 61 3d 55 28 74 29 3b 69 66 28 69 29 7b 69 66 28 61 29 66 6f Data Ascii: ecScript\|\|function(t){f.eval.call(f,t)})(t)},camelCase:function(t){return t.replace(j,"ms-").replace(q,B)},nodeName:function(t,e){return t.nodeName&&t.nodeName.toLowerCase()===e.toLowerCase()},each:function(t,e,i){var n,s=0,o=t.length,a=U(t);if(i){if(a)fo
2024-10-24 23:02:50 UTC	1378	IN	Data Raw: 67 75 6d 65 6e 74 73 29 29 29 7d 29 2e 67 75 69 64 3d 74 2e 67 75 69 64 3d 74 2e 67 75 69 64 7c 7c 77 2e 67 75 69 64 2b 2b 2c 6e 29 3a 76 6f 69 64 20 30 7d 2c 6e 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d 2c 73 75 70 70 6f 72 74 3a 67 7d 29 2c 77 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 65 2b 22 5d 22 5d 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 52 29 7b 76 61 72 20 74 2c Data Ascii: guments)))}).guid=t.guid=t.guid\|\|w.guid++,n):void 0},now:function(){return+new Date},support:g}),w.each("Boolean Number String Function Array Date RegExp Object Error".split(" "),function(t,e){i["[object "+e+"]"]=e.toLowerCase()});var t=function(R){var t,
2024-10-24 23:02:50 UTC	1378	IN	Data Raw: 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4a 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 72 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 72 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 72 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 72 2b 22 2a 5c 5c 29 7c 29 22 2c 22 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 4b 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 72 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e Data Ascii: UDO:new RegExp("^"+J),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\$"+r+"(even\|odd\|(([+-]\|)(\\d)n\|)"+r+"(?:([+-]\|)"+r+"(\\d+)\|))"+r+"\$\|)","i"),bool:new RegExp("^(?:"+K+")$","i"),needsContext:new RegExp("^"+r+"[>+~]\|:(even
2024-10-24 23:02:50 UTC	1378	IN	Data Raw: 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 6b 2e 61 70 70 6c 79 28 69 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 61 29 29 2c 69 7d 69 66 28 75 2e 71 73 61 26 26 28 21 6d 7c 7c 21 6d 2e 74 65 73 74 28 74 29 29 29 7b 69 66 28 63 3d 6f 3d 62 2c 73 3d 65 2c 61 3d 39 3d 3d 3d 72 26 26 74 2c 31 3d 3d 3d 72 26 26 22 6f 62 6a 65 63 74 22 21 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 66 6f 72 28 68 3d 64 28 74 29 2c 28 6f 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 63 3d 6f 2e 72 65 70 6c 61 63 65 28 68 74 2c 22 5c 5c 24 26 22 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 63 29 2c 63 3d 22 5b 69 Data Ascii: .getElementsByClassName)return k.apply(i,e.getElementsByClassName(a)),i}if(u.qsa&&(!m\|\|!m.test(t))){if(c=o=b,s=e,a=9===r&&t,1===r&&"object"!==e.nodeName.toLowerCase()){for(h=d(t),(o=e.getAttribute("id"))?c=o.replace(ht,"\\$&"):e.setAttribute("id",c),c="[i
2024-10-24 23:02:50 UTC	1378	IN	Data Raw: 6e 20 74 26 26 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 3d 69 26 26 74 7d 66 6f 72 28 74 20 69 6e 20 75 3d 4f 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 4c 3d 4f 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 74 3d 74 26 26 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 21 74 26 26 22 48 54 4d 4c 22 21 3d 3d 74 2e 6e 6f 64 65 4e 61 6d 65 7d 2c 70 3d 4f 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 74 2c 6c 3d 74 3f 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 3a 76 2c 74 3d 6c 2e 64 65 66 61 75 6c 74 56 69 65 77 3b 72 65 74 75 72 6e 20 6c 21 3d 3d 78 26 26 Data Ascii: n t&&typeof t.getElementsByTagName!==i&&t}for(t in u=O.support={},L=O.isXML=function(t){var t=t&&(t.ownerDocument\|\|t).documentElement;return!!t&&"HTML"!==t.nodeName},p=O.setDocument=function(t){var t,l=t?t.ownerDocument\|\|t:v,t=l.defaultView;return l!==x&&
2024-10-24 23:02:50 UTC	1378	IN	Data Raw: 2e 54 41 47 3d 75 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 3d 69 3f 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 5b 5d 2c 73 3d 30 2c 6f 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 3b 69 66 28 22 2a 22 21 3d 3d 74 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 3b 69 3d 6f 5b 73 2b 2b 5d 3b 29 31 3d 3d 3d 69 2e 6e 6f 64 65 54 79 70 65 26 26 6e 2e 70 75 73 68 28 69 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 5f 2e 66 69 6e 64 2e 43 4c 41 Data Ascii: .TAG=u.getElementsByTagName?function(t,e){return typeof e.getElementsByTagName!==i?e.getElementsByTagName(t):void 0}:function(t,e){var i,n=[],s=0,o=e.getElementsByTagName(t);if("*"!==t)return o;for(;i=o[s++];)1===i.nodeType&&n.push(i);return n},_.find.CLA
2024-10-24 23:02:50 UTC	1378	IN	Data Raw: 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 39 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 3f 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 74 2c 65 3d 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 7c 7c 21 28 21 65 7c 7c 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 69 2e 63 6f 6e 74 61 69 6e 73 3f 69 2e 63 6f 6e 74 61 69 6e 73 28 65 29 3a 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 65 29 66 6f 72 28 3b 65 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 29 69 66 28 65 3d 3d Data Ascii: .contains)?function(t,e){var i=9===t.nodeType?t.documentElement:t,e=e&&e.parentNode;return t===e\|\|!(!e\|\|1!==e.nodeType\|\|!(i.contains?i.contains(e):t.compareDocumentPosition&&16&t.compareDocumentPosition(e)))}:function(t,e){if(e)for(;e=e.parentNode;)if(e==
2024-10-24 23:02:50 UTC	1378	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 21 3d 3d 78 26 26 70 28 74 29 3b 76 61 72 20 69 3d 5f 2e 61 74 74 72 48 61 6e 64 6c 65 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 69 3d 69 26 26 59 2e 63 61 6c 6c 28 5f 2e 61 74 74 72 48 61 6e 64 6c 65 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 69 28 74 2c 65 2c 21 66 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 75 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 21 66 3f 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 65 29 3a 28 69 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 65 29 29 26 26 69 2e 73 70 65 63 69 66 69 65 64 3f 69 2e 76 61 6c 75 65 3a 6e 75 6c 6c 7d 2c 4f 2e 65 72 72 6f Data Ascii: =function(t,e){(t.ownerDocument\|\|t)!==x&&p(t);var i=_.attrHandle[e.toLowerCase()],i=i&&Y.call(_.attrHandle,e.toLowerCase())?i(t,e,!f):void 0;return void 0!==i?i:u.attributes\|\|!f?t.getAttribute(e):(i=t.getAttributeNode(e))&&i.specified?i.value:null},O.erro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	65037	216.239.32.181	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	1324	OUT	POST /g/collect?v=2&tid=G-KQMZSWM9K6&gtm=45je4al0v899685487za200&_p=1729810966756&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101686685~101823848&cid=1386283618.1729810968&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1729810968&sct=1&seg=0&dl=https%3A%2F%2Fwww.garwoodsheating.com%2F&dt=Garwood%27s%20Heating%20%26%20Cooling%2C%20Inc.%2C%20Air%20Conditioner%20%26%20Furnace%20Repair%20%26%20Service%20%7C%20Edwardsville%2C%20IL%2062025&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=5776 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.garwoodsheating.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:50 UTC	854	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.garwoodsheating.com Date: Thu, 24 Oct 2024 23:02:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	65043	188.114.97.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	736	OUT	GET /images/topic-energy-concerns.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:50 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:50 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: d87d01d017539175515b829144682dd1 CF-Cache-Status: HIT Age: 141 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QRfDz%2BRw5%2BdHthbH8p%2B9%2F1WOvZx7NgzHmjfJUTycNRBZMwy3F2t4fFsNevanKNuVgmuWi1Y2AO7B6%2Ful81rGyCcYDPdMHxD33Nw7P13c3BAo41J08DHHyhsUHLklW3RsY16vNc9dxocGAA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98c49f600bc7-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1507&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2850&recv_bytes=1314&delivery_rate=1865979&cwnd=236&unsent_bytes=0&cid=cb5b7ef9a701ae6b&ts=156&x=0"
2024-10-24 23:02:50 UTC	446	IN	Data Raw: 35 35 61 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 81 00 00 00 59 08 03 00 00 00 2e 13 b7 20 00 00 00 33 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 10 e8 47 00 00 00 10 74 52 4e 53 00 10 20 30 40 50 60 70 80 8f 9f af bf cf df ef 23 1a 82 8a 00 00 04 c6 49 44 41 54 68 de ed 5a db b2 e3 28 0c 14 20 03 c6 02 fa ff bf 76 1f b8 da 71 4e e5 cc 6e e1 a9 da e8 29 31 16 b4 41 48 6a 01 d1 bf 11 f6 5e c4 3b 43 cf 88 de 33 aa 64 af 1e 00 e0 31 4b 76 ab c7 57 11 17 11 f5 30 00 20 2e 85 70 03 00 90 c7 6c a0 cb 3a 5b d0 d3 a8 44 93 39 2e 5b 87 d0 e7 7d 23 22 b5 f5 ff 7e 15 82 e6 07 42 9f 14 29 0f d2 22 00 fc 6a 79 6d 16 cc 5a Data Ascii: 55aPNGIHDRY. 3PLTEGtRNS 0@P`p#IDAThZ( vqNn)1AHj^;C3d1KvW0 .pl:[D9.[}#"~B)"jymZ
2024-10-24 23:02:50 UTC	931	IN	Data Raw: 22 c8 f2 0c 02 ef bd 67 66 56 a4 f9 39 04 41 44 f2 c3 ab 20 22 bb df e8 41 31 cc ce 0b fd 4f f7 82 2f b2 31 93 7a 06 c1 e6 bd f7 7e 17 11 e0 19 08 ba d7 f4 d2 63 96 b8 3d 93 21 ce b2 af 26 2a 37 39 33 33 2b fa ca 57 be f2 15 cd fc 9f 90 b5 b9 1e 29 a5 60 4d e4 01 3f 17 ee b8 bd 97 c5 55 17 64 13 00 44 4b 0c 64 5d 39 44 98 c9 7d dc 55 f9 23 ad c3 46 76 f8 27 04 a5 b3 b7 08 5a 05 49 c9 20 2b a1 8c cc bd 98 c5 f3 ab 1f 21 10 11 11 b1 85 8b c5 13 82 5c da 4c 7f af 96 4e 05 40 f4 3e 02 1b e9 0c 30 51 ec 83 30 90 bc af af 7e 84 e0 cc 06 c3 8c 40 ae ef 79 40 0a 65 b2 44 44 1c da 33 3b 8a 59 55 6f 07 8e 3f 42 00 fb 13 82 f2 2c 9e 62 a2 4a 80 cb cd 86 66 04 fe 43 04 25 df 2a 8d 02 64 33 10 24 ef bd f7 76 20 b0 80 10 5d 6a 16 f6 4c a0 8b 5e 28 46 f5 0b 4b ac 8d 02 Data Ascii: "gfV9AD "A1O/1z~c=!&7933+W)`M?UdDKd]9D}U#Fv'ZI +!\LN@>0Q0~@y@eDD3;YUo?B,bJfC%d3$v ]jL^(FK
2024-10-24 23:02:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	65038	142.250.186.34	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	959	OUT	GET /td/ga/rul?tid=G-KQMZSWM9K6&gacid=1386283618.1729810968&gtm=45je4al0v899685487za200&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101533421~101686685~101823848&z=257853734 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:50 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 24 Oct 2024 23:02:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 24-Oct-2024 23:17:50 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:50 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-10-24 23:02:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	65042	142.250.186.174	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	800	OUT	GET /embed/NpMhKZDN7Js?rel=0%20frameborder= HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:50 UTC	2202	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 23:02:50 GMT Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Content-Security-Policy: require-trusted-types-for 'script' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Resource-Policy: cross-origin P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=jrZJggdWB64; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=QXujzH70Yjw; Domain=.youtube.com; Expires=Tue, 22-Apr-2025 23:02:50 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgNA%3D%3D; Domain=.youtube.com; Expires=Tue, 22-Apr-2025 23:02:50 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:50 UTC	2202	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 65 4b 5a 46 76 32 6b 39 39 6d 51 36 66 5a 39 71 55 36 5f 78 4d 41 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="eKZFv2k99mQ6fZ9qU6_xMA">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-10-24 23:02:50 UTC	2202	IN	Data Raw: 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e Data Ascii: ;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{fon
2024-10-24 23:02:50 UTC	2202	IN	Data Raw: 6e 63 65 3d 22 76 54 38 4e 57 68 4b 4c 63 63 76 52 63 46 73 46 51 4a 37 54 45 51 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 70 6c 61 79 65 72 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 Data Ascii: nce="vT8NWhKLccvRcFsFQJ7TEQ">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100
2024-10-24 23:02:50 UTC	2202	IN	Data Raw: 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 29 7d 3b 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 2c 66 61 6c 73 65 29 7d 69 66 28 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 74 69 63 6b 28 22 76 63 Data Ascii: webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(vName,startTick)};d.addEventListener(vName,startTick,false)}if(d.addEventListener)d.addEventListener(vName,function(){ytcsi.tick("vc
2024-10-24 23:02:50 UTC	2202	IN	Data Raw: 63 72 65 61 74 6f 72 5f 67 6f 61 6c 5f 74 69 63 6b 65 72 5f 62 61 72 5f 72 65 76 61 6d 70 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 64 69 72 65 63 74 5f 72 65 61 63 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 66 6c 75 73 68 5f 71 75 65 75 65 5f 66 69 78 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 6f 72 64 65 72 65 64 5f 72 65 61 63 74 69 6f 6e 5f 65 78 65 63 75 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6f 77 5f 69 6e 66 6f 5f 63 73 69 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 64 6f 63 6b 65 64 5f 63 68 61 74 5f 6d 65 73 73 61 67 65 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c Data Ascii: creator_goal_ticker_bar_revamp":true,"enable_client_only_wiz_direct_reactions":true,"enable_client_only_wiz_flush_queue_fix":true,"enable_client_only_wiz_ordered_reaction_execution":true,"enable_cow_info_csi":true,"enable_docked_chat_messages":true,"enabl
2024-10-24 23:02:50 UTC	2202	IN	Data Raw: 6b 65 76 5f 61 64 62 5f 70 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 64 72 6f 70 64 6f 77 6e 5f 66 69 78 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 65 6c 5f 65 72 72 6f 72 5f 72 6f 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 75 69 64 65 5f 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 63 6f 6e 74 72 6f 6c 6c 65 72 5f 65 78 74 72 61 63 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 72 74 61 5f 6d 61 6e 61 67 65 72 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 69 6e 63 72 65 61 73 65 64 5f 6d 69 6e 5f 68 65 69 67 68 74 22 3a 74 72 75 65 2c 22 6c 6f 67 5f 63 6c 69 63 6b 5f 77 69 74 68 5f 6c 61 79 65 72 5f 66 72 6f 6d 5f 65 6c 65 6d Data Ascii: kev_adb_pg":true,"kevlar_dropdown_fix":true,"kevlar_gel_error_routing":true,"kevlar_guide_refresh":true,"live_chat_enable_controller_extraction":true,"live_chat_enable_rta_manager":true,"live_chat_increased_min_height":true,"log_click_with_layer_from_elem
2024-10-24 23:02:50 UTC	2202	IN	Data Raw: 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 65 62 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 6c 77 61 79 73 5f 6c 6f 61 64 5f 63 68 61 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 61 70 69 5f 75 72 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 63 73 69 5f 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 69 6e 67 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 77 65 62 5f 64 65 64 75 70 65 5f 76 65 5f 67 72 61 66 74 69 6e 67 22 3a 74 72 75 65 2c 22 77 65 62 5f 65 6e 61 62 6c 65 5f 61 62 5f 65 6d 5f 72 73 70 22 3a 74 72 75 65 2c 22 77 65 62 5f 65 6e 61 62 6c 65 5f 61 62 5f 72 73 70 5f 63 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f Data Ascii: "vss_playback_use_send_and_write":true,"warm_load_nav_start_web":true,"web_always_load_chat_support":true,"web_api_url":true,"web_csi_action_sampling_enabled":true,"web_dedupe_ve_grafting":true,"web_enable_ab_em_rsp":true,"web_enable_ab_rsp_cl":true,"web_
2024-10-24 23:02:50 UTC	2202	IN	Data Raw: 73 73 43 72 69 74 69 63 61 6c 5f 5f 79 6f 75 74 75 62 65 5f 65 6d 62 65 64 73 5f 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 5f 6f 76 65 72 72 69 64 65 22 3a 22 22 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 73 79 6e 74 68 5f 63 68 5f 68 65 61 64 65 72 73 5f 62 61 6e 6e 65 64 5f 75 72 6c 73 5f 72 65 67 65 78 22 3a 22 22 2c 22 69 6c 5f 70 61 79 6c 6f 61 64 5f 73 63 72 61 70 69 6e 67 22 3a 22 22 2c 22 6c 69 76 65 5f 63 68 61 74 5f 75 6e 69 63 6f 64 65 5f 65 6d 6f 6a 69 5f 6a 73 6f 6e 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 79 6f 75 74 75 62 65 2f 69 6d 67 2f 65 6d 6f 6a 69 73 2f 65 6d 6f 6a 69 73 2d 73 76 67 2d 39 2e 6a 73 6f 6e 22 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 66 6f 72 63 65 Data Ascii: ssCritical__youtube_embeds_client_version_override":"","embeds_web_synth_ch_headers_banned_urls_regex":"","il_payload_scraping":"","live_chat_unicode_emoji_json_url":"https://www.gstatic.com/youtube/img/emojis/emojis-svg-9.json","service_worker_push_force
2024-10-24 23:02:50 UTC	2202	IN	Data Raw: 67 65 2f 77 65 62 70 2c 69 6d 61 67 65 2f 61 70 6e 67 2c 2a 2f 2a 3b 71 5c 75 30 30 33 64 30 2e 38 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 73 69 67 6e 65 64 2d 65 78 63 68 61 6e 67 65 3b 76 5c 75 30 30 33 64 62 33 3b 71 5c 75 30 30 33 64 30 2e 37 22 2c 22 64 65 76 69 63 65 45 78 70 65 72 69 6d 65 6e 74 49 64 22 3a 22 43 68 78 4f 65 6c 46 35 54 31 52 52 4e 45 31 55 56 54 42 4f 52 46 56 36 54 31 52 72 4e 45 31 55 51 58 6c 4f 5a 7a 30 39 45 4a 71 6b 36 37 67 47 47 4a 71 6b 36 37 67 47 22 7d 2c 22 75 73 65 72 22 3a 7b 22 6c 6f 63 6b 65 64 53 61 66 65 74 79 4d 6f 64 65 22 3a 66 61 6c 73 65 7d 2c 22 72 65 71 75 65 73 74 22 3a 7b 22 75 73 65 53 73 6c 22 3a 74 72 75 65 7d 2c 22 63 6c 69 63 6b 54 72 61 63 6b 69 6e 67 22 3a 7b 22 63 6c 69 63 6b 54 72 61 63 6b 69 6e Data Ascii: ge/webp,image/apng,/;q\u003d0.8,application/signed-exchange;v\u003db3;q\u003d0.7","deviceExperimentId":"ChxOelF5T1RRNE1UVTBORFV6T1RrNE1UQXlOZz09EJqk67gGGJqk67gG"},"user":{"lockedSafetyMode":false},"request":{"useSsl":true},"clickTracking":{"clickTrackin
2024-10-24 23:02:50 UTC	2202	IN	Data Raw: 74 69 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 63 65 6e 74 65 72 5f 61 6c 69 67 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 64 5f 70 6f 64 5f 64 69 73 61 62 6c 65 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 70 65 72 73 69 73 74 5f 61 64 73 5f 71 75 61 6c 69 74 79 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 6c 6c 6f 77 5f 64 72 6d 5f 6f 76 65 72 72 69 64 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 6c 6c 6f 77 5f 6c 69 76 65 5f 61 75 74 6f 70 6c 61 79 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 6c 6c 6f 77 5f 70 6f 6c 74 65 72 67 75 73 74 5f 61 75 74 6f 70 6c 61 79 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 6c 6c 6f 77 5f 73 6b 69 70 5f 6e 65 74 77 6f 72 6b 6c 65 73 73 5c 75 30 30 33 64 74 72 Data Ascii: tion_companion_center_align_description\u003dtrue\u0026ad_pod_disable_companion_persist_ads_quality\u003dtrue\u0026allow_drm_override\u003dtrue\u0026allow_live_autoplay\u003dtrue\u0026allow_poltergust_autoplay\u003dtrue\u0026allow_skip_networkless\u003dtr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	65039	35.71.131.137	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	715	OUT	GET /tags/jsac74j/s4sw4zh/iframe HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:50 UTC	181	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 24 Oct 2024 23:02:50 GMT Content-Length: 0 Connection: close location: https://d1eoo1tco6rr5e.cloudfront.net/jsac74j/s4sw4zh/iframe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	65044	18.66.147.116	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	382	OUT	GET /autoscript/Garwoods_Heating_and_Cooling.js HTTP/1.1 Host: tag.brandcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:50 UTC	594	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1085 Connection: close Date: Thu, 24 Oct 2024 23:02:50 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 21 Oct 2024 18:33:19 GMT ETag: "dc654778115261e448e78e94f11bbd0d" x-amz-server-side-encryption: AES256 x-amz-version-id: QXfxiy2GxScSGmwkJ6EE5xBmlUkZf009 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 760a29e891ec10bba1274911260e1fc8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: 5blS-Fba21-gMVIeQApY1W_kwMQc_eJWTjPenwqt2gBz1bfWtnaEhw== Age: 1
2024-10-24 23:02:50 UTC	1085	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 6c 65 74 20 65 6c 65 6d 33 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 65 6c 65 6d 33 2e 77 69 64 74 68 20 3d 20 27 30 27 3b 65 6c 65 6d 33 2e 68 65 69 67 68 74 20 3d 20 27 30 27 3b 65 6c 65 6d 33 2e 6e 61 6d 65 20 3d 20 74 72 75 65 3b 65 6c 65 6d 33 2e 66 72 61 6d 65 62 6f 72 64 65 72 20 3d 20 27 30 27 3b 65 6c 65 6d 33 2e 73 74 79 6c 65 20 3d 20 27 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 27 3b 65 6c 65 6d 33 2e 73 63 72 6f 6c 6c 69 6e 67 20 3d 20 27 6e 6f 27 3b 65 6c 65 6d 33 2e 73 72 63 20 3d 20 27 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 61 67 73 2f 6a 73 61 63 37 34 6a 2f 73 34 73 77 34 7a 68 2f 69 66 72 61 6d 65 27 3b 64 6f Data Ascii: (function() {let elem3 = document.createElement("iframe");elem3.width = '0';elem3.height = '0';elem3.name = true;elem3.frameborder = '0';elem3.style = 'display:none;';elem3.scrolling = 'no';elem3.src = '//insight.adsrvr.org/tags/jsac74j/s4sw4zh/iframe';do

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	65045	188.114.97.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	742	OUT	GET /images/topic-ready-for-maintenance.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:50 UTC	915	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:50 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: 32a1a0aff5d54a25320867ca6d67fb16 CF-Cache-Status: HIT Age: 141 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NbORLAS0B0O5p7Pp01MYMP3dR2VHjqLCvwaQj6UwX8S7521mRU8iu21AkD5KoW4uMW7cEC13C86Hz0mrWY%2FALsbkynvJt532idSePTxrUw6415TqcYJAq7UzY6uOwKqV6ob3VbUNEGflVQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98c71fffe76a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1213&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1320&delivery_rate=2443881&cwnd=242&unsent_bytes=0&cid=2c1632b5957ceb83&ts=282&x=0"
2024-10-24 23:02:50 UTC	454	IN	Data Raw: 35 38 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 87 00 00 00 59 08 03 00 00 00 23 0d c7 67 00 00 00 33 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 10 e8 47 00 00 00 10 74 52 4e 53 00 10 20 30 40 50 60 70 80 8f 9f af bf cf df ef 23 1a 82 8a 00 00 04 f9 49 44 41 54 68 de ed 9a db b6 ac 28 0c 45 83 20 46 0c b0 fe ff 6b fb 21 dc b4 ae dd 63 74 51 e7 8c e2 a9 b6 ba e3 14 72 59 41 89 7e e3 ff 1a fe c8 db 17 50 64 20 4c a7 30 07 00 99 8f 11 01 44 33 9d e3 00 90 97 f9 be 81 ef 58 95 0c 7c 83 93 7a 00 00 7f 85 77 7c 03 47 fe 12 0e dc e5 30 eb 87 31 96 fb 1c 81 e7 cc c7 25 8d ed 98 c4 81 64 cf 31 f4 71 8e 58 40 72 07 59 Data Ascii: 58dPNGIHDRY#g3PLTEGtRNS 0@P`p#IDATh(E Fk!ctQrYA~Pd L0D3X\|zw\|G01%d1qX@rY
2024-10-24 23:02:50 UTC	974	IN	Data Raw: ce fd 7b a5 54 ea 97 ec 0b 51 d7 18 68 27 4b 0a 2d 35 3f 38 2d 38 2b 11 d1 a6 7a a0 29 02 15 6a 8b b6 3a 61 b9 b1 fe 0e 87 8a ce 0b c7 d2 eb 7c 3b 21 86 bc de df e4 aa 10 47 0e 7f 12 b1 f2 b6 a4 15 20 8a 48 06 0e 22 06 92 88 88 48 97 1e 5b bd 95 88 24 d5 41 11 60 a2 bd bd 18 d3 93 22 a2 2a 25 f1 ca 49 6f 7d b2 fe 8a c3 11 91 03 40 c4 a7 06 49 2b 7e 9b fa b2 14 d8 c8 01 d9 2c 00 16 1a 4f 12 11 25 e0 30 a5 03 94 8b f5 77 38 e8 0e c7 06 48 2a be 50 0d 6d 40 24 3a 80 20 5d 05 f4 bb ac 6d 21 17 00 f6 6c fd 1d 8e a5 72 08 33 33 bb f2 6c eb 56 26 bf 1a 32 00 ea fb 97 26 11 01 30 33 b3 27 ee da e0 00 b6 b3 f5 57 1c 81 99 53 f5 8f de be 7a 20 91 c9 3a fb cd 90 fe e0 53 ff d0 7c 78 9c 50 06 f8 6c fd 3f c4 0b eb 99 8d 28 e8 13 5e 38 4c ae 8e f3 90 23 14 8e f7 e3 a5 Data Ascii: {TQh'K-5?8-8+z)j:a\|;!G H"H[$A`"%Io}@I+~,O%0w8HPm@$: ]m!lr33lV&2&03'WSz :S\|xPl?(^8L#
2024-10-24 23:02:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	65041	142.250.186.174	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	785	OUT	GET /embed/J_kzFgju7PA?rel=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:50 UTC	2582	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 23:02:50 GMT Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy-Report-Only: base-uri 'self';default-src 'self' https: blob:;font-src https: data:;img-src https: data: android-webview-video-poster:;media-src blob: https:;object-src 'none';report-uri /cspreport/common;script-src 'report-sample' 'nonce-uD7zuy-N2pp6fS_FzuGfwg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';style-src https: 'unsafe-inline' P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=nNJVX6kvzEc; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=c6FmZbEKqco; Domain=.youtube.com; Expires=Tue, 22-Apr-2025 23:02:50 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPQ%3D%3D; Domain=.youtube.com; Expires=Tue, 22-Apr-2025 23:02:50 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:50 UTC	2582	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 75 44 37 7a 75 79 2d 4e 32 70 70 36 66 53 5f 46 7a 75 47 66 77 67 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="uD7zuy-N2pp6fS_FzuGfwg">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-10-24 23:02:51 UTC	2582	IN	Data Raw: 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 42 30 2d 30 34 42 31 2c 55 2b 32 31 31 36 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 Data Ascii: 2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)format('woff2');unicode-range:U
2024-10-24 23:02:51 UTC	2582	IN	Data Raw: 66 77 67 22 3e 76 61 72 20 79 74 63 73 69 3d 7b 67 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3d 28 6e 7c 7c 22 22 29 2b 22 64 61 74 61 5f 22 3b 72 65 74 75 72 6e 20 79 74 63 73 69 5b 6e 5d 7c 7c 28 79 74 63 73 69 5b 6e 5d 3d 7b 74 69 63 6b 3a 7b 7d 2c 69 6e 66 6f 3a 7b 7d 2c 67 65 6c 3a 7b 70 72 65 4c 6f 67 67 65 64 47 65 6c 49 6e 66 6f 73 3a 5b 5d 7d 7d 29 7d 2c 6e 6f 77 3a 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: fwg">var ytcsi={gt:function(n){n=(n\|\|"")+"data_";return ytcsi[n]\|\|(ytcsi[n]={tick:{},info:{},gel:{preLoggedGelInfos:[]}})},now:window.performance&&window.performance.timing&&window.performance.now&&window.performance.timing.navigationStart?function(){retu
2024-10-24 23:02:51 UTC	2582	IN	Data Raw: 65 6c 5f 68 22 3a 74 72 75 65 2c 22 61 62 5f 73 61 5f 65 66 22 3a 74 72 75 65 2c 22 61 63 74 69 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 63 65 6e 74 65 72 5f 61 6c 69 67 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 61 6c 6c 6f 77 5f 73 6b 69 70 5f 6e 65 74 77 6f 72 6b 6c 65 73 73 22 3a 74 72 75 65 2c 22 61 6c 77 61 79 73 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 61 74 74 5f 77 65 62 5f 72 65 63 6f 72 64 5f 6d 65 74 72 69 63 73 22 3a 74 72 75 65 2c 22 62 6f 74 74 6f 6d 5f 73 68 65 65 74 5f 6c 61 79 6f 75 74 5f 77 69 7a 5f 63 6f 6e 74 65 6e 74 22 3a 74 72 75 65 2c 22 63 61 6e 63 65 6c 5f 70 65 6e 64 69 6e 67 5f 6e 61 76 73 22 3a 74 72 75 65 2c 22 63 6c 65 61 6e 5f 75 70 5f 6d 61 6e 75 61 6c 5f 61 74 74 72 69 62 75 Data Ascii: el_h":true,"ab_sa_ef":true,"action_companion_center_align_description":true,"allow_skip_networkless":true,"always_send_and_write":true,"att_web_record_metrics":true,"bottom_sheet_layout_wiz_content":true,"cancel_pending_navs":true,"clean_up_manual_attribu
2024-10-24 23:02:51 UTC	2582	IN	Data Raw: 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 79 74 5f 61 74 61 5f 69 66 72 61 6d 65 5f 61 75 74 68 75 73 65 72 22 3a 74 72 75 65 2c 22 65 72 72 5f 6f 6e 5f 70 6c 5f 72 5f 63 22 3a 74 72 75 65 2c 22 65 78 70 6f 72 74 5f 6e 65 74 77 6f 72 6b 6c 65 73 73 5f 6f 70 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 66 65 74 63 68 5f 62 69 64 5f 66 6f 72 5f 64 63 6c 6b 5f 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 66 69 6c 6c 5f 73 69 6e 67 6c 65 5f 76 69 64 65 6f 5f 77 69 74 68 5f 6e 6f 74 69 66 79 5f 74 6f 5f 6c 61 73 72 22 3a 74 72 75 65 2c 22 66 69 78 5f 69 73 64 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 68 35 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 65 6e 61 62 6c 65 5f 61 64 63 70 6e 5f 6d 61 63 72 6f 5f 73 75 62 73 74 69 74 75 74 69 6f 6e 5f 66 6f 72 5f 63 6c 69 63 6b 5f Data Ascii: :true,"enable_yt_ata_iframe_authuser":true,"err_on_pl_r_c":true,"export_networkless_options":true,"fetch_bid_for_dclk_status":true,"fill_single_video_with_notify_to_lasr":true,"fix_isd_logging":true,"h5_companion_enable_adcpn_macro_substitution_for_click_
2024-10-24 23:02:51 UTC	2582	IN	Data Raw: 75 65 2c 22 75 73 65 5f 63 73 69 5f 73 74 70 5f 68 61 6e 64 6c 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 65 76 65 6e 74 5f 74 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 66 69 66 6f 5f 66 6f 72 5f 6e 65 74 77 6f 72 6b 6c 65 73 73 22 3a 74 72 75 65 2c 22 75 73 65 5f 69 6e 66 6f 67 65 6c 5f 65 61 72 6c 79 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 69 6e 5f 6d 65 6d 6f 72 79 5f 73 74 6f 72 61 67 65 22 3a 74 72 75 65 2c 22 75 73 65 5f 70 6c 61 79 65 72 5f 61 62 75 73 65 5f 62 67 5f 6c 69 62 72 61 72 79 22 3a 74 72 75 65 2c 22 75 73 65 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 73 65 73 73 69 6f 6e 5f 62 61 73 65 64 5f 73 61 6d 70 6c 69 6e Data Ascii: ue,"use_csi_stp_handler":true,"use_event_time_ms_header":true,"use_fifo_for_networkless":true,"use_infogel_early_logging":true,"use_new_in_memory_storage":true,"use_player_abuse_bg_library":true,"use_request_time_ms_header":true,"use_session_based_samplin
2024-10-24 23:02:51 UTC	2582	IN	Data Raw: 6d 62 65 64 73 5f 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 5f 6f 76 65 72 72 69 64 65 22 3a 22 22 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 73 79 6e 74 68 5f 63 68 5f 68 65 61 64 65 72 73 5f 62 61 6e 6e 65 64 5f 75 72 6c 73 5f 72 65 67 65 78 22 3a 22 22 2c 22 69 6c 5f 70 61 79 6c 6f 61 64 5f 73 63 72 61 70 69 6e 67 22 3a 22 22 2c 22 6c 69 76 65 5f 63 68 61 74 5f 75 6e 69 63 6f 64 65 5f 65 6d 6f 6a 69 5f 6a 73 6f 6e 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 79 6f 75 74 75 62 65 2f 69 6d 67 2f 65 6d 6f 6a 69 73 2f 65 6d 6f 6a 69 73 2d 73 76 67 2d 39 2e 6a 73 6f 6e 22 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 66 6f 72 63 65 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 70 72 6f 6d 70 74 5f Data Ascii: mbeds_client_version_override":"","embeds_web_synth_ch_headers_banned_urls_regex":"","il_payload_scraping":"","live_chat_unicode_emoji_json_url":"https://www.gstatic.com/youtube/img/emojis/emojis-svg-9.json","service_worker_push_force_notification_prompt_
2024-10-24 23:02:51 UTC	2582	IN	Data Raw: 4c 22 3a 22 55 53 22 2c 22 49 4e 4e 45 52 54 55 42 45 5f 43 4f 4e 54 45 58 54 5f 48 4c 22 3a 22 65 6e 22 2c 22 4c 41 54 45 53 54 5f 45 43 41 54 43 48 45 52 5f 53 45 52 56 49 43 45 5f 54 52 41 43 4b 49 4e 47 5f 50 41 52 41 4d 53 22 3a 7b 22 63 6c 69 65 6e 74 2e 6e 61 6d 65 22 3a 22 57 45 42 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 22 7d 2c 22 4c 4f 47 47 45 44 5f 49 4e 22 3a 66 61 6c 73 65 2c 22 50 41 47 45 5f 42 55 49 4c 44 5f 4c 41 42 45 4c 22 3a 22 79 6f 75 74 75 62 65 2e 70 6c 61 79 65 72 2e 77 65 62 5f 32 30 32 34 31 30 32 32 5f 30 31 5f 52 43 30 30 22 2c 22 50 41 47 45 5f 43 4c 22 3a 36 38 38 37 36 33 32 31 32 2c 22 53 45 52 56 45 52 5f 4e 41 4d 45 22 3a 22 57 65 62 46 45 22 2c 22 56 49 53 49 54 4f 52 5f 44 41 54 41 22 3a 22 43 67 74 6a 4e 6b Data Ascii: L":"US","INNERTUBE_CONTEXT_HL":"en","LATEST_ECATCHER_SERVICE_TRACKING_PARAMS":{"client.name":"WEB_EMBEDDED_PLAYER"},"LOGGED_IN":false,"PAGE_BUILD_LABEL":"youtube.player.web_20241022_01_RC00","PAGE_CL":688763212,"SERVER_NAME":"WebFE","VISITOR_DATA":"CgtjNk
2024-10-24 23:02:51 UTC	2582	IN	Data Raw: 64 74 72 75 65 5c 75 30 30 32 36 63 61 70 74 69 6f 6e 73 5f 75 72 6c 5f 61 64 64 5f 65 69 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 63 68 65 63 6b 5f 6e 61 76 69 67 61 74 6f 72 5f 61 63 63 75 72 61 63 79 5f 74 69 6d 65 6f 75 74 5f 6d 73 5c 75 30 30 33 64 30 5c 75 30 30 32 36 63 6c 65 61 6e 5f 75 70 5f 6d 61 6e 75 61 6c 5f 61 74 74 72 69 62 75 74 69 6f 6e 5f 68 65 61 64 65 72 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 63 6c 65 61 72 5f 75 73 65 72 5f 70 61 72 74 69 74 69 6f 6e 65 64 5f 6c 73 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 63 6f 62 61 6c 74 5f 68 35 76 63 63 5f 6d 65 64 69 61 5f 64 6f 74 5f 61 73 79 6e 63 5f 72 65 6c 65 61 73 65 5f 6d 65 64 69 61 5f 63 6f 64 65 63 5f 62 72 69 64 67 65 5c 75 30 30 33 64 30 5c 75 30 30 32 36 63 6f Data Ascii: dtrue\u0026captions_url_add_ei\u003dtrue\u0026check_navigator_accuracy_timeout_ms\u003d0\u0026clean_up_manual_attribution_header\u003dtrue\u0026clear_user_partitioned_ls\u003dtrue\u0026cobalt_h5vcc_media_dot_async_release_media_codec_bridge\u003d0\u0026co
2024-10-24 23:02:51 UTC	2582	IN	Data Raw: 77 5f 64 69 73 70 6c 61 79 5f 61 64 5f 72 65 6e 64 65 72 65 72 5f 77 65 62 5f 68 6f 6d 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 65 6e 61 62 6c 65 5f 61 63 74 69 76 65 5f 76 69 65 77 5f 6c 72 5f 73 68 6f 72 74 73 5f 76 69 64 65 6f 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 65 6e 61 62 6c 65 5f 61 63 74 69 76 65 5f 76 69 65 77 5f 77 65 62 5f 73 68 6f 72 74 73 5f 76 69 64 65 6f 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 65 6e 61 62 6c 65 5f 61 64 5f 63 6f 6e 74 65 78 74 5f 69 6e 5f 76 73 73 5f 70 69 6e 67 73 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 65 6e 61 62 6c 65 5f 61 64 5f 63 70 6e 5f 6d 61 63 72 6f 5f 73 75 62 73 74 69 74 75 74 69 6f 6e 5f 66 6f 72 5f 63 6c 69 63 6b 5f 70 69 6e 67 73 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 Data Ascii: w_display_ad_renderer_web_home\u003dtrue\u0026enable_active_view_lr_shorts_video\u003dtrue\u0026enable_active_view_web_shorts_video\u003dtrue\u0026enable_ad_context_in_vss_pings\u003dtrue\u0026enable_ad_cpn_macro_substitution_for_click_pings\u003dtrue\u00

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	65049	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:50 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 43a53b7c-f01e-005d-24fc-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230250Z-15b8d89586frzkk2umu6w8qnt80000000f50000000002n4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:50 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	65050	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:50 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e4cbed29-601e-0002-4328-26a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230250Z-r197bdfb6b49q4951yb663v3ds00000000t0000000003z3u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:50 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	65047	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:50 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:50 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230250Z-16849878b785g992cz2s9gk35c00000008d000000000a041 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:02:50 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	65048	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:50 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 43877b29-f01e-005d-36f3-2413ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230250Z-r197bdfb6b4nmq95umz1k4bcyn00000000m0000000004ct6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:50 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	65046	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:50 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:50 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230250Z-16849878b78smng4k6nq15r6s40000000190000000003py5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:50 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	65063	188.114.97.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	733	OUT	GET /images/topic-healthy-home.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:51 UTC	921	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:50 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: 6c0eeb55d8d24d3e9ff6781f4172cb42 CF-Cache-Status: HIT Age: 141 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1APPayamqD%2FETAdhtvSIDqzCNXhlP9%2BBNrYwy7t6CLzZSDKcoR4pNxwTiiJvVhkdi9TiRU4jKmZiJTIf2XQtEnh9Y9lAJeckRnXCzUWk%2BJSkFEYtoY7KOfHIyHPyr%2FbDCDc42joTGiKgpQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98c88ca6e534-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1153&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1311&delivery_rate=2569653&cwnd=251&unsent_bytes=0&cid=7ada988ba077e4d9&ts=159&x=0"
2024-10-24 23:02:51 UTC	448	IN	Data Raw: 33 61 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 81 00 00 00 59 08 03 00 00 00 2e 13 b7 20 00 00 00 33 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 10 e8 47 00 00 00 10 74 52 4e 53 00 10 20 30 40 50 60 70 80 8f 9f af bf cf df ef 23 1a 82 8a 00 00 03 14 49 44 41 54 68 de ed d9 db b6 a3 20 0c 06 e0 80 51 23 46 f8 df ff 69 e7 82 83 58 ab ed 9e 8e 74 cd 8c b9 e8 ea 96 76 f3 2d 05 12 28 d1 1d 77 dc f1 2f c4 20 a3 f9 66 ff 66 01 10 fa 2f 03 00 0c ed 7b 16 19 2a 40 7b 82 09 00 c6 0a d0 9c c0 00 a0 35 a0 35 81 01 60 d9 00 1a 13 18 cf 62 f8 ba a0 25 e1 40 d0 90 70 24 68 47 38 14 b4 22 98 05 df 25 9c 01 9a 10 ce 01 0d 08 Data Ascii: 3a8PNGIHDRY. 3PLTEGtRNS 0@P`p#IDATh Q#FiXtv-(w/ ff/{*@{55`b%@p$hG8"%
2024-10-24 23:02:51 UTC	495	IN	Data Raw: 2b 50 d5 05 08 aa 3a 1d 09 42 fc 17 1d 11 00 55 55 00 e3 fb 02 79 dc 96 c5 3d 3b 57 d5 50 79 7f 20 58 cb a6 74 33 e5 ac 94 3a 13 74 40 98 81 e9 63 01 bf 10 8c cc cc 2e 0b 54 44 44 38 9d 50 4c 1d 10 cc 89 c0 31 33 8f 5b 81 17 91 f8 ab 50 12 0c 2f 04 39 ea 91 28 44 64 01 58 d2 78 52 76 24 a8 0a d6 87 91 a8 51 20 22 53 78 31 0e 8e 04 02 cc 44 43 9c 90 bf 2d 78 67 2e 6c 9f c2 3a 0e 42 3d af 7e f2 14 36 e3 20 6a 7e b2 1e 14 c1 7a 54 86 f9 83 91 c8 bc ec 4f a0 4e 05 8e 99 99 d9 d0 02 38 11 11 01 60 89 81 85 99 99 ed 6b 41 fc 20 db 34 12 6d 48 f3 e9 67 6b 22 73 39 37 72 80 5b 1f af bc 16 ac 9f 8c 73 61 3c dd 56 1c 0a 5c 79 20 1d 10 cc 27 02 d2 c7 03 a0 3a 06 91 b8 e6 89 30 11 4b 0e 2b a9 81 88 46 91 ce e6 06 26 b2 71 b2 e7 2f e5 0b e5 75 fd a4 88 10 11 19 11 e9 Data Ascii: +P:BUUy=;WPy Xt3:t@c.TDD8PL13[P/9(DdXxRv$Q "Sx1DC-xg.l:B=~6 j~zTON8`kA 4mHgk"s97r[sa<V\y ':0K+F&q/u
2024-10-24 23:02:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	65059	35.71.131.137	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	627	OUT	GET /track/evnt/?adv=jsac74j&ct=0:s4sw4zh&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:51 UTC	642	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 23:02:51 GMT Content-Length: 0 Connection: close server: Kestrel location: https://dpm.demdex.net/ibs:dpid=903&dpuuid=8de1627a-48e8-41d6-a181-d901bc5b2217&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam set-cookie: TDID=8de1627a-48e8-41d6-a181-d901bc5b2217; expires=Fri, 24 Oct 2025 23:02:51 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsIhtC76Ybwrj0QBRgFKAEyCwj0rpT21qK6PRAFOAFCBCICCAFaB2pzYWM3NGpgAXIDYWFt; expires=Fri, 24 Oct 2025 23:02:51 GMT; domain=.adsrvr.org; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	65058	35.71.131.137	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	627	OUT	GET /track/conv/?adv=jsac74j&ct=0:capyj8y&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:51 UTC	642	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 23:02:51 GMT Content-Length: 0 Connection: close server: Kestrel location: https://dpm.demdex.net/ibs:dpid=903&dpuuid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam set-cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; expires=Fri, 24 Oct 2025 23:02:51 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRgFKAEyCwjk_J_21qK6PRAFOAFCBCICCAFaB2pzYWM3NGpgAXIDYWFt; expires=Fri, 24 Oct 2025 23:02:51 GMT; domain=.adsrvr.org; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	65054	142.250.186.68	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:50 UTC	653	OUT	GET /recaptcha/api.js?onload=CaptchaCallback&render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:51 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 24 Oct 2024 23:02:51 GMT Date: Thu, 24 Oct 2024 23:02:51 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:51 UTC	629	IN	Data Raw: 35 64 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5d6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-24 23:02:51 UTC	872	IN	Data Raw: 72 61 76 63 7a 65 66 2f 77 49 6c 54 6b 62 56 6b 31 71 58 51 65 73 70 33 39 6e 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 Data Ascii: ravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGF
2024-10-24 23:02:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	65062	52.9.171.8	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	547	OUT	GET /pixel/cv_pixel.js HTTP/1.1 Host: adservices.brandcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:51 UTC	689	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:51 GMT Content-Type: text/javascript Content-Length: 1555 Connection: close Set-Cookie: AWSALB=JyB2i1d0mWd0wbSqaDhyhkU8NjSfVzeozZbNcK8GEYGYJ//22tr29yw8U59ui4c/LK1X1+VexQTCHvvc3QbyNIgfQK+RdJIcAlMNYfUl+mJbCzWi7a0qfctQF7T+; Expires=Thu, 31 Oct 2024 23:02:51 GMT; Path=/ Set-Cookie: AWSALBCORS=JyB2i1d0mWd0wbSqaDhyhkU8NjSfVzeozZbNcK8GEYGYJ//22tr29yw8U59ui4c/LK1X1+VexQTCHvvc3QbyNIgfQK+RdJIcAlMNYfUl+mJbCzWi7a0qfctQF7T+; Expires=Thu, 31 Oct 2024 23:02:51 GMT; Path=/; SameSite=None; Secure Server: Apache/2.4.52 (Ubuntu) Last-Modified: Mon, 10 Apr 2023 18:00:27 GMT ETag: "613-5f8ff265c97b6" Accept-Ranges: bytes Vary: Accept-Encoding
2024-10-24 23:02:51 UTC	1555	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 64 64 4c 6f 61 64 45 76 65 6e 74 28 65 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3f 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 65 3a 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 26 26 6e 28 29 2c 65 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 6e 65 72 61 74 65 55 55 49 44 28 29 7b 76 61 72 20 65 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 28 65 2b Data Ascii: function addLoadEvent(e){var n=window.onload;"function"!=typeof window.onload?window.onload=e:window.onload=function(){n&&n(),e()}}function generateUUID(){var e=(new Date).getTime();return window.performance&&"function"==typeof window.performance.now&&(e+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	65056	142.250.185.98	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	1149	OUT	GET /pagead/viewthroughconversion/834731891/?random=1729810968152&cv=9&fst=1729810968152&num=1&label=wLPuCJfyk3UQ8_6DjgM&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465926%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.garwoodsheating.com%2F&tiba=Garwood%27s%20Heating%20%26%20Cooling%2C%20Inc.%2C%20Air%20Conditioner%20%26%20Furnace%20Repair%20%26%20Service%20%7C%20Edwardsville%2C%20IL%2062025&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:51 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 24 Oct 2024 23:02:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 24-Oct-2024 23:17:51 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:51 UTC	536	IN	Data Raw: 31 32 35 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 125e(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 6c 22 2c 74 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 64 29 7b 69 66 28 21 64 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 64 3d 76 5b 62 5d 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 64 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 64 21 3d 3d 76 6f 69 64 20 30 3f 64 3a 61 5b 62 5d 7d 7d 20 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 64 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 63 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 65 3d 63 5b 30 5d 2c 67 3b 21 61 26 26 65 20 69 6e 20 74 3f 67 3d 74 3a 67 3d 6d 3b 66 6f 72 28 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 2d 31 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 63 5b 65 5d 3b 69 66 28 21 28 66 20 69 6e 20 67 29 29 62 72 Data Ascii: l",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];return d!==void 0?d:a[b]}} function x(a,b,d){if(b)a:{var c=a.split(".");a=c.length===1;var e=c[0],g;!a&&e in t?g=t:g=m;for(e=0;e<c.length-1;e++){var f=c[e];if(!(f in g))br
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 3d 22 22 7d 72 65 74 75 72 6e 20 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 28 29 7b 72 65 74 75 72 6e 20 47 3f 21 21 4f 26 26 4f 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 72 65 74 75 72 6e 20 54 28 29 3f 51 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 52 28 22 43 68 72 6f 6d 65 22 29 7c 7c 52 28 Data Ascii: e(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function R(a){var b;a:{if(b=z.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function T(){return G?!!O&&O.brands.length>0:!1}function U(){return T()?Q("Chromium"):(R("Chrome")\|\|R(
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 70 69 63 73 3d 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 29 29 3b 74 72 79 7b 76 61 72 20 53 3d 43 2e 66 65 74 63 68 28 71 2c 49 29 3b 53 26 26 53 2e 63 61 74 63 68 28 42 29 3b 76 61 72 20 4a 3d 21 30 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 62 61 29 7b 7d 7d 69 66 28 6e 26 26 6e 2e 6e 6f 46 61 6c 6c 62 61 63 6b 29 4a 3d 21 31 3b 65 6c 73 65 7b 74 72 79 7b 76 61 72 20 63 61 3d 44 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 44 2e 73 65 6e 64 42 65 61 63 6f 6e 28 71 29 7d 63 61 74 63 68 28 62 61 29 7b 41 2e 54 41 47 47 49 4e 47 3d 41 2e 54 41 47 47 49 4e 47 7c 7c 5b 5d 2c 41 2e 54 41 47 47 49 4e 47 5b 31 35 5d 3d 21 30 7d 63 61 7c 7c 45 28 71 29 3b 4a 3d 21 30 7d 7d 4a 26 26 65 28 29 7d 7d 28 66 29 29 29 3b 72 2e 6f 6e 6c 6f 61 64 3d 65 3b 72 2e 73 72 Data Ascii: pics=n.browsingTopics));try{var S=C.fetch(q,I);S&&S.catch(B);var J=!0;break a}catch(ba){}}if(n&&n.noFallback)J=!1;else{try{var ca=D.sendBeacon&&D.sendBeacon(q)}catch(ba){A.TAGGING=A.TAGGING\|\|[],A.TAGGING[15]=!0}ca\|\|E(q);J=!0}}J&&e()}}(f)));r.onload=e;r.sr
2024-10-24 23:02:51 UTC	40	IN	Data Raw: 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: 6rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2024-10-24 23:02:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	65057	172.217.16.148	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	622	OUT	GET /fonts/bootstrap/glyphicons-halflings-regular.woff2 HTTP/1.1 Host: core-dot-sos-apps.appspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.garwoodsheating.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:51 UTC	429	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * vary: Accept-Encoding Date: Thu, 24 Oct 2024 23:02:51 GMT Expires: Thu, 24 Oct 2024 23:12:51 GMT Cache-Control: public, max-age=600 ETag: "A3elYw" X-Cloud-Trace-Context: 283c5dbee104d2bfa91c3404a63bd8e6 Content-Type: application/octet-stream Server: Google Frontend Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:51 UTC	949	IN	Data Raw: 63 34 62 0d 0a 77 4f 46 32 00 01 00 00 00 00 46 6c 00 0f 00 00 00 00 b1 5c 00 00 46 09 00 01 02 4d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 8c 72 08 04 11 08 0a 82 a9 24 81 e5 65 01 36 02 24 03 86 74 0b 84 30 00 04 20 05 87 22 07 95 51 3f 77 65 62 66 06 1b 65 8c 35 ec 98 8f 80 f3 40 a0 c2 3f fe be 08 0a da f6 88 20 1b ac 74 f6 ff 9f 94 a0 86 8c c1 93 c7 d8 dc 2c 33 2b 0f 32 71 0d cb 46 16 ae 59 4f 1b ec 04 26 3e b1 e9 b1 62 d2 6d a4 35 81 5a 8e e6 48 24 b1 aa 59 8a 19 9c bd 7b ec 48 09 6a 64 86 0b d5 89 0c fc b2 25 f7 b9 d9 a7 7f 79 22 a7 04 03 f7 f6 d7 2b 8d 40 b9 8c 5d bd ab 65 9f fb 7b fa d2 fb 76 90 a0 4e 63 8b 29 0e bb 6e f9 93 c9 3f 7e 3f e8 90 a4 68 f2 00 ff 9e 5f e7 26 69 1f c6 ca c8 1d d1 9d 05 Data Ascii: c4bwOF2Fl\FM?FFTM `r$e6$t0 "Q?webfe5@? t,3+2qFYO&>bm5ZH$Y{Hjd%y"+@]e{vNc)n?~?h_&i
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 52 fd 5d e5 fa 14 97 0e a6 ac 22 9f f4 66 37 bc 97 0b f5 4b af 5e 7f 27 98 aa eb bd 33 93 2b 45 2f bc c4 5e 89 59 55 35 5d a8 4e 42 17 2e de ca 8b a5 d2 38 df c5 2b ce cd 8f 38 8f f9 2c 7c 89 7b 4d 7c 8c 41 8a 11 e5 75 61 7c d0 61 88 92 7f ec 8e d5 de cb 85 d5 9d 25 00 0a 7f 6c 4b 47 a2 50 ed 2c 17 4e 75 14 e6 dc d4 6b fe 63 ef 38 6d 58 40 da d3 64 ff 17 cc 98 3f 7f f1 fc da f3 a2 e7 59 d3 26 cf fe 7b ea f6 94 f8 b3 c7 cf 0e 3f db 50 dc 28 ae 14 47 8a 5d b6 bf cf c6 e4 af e4 4f e4 8f e4 b7 e4 d7 e4 97 e4 06 72 2d b9 92 5c 4c 46 c9 08 39 97 2c 26 a7 93 79 e4 38 72 ac fb b4 fb 33 f7 1f dc 9f b8 3f 70 bf ef 3e ea 7e db fd ba fb 15 73 e8 e4 ff 05 8b 9e 12 d0 10 a2 d3 44 c7 08 a4 7a f3 31 fa a1 3f 12 5c 55 35 16 71 3d ad d9 74 d1 7a d4 92 0e 86 26 5a 90 6e 6a Data Ascii: R]"f7K^'3+E/^YU5]NB.8+8,\|{M\|Aua\|a%lKGP,Nukc8mX@d?Y&{?P(G]Or-\LF9,&y8r3?p>~sDz1?\U5q=tz&Znj
2024-10-24 23:02:51 UTC	827	IN	Data Raw: a8 33 ca 4f 46 8c a2 10 52 28 f3 85 a5 b6 f7 ff bd 5a 01 6b 4c 6b 05 46 20 ed 48 57 6a 59 1f 0d 49 a4 ea 35 d7 e7 2a 13 f1 36 da ce 65 b5 53 62 6b 2e a4 bc 35 46 2c 17 ec 2e 95 02 4e 30 df d4 99 92 b9 80 7c 94 86 56 a6 80 7c 7c 7e 05 4e f4 87 28 09 20 34 b7 9d ec da 5d 2c ec 1a 4a 70 7c 7e f9 78 65 d3 c9 41 a8 d4 1c a1 af 35 88 88 2f bb da bb 53 a4 fd 04 e4 f4 94 d0 76 f2 d7 dc 79 3f 9b f9 b2 27 5f 76 7c 72 ea 84 cb 58 dc 06 f8 ee 48 e9 51 ca 05 b0 b5 15 05 c4 93 42 40 3d 0b dd 58 ac df fa ac 42 13 18 39 cb 34 b3 98 ab c3 54 a9 d8 42 89 42 a9 63 a0 ad c1 18 ab 48 91 50 a3 ce 2b 82 f2 89 81 5f 93 93 d5 59 48 d9 23 ac 24 aa cb ca 60 a0 ec 46 f8 a3 f1 42 3b e3 b5 c2 2b db 11 94 85 42 50 52 b0 34 cc bc 20 74 04 ad 3a 74 08 f5 22 5a 13 45 ba 4a 5e 21 58 c2 c7 Data Ascii: 3OFR(ZkLkF HWjYI5*6eSbk.5F,.N0\|V\|\|~N( 4],Jp\|~xeA5/Svy?'_v\|rXHQB@=XB94TBBcHP+_YH#$`FB;+BPR4 t:t"ZEJ^!X
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 33 30 30 30 0d 0a c2 57 cd 7a 53 bd 73 c4 64 4f 0c 3a 08 10 b6 5f bf ab d4 cb 60 8a 3a 74 c1 61 ce b7 d0 91 0b 1e a5 86 b2 cd d8 b3 fa a2 16 81 ae 0d bc 49 59 f0 04 34 c7 0c 23 20 10 90 f8 2a d2 1c cd 2b 3c 03 ea 71 00 6e b0 6f d4 00 b8 75 0a 55 08 04 cc 63 77 77 8f f3 78 24 64 b5 b3 f0 1b c6 bf 0e 9d 7d cf 81 fb d6 c1 39 34 cc fd 9a ed fc 03 39 70 ac 2a 54 3a fa 25 47 15 51 e6 85 5e 61 9f 8b 15 87 10 e4 03 dd cb 27 a8 e7 65 83 1e f4 62 f6 a8 04 14 14 8a 6c 2d d5 dc 2a 58 dd 4c e7 25 2a c5 ba 08 19 b8 2e 85 da 8a c8 5c 8a 40 70 52 24 54 e5 2a 4b d6 18 cd 05 bd 08 b8 68 70 87 c0 88 c8 e8 c1 82 df e3 a6 6d fa c1 1b 91 e2 2d 2f 93 6f 53 da 33 8e df c2 45 8d e0 cf ce 74 6f 7f b8 07 9e 7d e7 d0 b6 56 87 6f f5 07 65 4a 0b 60 3c 99 24 f6 d9 74 ed d8 12 bd df fc Data Ascii: 3000WzSsdO:_`:taIY4# +<qnouUcwwx$d}949pT:%GQ^a'ebl-XL%.\@pR$T*Khpm-/oS3Eto}VoeJ`<$t
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 20 05 fe c2 cb fc 6e cd e2 32 d0 23 8d 8e e6 1e b9 f1 13 66 dd 59 3a 5d bf 4a 79 e5 08 48 5d 1a ad 95 2d b7 98 47 d7 8c 77 67 76 27 a1 07 04 e2 7c 88 c4 30 65 f1 0a c3 5f 37 88 f0 d2 90 ab 6e 2b 66 1e df d9 b8 e2 e0 59 3c ab e7 28 cd 0a aa 3f f6 ec 92 10 a9 91 79 f2 f9 a1 25 77 6d ac 2b 6a 0e 83 26 26 21 e8 a2 63 93 5e a1 75 27 9d 62 fc 26 f1 68 9f 6d 36 10 04 c2 a4 9a ce fb b9 2a 32 0c 3f 1c b4 41 c7 49 1c ab b6 c6 b2 35 46 06 57 be d8 99 5b e2 c6 9c 06 a8 42 f5 55 7a ef 49 ce 45 94 93 21 92 6d 3a 8b d2 fb 9c 78 68 d4 65 97 dd c7 ae 6e bc 7a 7c 5d 25 0c 8d 90 6d 11 d9 72 c1 55 b8 46 8d da af 90 05 94 f9 11 7f ae 31 c6 0b 1d 89 7d 3b 21 0f 6e 20 46 be 26 a0 67 f2 da f1 ff 50 89 86 dd 01 af af 1b 1b 3b 26 d7 f6 a9 9c f8 ef 18 24 24 b8 1a e9 46 ab 29 1a 2e Data Ascii: n2#fY:]JyH]-Gwgv'\|0e_7n+fY<(?y%wm+j&&!c^u'b&hm6*2?AI5FW[BUzIE!m:xhenz\|]%mrUF1};!n F&gP;&$$F).
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 05 b5 4e 33 d5 8f 1e 76 45 5c 62 71 86 7f fb 51 df 35 18 12 8d 5a b9 da bd 56 79 35 07 5d 8d 13 bd d6 f6 e0 68 2f 09 69 29 c5 fb 9d a6 8e 2d 2f b4 b0 e3 a1 6b b5 4e ac d1 8e be c8 c4 1c 13 23 65 ec 29 22 50 17 ed f1 fc 08 09 7b fd 4b 53 51 90 78 89 b2 b8 9d a6 3e 61 e3 26 b5 ed b6 8e 3c 61 2c eb a6 8c 17 48 45 48 cf f2 f3 89 0d 02 1c 5d 94 25 2c 65 44 9e b3 55 7e 57 bb 6c fd 17 8f 03 da 9b ab 3b 63 be e1 98 93 f7 07 60 fe 9d 3f 20 a1 be 70 91 4d 0d b2 0b 6c eb ea 2e 82 50 b2 57 37 f5 06 a1 d9 a3 c8 2e 1a 2f f4 57 9c 23 3b 57 f5 64 2a 96 3a 7a 3b 45 32 86 a8 9f ee f6 e3 fa 6a a1 07 f8 39 13 79 c9 dc 41 c7 53 90 53 38 e8 75 c0 8c b6 e0 ac 3b 66 59 38 bb 6d 20 4b d1 af e8 ec d4 84 d4 b6 89 cd a1 3e 2c 84 17 a0 0e 0d 5f e8 67 a5 b4 f1 2d 6d e1 63 3c d7 18 6e Data Ascii: N3vE\bqQ5ZVy5]h/i)-/kN#e)"P{KSQx>a&<a,HEH]%,eDU~Wl;c`? pMl.PW7./W#;Wd*:z;E2j9yASS8u;fY8m K>,_g-mc<n
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 22 f0 5d 8c f2 aa 82 2a 8e 59 b2 a4 e9 10 2c e4 51 a1 57 81 d8 1b e0 0e f4 b8 6c 53 e9 b5 c6 c5 4f 8e 72 57 24 35 06 5d 4b a1 56 d9 bb 42 e2 16 85 dc 9a 85 49 b8 18 8a 18 6b da 7c df 3d b2 26 c1 5b d4 e8 ea de d1 de c5 35 38 45 d3 52 a4 30 de 8b 47 6b ab 73 1b 53 ee f1 c1 6e e3 f2 6e 11 6e 75 e3 fa f1 45 78 4b 8d d0 7f 72 f4 a2 ac 8c 7d 87 7e 6d 1f f1 d9 60 10 8e 47 34 02 75 7b d0 d1 f1 3d 5d 36 66 a4 00 f7 e2 08 d7 a8 0a 42 6f d6 1e 26 3c 0d 99 c3 b1 63 3b 32 a0 ae 10 50 24 c3 c7 83 7b 6d 57 5f 63 1b 9e f5 c2 aa 27 42 36 d0 8a 3f 24 bd 5e 7a 5b 8f 43 03 97 1d 59 b9 dd ad 99 e9 a5 6a d0 4e f3 7e 0b fe a6 db ae 30 05 be bb 9b fa 74 a2 af 06 fa b0 db e2 84 36 2f 29 2d 89 31 7f 3a 70 24 44 ea a5 85 c8 97 0a ae 10 1a 0e 0a 2c 27 b3 86 fc 79 e0 f5 b1 f8 c1 76 Data Ascii: "]*Y,QWlSOrW$5]KVBIk\|=&[58ER0GksSnnnuExKr}~m`G4u{=]6fBo&<c;2P${mW_c'B6?$^z[CYjN~0t6/)-1:p$D,'yv
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 94 fd a4 66 e0 cd fc 96 f7 8c 2c 64 bd ae ae 7a cd c8 c8 9a d9 c6 d4 8c ea ba b3 03 b0 ab 1a 75 25 e7 a0 cb a3 7d 4f f5 26 b3 be 82 69 19 32 0f 55 e8 2c 0b 40 02 cd 6b ea 6a 0f 25 75 3f db 1a e3 34 a7 4e 9c 4b 6d f6 de f9 d0 64 3f 35 c9 dd 93 3b ca 30 99 59 ef 9d da fc 65 7d 73 5a f4 80 1b 87 aa 3e 45 c6 ab 55 73 5e 14 dd 9c 76 7b a0 7f eb 04 a4 a6 66 51 3c c4 90 a1 89 56 50 fc ef c3 ca 54 0e 66 cd a6 ee 3f a5 90 f5 6d d8 70 d9 50 2a 00 c8 26 01 a6 f7 d0 51 87 47 89 f9 7b 63 9c 03 4a ef f1 45 50 18 65 32 29 8e 78 50 bd 30 05 41 06 d1 df cd 01 fb 4d c9 aa 5a 48 b6 6a 95 22 11 d7 bb 22 d9 41 05 ac d0 43 2b 7a 71 89 6d 04 56 11 7a e1 96 9e 05 f3 55 25 d8 43 b5 00 3a 16 40 31 0e e6 e3 f0 57 b9 8a 0c ee 5b 11 79 29 ce 4a 40 f7 6f b1 62 25 0c f7 6a 94 15 41 3e Data Ascii: f,dzu%}O&i2U,@kj%u?4NKmd?5;0Ye}sZ>EUs^v{fQ<VPTf?mpP*&QG{cJEPe2)xP0AMZHj""AC+zqmVzU%C:@1W[y)J@ob%jA>
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 74 3b 32 5d af 12 50 a1 7c 54 2d 07 09 4c c3 9e 83 92 c9 e7 bf f1 65 31 14 e3 dd bd 04 57 c3 5a c5 9a 2a 4d 72 48 35 3f 84 f1 82 3d e0 00 fd d1 6f b0 03 ac 22 eb c6 39 d1 4b 35 ce f8 3d ab 27 6b c9 2d 2a 07 95 84 e8 41 a6 12 0f 16 45 7c 09 fe 20 de 20 71 d2 94 13 91 5f 3f 5c a3 37 25 1e f6 8e 7c 4d 36 b0 66 aa 2b 93 93 2b 92 53 2a 7d e7 57 00 5f dc 5d 33 aa a8 fa b6 66 6d dc ae d8 d2 cb b3 d2 dc 6d 20 77 21 96 97 ee f7 e5 2e db 52 23 89 e9 ac aa 3b c6 ed 1f fa a6 b1 71 a0 71 f3 37 31 8a 01 d6 e4 24 c2 95 dd 99 d5 af 5f 19 c0 f3 69 4b e0 26 ec 4a a9 ce ac 4d ae 8a ac f6 de 1a c7 65 6d 12 e5 56 c4 35 50 7f cf 30 3e 14 be be 20 51 9d 15 e7 b5 35 aa 86 57 95 a9 48 ad 49 68 d7 1a e5 f9 26 f9 34 d2 8d 49 6c d3 45 37 7d e2 73 c8 e9 c4 6d 5b 63 c8 be ec 01 a2 84 Data Ascii: t;2]P\|T-Le1WZMrH5?=o"9K5='k-AE\| q_?\7%\|M6f++S*}W_]3fmm w!.R#;qq71$_iK&JMemV5P0> Q5WHIh&4IlE7}sm[c
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: bc 2e a1 2c 27 25 3f 2c c7 25 81 61 1c 7e 65 ce 05 eb 12 8e c0 9d 8e 55 e1 96 30 b5 cd 2f 7a 51 d5 f6 28 d1 b8 fd 93 f7 a4 61 99 ac aa 70 3a 2e 36 ab 6a c2 ff 64 46 40 5c 56 ae 34 a6 c9 7f 7b d3 52 69 ec fe 19 0b 88 cd 38 e9 af c9 aa 06 6e 75 fd ae 46 ef 98 4d 5f 86 a7 3d a6 bd f5 5a 38 e1 a4 03 48 e3 ee 8a 6c 87 73 79 35 6b 25 f5 cc 7c 17 28 f0 69 39 02 0b 22 d9 36 e4 ba 7d d4 8b 7e 57 4b 84 db 9f 04 91 68 59 a9 6b 8a ca f6 17 a4 13 97 5c e0 fb d7 6c 93 52 6d 0f 8e bb b4 26 d2 0d ba 1d e6 a6 f1 d8 f2 30 be ef c1 62 fb 5d 67 ca 13 94 b5 be 22 c2 e7 de 80 44 5e fd b2 e6 be de 8c a8 6a ff b1 15 4a 2a 29 9e 9a 36 03 a8 b5 18 8b 2d 59 62 d9 68 d6 e0 f7 f2 e9 0a 5a fd af e9 df 3d 04 de 91 a6 41 2c 8e ca 28 8e 9d 4b 23 d0 09 0d 96 b2 4f 66 c8 4a 02 1b 3a ee 3b Data Ascii: .,'%?,%a~eU0/zQ(ap:.6jdF@\V4{Ri8nuFM_=Z8Hlsy5k%\|(i9"6}~WKhYk\lRm&0b]g"D^jJ*)6-YbhZ=A,(K#OfJ:;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	65064	64.233.184.157	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	830	OUT	POST /g/collect?v=2&tid=G-KQMZSWM9K6&cid=1386283618.1729810968&gtm=45je4al0v899685487za200&aip=1&dma=0&gcd=13l3l3l3l1l1&npa=0&frm=0&tag_exp=101533421~101686685~101823848 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.garwoodsheating.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:51 UTC	854	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.garwoodsheating.com Date: Thu, 24 Oct 2024 23:02:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:111:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:111:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	65074	188.114.97.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	720	OUT	GET /images/cubes.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:51 UTC	921	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:51 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: 0816f8b5c1adfd97950a33e2d653d7bf CF-Cache-Status: HIT Age: 142 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gOs2F%2F0tNfpk0F9glWiWanFdR6vUu%2BYUbel7YQ21SlUZsb4Pi%2BBH0yR2AANZp3wT90PozQ81LhC6H2RcSgVMpdtoOPm9Vj0PK1MCHNcPYkkRXG7Kax59Iy2PK5B5uDebbxqt2Jk%2FiMMANQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98cb5d364605-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1105&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1298&delivery_rate=2339256&cwnd=249&unsent_bytes=0&cid=b1f6a7b62451d41c&ts=155&x=0"
2024-10-24 23:02:51 UTC	448	IN	Data Raw: 32 62 62 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 43 00 00 00 64 04 03 00 00 00 2f 4d 90 ce 00 00 00 2a 50 4c 54 45 00 00 00 c1 c1 c1 ce ce ce d3 d3 d3 d5 d5 d5 d6 d6 d6 d7 d7 d7 c1 c1 c1 ce ce ce d3 d3 d3 d5 d5 d5 d6 d6 d6 d7 d7 d7 d7 d7 d7 36 cb b6 3d 00 00 00 0e 74 52 4e 53 00 00 00 00 00 00 00 0a 14 1f 29 33 3d 47 0d 28 56 37 00 00 02 32 49 44 41 54 48 c7 ed 55 b1 8a db 40 10 dd 4f 88 2a bb 48 11 d4 9c 03 57 04 5c 38 07 29 ef 17 52 04 52 a4 b2 6c 48 71 ae 92 15 57 1c 6e 8e 48 57 1c b8 10 44 ee 7d 20 17 6e 02 96 77 03 a9 1c e4 55 7d cd fd cc 69 b5 5e ed ec 58 d2 91 36 e8 15 02 89 a7 7d 33 6f 66 67 08 41 d8 8f 6d 5c df 93 a7 c5 d0 02 a2 c4 6c 43 3e f1 07 17 c2 a2 4c f9 ca 79 45 1c 27 de cd 1c 03 48 09 c4 dc 75 df 90 e2 47 0a c5 0c Data Ascii: 2bbPNGIHDRCd/MPLTE6=tRNS)3=G(V72IDATHU@OHW\8)RRlHqWnHWD} nwU}i^X6}3ofgAm\lC>LyE'HuG
2024-10-24 23:02:51 UTC	258	IN	Data Raw: 96 94 2f 04 7d 19 77 94 8e f2 1f 53 7e a1 7b f5 f9 84 12 64 68 60 be 46 14 2f 49 03 b4 e6 3e d8 94 69 5e 4c 91 3e b3 e6 c0 b9 45 f9 71 50 22 31 14 83 42 de 72 77 79 04 65 51 1d 85 c2 69 db 33 eb c8 c4 12 1f ec 4c aa 77 7d ca 04 8d aa 02 6f f3 15 a4 c0 25 36 04 b3 7a ae 33 f2 12 6c d7 11 81 1c ab 32 16 6b a4 da e8 f3 ad 7b 7e 45 02 31 77 9b 11 ee ae 6f 48 36 6c 85 9f 6f 08 8b 9c 16 f4 7f f3 3f a4 98 ac b3 46 86 2f a2 32 69 5f 2c ea 45 46 72 75 29 77 27 ec a1 2e 54 95 aa 76 37 ac 71 26 54 a9 56 cd e0 e3 a8 7b 2c c5 65 f4 92 2d 14 f1 f9 6d 4d bf 84 66 3f 9f 81 15 65 f5 6e b5 9f bf 33 e0 03 6a ef 75 d9 24 be 88 5a 6e 00 15 8b 11 b2 12 53 8a de 7a 5a b5 df a3 22 b3 bf ce 4b 94 6e 90 75 94 8e f2 ef 94 67 82 9d 73 57 0f ae bb 59 00 00 00 00 49 45 4e 44 ae 42 60 Data Ascii: /}wS~{dh`F/I>i^L>EqP"1BrwyeQi3Lw}o%6z3l2k{~E1woH6lo?F/2i_,EFru)w'.Tv7q&TV{,e-mMf?en3ju$ZnSzZ"KnugsWYIENDB`
2024-10-24 23:02:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	65075	188.114.97.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	591	OUT	GET /scripts/main.min.js?v=1729028189770 HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1
2024-10-24 23:02:51 UTC	936	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:51 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-cloud-trace-context: 918ba3bac03fcc3d7508768500435d25 expires: Thu, 24 Oct 2024 23:08:33 GMT Cache-Control: public, max-age=14400 etag: W/"9irGzg" Age: 258 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ca9jhg0aJuyJu%2BPNUwbMbxMe5DpLTIgMQQptscCw6wqznJ2oBgHYMfZs86aWnhkV1cI0RXVmXQaK5lULo1clgR%2BQ2BaGJo5W6%2BVlGjeq2CKqLqvpZ2B%2Bvq7zJa4C7ZSS27xHTLR4TFaQoQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98cb895945f9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1190&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1169&delivery_rate=2375717&cwnd=238&unsent_bytes=0&cid=7afcd002daa70b5b&ts=165&x=0"
2024-10-24 23:02:51 UTC	433	IN	Data Raw: 37 38 33 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 22 2e 74 6f 70 69 63 73 2d 73 68 6f 77 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 3d 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 68 72 65 66 22 29 3b 24 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 68 69 64 64 65 6e 2d 78 73 20 73 68 6f 77 22 29 2c 24 28 22 23 62 6c 6f 63 6b 2d 74 6f 70 69 63 2d 62 75 74 74 6f 6e 73 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 68 69 64 64 65 6e 2d 78 73 20 73 68 6f 77 22 29 2c 24 28 22 2e 74 6f 70 69 63 73 2d 73 68 6f 77 20 2e 67 6c 79 70 68 69 63 6f 6e 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 67 6c 79 70 68 69 63 6f 6e 2d Data Ascii: 783$(document).ready(function(){$(".topics-show").click(function(e){e.preventDefault();e=$(this).attr("href");$(e).toggleClass("hidden-xs show"),$("#block-topic-buttons").toggleClass("hidden-xs show"),$(".topics-show .glyphicon").toggleClass("glyphicon-
2024-10-24 23:02:51 UTC	1369	IN	Data Raw: 6f 67 67 6c 65 28 33 30 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 62 6c 6f 63 6b 22 3d 3d 24 28 22 2e 73 70 65 63 69 61 6c 2d 6f 66 66 65 72 73 2d 72 65 76 65 61 6c 65 64 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3f 28 24 28 22 2e 73 70 65 63 69 61 6c 2d 6f 66 66 65 72 73 2d 64 72 6f 70 64 6f 77 6e 20 68 32 22 29 2e 68 74 6d 6c 28 27 3c 73 6d 61 6c 6c 3e 48 69 64 65 20 53 70 65 63 69 61 6c 20 4f 66 66 65 72 73 26 6e 62 73 70 3b 26 6e 62 73 70 3b 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 6c 79 70 68 69 63 6f 6e 20 67 6c 79 70 68 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 74 6f 70 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 73 6d 61 6c 6c 3e 27 29 2c 24 28 22 2e 73 70 65 63 69 61 6c 2d 6f 66 66 65 72 73 Data Ascii: oggle(300,function(){"block"==$(".special-offers-revealed").css("display")?($(".special-offers-dropdown h2").html('<small>Hide Special Offers  <span class="glyphicon glyphicon-triangle-top" aria-hidden="true"></span></small>'),$(".special-offers
2024-10-24 23:02:51 UTC	128	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 24 28 22 2e 73 69 64 65 62 61 72 22 29 2e 68 65 69 67 68 74 28 29 3b 24 28 22 23 70 61 67 65 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 22 29 2e 61 74 74 72 28 22 73 74 79 6c 65 22 2c 22 6d 69 6e 2d 68 65 69 67 68 74 3a 22 2b 65 2b 22 70 78 22 29 7d 2c 31 30 30 29 7d 29 3b 0d 0a Data Ascii: ction(){setTimeout(function(){var e=$(".sidebar").height();$("#page-main-content").attr("style","min-height:"+e+"px")},100)});
2024-10-24 23:02:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	65076	188.114.97.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	643	OUT	GET /images/topic-new-system.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1
2024-10-24 23:02:51 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:51 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: d87d01d017539175515b829144682dd1 CF-Cache-Status: HIT Age: 142 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kps%2FD%2BT41FVnVFFk6%2Ft20%2B%2FD5q1WgMfcuaqL24P9DvPM%2FFFxNvwZaeZfmLahbRX1WMW%2Ff3YzE3jk6MIW5ryfXSqlC4UTT2nBBW%2F2ubEKgEyQbn2xIwT8qgJW8TYcVnW3uBxZ%2FQp12df7wQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98cb9d8b2cde-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1350&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2850&recv_bytes=1221&delivery_rate=2169288&cwnd=251&unsent_bytes=0&cid=e7e5bed0f2a0d7f2&ts=170&x=0"
2024-10-24 23:02:51 UTC	438	IN	Data Raw: 34 64 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 81 00 00 00 59 08 03 00 00 00 2e 13 b7 20 00 00 00 33 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 10 e8 47 00 00 00 10 74 52 4e 53 00 10 20 30 40 50 60 70 80 8f 9f af bf cf df ef 23 1a 82 8a 00 00 04 3f 49 44 41 54 68 de ed 9a cd b6 ac 28 0c 85 83 44 40 8c b0 df ff 69 7b c0 bf 55 75 ee b1 57 f7 cd a4 98 94 2b 5a fa 09 21 d9 04 89 be ed db fe 83 16 d4 09 24 aa 13 20 aa 13 c0 a9 13 60 57 27 c8 56 93 20 03 40 32 7a 00 1b 00 00 a7 1e 81 2f 04 8a ae 70 55 82 ac 35 0e 16 ad 69 45 85 d8 09 c0 2a 00 66 00 40 74 d2 d2 44 80 4d a3 0b f2 4c 70 68 77 01 92 76 17 68 0c c3 da Data Ascii: 4d3PNGIHDRY. 3PLTEGtRNS 0@P`p#?IDATh(D@i{UuW+Z!$ `W'V @2z/pU5iE*f@tDMLphwvh
2024-10-24 23:02:51 UTC	804	IN	Data Raw: a2 89 19 00 4e 4b f4 ae c0 68 f2 d3 85 f5 de 6e 72 fe 8e c0 f6 7a 8e 7b 4b e0 1e cb f9 0b b8 42 38 01 4b 14 80 24 22 22 72 27 b8 44 44 e4 20 da 32 80 eb 38 33 90 8d 88 5c 40 2e 67 6a 4b 8f d7 f6 f5 fa ad 8e 42 98 96 49 13 01 4f 5a 2d 33 11 d1 51 36 5b f8 f6 c6 fc bc f4 9d 81 68 c6 02 f5 0f 04 66 08 c5 8d de 11 9c 40 7c 28 22 22 00 88 df 2a 81 84 10 42 e0 3b 41 0c 21 84 b0 11 df d5 fa 8d 60 03 60 ce 67 82 ba aa 3f 1c f3 5c 08 ef 3d 91 29 dc dd ec 46 10 81 48 fc b4 c6 e2 ce 86 f0 67 02 f7 33 81 c9 80 25 4a cf 2b 5d fb 09 e0 37 7e 60 ef 63 bc 12 f8 7f b3 03 61 4f 53 a7 84 f9 cd 5c 48 cd d1 6d 7c 43 90 46 84 b0 0f dc 20 39 43 be f5 41 64 66 66 36 c4 c0 c5 cc cc 1b 09 e0 8b b9 04 30 d9 99 8f 4a b2 10 ec 40 0a 21 84 20 0f 26 e4 9e a7 ed ab 30 6d 24 f1 f0 09 99 Data Ascii: NKhnrz{KB8K$""r'DD 283\@.gjKBIOZ-3Q6[hf@\|(""*B;A!``g?\=)FHg3%J+]7~`caOS\Hm\|CF 9CAdff60J@! &0m$
2024-10-24 23:02:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	65072	13.225.83.200	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	721	OUT	GET /jsac74j/s4sw4zh/iframe HTTP/1.1 Host: d1eoo1tco6rr5e.cloudfront.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:52 UTC	483	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 133 Connection: close Date: Thu, 24 Oct 2024 23:02:53 GMT Last-Modified: Fri, 01 Oct 2021 23:45:10 GMT ETag: "db08b366b4aaae274471d0e5a1d82597" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e56e6732f380db727425bac2d6158760.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C2 X-Amz-Cf-Id: _sY7f5Ldq5yI24bWy-pwmKnWXu817JJSEdHcO2m8VskHRG5iyB-JAg==
2024-10-24 23:02:52 UTC	133	IN	Data Raw: 3c 69 6d 67 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 20 61 6c 74 3d 22 22 20 73 72 63 3d 22 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 65 76 6e 74 2f 3f 61 64 76 3d 6a 73 61 63 37 34 6a 26 63 74 3d 30 3a 73 34 73 77 34 7a 68 26 66 6d 74 3d 33 22 2f 3e 0d 0a Data Ascii: <img height="1" width="1" style="border-style:none;" alt="" src="//insight.adsrvr.org/track/evnt/?adv=jsac74j&ct=0:s4sw4zh&fmt=3"/>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	65077	142.250.186.174	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	780	OUT	GET /s/player/fb725ac8/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/embed/NpMhKZDN7Js?rel=0%20frameborder= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=jrZJggdWB64; VISITOR_INFO1_LIVE=QXujzH70Yjw; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgNA%3D%3D
2024-10-24 23:02:51 UTC	681	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 392635 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:10:23 GMT Expires: Fri, 24 Oct 2025 19:10:23 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 23 Oct 2024 04:16:42 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 13948 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:02:51 UTC	697	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 65 6e 64 65 64 2d 6d 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 Data Ascii: ideo-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transpare
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 65 64 2d 65 72 72 6f 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 79 74 70 2d 66 69 74 2d 63 6f 76 65 72 2d 76 69 64 65 6f 20 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 5b 64 61 74 61 2d 6e 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 3d 74 72 75 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d Data Ascii: ed-error .html5-video-container{display:none}.html5-main-video{position:absolute;top:0;left:0;width:100%;height:100%;outline:0}.ytp-fit-cover-video .html5-main-video{-o-object-fit:cover;object-fit:cover}.html5-main-video[data-no-fullscreen=true]::-webkit-
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 69 6e 67 29 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 6e 65 78 74 29 7b 74 6f 70 3a 38 39 70 78 7d 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 32 34 70 78 3b 72 69 67 68 74 3a 32 34 70 78 7d 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 68 74 6d 6c 35 2d 65 6e 64 73 63 72 65 65 6e 29 2c 2e 79 74 70 2d 61 75 74 Data Ascii: ing) .ytp-player-content:not(.ytp-upnext){top:89px}.ytp-player-content.ytp-iv-player-content{left:12px;right:12px}.ytp-big-mode .ytp-player-content.ytp-iv-player-content{left:24px;right:24px}.ytp-autohide .ytp-player-content:not(.html5-endscreen),.ytp-aut
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 2c 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 6e 6f 74 28 5b 61 72 69 61 2d 68 69 64 64 65 6e 3d 74 72 75 65 5d 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 79 74 70 2d 70 72 6f 62 61 62 6c 79 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 Data Ascii: .ytp-button[aria-disabled=true],.html5-video-player .ytp-button[disabled]{opacity:.5}.ytp-button:not([aria-disabled=true]):not([disabled]):not([aria-hidden=true]){cursor:pointer}.ytp-probably-keyboard-focus .ytp-button:focus{-webkit-box-shadow:inset 0 0 0
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b 68 65 69 67 68 74 3a 35 34 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 6f 70 61 63 69 74 79 3a 2e 39 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 36 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d Data Ascii: x}.ytp-big-mode .ytp-chrome-bottom{height:54px;padding-top:4px}.ytp-chrome-top .ytp-button,.ytp-small-mode .ytp-chrome-controls .ytp-button,.ytp-small-mode .ytp-replay-button{opacity:.9;display:inline-block;width:36px;-webkit-transition:opacity .1s cubic-
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 65 2d 62 75 74 74 6f 6e 29 20 73 76 67 2c 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 79 6f 75 74 75 62 65 2d 62 75 74 74 6f 6e 29 20 73 76 67 7b 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 3b 68 65 69 67 68 74 3a 34 32 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 Data Ascii: e-button) svg,.ytp-embed-mobile.ytp-small-mode .ytp-chrome-controls .ytp-button:not(.ytp-youtube-button) svg{width:40px;padding-left:4px}.ytp-chrome-top .ytp-button{padding-top:6px;height:42px;vertical-align:top}.ytp-big-mode .ytp-chrome-top .ytp-button{p
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 6e 6f 6e 65 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 6c 65 66 74 3a 32 34 70 78 3b 62 6f 74 74 6f 6d 3a 39 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 30 30 3b 2d 77 65 62 6b 69 74 2d Data Ascii: none}.ytp-chrome-controls .ytp-button[aria-pressed]{position:relative}.ytp-chrome-controls .ytp-button[aria-pressed]::after{content:"";display:block;position:absolute;width:0;height:3px;border-radius:3px;left:24px;bottom:9px;background-color:#f00;-webkit-
2024-10-24 23:02:51 UTC	1378	IN	Data Raw: 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 3a 61 66 74 65 72 7b 77 69 64 74 68 3a 32 37 70 78 3b 6c 65 66 74 3a 31 34 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 3a 61 66 74 65 72 2c 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 3a 61 66 Data Ascii: -big-mode .ytp-chrome-controls .ytp-button[aria-pressed=true]::after{width:27px;left:14px}.ytp-embed-mobile .ytp-chrome-controls .ytp-button[aria-pressed=true]::after,.ytp-embed-mobile.ytp-small-mode .ytp-chrome-controls .ytp-button[aria-pressed=true]::af
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 66 74 7d 2e 79 74 70 2d 6c 65 66 74 2d 63 6f 6e 74 72 6f 6c 73 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 6c 65 78 62 6f 78 20 2e 79 74 70 2d 6c 65 66 74 2d 63 6f 6e 74 72 6f 6c 73 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 3a 6e 6f 74 28 2e 79 74 70 2d 65 78 70 2d 62 6f 74 Data Ascii: ft}.ytp-left-controls{height:100%}.ytp-exp-bottom-control-flexbox .ytp-left-controls{display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-flex:1;-webkit-flex:1;flex:1;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}:not(.ytp-exp-bot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	65088	188.114.97.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	738	OUT	GET /images/topic-repair-or-replace.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:51 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:51 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: f73540cd8329c0fa9a6c43a2d469fec0 CF-Cache-Status: HIT Age: 142 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M3pyn%2FhFUoL%2BMiv7eZXWdHRuTfiDD5TWp5EbrxH0%2FHgd736%2FxkjxX%2FsYUm%2F%2BRA9JJU7%2F11AhdwuYx7HgCspZFM1W3tIYDOB6hgCTj8ia9wYRLnGVcu6mmq6XsNtNZ8w%2BNKDD7UdVzAzqdA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98cd8c1c45e8-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1078&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1316&delivery_rate=2686456&cwnd=251&unsent_bytes=0&cid=0594ac7d88951470&ts=159&x=0"
2024-10-24 23:02:51 UTC	438	IN	Data Raw: 35 38 62 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 81 00 00 00 59 08 03 00 00 00 2e 13 b7 20 00 00 00 33 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 10 e8 47 00 00 00 10 74 52 4e 53 00 10 20 30 40 50 60 70 80 8f 9f af bf cf df ef 23 1a 82 8a 00 00 04 f7 49 44 41 54 68 de ed 9a d9 b2 e3 2a 0c 45 85 91 b1 00 01 fb ff bf f6 3e 60 30 1e d2 c7 5d e5 e4 dc ae 8a 9e 9c d1 2b a0 61 4b 84 e8 6b 5f fb 07 cd d8 76 65 ed af dc 5f 0a b8 5e 4e 80 f2 c7 01 a6 02 40 eb 75 04 80 f0 f1 25 00 00 04 4b 64 03 00 a0 7c 7c 11 ea 7d 37 93 8f 13 2c 07 02 f3 eb 6b f0 71 57 74 07 00 a4 0f 2f 82 c5 c9 fc 8b 64 f1 06 9b 1d bb 72 26 80 db de Data Ascii: 58bPNGIHDRY. 3PLTEGtRNS 0@P`p#IDATh*E>`0]+aKk_ve_^N@u%Kd\|\|}7,kqWt/dr&
2024-10-24 23:02:51 UTC	988	IN	Data Raw: 04 7e 08 4d 3e d1 ba 67 33 52 76 b3 0e 2e 10 7c 59 45 0a ef ef d7 a2 26 3e 1c 0d de 1b 22 e2 d4 0a a4 21 9a 52 ad 80 66 a7 99 ec 9b 2a 43 37 bd c8 78 dd 2f 99 a8 2b 19 ff 56 c1 2c 7f d4 d0 6f ca 48 5d 8d 01 4d 17 d1 c9 f7 df 58 9e 0f 51 61 8f 48 17 f6 46 21 3d ed fb 04 53 ae 09 f4 b3 ad 54 ba c8 99 cb e7 10 7c 1c 63 e0 1d 45 e1 66 ed 8a 2d 13 39 33 97 37 46 e3 1f 2c 03 40 9a 88 88 6c 94 5f 00 a8 c9 6a a2 5f 34 fd 95 a9 c6 b1 84 c7 ef b8 ef 6b 5f fb da d7 be f6 bf 35 cb fc d7 72 75 6d c8 74 31 43 43 0a 6d d7 39 ba 5e 05 73 af c8 dc e4 72 7f 99 88 c8 f8 02 b4 93 98 b5 95 4c 81 ef 11 ac 0d d8 99 a0 8f 4d 73 ef 53 47 82 f1 d8 65 9b 38 ba 5d 33 eb 7e 26 50 55 ad 42 57 81 a4 aa aa be 5d e7 f5 2b dc 36 2d 68 04 45 55 d3 d6 49 98 02 14 3f 8b d6 4f 08 90 55 35 ff Data Ascii: ~M>g3Rv.\|YE&>"!Rf*C7x/+V,oH]MXQaHF!=ST\|cEf-937F,@l_j_4k_5rumt1CCm9^srLMsSGe8]3~&PUBW]+6-hEUI?OU5
2024-10-24 23:02:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	65086	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:51 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230251Z-15b8d89586fcvr6p5956n5d0rc00000005gg000000008s84 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:51 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	65081	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:51 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: c47ae6f3-801e-007b-6937-26e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230251Z-17c5cb586f6hp4zfqskwhb6z3000000001u00000000003pe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:51 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.6	65083	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:51 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:51 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 389dace0-b01e-003d-533d-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230251Z-17c5cb586f65j4snyp1hqk5z2s000000012g000000002yxx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:51 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.6	65082	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:51 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:51 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 94fafadb-001e-0049-3f27-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230251Z-17c5cb586f6hhlf5mrwgq3erx800000000ng00000000a9q5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:51 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.6	65080	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:51 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:51 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 3edebaab-e01e-0033-21c8-214695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230251Z-16849878b788tnsxzb2smucwdc000000088g00000000ua62 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:51 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	65092	188.114.96.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	492	OUT	GET /images/topic-energy-concerns.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:52 UTC	915	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:51 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: d87d01d017539175515b829144682dd1 CF-Cache-Status: HIT Age: 142 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6WOuLY5fZLnmpn8LAEQBYtejvgg9Gzs7vKcQPeBK0cTVKv8GMkO6qgLZ0EBH3Vd8ck%2FZSvwJBuz5kb15pBwpVBuXPmhyvUJQTw8bGYfnzZMiAZ1zh4WuCDuYg1eLnAkUg3Hcsf6C3UMPGQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98ceac98462a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1074&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2850&recv_bytes=1070&delivery_rate=2558303&cwnd=251&unsent_bytes=0&cid=ce77d0c5a737b906&ts=195&x=0"
2024-10-24 23:02:52 UTC	454	IN	Data Raw: 35 35 61 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 81 00 00 00 59 08 03 00 00 00 2e 13 b7 20 00 00 00 33 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 10 e8 47 00 00 00 10 74 52 4e 53 00 10 20 30 40 50 60 70 80 8f 9f af bf cf df ef 23 1a 82 8a 00 00 04 c6 49 44 41 54 68 de ed 5a db b2 e3 28 0c 14 20 03 c6 02 fa ff bf 76 1f b8 da 71 4e e5 cc 6e e1 a9 da e8 29 31 16 b4 41 48 6a 01 d1 bf 11 f6 5e c4 3b 43 cf 88 de 33 aa 64 af 1e 00 e0 31 4b 76 ab c7 57 11 17 11 f5 30 00 20 2e 85 70 03 00 90 c7 6c a0 cb 3a 5b d0 d3 a8 44 93 39 2e 5b 87 d0 e7 7d 23 22 b5 f5 ff 7e 15 82 e6 07 42 9f 14 29 0f d2 22 00 fc 6a 79 6d 16 cc 5a Data Ascii: 55aPNGIHDRY. 3PLTEGtRNS 0@P`p#IDAThZ( vqNn)1AHj^;C3d1KvW0 .pl:[D9.[}#"~B)"jymZ
2024-10-24 23:02:52 UTC	923	IN	Data Raw: 66 56 a4 f9 39 04 41 44 f2 c3 ab 20 22 bb df e8 41 31 cc ce 0b fd 4f f7 82 2f b2 31 93 7a 06 c1 e6 bd f7 7e 17 11 e0 19 08 ba d7 f4 d2 63 96 b8 3d 93 21 ce b2 af 26 2a 37 39 33 33 2b fa ca 57 be f2 15 cd fc 9f 90 b5 b9 1e 29 a5 60 4d e4 01 3f 17 ee b8 bd 97 c5 55 17 64 13 00 44 4b 0c 64 5d 39 44 98 c9 7d dc 55 f9 23 ad c3 46 76 f8 27 04 a5 b3 b7 08 5a 05 49 c9 20 2b a1 8c cc bd 98 c5 f3 ab 1f 21 10 11 11 b1 85 8b c5 13 82 5c da 4c 7f af 96 4e 05 40 f4 3e 02 1b e9 0c 30 51 ec 83 30 90 bc af af 7e 84 e0 cc 06 c3 8c 40 ae ef 79 40 0a 65 b2 44 44 1c da 33 3b 8a 59 55 6f 07 8e 3f 42 00 fb 13 82 f2 2c 9e 62 a2 4a 80 cb cd 86 66 04 fe 43 04 25 df 2a 8d 02 64 33 10 24 ef bd f7 76 20 b0 80 10 5d 6a 16 f6 4c a0 8b 5e 28 46 f5 0b 4b ac 8d 02 44 75 b1 44 e9 48 f7 0c Data Ascii: fV9AD "A1O/1z~c=!&7933+W)`M?UdDKd]9D}U#Fv'ZI +!\LN@>0Q0~@y@eDD3;YUo?B,bJfC%d3$v ]jL^(FKDuDH
2024-10-24 23:02:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	65089	52.210.142.7	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	735	OUT	GET /ibs:dpid=903&dpuuid=8de1627a-48e8-41d6-a181-d901bc5b2217&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:52 UTC	878	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 23:02:52 GMT Content-Length: 0 Connection: close X-TID: uyREKbMIR7I= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=903&dpuuid=8de1627a-48e8-41d6-a181-d901bc5b2217&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam DCS: dcs-prod-irl1-2-v067-0d832b281.edge-irl1.demdex.com 0 ms set-cookie: demdex=83240248554929040894345574828920493511; Max-Age=15552000; Expires=Tue, 22 Apr 2025 23:02:52 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	65090	52.210.142.7	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	735	OUT	GET /ibs:dpid=903&dpuuid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:52 UTC	878	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 23:02:52 GMT Content-Length: 0 Connection: close X-TID: l+1umGR3SC4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=903&dpuuid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam DCS: dcs-prod-irl1-1-v067-0af1fda6e.edge-irl1.demdex.com 0 ms set-cookie: demdex=54003932290224783502599557932290084647; Max-Age=15552000; Expires=Tue, 22 Apr 2025 23:02:52 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.6	65085	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:51 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 73 4d 42 34 34 79 55 57 6c 45 4b 75 51 6f 53 63 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 35 35 33 61 39 63 65 65 65 32 32 39 38 65 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: sMB44yUWlEKuQoSc.1Context: 9553a9ceee2298e8
2024-10-24 23:02:51 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-24 23:02:51 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 73 4d 42 34 34 79 55 57 6c 45 4b 75 51 6f 53 63 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 35 35 33 61 39 63 65 65 65 32 32 39 38 65 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 62 6e 64 4d 53 45 51 2f 6d 33 65 77 6f 72 4a 65 35 77 37 74 66 54 53 72 75 6a 39 38 55 2f 33 72 41 30 39 4e 59 32 30 4c 4b 52 63 36 69 39 6d 62 42 2b 6d 35 67 49 4a 64 4d 35 46 66 39 46 79 53 59 4d 66 30 75 57 6f 53 78 6d 4f 54 55 4a 71 51 65 43 76 63 2b 35 5a 77 56 6d 35 77 6f 54 2b 42 64 76 69 44 65 33 55 65 55 61 33 30 56 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: sMB44yUWlEKuQoSc.2Context: 9553a9ceee2298e8<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAbndMSEQ/m3eworJe5w7tfTSruj98U/3rA09NY20LKRc6i9mbB+m5gIJdM5Ff9FySYMf0uWoSxmOTUJqQeCvc+5ZwVm5woT+BdviDe3UeUa30V
2024-10-24 23:02:51 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 73 4d 42 34 34 79 55 57 6c 45 4b 75 51 6f 53 63 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 35 35 33 61 39 63 65 65 65 32 32 39 38 65 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: sMB44yUWlEKuQoSc.3Context: 9553a9ceee2298e8<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-24 23:02:52 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-24 23:02:52 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 47 6c 68 4c 4a 4a 41 4d 65 55 47 63 30 76 49 56 68 4e 75 52 6a 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: GlhLJJAMeUGc0vIVhNuRjQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	65097	188.114.96.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:52 UTC	498	OUT	GET /images/topic-ready-for-maintenance.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:52 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:52 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: 32a1a0aff5d54a25320867ca6d67fb16 CF-Cache-Status: HIT Age: 143 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iBO%2FH3gNi%2FExY9steDTrQGEcOUXa0CZ2wiVJBqw9OGI6heU9Y1cOqPnnecI%2FTEBkDyK1yrtRQXNIB9hbNfdKzN%2BEc1CbN0%2F7qgMkdDbEbNtVvD0CaqLx6OTtrIUb0RFAUJAkOe5iGmi1UQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98d00a933462-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1215&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1076&delivery_rate=2287519&cwnd=248&unsent_bytes=0&cid=88090e263e35f1eb&ts=170&x=0"
2024-10-24 23:02:52 UTC	446	IN	Data Raw: 35 38 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 87 00 00 00 59 08 03 00 00 00 23 0d c7 67 00 00 00 33 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 10 e8 47 00 00 00 10 74 52 4e 53 00 10 20 30 40 50 60 70 80 8f 9f af bf cf df ef 23 1a 82 8a 00 00 04 f9 49 44 41 54 68 de ed 9a db b6 ac 28 0c 45 83 20 46 0c b0 fe ff 6b fb 21 dc b4 ae dd 63 74 51 e7 8c e2 a9 b6 ba e3 14 72 59 41 89 7e e3 ff 1a fe c8 db 17 50 64 20 4c a7 30 07 00 99 8f 11 01 44 33 9d e3 00 90 97 f9 be 81 ef 58 95 0c 7c 83 93 7a 00 00 7f 85 77 7c 03 47 fe 12 0e dc e5 30 eb 87 31 96 fb 1c 81 e7 cc c7 25 8d ed 98 c4 81 64 cf 31 f4 71 8e 58 40 72 07 59 Data Ascii: 58dPNGIHDRY#g3PLTEGtRNS 0@P`p#IDATh(E Fk!ctQrYA~Pd L0D3X\|zw\|G01%d1qX@rY
2024-10-24 23:02:52 UTC	982	IN	Data Raw: 96 7e e3 37 7e e3 ef 1d ce fd 7b a5 54 ea 97 ec 0b 51 d7 18 68 27 4b 0a 2d 35 3f 38 2d 38 2b 11 d1 a6 7a a0 29 02 15 6a 8b b6 3a 61 b9 b1 fe 0e 87 8a ce 0b c7 d2 eb 7c 3b 21 86 bc de df e4 aa 10 47 0e 7f 12 b1 f2 b6 a4 15 20 8a 48 06 0e 22 06 92 88 88 48 97 1e 5b bd 95 88 24 d5 41 11 60 a2 bd bd 18 d3 93 22 a2 2a 25 f1 ca 49 6f 7d b2 fe 8a c3 11 91 03 40 c4 a7 06 49 2b 7e 9b fa b2 14 d8 c8 01 d9 2c 00 16 1a 4f 12 11 25 e0 30 a5 03 94 8b f5 77 38 e8 0e c7 06 48 2a be 50 0d 6d 40 24 3a 80 20 5d 05 f4 bb ac 6d 21 17 00 f6 6c fd 1d 8e a5 72 08 33 33 bb f2 6c eb 56 26 bf 1a 32 00 ea fb 97 26 11 01 30 33 b3 27 ee da e0 00 b6 b3 f5 57 1c 81 99 53 f5 8f de be 7a 20 91 c9 3a fb cd 90 fe e0 53 ff d0 7c 78 9c 50 06 f8 6c fd 3f c4 0b eb 99 8d 28 e8 13 5e 38 4c ae 8e Data Ascii: ~7~{TQh'K-5?8-8+z)j:a\|;!G H"H[$A`"%Io}@I+~,O%0w8HPm@$: ]m!lr33lV&2&03'WSz :S\|xPl?(^8L
2024-10-24 23:02:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	65099	142.250.186.174	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:52 UTC	784	OUT	GET /s/player/fb725ac8/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/NpMhKZDN7Js?rel=0%20frameborder= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=nNJVX6kvzEc; VISITOR_INFO1_LIVE=c6FmZbEKqco; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPQ%3D%3D
2024-10-24 23:02:52 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 68576 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 13:11:27 GMT Expires: Thu, 23 Oct 2025 13:11:27 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 23 Oct 2024 04:16:42 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 121885 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:02:52 UTC	690	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 37 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 2a 2f 0a 2f 2a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 45 69 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6d 75 74 65 64 41 75 74 6f 70 6c 61 79 3d 21 31 3b 61 2e 65 6e 64 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 61 2e 6c 69 6d 69 74 65 64 50 6c 61 79 62 61 63 6b 44 75 72 61 74 69 6f 6e 49 6e 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 67 2e Data Ascii: (function(g){var window=this;/* Copyright 2017 Google LLC SPDX-License-Identifier: BSD-3-Clause// SPDX-License-Identifier: Apache-2.0*/'use strict';var Eib=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 61 5b 62 5d 3d 67 2e 66 70 5b 62 5d 29 7d 29 3b 0a 72 65 74 75 72 6e 20 61 7d 2c 48 69 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 49 3a 22 73 76 67 22 2c 0a 59 3a 7b 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 31 30 20 32 36 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 57 3a 5b 7b 49 3a 22 70 61 74 68 22 2c 46 63 3a 21 30 2c 4e 3a 22 79 74 70 2d 73 76 67 2d 66 69 6c 6c 22 2c 59 3a 7b 64 3a 22 4d 20 31 36 2e 36 38 2c 2e 39 39 20 43 20 31 33 2e 35 35 2c 31 2e 30 33 20 37 2e 30 32 2c 31 2e 31 36 20 34 2e 39 39 2c 31 2e 36 38 20 63 20 2d 31 2e 34 39 2c 2e 34 20 2d 32 2e 35 39 2c 31 2e 36 20 2d 32 2e 39 39 2c 33 20 2d 30 2e 36 39 2c 32 2e 37 20 2d 30 2e 36 38 Data Ascii: a[b]=g.fp[b])});return a},Hib=function(){return{I:"svg",Y:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},W:[{I:"path",Fc:!0,N:"ytp-svg-fill",Y:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 36 39 20 31 2e 30 39 2c 2d 33 2e 30 39 20 6c 20 30 2c 2d 30 2e 35 20 2d 32 2e 39 30 2c 2d 30 2e 32 31 20 63 20 30 2c 31 20 2d 30 2e 30 38 2c 31 2e 36 20 2d 30 2e 32 38 2c 32 20 2d 30 2e 31 2c 2e 34 20 2d 30 2e 35 2c 2e 36 32 20 2d 31 2c 2e 36 32 20 2d 30 2e 33 2c 30 20 2d 30 2e 36 31 2c 2d 30 2e 31 31 20 2d 30 2e 38 31 2c 2d 30 2e 33 31 20 2d 30 2e 32 2c 2d 30 2e 33 20 2d 30 2e 33 30 2c 2d 30 2e 35 39 20 2d 30 2e 34 30 2c 2d 31 2e 30 39 20 2d 30 2e 31 2c 2d 30 2e 35 20 2d 30 2e 30 39 2c 2d 31 2e 32 31 20 2d 30 2e 30 39 2c 2d 32 2e 32 31 20 6c 20 30 2c 2d 30 2e 37 38 20 35 2e 37 31 2c 2d 30 2e 30 39 20 30 2c 2d 32 2e 36 32 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 30 2c 2d 32 2e 37 38 20 2d 30 2e 34 30 2c 2d 33 2e 36 38 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 Data Ascii: 69 1.09,-3.09 l 0,-0.5 -2.90,-0.21 c 0,1 -0.08,1.6 -0.28,2 -0.1,.4 -0.5,.62 -1,.62 -0.3,0 -0.61,-0.11 -0.81,-0.31 -0.2,-0.3 -0.30,-0.59 -0.40,-1.09 -0.1,-0.5 -0.09,-1.21 -0.09,-2.21 l 0,-0.78 5.71,-0.09 0,-2.62 c 0,-1.6 -0.10,-2.78 -0.40,-3.68 -0.2,-0.89
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 30 39 2c 31 2e 32 31 20 2e 30 39 2c 32 2e 32 31 20 6c 20 30 2c 31 2e 30 39 20 2d 32 2e 35 2c 30 20 30 2c 2d 31 2e 30 39 20 63 20 30 2c 2d 31 20 2d 30 2e 30 30 2c 2d 31 2e 37 31 20 2e 30 39 2c 2d 32 2e 32 31 20 30 2c 2d 30 2e 34 20 2e 31 31 2c 2d 30 2e 38 20 2e 33 31 2c 2d 31 20 2e 32 2c 2d 30 2e 33 20 2e 35 31 2c 2d 30 2e 34 30 20 2e 38 31 2c 2d 30 2e 34 30 20 7a 20 6d 20 2d 35 30 2e 34 39 2c 2e 31 32 20 63 20 2e 35 2c 30 20 2e 38 2c 2e 31 38 20 31 2c 2e 36 38 20 2e 31 39 2c 2e 35 20 2e 32 38 2c 31 2e 33 30 20 2e 32 38 2c 32 2e 34 30 20 6c 20 30 2c 34 2e 36 38 20 63 20 30 2c 31 2e 31 20 2d 30 2e 30 38 2c 31 2e 39 30 20 2d 30 2e 32 38 2c 32 2e 34 30 20 2d 30 2e 32 2c 2e 35 20 2d 30 2e 35 2c 2e 36 38 20 2d 31 2c 2e 36 38 20 2d 30 2e 35 2c 30 20 2d 30 2e 37 Data Ascii: 09,1.21 .09,2.21 l 0,1.09 -2.5,0 0,-1.09 c 0,-1 -0.00,-1.71 .09,-2.21 0,-0.4 .11,-0.8 .31,-1 .2,-0.3 .51,-0.40 .81,-0.40 z m -50.49,.12 c .5,0 .8,.18 1,.68 .19,.5 .28,1.30 .28,2.40 l 0,4.68 c 0,1.1 -0.08,1.90 -0.28,2.40 -0.2,.5 -0.5,.68 -1,.68 -0.5,0 -0.7
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 3a 22 70 61 74 68 22 2c 59 3a 7b 64 3a 22 4d 31 31 30 2e 37 39 20 34 31 2e 38 39 43 31 31 35 2e 31 35 20 34 31 2e 38 39 20 31 31 37 2e 37 35 20 33 39 2e 38 33 20 31 31 37 2e 37 35 20 33 35 2e 36 35 43 31 31 37 2e 37 35 20 33 31 2e 37 39 20 31 31 35 2e 39 33 20 33 30 2e 33 39 20 31 31 31 2e 38 35 20 32 37 2e 34 37 43 31 30 39 2e 36 37 20 32 35 2e 39 31 20 31 30 38 2e 33 39 20 32 35 2e 30 39 20 31 30 38 2e 33 39 20 32 32 2e 39 35 43 31 30 38 2e 33 39 20 32 31 2e 34 37 20 31 30 39 2e 32 37 20 32 30 2e 36 31 20 31 31 30 2e 38 39 20 32 30 2e 36 31 43 31 31 32 2e 36 39 20 32 30 2e 36 31 20 31 31 33 2e 33 33 20 32 31 2e 38 31 20 31 31 33 2e 33 33 20 32 35 2e 32 39 4c 31 31 37 2e 34 35 20 32 35 2e 30 37 43 31 31 37 2e 37 37 20 31 39 2e 35 37 20 31 31 35 2e 37 31 Data Ascii: :"path",Y:{d:"M110.79 41.89C115.15 41.89 117.75 39.83 117.75 35.65C117.75 31.79 115.93 30.39 111.85 27.47C109.67 25.91 108.39 25.09 108.39 22.95C108.39 21.47 109.27 20.61 110.89 20.61C112.69 20.61 113.33 21.81 113.33 25.29L117.45 25.07C117.77 19.57 115.71
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 34 39 2e 34 36 20 32 34 2e 39 37 20 34 38 2e 35 33 20 32 30 2e 33 32 43 34 37 2e 36 31 20 31 35 2e 36 36 20 34 35 2e 33 32 20 31 31 2e 33 38 20 34 31 2e 39 37 20 38 2e 30 33 43 33 38 2e 36 31 20 34 2e 36 37 20 33 34 2e 33 33 20 32 2e 33 38 20 32 39 2e 36 38 20 31 2e 34 36 43 32 35 2e 30 32 20 2e 35 33 20 32 30 2e 32 30 20 31 2e 30 31 20 31 35 2e 38 31 20 32 2e 38 32 43 31 31 2e 34 33 20 34 2e 36 34 20 37 2e 36 38 20 37 2e 37 31 20 35 2e 30 34 20 31 31 2e 36 36 43 32 2e 34 30 20 31 35 2e 36 31 20 31 20 32 30 2e 32 35 20 31 20 32 35 43 30 2e 39 39 20 32 38 2e 31 35 20 31 2e 36 31 20 33 31 2e 32 37 20 32 2e 38 32 20 33 34 2e 31 38 43 34 2e 30 33 20 33 37 2e 30 39 20 35 2e 37 39 20 33 39 2e 37 34 20 38 2e 30 32 20 34 31 2e 39 37 43 31 30 2e 32 35 20 34 34 2e Data Ascii: 49.46 24.97 48.53 20.32C47.61 15.66 45.32 11.38 41.97 8.03C38.61 4.67 34.33 2.38 29.68 1.46C25.02 .53 20.20 1.01 15.81 2.82C11.43 4.64 7.68 7.71 5.04 11.66C2.40 15.61 1 20.25 1 25C0.99 28.15 1.61 31.27 2.82 34.18C4.03 37.09 5.79 39.74 8.02 41.97C10.25 44.
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 65 3b 66 6f 72 28 63 3d 5b 64 5d 3b 64 2e 70 61 72 65 6e 74 21 3d 3d 76 6f 69 64 20 30 3b 29 64 3d 64 2e 70 61 72 65 6e 74 2c 61 2e 68 61 73 28 64 29 26 26 63 2e 70 75 73 68 28 64 29 3b 66 6f 72 28 3b 63 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 64 3d 63 2e 70 6f 70 28 29 3b 74 72 79 7b 64 2e 72 7a 28 29 7d 66 69 6e 61 6c 6c 79 7b 61 2e 64 65 6c 65 74 65 28 64 29 7d 7d 7d 4a 69 62 2e 64 65 6c 65 74 65 28 61 29 7d 2c 4d 69 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 0a 67 2e 4a 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 62 2e 6a 3d 3d 31 29 72 65 74 75 72 6e 20 61 3d 4c 69 62 2c 4c 69 62 3d 6e 65 77 20 53 65 74 2c 67 2e 47 28 62 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2c 32 29 3b 4b 69 62 28 61 29 3b 67 2e 76 61 28 62 29 7d 29 7d Data Ascii: e;for(c=[d];d.parent!==void 0;)d=d.parent,a.has(d)&&c.push(d);for(;c.length>0;){d=c.pop();try{d.rz()}finally{a.delete(d)}}}Jib.delete(a)},Mib=function(){var a;g.J(function(b){if(b.j==1)return a=Lib,Lib=new Set,g.G(b,Promise.resolve(),2);Kib(a);g.va(b)})}
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 46 29 2c 64 3d 63 2e 6e 65 78 74 28 29 3b 21 64 2e 64 6f 6e 65 3b 64 3d 63 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 65 3d 64 2e 76 61 6c 75 65 3b 65 28 29 7d 7d 63 61 74 63 68 28 66 29 7b 62 2e 65 72 72 6f 72 3d 66 2c 62 2e 68 61 73 45 72 72 6f 72 3d 21 30 7d 66 69 6e 61 6c 6c 79 7b 67 2e 65 62 28 62 29 7d 61 2e 6f 46 2e 6c 65 6e 67 74 68 3d 30 7d 7d 2c 53 69 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 49 61 29 7b 61 2e 49 61 3d 21 30 3b 0a 76 61 72 20 62 3b 28 62 3d 61 5b 53 79 6d 62 6f 6c 2e 64 69 73 70 6f 73 65 5d 29 3d 3d 6e 75 6c 6c 7c 7c 62 2e 63 61 6c 6c 28 61 29 3b 64 65 6c 65 74 65 20 61 2e 70 61 72 65 6e 74 3b 56 69 62 28 61 29 7d 7d 2c 57 69 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 2e 24 6f 28 74 68 69 73 29 3b 0a 69 66 28 67 2e Data Ascii: F),d=c.next();!d.done;d=c.next()){var e=d.value;e()}}catch(f){b.error=f,b.hasError=!0}finally{g.eb(b)}a.oF.length=0}},Sib=function(a){if(!a.Ia){a.Ia=!0;var b;(b=a[Symbol.dispose])==null\|\|b.call(a);delete a.parent;Vib(a)}},Wib=function(){g.$o(this);if(g.
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 61 6c 6c 28 61 2c 62 29 26 26 28 61 3d 61 5b 62 5d 2c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 29 7b 66 6f 72 28 76 61 72 20 64 3d 6e 75 6c 6c 2c 65 3d 21 31 2c 66 3d 30 2c 68 3d 61 2e 6c 65 6e 67 74 68 3b 66 3c 68 3b 2b 2b 66 29 7b 76 61 72 20 6c 3d 61 5b 66 5d 2c 6d 3d 6c 2e 4d 69 3b 0a 69 66 28 21 6d 29 72 65 74 75 72 6e 20 6c 2e 41 64 3b 64 3d 3d 3d 6e 75 6c 6c 26 26 28 64 3d 7b 7d 29 3b 6d 3d 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 6d 29 3f 64 5b 6d 5d 3a 64 5b 6d 5d 3d 63 28 6d 29 3b 69 66 28 6d 3d 3d 3d 6c 2e 57 69 29 72 65 74 75 72 6e 20 6c 2e 41 64 3b 6d 3d 3d 6e 75 6c 6c 26 26 28 65 3d 21 30 29 7d 69 66 28 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 62 3d 63 6a 62 5b 62 5d 3b 72 65 Data Ascii: all(a,b)&&(a=a[b],a instanceof Array))){for(var d=null,e=!1,f=0,h=a.length;f<h;++f){var l=a[f],m=l.Mi;if(!m)return l.Ad;d===null&&(d={});m=Object.hasOwnProperty.call(d,m)?d[m]:d[m]=c(m);if(m===l.Wi)return l.Ad;m==null&&(e=!0)}if(e)return null}b=cjb[b];re
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 72 67 2f 58 4d 4c 2f 31 39 39 38 2f 6e 61 6d 65 73 70 61 63 65 22 3a 62 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 78 6c 69 6e 6b 3a 22 2c 30 29 3d 3d 3d 30 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3a 6e 75 6c 6c 3b 64 3f 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 28 64 2c 62 2c 63 29 3a 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 62 2c 63 29 7d 7d 2c 6d 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 61 2e 73 74 79 6c 65 3b 0a 69 66 28 74 79 70 65 6f 66 20 63 3d 3d 3d 22 73 74 72 69 6e 67 22 29 61 2e 63 73 73 54 65 78 74 3d 63 3b 65 6c 73 65 7b 61 2e 63 73 73 54 65 78 74 3d 22 22 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 69 66 28 6c 6a 62 2e 63 61 6c 6c 28 63 2c 64 29 29 7b 62 Data Ascii: rg/XML/1998/namespace":b.lastIndexOf("xlink:",0)===0?"http://www.w3.org/1999/xlink":null;d?a.setAttributeNS(d,b,c):a.setAttribute(b,c)}},mjb=function(a,b,c){a=a.style;if(typeof c==="string")a.cssText=c;else{a.cssText="";for(var d in c)if(ljb.call(c,d)){b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	65100	142.250.186.174	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:52 UTC	795	OUT	GET /s/player/fb725ac8/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/NpMhKZDN7Js?rel=0%20frameborder= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=nNJVX6kvzEc; VISITOR_INFO1_LIVE=c6FmZbEKqco; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPQ%3D%3D
2024-10-24 23:02:52 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 338863 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:54:39 GMT Expires: Fri, 24 Oct 2025 20:54:39 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 23 Oct 2024 04:16:42 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 7693 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:02:52 UTC	691	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 70 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 68 3d 66 Data Ascii: length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.h=f
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 20 6c 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 0a 76 61 72 20 6d 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6c 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 0a 75 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 Data Ascii: nction la(a,b){return Object.prototype.hasOwnProperty.call(a,b)}var ma=typeof Object.assign=="function"?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)la(d,e)&&(a[e]=d[e])}return a};u("Object.assig
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 61 28 29 7b 74 68 69 73 2e 42 3d 21 31 3b 74 68 69 73 2e 75 3d 6e 75 6c 6c 3b 74 68 69 73 2e 69 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 68 3d 31 3b 74 68 69 73 2e 44 3d 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 4d 3d 74 68 69 73 2e 6a 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 69 66 28 61 2e 42 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 61 2e 42 3d 21 30 7d 0a 77 61 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 29 7b 61 2e 6a 3d 7b 65 78 63 65 70 74 69 6f 6e 3a 62 2c 65 64 3a 21 30 7d 3b 61 2e 68 3d 61 2e 6f 7c 7c Data Ascii: a(){this.B=!1;this.u=null;this.i=void 0;this.h=1;this.D=this.o=0;this.M=this.j=null}function xa(a){if(a.B)throw new TypeError("Generator is already running");a.B=!0}wa.prototype.H=function(a){this.i=a};function ya(a,b){a.j={exception:b,ed:!0};a.h=a.o\|\|
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 78 61 28 61 2e 68 29 3b 61 2e 68 2e 75 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 75 2e 6e 65 78 74 2c 62 2c 61 2e 68 2e 48 29 3a 28 61 2e 68 2e 48 28 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 78 61 28 61 2e 68 29 3b 61 2e 68 2e 75 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 75 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 68 2e 48 29 3a 28 79 61 28 61 2e 68 2c 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 44 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 Data Ascii: is.next=function(b){xa(a.h);a.h.u?b=Ea(a,a.h.u.next,b,a.h.H):(a.h.H(b),b=Fa(a));return b};this.throw=function(b){xa(a.h);a.h.u?b=Ea(a,a.h.u["throw"],b,a.h.H):(ya(a.h,b),b=Fa(a));return b};this.return=function(b){return Da(a,b)};this[Symbol.iterator]=fu
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 7d 7d 7d 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 3b 0a 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 5a 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 44 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ch(l){this.o(l)}}}this.h=null};c.prototype.o=function(g){this.j(function(){throw g;})};b.prototype.o=function(){function g(l){return function(m){k\|\|(k=!0,l.call(h,m))}}var h=this,k=!1;return{resolve:g(this.Z),reject:g(this.D)}};b.prototype.Z=function(
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 6a 3b 72 65 74 75 72 6e 20 6b 28 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 69 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 69 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 69 28 74 68 69 73 2e 69 5b 67 5d 29 3b 74 68 69 73 2e 69 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 6f 28 29 3b 67 2e 57 62 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6f 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c Data Ascii: j;return k(g)};b.prototype.M=function(){if(this.i!=null){for(var g=0;g<this.i.length;++g)f.i(this.i[g]);this.i=null}};var f=new c;b.prototype.ia=function(g){var h=this.o();g.Wb(h.resolve,h.reject)};b.prototype.xa=function(g,h){var k=this.o();try{g.call
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 74 69 6f 6e 20 62 28 6b 29 7b 74 68 69 73 2e 68 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 6b 3d 76 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 6c 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 62 Data Ascii: tion b(k){this.h=(h+=Math.random()+1).toString();if(k){k=v(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!la(k,g)){var l=new c;b
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 30 7d 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 2e 68 61 73 28 6b 29 3f 6c 3d 66 2e 67 65 74 28 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 67 2c 66 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 6c 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 6e 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 6e 2e 6b 65 79 21 3d 3d 6e 2e 6b 65 79 7c 7c 6b 3d 3d 3d 6e 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 65 6e 74 72 79 3a 6e 7d Data Ascii: 0}})}function d(h,k){var l=k&&typeof k;l=="object"\|\|l=="function"?f.has(k)?l=f.get(k):(l=""+ ++g,f.set(k,l)):l="p_"+k;var m=h[0][l];if(m&&la(h[0],l))for(h=0;h<m.length;h++){var n=m[h];if(k!==k&&n.key!==n.key\|\|k===n.key)return{id:l,list:m,index:h,entry:n}
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 70 72 65 76 69 6f 75 73 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 28 68 3d 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 29 26 26 68 2e 76 61 6c 75 65 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 Data Ascii: .head=null,this.size--,!0):!1};e.prototype.clear=function(){this[0]={};this[1]=this[1].previous=b();this.size=0};e.prototype.has=function(h){return!!d(this,h).entry};e.prototype.get=function(h){return(h=d(this,h).entry)&&h.value};e.prototype.entries=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	65101	142.250.186.174	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:52 UTC	783	OUT	GET /s/player/fb725ac8/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/NpMhKZDN7Js?rel=0%20frameborder= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=nNJVX6kvzEc; VISITOR_INFO1_LIVE=c6FmZbEKqco; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPQ%3D%3D
2024-10-24 23:02:52 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2465253 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 17:44:36 GMT Expires: Fri, 24 Oct 2025 17:44:36 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 23 Oct 2024 04:16:42 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 19096 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:02:52 UTC	689	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright Google LLC All Rights Reserved. Use of th
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 2c 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 Data Ascii: , modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 74 77 61 72 65 20 66 6f 72 20 61 6e 79 20 70 75 72 70 6f 73 65 2c 0a 20 20 20 69 6e 63 6c 75 64 69 6e 67 20 63 6f 6d 6d 65 72 63 69 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 64 3b 20 79 6f 75 20 6d 75 73 74 20 6e 6f 74 0a 20 20 20 20 20 20 63 6c 61 69 6d 20 74 68 61 74 20 79 6f 75 20 77 72 6f 74 65 20 74 68 65 20 6f 72 Data Ascii: tware for any purpose, including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you must not claim that you wrote the or
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 Data Ascii: ftware is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF A
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 42 63 61 2c 4f 64 2c 43 63 61 2c 4e 64 2c 52 64 2c 51 64 2c 53 64 2c 56 64 2c 5a 64 2c 46 63 61 2c 47 63 61 2c 58 64 2c 48 63 61 2c 49 63 61 2c 24 64 2c 4d 63 61 2c 61 65 2c 65 65 2c 66 65 2c 67 65 2c 62 65 2c 64 65 2c 63 65 2c 6a 65 2c 45 63 61 2c 6b 65 2c 4e 63 61 2c 66 62 2c 6c 65 2c 6d 65 2c 57 64 2c 59 64 2c 6f 65 2c 50 63 61 2c 70 65 2c 71 65 2c 51 63 61 2c 69 62 2c 72 65 2c 73 65 2c 74 65 2c 75 65 2c 76 65 2c 77 65 2c 78 65 2c 52 63 61 2c 79 65 2c 53 63 61 2c 7a 65 2c 54 63 61 2c 42 65 2c 41 65 2c 43 65 2c 44 65 2c 45 65 2c 47 65 2c 48 65 2c 55 63 61 2c 57 63 61 2c 4a 65 2c 58 63 61 2c 59 63 61 2c 4b 65 2c 4c 65 2c 4f 65 2c 24 63 61 2c 61 64 61 2c 50 65 2c 65 64 61 2c 68 64 61 2c 62 64 61 2c 67 64 61 2c 66 64 61 2c 64 64 61 2c 63 64 61 2c 69 64 61 Data Ascii: Bca,Od,Cca,Nd,Rd,Qd,Sd,Vd,Zd,Fca,Gca,Xd,Hca,Ica,$d,Mca,ae,ee,fe,ge,be,de,ce,je,Eca,ke,Nca,fb,le,me,Wd,Yd,oe,Pca,pe,qe,Qca,ib,re,se,te,ue,ve,we,xe,Rca,ye,Sca,ze,Tca,Be,Ae,Ce,De,Ee,Ge,He,Uca,Wca,Je,Xca,Yca,Ke,Le,Oe,$ca,ada,Pe,eda,hda,bda,gda,fda,dda,cda,ida
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 6a 6b 2c 63 68 61 2c 6b 6b 2c 6c 6b 2c 64 68 61 2c 6d 6b 2c 6e 6b 2c 6f 6b 2c 70 6b 2c 71 6b 2c 68 68 61 2c 65 68 61 2c 74 6b 2c 67 68 61 2c 75 6b 2c 66 68 61 2c 73 6b 2c 72 6b 2c 77 6b 2c 6a 68 61 2c 79 6b 2c 78 6b 2c 44 6b 2c 45 6b 2c 47 6b 2c 6d 68 61 2c 46 6b 2c 4a 6b 2c 6e 68 61 2c 4b 6b 2c 6b 68 61 2c 71 68 61 2c 72 68 61 2c 73 68 61 2c 50 6b 2c 51 6b 2c 52 6b 2c 74 68 61 2c 53 6b 2c 54 6b 2c 55 6b 2c 56 6b 2c 75 68 61 2c 57 6b 2c 58 6b 2c 59 6b 2c 76 68 61 2c 77 68 61 2c 5a 6b 2c 78 68 61 2c 50 6a 2c 41 68 61 2c 42 68 61 2c 43 68 61 2c 44 68 61 2c 79 68 61 2c 24 6b 2c 61 6c 2c 62 6c 2c 63 6c 2c 46 68 61 2c 65 6c 2c 64 6c 2c 47 68 61 2c 48 68 61 2c 49 68 61 2c 69 6c 2c 4a 68 61 2c 6a 6c 2c 6b 6c 2c 4b 68 61 2c 4c 68 61 2c 6c 6c 2c 4e 68 61 2c 6d 6c Data Ascii: jk,cha,kk,lk,dha,mk,nk,ok,pk,qk,hha,eha,tk,gha,uk,fha,sk,rk,wk,jha,yk,xk,Dk,Ek,Gk,mha,Fk,Jk,nha,Kk,kha,qha,rha,sha,Pk,Qk,Rk,tha,Sk,Tk,Uk,Vk,uha,Wk,Xk,Yk,vha,wha,Zk,xha,Pj,Aha,Bha,Cha,Dha,yha,$k,al,bl,cl,Fha,el,dl,Gha,Hha,Iha,il,Jha,jl,kl,Kha,Lha,ll,Nha,ml
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 61 2c 49 6c 61 2c 4a 6c 61 2c 4e 6c 61 2c 4d 6c 61 2c 50 6c 61 2c 52 6c 61 2c 69 70 2c 53 6c 61 2c 68 70 2c 6b 70 2c 54 6c 61 2c 6c 70 2c 6e 70 2c 6f 70 2c 55 6c 61 2c 0a 56 6c 61 2c 57 6c 61 2c 76 70 2c 58 6c 61 2c 59 6c 61 2c 45 70 2c 5a 6c 61 2c 61 6d 61 2c 46 70 2c 62 6d 61 2c 63 6d 61 2c 69 6d 61 2c 65 6d 61 2c 49 70 2c 4a 70 2c 4b 70 2c 4d 70 2c 4e 70 2c 6e 6d 61 2c 4f 70 2c 50 70 2c 51 70 2c 70 6d 61 2c 54 70 2c 71 6d 61 2c 72 6d 61 2c 55 70 2c 74 6d 61 2c 57 70 2c 58 70 2c 59 70 2c 5a 70 2c 75 6d 61 2c 24 70 2c 62 71 2c 63 71 2c 64 71 2c 65 71 2c 76 6d 61 2c 67 71 2c 68 71 2c 69 71 2c 6a 71 2c 6b 71 2c 6c 71 2c 77 6d 61 2c 78 6d 61 2c 79 6d 61 2c 7a 6d 61 2c 41 6d 61 2c 42 6d 61 2c 6d 71 2c 43 6d 61 2c 74 71 2c 44 6d 61 2c 45 6d 61 2c 46 6d 61 2c Data Ascii: a,Ila,Jla,Nla,Mla,Pla,Rla,ip,Sla,hp,kp,Tla,lp,np,op,Ula,Vla,Wla,vp,Xla,Yla,Ep,Zla,ama,Fp,bma,cma,ima,ema,Ip,Jp,Kp,Mp,Np,nma,Op,Pp,Qp,pma,Tp,qma,rma,Up,tma,Wp,Xp,Yp,Zp,uma,$p,bq,cq,dq,eq,vma,gq,hq,iq,jq,kq,lq,wma,xma,yma,zma,Ama,Bma,mq,Cma,tq,Dma,Ema,Fma,
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 4b 76 2c 4a 76 2c 53 71 61 2c 49 76 2c 4c 76 2c 4d 76 2c 4e 76 2c 54 71 61 2c 55 71 61 2c 50 76 2c 57 71 61 2c 53 76 2c 52 76 2c 55 76 2c 56 76 2c 57 76 2c 58 71 61 2c 58 76 2c 5a 76 2c 59 71 61 2c 61 77 2c 63 77 2c 64 77 2c 5a 71 61 2c 24 71 61 2c 61 72 61 2c 65 77 2c 67 77 2c 62 72 61 2c 68 77 2c 69 77 2c 6a 77 2c 64 72 61 2c 6b 77 2c 65 72 61 2c 6d 77 2c 70 77 2c 6f 77 2c 6e 77 2c 71 77 2c 72 77 2c 68 72 61 2c 6e 72 61 2c 70 72 61 2c 6d 72 61 2c 6c 72 61 2c 6f 72 61 2c 76 77 2c 79 77 2c 72 72 61 2c 71 72 61 2c 44 77 2c 45 77 2c 67 72 61 2c 41 72 61 2c 0a 4b 77 2c 7a 72 61 2c 44 72 61 2c 79 72 61 2c 75 77 2c 4c 77 2c 43 77 2c 49 77 2c 42 72 61 2c 41 77 2c 6a 72 61 2c 69 72 61 2c 6b 72 61 2c 78 77 2c 78 72 61 2c 50 77 2c 4b 72 61 2c 4a 72 61 2c 51 77 2c Data Ascii: Kv,Jv,Sqa,Iv,Lv,Mv,Nv,Tqa,Uqa,Pv,Wqa,Sv,Rv,Uv,Vv,Wv,Xqa,Xv,Zv,Yqa,aw,cw,dw,Zqa,$qa,ara,ew,gw,bra,hw,iw,jw,dra,kw,era,mw,pw,ow,nw,qw,rw,hra,nra,pra,mra,lra,ora,vw,yw,rra,qra,Dw,Ew,gra,Ara,Kw,zra,Dra,yra,uw,Lw,Cw,Iw,Bra,Aw,jra,ira,kra,xw,xra,Pw,Kra,Jra,Qw,
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 5a 42 2c 24 42 2c 61 43 2c 77 76 61 2c 78 76 61 2c 62 43 2c 76 76 61 2c 63 43 2c 41 76 61 2c 64 43 2c 65 43 2c 66 43 2c 67 43 2c 68 43 2c 69 43 2c 6a 43 2c 6b 43 2c 6c 43 2c 6d 43 2c 6e 43 2c 6f 43 2c 70 43 2c 71 43 2c 72 43 2c 73 43 2c 74 43 2c 75 43 2c 76 43 2c 77 43 2c 78 43 2c 79 43 2c 7a 43 2c 41 43 2c 42 43 2c 43 43 2c 44 43 2c 45 43 2c 46 43 2c 47 43 2c 48 43 2c 49 43 2c 4a 43 2c 4b 43 2c 4c 43 2c 4d 43 2c 4e 43 2c 4f 43 2c 50 43 2c 51 43 2c 52 43 2c 53 43 2c 54 43 2c 55 43 2c 56 43 2c 57 43 2c 58 43 2c 59 43 2c 5a 43 2c 24 43 2c 61 44 2c 62 44 2c 63 44 2c 64 44 2c 65 44 2c 66 44 2c 67 44 2c 68 44 2c 69 44 2c 6a 44 2c 6b 44 2c 6c 44 2c 6d 44 2c 6e 44 2c 6f 44 2c 70 44 2c 71 44 2c 72 44 2c 73 44 2c 74 44 2c 76 44 2c 77 44 2c 43 76 61 2c 78 44 2c 5a Data Ascii: ZB,$B,aC,wva,xva,bC,vva,cC,Ava,dC,eC,fC,gC,hC,iC,jC,kC,lC,mC,nC,oC,pC,qC,rC,sC,tC,uC,vC,wC,xC,yC,zC,AC,BC,CC,DC,EC,FC,GC,HC,IC,JC,KC,LC,MC,NC,OC,PC,QC,RC,SC,TC,UC,VC,WC,XC,YC,ZC,$C,aD,bD,cD,dD,eD,fD,gD,hD,iD,jD,kD,lD,mD,nD,oD,pD,qD,rD,sD,tD,vD,wD,Cva,xD,Z
2024-10-24 23:02:52 UTC	1378	IN	Data Raw: 7a 79 61 2c 78 49 2c 79 49 2c 42 79 61 2c 41 79 61 2c 43 79 61 2c 44 79 61 2c 45 79 61 2c 41 49 2c 42 49 2c 43 49 2c 46 79 61 2c 47 79 61 2c 48 79 61 2c 49 79 61 2c 4a 79 61 2c 4b 79 61 2c 4c 79 61 2c 4d 79 61 2c 4e 79 61 2c 4f 79 61 2c 45 49 2c 46 49 2c 50 79 61 2c 51 79 61 2c 47 49 2c 48 49 2c 52 79 61 2c 49 49 2c 4a 49 2c 4c 49 2c 53 79 61 2c 4d 49 2c 4e 49 2c 4f 49 2c 54 79 61 2c 50 49 2c 55 79 61 2c 51 49 2c 56 79 61 2c 52 49 2c 57 79 61 2c 58 79 61 2c 53 49 2c 59 79 61 2c 5a 79 61 2c 24 79 61 2c 54 49 2c 55 49 2c 56 49 2c 57 49 2c 58 49 2c 61 7a 61 2c 62 7a 61 2c 59 49 2c 5a 49 2c 24 49 2c 63 7a 61 2c 61 4a 2c 62 4a 2c 63 4a 2c 64 7a 61 2c 65 7a 61 2c 64 4a 2c 66 7a 61 2c 65 4a 2c 66 4a 2c 67 4a 2c 68 4a 2c 64 77 61 2c 67 7a 61 2c 68 7a 61 2c 69 7a Data Ascii: zya,xI,yI,Bya,Aya,Cya,Dya,Eya,AI,BI,CI,Fya,Gya,Hya,Iya,Jya,Kya,Lya,Mya,Nya,Oya,EI,FI,Pya,Qya,GI,HI,Rya,II,JI,LI,Sya,MI,NI,OI,Tya,PI,Uya,QI,Vya,RI,Wya,Xya,SI,Yya,Zya,$ya,TI,UI,VI,WI,XI,aza,bza,YI,ZI,$I,cza,aJ,bJ,cJ,dza,eza,dJ,fza,eJ,fJ,gJ,hJ,dwa,gza,hza,iz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	65102	188.114.96.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:52 UTC	489	OUT	GET /images/topic-healthy-home.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:52 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:52 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: 6c0eeb55d8d24d3e9ff6781f4172cb42 CF-Cache-Status: HIT Age: 143 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AuOUOwn779eIjU8TXQI3a1JLTFH0ZtTQk6ycnZKeVHOy9J9Bg18d1BBG5alNpgdp3K8KMvDshg2fsCRAq%2BbQgPUG6y%2B3v8j08fl%2BNXFUxfG%2BKHzoTFXDGiy4%2BLQ1eUpOMibZnOwgQITRzw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98d29e933168-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1156&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1067&delivery_rate=2445945&cwnd=250&unsent_bytes=0&cid=ba31d5689efe5b5c&ts=177&x=0"
2024-10-24 23:02:52 UTC	446	IN	Data Raw: 33 61 38 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 81 00 00 00 59 08 03 00 00 00 2e 13 b7 20 00 00 00 33 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 10 e8 47 00 00 00 10 74 52 4e 53 00 10 20 30 40 50 60 70 80 8f 9f af bf cf df ef 23 1a 82 8a 00 00 03 14 49 44 41 54 68 de ed d9 db b6 a3 20 0c 06 e0 80 51 23 46 f8 df ff 69 e7 82 83 58 ab ed 9e 8e 74 cd 8c b9 e8 ea 96 76 f3 2d 05 12 28 d1 1d 77 dc f1 2f c4 20 a3 f9 66 ff 66 01 10 fa 2f 03 00 0c ed 7b 16 19 2a 40 7b 82 09 00 c6 0a d0 9c c0 00 a0 35 a0 35 81 01 60 d9 00 1a 13 18 cf 62 f8 ba a0 25 e1 40 d0 90 70 24 68 47 38 14 b4 22 98 05 df 25 9c 01 9a 10 ce 01 0d 08 Data Ascii: 3a8PNGIHDRY. 3PLTEGtRNS 0@P`p#IDATh Q#FiXtv-(w/ ff/{*@{55`b%@p$hG8"%
2024-10-24 23:02:52 UTC	497	IN	Data Raw: f3 79 2b 50 d5 05 08 aa 3a 1d 09 42 fc 17 1d 11 00 55 55 00 e3 fb 02 79 dc 96 c5 3d 3b 57 d5 50 79 7f 20 58 cb a6 74 33 e5 ac 94 3a 13 74 40 98 81 e9 63 01 bf 10 8c cc cc 2e 0b 54 44 44 38 9d 50 4c 1d 10 cc 89 c0 31 33 8f 5b 81 17 91 f8 ab 50 12 0c 2f 04 39 ea 91 28 44 64 01 58 d2 78 52 76 24 a8 0a d6 87 91 a8 51 20 22 53 78 31 0e 8e 04 02 cc 44 43 9c 90 bf 2d 78 67 2e 6c 9f c2 3a 0e 42 3d af 7e f2 14 36 e3 20 6a 7e b2 1e 14 c1 7a 54 86 f9 83 91 c8 bc ec 4f a0 4e 05 8e 99 99 d9 d0 02 38 11 11 01 60 89 81 85 99 99 ed 6b 41 fc 20 db 34 12 6d 48 f3 e9 67 6b 22 73 39 37 72 80 5b 1f af bc 16 ac 9f 8c 73 61 3c dd 56 1c 0a 5c 79 20 1d 10 cc 27 02 d2 c7 03 a0 3a 06 91 b8 e6 89 30 11 4b 0e 2b a9 81 88 46 91 ce e6 06 26 b2 71 b2 e7 2f e5 0b e5 75 fd a4 88 10 11 19 Data Ascii: y+P:BUUy=;WPy Xt3:t@c.TDD8PL13[P/9(DdXxRv$Q "Sx1DC-xg.l:B=~6 j~zTON8`kA 4mHgk"s97r[sa<V\y ':0K+F&q/u
2024-10-24 23:02:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	65112	188.114.97.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:52 UTC	725	OUT	GET /images/icon-gears.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:52 UTC	915	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:52 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: 69e9175ec791ba80c5e7986a46664ded CF-Cache-Status: HIT Age: 143 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4K9N3tdzldpLzajGyX8GCNoMBstW3SRtGrV578nJC7qKZopL2EqF2z5L3qyzYmZI0vLeirHIVwVDO9UpfQHb5fS0sGCTfgjV5Cjc9JrFVt6dQKqMe%2B0gzUraLqCUmBZq4c5Tt8YRAzm0Jg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98d38b933ab0-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1119&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1303&delivery_rate=2500863&cwnd=251&unsent_bytes=0&cid=7679d6db4952a913&ts=172&x=0"
2024-10-24 23:02:52 UTC	454	IN	Data Raw: 39 64 65 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 8a 08 03 00 00 00 42 59 22 56 00 00 01 d4 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 9dePNGIHDRBY"VPLTE
2024-10-24 23:02:52 UTC	1369	IN	Data Raw: ec ec ec ed ed ed ee ee ee ef ef ef f0 f0 f0 f1 f1 f1 f2 f2 f2 f3 f3 f3 f4 f4 f4 f5 f5 f5 f6 f6 f6 f7 f7 f7 f8 f8 f8 f9 f9 f9 fa fa fa fb fb fb fc fc fc fd fd fd fe fe fe ff ff ff 0a ed 78 d7 00 00 00 5f 74 52 4e 53 00 01 07 0a 0b 0c 10 11 12 1b 1c 1f 20 22 2a 2b 35 36 3c 42 43 4d 4e 4f 53 54 55 56 5b 5e 5f 60 63 66 67 68 6a 6b 73 74 76 77 78 7b 7f 80 82 83 84 92 95 96 9b 9d 9e 9f a0 a1 a2 a3 b0 b1 ba bb bd cd ce cf d0 d3 d9 da db dc dd e1 e2 e3 e4 e5 e6 ee ef f0 f1 f2 f3 f4 f5 f6 f7 f9 fc fd fe e3 1d 79 e8 00 00 07 5a 49 44 41 54 18 19 ed c1 e9 43 13 07 1a 07 e0 17 82 ad 51 29 2a 94 ae 68 ab 6d 77 db ae 37 8a 16 50 6b 5b da 52 56 70 37 65 45 d9 08 6f 42 12 c2 21 24 10 b9 bd b8 11 04 02 81 1c f3 fb 67 37 e4 9a 99 64 26 99 64 66 fc 94 e7 a1 b2 b2 b2 b2 b2 Data Ascii: x_tRNS "+56<BCMNOSTUV[^_`cfghjkstvwx{yZIDATCQ)hmw7Pk[RVp7eEoB!$g7d&df
2024-10-24 23:02:52 UTC	710	IN	Data Raw: 98 8f 8c 45 91 10 1d e4 0c d7 2e 32 62 5e 96 98 0f 46 20 73 86 94 55 f5 41 ea 15 f3 d8 36 e2 42 73 6e 96 f1 ad c4 80 d8 2b 27 b3 37 84 94 61 16 bd 46 c6 9a 83 45 0b c8 d2 57 45 2a da 21 b3 bc 18 45 d2 de 1c 8b 02 9b 02 12 36 bc de 1d a4 4d b0 c8 bd 83 94 f0 30 8b dc 07 c8 d2 4e 6a 5a a1 6a c5 c1 49 8e 15 64 c4 62 c8 98 67 89 c1 6d 24 84 fc 2c 11 40 b6 7b a4 e6 1b a8 9b e0 a4 00 94 05 58 ca 35 bf 2d 08 c1 b7 5e 96 7a 8f 6c ff 20 35 9f 41 dd 12 27 ad 41 d1 be 9b e5 9c 1e cf 00 cb 78 23 c8 56 43 aa 1e 41 d5 12 27 6d 42 49 70 94 0b 9a 47 b6 4e 52 d7 04 55 ab 9c b4 8f 5c c2 9a 9b 0b 5b 41 b6 26 52 57 0f 55 9b 9c 14 42 ae 75 d6 e2 0d b2 d5 93 ba ca 6e a8 09 cf 8d 0f 79 3c a3 af 05 e4 5a 61 2d 46 23 90 fb 6f 25 e5 d1 8c 52 84 47 59 8b a9 18 64 5a 28 9f 3a 94 64 Data Ascii: E.2b^F sUA6Bsn+'7aFEWE*!E6M0NjZjIdbgm$,@{X5-^zl 5A'Ax#VCA'mBIpGNRU\[A&RWUBuny<Za-F#o%RGYdZ(:d
2024-10-24 23:02:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	65111	142.250.186.68	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:52 UTC	1299	OUT	GET /pagead/1p-user-list/834731891/?random=1729810968152&cv=9&fst=1729810800000&num=1&label=wLPuCJfyk3UQ8_6DjgM&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465926%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.garwoodsheating.com%2F&tiba=Garwood%27s%20Heating%20%26%20Cooling%2C%20Inc.%2C%20Air%20Conditioner%20%26%20Furnace%20Repair%20%26%20Service%20%7C%20Edwardsville%2C%20IL%2062025&hn=www.googleadservices.com&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dDaJZaW4ISKw1NXc1fv4loPFtuT0frA&random=1472466518&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:53 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 24 Oct 2024 23:02:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:02:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	65116	188.114.97.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:53 UTC	726	OUT	GET /images/icon-wrench.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:53 UTC	935	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:53 GMT Content-Type: image/png Content-Length: 2214 Connection: close x-cloud-trace-context: 69e9175ec791ba80c5e7986a46664ded expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" Age: 144 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y1vzQFMDIg3vYgUO4PTfBg%2BCgazUJjwNQaSa%2BQuKTmrper8KW3H2UJarbrlTu%2BD9dS00wk1OpFgQkzpKFvSnM1nVSg6ZhvH3GcGoW1oYWuPmC7bdCF25mJ28QshJTkSyj6k8VGx0SCjdxQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98d6fb004857-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1175&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1304&delivery_rate=2387469&cwnd=241&unsent_bytes=0&cid=f8ae5f4eba942347&ts=183&x=0"
2024-10-24 23:02:53 UTC	434	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 8a 08 03 00 00 00 42 59 22 56 00 00 01 d4 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDRBY"VPLTE
2024-10-24 23:02:53 UTC	1369	IN	Data Raw: e7 e7 e7 e8 e8 e8 e9 e9 e9 ea ea ea eb eb eb ec ec ec ed ed ed ee ee ee ef ef ef f0 f0 f0 f1 f1 f1 f2 f2 f2 f3 f3 f3 f4 f4 f4 f5 f5 f5 f6 f6 f6 f7 f7 f7 f8 f8 f8 f9 f9 f9 fa fa fa fb fb fb fc fc fc fd fd fd fe fe fe ff ff ff 0a ed 78 d7 00 00 00 5f 74 52 4e 53 00 01 07 0a 0b 0c 10 11 12 1b 1c 1f 20 22 2a 2b 35 36 3c 42 43 4d 4e 4f 53 54 55 56 5b 5e 5f 60 63 66 67 68 6a 6b 73 74 76 77 78 7b 7f 80 82 83 84 92 95 96 9b 9d 9e 9f a0 a1 a2 a3 b0 b1 ba bb bd cd ce cf d0 d3 d9 da db dc dd e1 e2 e3 e4 e5 e6 ee ef f0 f1 f2 f3 f4 f5 f6 f7 f9 fc fd fe e3 1d 79 e8 00 00 06 22 49 44 41 54 18 19 ed c1 f9 43 53 57 1a 06 e0 0f 82 ad 51 29 22 94 8e 68 ab 6d a7 cb a0 28 20 5a 40 ac 6d 69 4b 19 81 99 5b 46 34 13 e1 4b c2 12 36 59 52 10 11 50 41 94 b2 55 76 48 de 7f b6 80 2c Data Ascii: x_tRNS "*+56<BCMNOSTUV[^_`cfghjkstvwx{y"IDATCSWQ)"hm( Z@miK[F4K6YRPAUvH,
2024-10-24 23:02:53 UTC	411	IN	Data Raw: 2f ef 7b 8c 5d 33 6c 12 5a 84 36 ff 19 4a aa 0c 71 06 78 df 10 76 bd 61 93 19 e8 bb 41 c9 79 7d 30 7b ca fb 82 2b d8 31 c8 47 26 a0 ef ff 5e 92 70 0d 66 33 7c a0 6f 71 73 79 9c 8f 0c 45 a1 ef 1a c9 f0 34 c2 64 a5 8d 0f 04 7b 3b f8 48 d7 06 f4 35 66 91 94 42 98 fd c1 42 ed 6f e1 40 21 49 aa 86 c9 52 90 05 82 af e1 c0 1d 92 e5 35 60 32 c1 02 cf e0 80 71 8a a4 15 c2 24 3a c4 c7 0c 46 e1 c0 05 52 70 0b 26 eb 43 9c 60 60 13 0e dc 22 15 9e 9f 61 12 1b 0b b2 49 70 2c 0a 07 7e f6 90 92 6c 03 66 0b 91 00 1f 18 9a 87 13 46 36 29 ca f3 23 ce 5f 53 91 9e 50 a8 3b f2 7c 29 06 27 fc 79 a4 ec 62 2b 52 a0 f5 22 69 f8 06 29 f0 0d 69 29 86 eb 8a 49 d3 95 56 b8 aa f5 0a 69 bb fc 08 2e 7a 74 99 1c 28 f0 c1 35 be 02 72 e4 9c 01 97 18 e7 c8 a1 ec 1a b8 a2 26 9b 1c f3 dc 82 0b Data Ascii: /{]3lZ6JqxvaAy}0{+1G&^pf3\|oqsyE4d{;H5fBBo@!IR5`2q$:FRp&C``"aIp,~lfF6)#_SP;\|)'yb+R"i)i)IVi.zt(5r&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	65118	188.114.97.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:53 UTC	731	OUT	GET /images/icon-gear-wrench.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:53 UTC	917	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:53 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: 69e9175ec791ba80c5e7986a46664ded CF-Cache-Status: HIT Age: 144 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K73%2Fq%2FyCt5xpRuBT3hsDq5MzI419VNxmRiBbw4HZeEYo3O7QquNUsyz11I3w1m4HZEBIgJhmsCQJG4Zill74vNJsIBLSVZFmifrhvVBn1HEDzNNBgQuccDfN53whXLrkZU5fIrjT11iRTw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98d77e1f485b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1153&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1309&delivery_rate=2500863&cwnd=251&unsent_bytes=0&cid=8e697e5f9fa5b801&ts=191&x=0"
2024-10-24 23:02:53 UTC	452	IN	Data Raw: 36 31 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 57 00 00 00 58 08 03 00 00 00 b7 40 9b 8b 00 00 01 86 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 611PNGIHDRWX@PLTE
2024-10-24 23:02:53 UTC	1108	IN	Data Raw: 09 0a 0c 1c 1d 1e 1f 20 22 23 24 25 2a 2d 30 31 35 36 37 44 47 48 49 51 52 59 5a 87 88 89 8a 8b 8c 8d 93 9a 9b 9c 9d 9e ae b0 cd ce cf d0 dd e0 e1 e2 e3 e4 e5 e6 e9 ea ec ed ee ef f0 f2 f3 f9 fa fb a7 7b f8 05 00 00 03 f4 49 44 41 54 18 19 ed c1 fd 43 12 77 1c 07 f0 8f 2e 11 1b b9 66 5b 6e a9 0d 9d 2d a9 61 3a 13 a6 e5 72 32 3e 27 28 68 f8 78 90 32 75 6a e0 43 26 89 0f 40 dc fb 3f ef 4e d4 dd 1d df 3b 0e eb b7 7c bd e8 c6 8d 1b 5f 05 4f 97 f7 f7 67 c1 09 60 22 38 e0 f7 76 79 e8 0b 68 68 7f 1c 80 49 e0 71 7b 03 7d 96 66 ef 30 84 02 5e 37 5d db 1d 5f 08 96 42 be 3b 74 2d ae 9e 30 6c 85 7b 5d 54 bf 8e 00 6a 0a 74 52 9d 6e f9 e0 88 ef 16 d5 a3 65 00 0e 0d b4 90 73 6d 23 70 6c a4 8d 9c fa e1 15 ea f0 ea 3e 39 f3 fd 38 ea 32 de 46 4e 34 07 50 a7 40 33 d5 d6 34 Data Ascii: "#$%*-01567DGHIQRYZ{IDATCw.f[n-a:r2>'(hx2ujC&@?N;\|_Og`"8vyhhIq{}f0^7]_B;t-0l{]TjtRnesm#pl>982FN4P@34
2024-10-24 23:02:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.6	65113	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:53 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:53 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:53 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 4af8c3a5-e01e-0033-1562-264695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230253Z-16849878b78fmrkt2ukpvh9wh4000000087g00000000qdk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:02:53 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.6	65106	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:53 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:53 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:53 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 66eaddbf-601e-0084-58ff-256b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230253Z-r197bdfb6b4t7wszkhsu1pyev000000000r0000000006ve3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:53 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.6	65108	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:53 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:53 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230253Z-17c5cb586f6w4mfs5xcmnrny6n000000015g0000000097my x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:53 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.6	65107	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:53 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:53 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 1cb97257-a01e-0070-50f3-24573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230253Z-15b8d89586fnsf5zd126eyaetw00000000xg0000000040r6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:53 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.6	65109	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:53 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:53 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:53 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 9e6b2b63-d01e-008e-7443-26387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230253Z-17c5cb586f6q4vmqk5qfzgptrg00000001yg000000008f36 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:53 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	65120	52.9.171.8	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:53 UTC	509	OUT	GET /pixel/cv_pixel.js HTTP/1.1 Host: adservices.brandcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AWSALBCORS=JyB2i1d0mWd0wbSqaDhyhkU8NjSfVzeozZbNcK8GEYGYJ//22tr29yw8U59ui4c/LK1X1+VexQTCHvvc3QbyNIgfQK+RdJIcAlMNYfUl+mJbCzWi7a0qfctQF7T+
2024-10-24 23:02:53 UTC	689	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:53 GMT Content-Type: text/javascript Content-Length: 1555 Connection: close Set-Cookie: AWSALB=+u+PaTIvi44RUZE1uKD69m4kQMUI0Ffn+qY/tfJk8yIGYNKCBW0bMWospFMo+1TeyT+PFiXMJLruljZqj5ZEgqifsoYQfu3qkiOTRS71gzKGRuagdD7yTq831oQj; Expires=Thu, 31 Oct 2024 23:02:53 GMT; Path=/ Set-Cookie: AWSALBCORS=+u+PaTIvi44RUZE1uKD69m4kQMUI0Ffn+qY/tfJk8yIGYNKCBW0bMWospFMo+1TeyT+PFiXMJLruljZqj5ZEgqifsoYQfu3qkiOTRS71gzKGRuagdD7yTq831oQj; Expires=Thu, 31 Oct 2024 23:02:53 GMT; Path=/; SameSite=None; Secure Server: Apache/2.4.52 (Ubuntu) Last-Modified: Mon, 10 Apr 2023 18:00:27 GMT ETag: "613-5f8ff265c97b6" Accept-Ranges: bytes Vary: Accept-Encoding
2024-10-24 23:02:53 UTC	1555	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 64 64 4c 6f 61 64 45 76 65 6e 74 28 65 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3f 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 65 3a 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 26 26 6e 28 29 2c 65 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 6e 65 72 61 74 65 55 55 49 44 28 29 7b 76 61 72 20 65 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 28 65 2b Data Ascii: function addLoadEvent(e){var n=window.onload;"function"!=typeof window.onload?window.onload=e:window.onload=function(){n&&n(),e()}}function generateUUID(){var e=(new Date).getTime();return window.performance&&"function"==typeof window.performance.now&&(e+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	65119	142.250.185.68	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:53 UTC	470	OUT	GET /recaptcha/api.js?onload=CaptchaCallback&render=explicit HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:53 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 24 Oct 2024 23:02:53 GMT Date: Thu, 24 Oct 2024 23:02:53 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:53 UTC	629	IN	Data Raw: 35 64 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5d6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-24 23:02:53 UTC	872	IN	Data Raw: 72 61 76 63 7a 65 66 2f 77 49 6c 54 6b 62 56 6b 31 71 58 51 65 73 70 33 39 6e 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 Data Ascii: ravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGF
2024-10-24 23:02:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	65131	142.250.184.194	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:53 UTC	1006	OUT	GET /pagead/viewthroughconversion/834731891/?random=1729810968152&cv=9&fst=1729810968152&num=1&label=wLPuCJfyk3UQ8_6DjgM&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465926%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.garwoodsheating.com%2F&tiba=Garwood%27s%20Heating%20%26%20Cooling%2C%20Inc.%2C%20Air%20Conditioner%20%26%20Furnace%20Repair%20%26%20Service%20%7C%20Edwardsville%2C%20IL%2062025&hn=www.googleadservices.com&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-10-24 23:02:53 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 24 Oct 2024 23:02:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmbxgMGIAdTiTueEcDg_xsiTpyJoqwcNb5BsM4xEsWO2bfSYUrHcUXhEjkG; expires=Sat, 24-Oct-2026 23:02:53 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:53 UTC	367	IN	Data Raw: 31 32 37 30 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 64 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c Data Ascii: 1270(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};function k(a){a=["object"==typeof globalThis&&global
2024-10-24 23:02:54 UTC	1378	IN	Data Raw: 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 64 3d 61 5b 62 5d 3b 69 66 28 64 26 26 64 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 64 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 20 76 61 72 20 6d 3d 6b 28 74 68 69 73 29 2c 70 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 2c 74 3d 7b 7d 2c 76 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 2c 64 29 7b 69 66 28 21 64 7c 7c 61 21 3d 6e 75 6c 6c 29 7b 64 3d 76 5b 62 5d 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 64 3d 61 5b 64 5d 3b 72 65 Data Ascii: b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");} var m=k(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",t={},v={};function w(a,b,d){if(!d\|\|a!=null){d=v[b];if(d==null)return a[b];d=a[d];re
2024-10-24 23:02:54 UTC	1378	IN	Data Raw: 2b 2b 29 69 66 28 4c 3d 4c 5b 4b 5b 4d 5d 5d 2c 4c 3d 3d 6e 75 6c 6c 29 7b 48 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 48 3d 4c 7d 76 61 72 20 4e 3d 48 26 26 48 5b 36 31 30 34 30 31 33 30 31 5d 3b 47 3d 4e 21 3d 6e 75 6c 6c 3f 4e 3a 21 31 3b 76 61 72 20 4f 2c 50 3d 7a 2e 6e 61 76 69 67 61 74 6f 72 3b 4f 3d 50 3f 50 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 72 65 74 75 72 6e 20 47 3f 4f 3f 4f 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d Data Ascii: ++)if(L=L[K[M]],L==null){H=null;break a}H=L}var N=H&&H[610401301];G=N!=null?N:!1;var O,P=z.navigator;O=P?P.userAgentData\|\|null:null;function Q(a){return G?O?O.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1}function R(a){var b;a:{if(b=
2024-10-24 23:02:54 UTC	1378	IN	Data Raw: 74 63 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 49 3d 77 28 4f 62 6a 65 63 74 2c 22 61 73 73 69 67 6e 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 7b 7d 2c 46 29 3b 6e 26 26 28 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 26 26 20 28 49 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 3d 6e 2e 61 74 74 72 69 62 75 74 69 6f 6e 52 65 70 6f 72 74 69 6e 67 29 2c 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 26 26 28 49 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 3d 6e 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 29 29 3b 74 72 79 7b 76 61 72 20 53 3d 43 2e 66 65 74 63 68 28 71 2c 49 29 3b 53 26 26 53 2e 63 61 74 63 68 28 42 29 3b 76 61 72 20 4a 3d 21 30 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 62 61 Data Ascii: tch==="function"){var I=w(Object,"assign").call(Object,{},F);n&&(n.attributionReporting&& (I.attributionReporting=n.attributionReporting),n.browsingTopics&&(I.browsingTopics=n.browsingTopics));try{var S=C.fetch(q,I);S&&S.catch(B);var J=!0;break a}catch(ba
2024-10-24 23:02:54 UTC	227	IN	Data Raw: 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 72 66 6d 74 5c 78 33 64 33 5c 78 32 36 66 6d 74 5c 78 33 64 33 5c 78 32 36 69 73 5f 76 74 63 5c 78 33 64 31 5c 78 32 36 63 69 64 5c 78 33 64 43 41 51 53 4b 51 43 61 37 4c 37 64 36 74 65 48 56 4e 4e 4a 63 73 63 4c 41 51 49 52 46 31 64 2d 7a 6a 67 48 73 62 6a 46 37 36 79 71 69 47 39 45 61 4c 43 72 36 59 6c 63 53 77 49 61 5c 78 32 36 72 61 6e 64 6f 6d 5c 78 33 64 31 33 35 39 33 31 36 31 36 36 5c 78 32 36 72 65 73 70 5c 78 33 64 47 6f 6f 67 6c 65 6d 4b 54 79 62 51 68 43 73 4f 5c 78 32 36 72 6d 74 5f 74 6c 64 5c 78 33 64 30 5c 78 32 36 69 70 72 5c 78 33 64 79 27 5d 2c 20 5b 5d 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: .googleadservices.com\x26rfmt\x3d3\x26fmt\x3d3\x26is_vtc\x3d1\x26cid\x3dCAQSKQCa7L7d6teHVNNJcscLAQIRF1d-zjgHsbjF76yqiG9EaLCr6YlcSwIa\x26random\x3d1359316166\x26resp\x3dGooglemKTybQhCsO\x26rmt_tld\x3d0\x26ipr\x3dy'], []);})();
2024-10-24 23:02:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	65136	188.114.96.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:54 UTC	476	OUT	GET /images/cubes.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:54 UTC	923	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:54 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: 0816f8b5c1adfd97950a33e2d653d7bf CF-Cache-Status: HIT Age: 145 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=70vVCWEL%2FEeRaFh3t7gd4KE4ldykjkfPmcJkAdEzKp0c5HA8i0709CT1L%2FfDS1fcxzUcnLvLxVdrkEQOuV7XPD5rUB2VNQQ7fHarCWxIOi0GB0m%2FoloveYulOFET1Md%2BuLb2xlK%2F9BseHQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98ddf8bdb793-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2491&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2850&recv_bytes=1054&delivery_rate=1256399&cwnd=121&unsent_bytes=0&cid=db5335c3ad408cf7&ts=186&x=0"
2024-10-24 23:02:54 UTC	446	IN	Data Raw: 32 62 62 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 43 00 00 00 64 04 03 00 00 00 2f 4d 90 ce 00 00 00 2a 50 4c 54 45 00 00 00 c1 c1 c1 ce ce ce d3 d3 d3 d5 d5 d5 d6 d6 d6 d7 d7 d7 c1 c1 c1 ce ce ce d3 d3 d3 d5 d5 d5 d6 d6 d6 d7 d7 d7 d7 d7 d7 36 cb b6 3d 00 00 00 0e 74 52 4e 53 00 00 00 00 00 00 00 0a 14 1f 29 33 3d 47 0d 28 56 37 00 00 02 32 49 44 41 54 48 c7 ed 55 b1 8a db 40 10 dd 4f 88 2a bb 48 11 d4 9c 03 57 04 5c 38 07 29 ef 17 52 04 52 a4 b2 6c 48 71 ae 92 15 57 1c 6e 8e 48 57 1c b8 10 44 ee 7d 20 17 6e 02 96 77 03 a9 1c e4 55 7d cd fd cc 69 b5 5e ed ec 58 d2 91 36 e8 15 02 89 a7 7d 33 6f 66 67 08 41 d8 8f 6d 5c df 93 a7 c5 d0 02 a2 c4 6c 43 3e f1 07 17 c2 a2 4c f9 ca 79 45 1c 27 de cd 1c 03 48 09 c4 dc 75 df 90 e2 47 0a c5 0c Data Ascii: 2bbPNGIHDRCd/MPLTE6=tRNS)3=G(V72IDATHU@OHW\8)RRlHqWnHWD} nwU}i^X6}3ofgAm\lC>LyE'HuG
2024-10-24 23:02:54 UTC	260	IN	Data Raw: db e1 96 94 2f 04 7d 19 77 94 8e f2 1f 53 7e a1 7b f5 f9 84 12 64 68 60 be 46 14 2f 49 03 b4 e6 3e d8 94 69 5e 4c 91 3e b3 e6 c0 b9 45 f9 71 50 22 31 14 83 42 de 72 77 79 04 65 51 1d 85 c2 69 db 33 eb c8 c4 12 1f ec 4c aa 77 7d ca 04 8d aa 02 6f f3 15 a4 c0 25 36 04 b3 7a ae 33 f2 12 6c d7 11 81 1c ab 32 16 6b a4 da e8 f3 ad 7b 7e 45 02 31 77 9b 11 ee ae 6f 48 36 6c 85 9f 6f 08 8b 9c 16 f4 7f f3 3f a4 98 ac b3 46 86 2f a2 32 69 5f 2c ea 45 46 72 75 29 77 27 ec a1 2e 54 95 aa 76 37 ac 71 26 54 a9 56 cd e0 e3 a8 7b 2c c5 65 f4 92 2d 14 f1 f9 6d 4d bf 84 66 3f 9f 81 15 65 f5 6e b5 9f bf 33 e0 03 6a ef 75 d9 24 be 88 5a 6e 00 15 8b 11 b2 12 53 8a de 7a 5a b5 df a3 22 b3 bf ce 4b 94 6e 90 75 94 8e f2 ef 94 67 82 9d 73 57 0f ae bb 59 00 00 00 00 49 45 4e 44 ae Data Ascii: /}wS~{dh`F/I>i^L>EqP"1BrwyeQi3Lw}o%6z3l2k{~E1woH6lo?F/2i_,EFru)w'.Tv7q&TV{,e-mMf?en3ju$ZnSzZ"KnugsWYIEND
2024-10-24 23:02:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	65135	188.114.96.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:54 UTC	487	OUT	GET /images/topic-new-system.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:54 UTC	925	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:54 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: d87d01d017539175515b829144682dd1 CF-Cache-Status: HIT Age: 145 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cGCBYNptNmMx6nQ56QWgpdc1XSK3SyxgNI03A1%2BsutH9INFbfq%2BaVxy5I8jtb0TOZQj%2F0gDTiYUUr3TLsYLABUNFu8qKeFK00cGp2fphWarv%2FQPcyBLbJ%2BbOfno%2BFSHNLt82Ae4cFwjqOg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98ddf8923ace-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1248&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1065&delivery_rate=2287519&cwnd=227&unsent_bytes=0&cid=c2ae4b3e4f4eccd5&ts=187&x=0"
2024-10-24 23:02:54 UTC	444	IN	Data Raw: 34 64 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 81 00 00 00 59 08 03 00 00 00 2e 13 b7 20 00 00 00 33 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 10 e8 47 00 00 00 10 74 52 4e 53 00 10 20 30 40 50 60 70 80 8f 9f af bf cf df ef 23 1a 82 8a 00 00 04 3f 49 44 41 54 68 de ed 9a cd b6 ac 28 0c 85 83 44 40 8c b0 df ff 69 7b c0 bf 55 75 ee b1 57 f7 cd a4 98 94 2b 5a fa 09 21 d9 04 89 be ed db fe 83 16 d4 09 24 aa 13 20 aa 13 c0 a9 13 60 57 27 c8 56 93 20 03 40 32 7a 00 1b 00 00 a7 1e 81 2f 04 8a ae 70 55 82 ac 35 0e 16 ad 69 45 85 d8 09 c0 2a 00 66 00 40 74 d2 d2 44 80 4d a3 0b f2 4c 70 68 77 01 92 76 17 68 0c c3 da Data Ascii: 4d3PNGIHDRY. 3PLTEGtRNS 0@P`p#?IDATh(D@i{UuW+Z!$ `W'V @2z/pU5iE*f@tDMLphwvh
2024-10-24 23:02:54 UTC	798	IN	Data Raw: f4 ae c0 68 f2 d3 85 f5 de 6e 72 fe 8e c0 f6 7a 8e 7b 4b e0 1e cb f9 0b b8 42 38 01 4b 14 80 24 22 22 72 27 b8 44 44 e4 20 da 32 80 eb 38 33 90 8d 88 5c 40 2e 67 6a 4b 8f d7 f6 f5 fa ad 8e 42 98 96 49 13 01 4f 5a 2d 33 11 d1 51 36 5b f8 f6 c6 fc bc f4 9d 81 68 c6 02 f5 0f 04 66 08 c5 8d de 11 9c 40 7c 28 22 22 00 88 df 2a 81 84 10 42 e0 3b 41 0c 21 84 b0 11 df d5 fa 8d 60 03 60 ce 67 82 ba aa 3f 1c f3 5c 08 ef 3d 91 29 dc dd ec 46 10 81 48 fc b4 c6 e2 ce 86 f0 67 02 f7 33 81 c9 80 25 4a cf 2b 5d fb 09 e0 37 7e 60 ef 63 bc 12 f8 7f b3 03 61 4f 53 a7 84 f9 cd 5c 48 cd d1 6d 7c 43 90 46 84 b0 0f dc 20 39 43 be f5 41 64 66 66 36 c4 c0 c5 cc cc 1b 09 e0 8b b9 04 30 d9 99 8f 4a b2 10 ec 40 0a 21 84 20 0f 26 e4 9e a7 ed ab 30 6d 24 f1 f0 09 99 42 e5 b4 db 14 cd Data Ascii: hnrz{KB8K$""r'DD 283\@.gjKBIOZ-3Q6[hf@\|(""*B;A!``g?\=)FHg3%J+]7~`caOS\Hm\|CF 9CAdff60J@! &0m$B
2024-10-24 23:02:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	65138	188.114.96.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:54 UTC	495	OUT	GET /scripts/main.min.js?v=1729028189770 HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:54 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:54 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-cloud-trace-context: 918ba3bac03fcc3d7508768500435d25 expires: Thu, 24 Oct 2024 23:08:33 GMT Cache-Control: public, max-age=14400 etag: W/"9irGzg" Age: 261 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=crZFItAr8Ar2oAxmIXMQWOqjLuhllshMGfjnsh0290uBxWVR9DoZH3Ee9PXWJXIq4KUHQndLFpjpEbf%2B5IrEIFJCKv8ou6oZeop7gKxt9WEtnAGO7Pf640ut9F%2FNAfazHF68ay0vQWsWUA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98de0db3b789-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1072&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1073&delivery_rate=2671586&cwnd=39&unsent_bytes=0&cid=91f3ff1eefc87e9b&ts=161&x=0"
2024-10-24 23:02:54 UTC	438	IN	Data Raw: 37 38 33 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 22 2e 74 6f 70 69 63 73 2d 73 68 6f 77 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 3d 24 28 74 68 69 73 29 2e 61 74 74 72 28 22 68 72 65 66 22 29 3b 24 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 68 69 64 64 65 6e 2d 78 73 20 73 68 6f 77 22 29 2c 24 28 22 23 62 6c 6f 63 6b 2d 74 6f 70 69 63 2d 62 75 74 74 6f 6e 73 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 68 69 64 64 65 6e 2d 78 73 20 73 68 6f 77 22 29 2c 24 28 22 2e 74 6f 70 69 63 73 2d 73 68 6f 77 20 2e 67 6c 79 70 68 69 63 6f 6e 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 67 6c 79 70 68 69 63 6f 6e 2d Data Ascii: 783$(document).ready(function(){$(".topics-show").click(function(e){e.preventDefault();e=$(this).attr("href");$(e).toggleClass("hidden-xs show"),$("#block-topic-buttons").toggleClass("hidden-xs show"),$(".topics-show .glyphicon").toggleClass("glyphicon-
2024-10-24 23:02:54 UTC	1369	IN	Data Raw: 28 33 30 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 62 6c 6f 63 6b 22 3d 3d 24 28 22 2e 73 70 65 63 69 61 6c 2d 6f 66 66 65 72 73 2d 72 65 76 65 61 6c 65 64 22 29 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3f 28 24 28 22 2e 73 70 65 63 69 61 6c 2d 6f 66 66 65 72 73 2d 64 72 6f 70 64 6f 77 6e 20 68 32 22 29 2e 68 74 6d 6c 28 27 3c 73 6d 61 6c 6c 3e 48 69 64 65 20 53 70 65 63 69 61 6c 20 4f 66 66 65 72 73 26 6e 62 73 70 3b 26 6e 62 73 70 3b 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 6c 79 70 68 69 63 6f 6e 20 67 6c 79 70 68 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 74 6f 70 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 73 70 61 6e 3e 3c 2f 73 6d 61 6c 6c 3e 27 29 2c 24 28 22 2e 73 70 65 63 69 61 6c 2d 6f 66 66 65 72 73 2d 72 65 76 65 Data Ascii: (300,function(){"block"==$(".special-offers-revealed").css("display")?($(".special-offers-dropdown h2").html('<small>Hide Special Offers  <span class="glyphicon glyphicon-triangle-top" aria-hidden="true"></span></small>'),$(".special-offers-reve
2024-10-24 23:02:54 UTC	123	IN	Data Raw: 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 24 28 22 2e 73 69 64 65 62 61 72 22 29 2e 68 65 69 67 68 74 28 29 3b 24 28 22 23 70 61 67 65 2d 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 22 29 2e 61 74 74 72 28 22 73 74 79 6c 65 22 2c 22 6d 69 6e 2d 68 65 69 67 68 74 3a 22 2b 65 2b 22 70 78 22 29 7d 2c 31 30 30 29 7d 29 3b 0d 0a Data Ascii: (){setTimeout(function(){var e=$(".sidebar").height();$("#page-main-content").attr("style","min-height:"+e+"px")},100)});
2024-10-24 23:02:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	65137	188.114.96.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:54 UTC	494	OUT	GET /images/topic-repair-or-replace.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga=GA1.1.1386283618.1729810968; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0
2024-10-24 23:02:54 UTC	925	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:54 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: f73540cd8329c0fa9a6c43a2d469fec0 CF-Cache-Status: HIT Age: 145 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sGgtY9m%2FwtcDwbcICFATLYJCqSSb1FNzcdhjtMyzDd5a%2F8DtU9NEL2e2Mk873BBgrH92ssOzlFA41IrEeY6%2BXz7rhjuIrpF%2BAHwWvBIKTjTTt5hjmHwfkeNBitqk%2BsWVPM7T3fc%2BS2AUeQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d98de5dc83aae-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1775&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1072&delivery_rate=2287519&cwnd=251&unsent_bytes=0&cid=da747d804369ee9e&ts=161&x=0"
2024-10-24 23:02:54 UTC	444	IN	Data Raw: 35 38 62 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 81 00 00 00 59 08 03 00 00 00 2e 13 b7 20 00 00 00 33 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 10 e8 47 00 00 00 10 74 52 4e 53 00 10 20 30 40 50 60 70 80 8f 9f af bf cf df ef 23 1a 82 8a 00 00 04 f7 49 44 41 54 68 de ed 9a d9 b2 e3 2a 0c 45 85 91 b1 00 01 fb ff bf f6 3e 60 30 1e d2 c7 5d e5 e4 dc ae 8a 9e 9c d1 2b a0 61 4b 84 e8 6b 5f fb 07 cd d8 76 65 ed af dc 5f 0a b8 5e 4e 80 f2 c7 01 a6 02 40 eb 75 04 80 f0 f1 25 00 00 04 4b 64 03 00 a0 7c 7c 11 ea 7d 37 93 8f 13 2c 07 02 f3 eb 6b f0 71 57 74 07 00 a4 0f 2f 82 c5 c9 fc 8b 64 f1 06 9b 1d bb 72 26 80 db de Data Ascii: 58bPNGIHDRY. 3PLTEGtRNS 0@P`p#IDATh*E>`0]+aKk_ve_^N@u%Kd\|\|}7,kqWt/dr&
2024-10-24 23:02:54 UTC	982	IN	Data Raw: ba 67 33 52 76 b3 0e 2e 10 7c 59 45 0a ef ef d7 a2 26 3e 1c 0d de 1b 22 e2 d4 0a a4 21 9a 52 ad 80 66 a7 99 ec 9b 2a 43 37 bd c8 78 dd 2f 99 a8 2b 19 ff 56 c1 2c 7f d4 d0 6f ca 48 5d 8d 01 4d 17 d1 c9 f7 df 58 9e 0f 51 61 8f 48 17 f6 46 21 3d ed fb 04 53 ae 09 f4 b3 ad 54 ba c8 99 cb e7 10 7c 1c 63 e0 1d 45 e1 66 ed 8a 2d 13 39 33 97 37 46 e3 1f 2c 03 40 9a 88 88 6c 94 5f 00 a8 c9 6a a2 5f 34 fd 95 a9 c6 b1 84 c7 ef b8 ef 6b 5f fb da d7 be f6 bf 35 cb fc d7 72 75 6d c8 74 31 43 43 0a 6d d7 39 ba 5e 05 73 af c8 dc e4 72 7f 99 88 c8 f8 02 b4 93 98 b5 95 4c 81 ef 11 ac 0d d8 99 a0 8f 4d 73 ef 53 47 82 f1 d8 65 9b 38 ba 5d 33 eb 7e 26 50 55 ad 42 57 81 a4 aa aa be 5d e7 f5 2b dc 36 2d 68 04 45 55 d3 d6 49 98 02 14 3f 8b d6 4f 08 90 55 35 ff ac 60 d6 f9 a4 b4 Data Ascii: g3Rv.\|YE&>"!Rf*C7x/+V,oH]MXQaHF!=ST\|cEf-937F,@l_j_4k_5rumt1CCm9^srLMsSGe8]3~&PUBW]+6-hEUI?OU5`
2024-10-24 23:02:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	65134	52.210.142.7	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:54 UTC	812	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=903&dpuuid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=83240248554929040894345574828920493511
2024-10-24 23:02:54 UTC	901	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 23:02:54 GMT Content-Length: 0 Connection: close X-TID: VvITK5MhQ3E= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam DCS: dcs-prod-irl1-1-v067-0237dd27c.edge-irl1.demdex.com 2 ms set-cookie: dpm=83240248554929040894345574828920493511; Max-Age=15552000; Expires=Tue, 22 Apr 2025 23:02:54 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=83240248554929040894345574828920493511; Max-Age=15552000; Expires=Tue, 22 Apr 2025 23:02:54 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	65133	52.210.142.7	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:54 UTC	812	OUT	GET /demconf.jpg?et:ibs%7cdata:dpid=903&dpuuid=8de1627a-48e8-41d6-a181-d901bc5b2217&gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Daam HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=83240248554929040894345574828920493511
2024-10-24 23:02:54 UTC	901	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 23:02:54 GMT Content-Length: 0 Connection: close X-TID: YcVtCozsSIs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam DCS: dcs-prod-irl1-1-v067-0ff473ade.edge-irl1.demdex.com 2 ms set-cookie: dpm=83240248554929040894345574828920493511; Max-Age=15552000; Expires=Tue, 22 Apr 2025 23:02:54 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=83240248554929040894345574828920493511; Max-Age=15552000; Expires=Tue, 22 Apr 2025 23:02:54 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	65140	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:54 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:54 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:54 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230254Z-16849878b78jfqwd1dsrhqg3aw00000008fg000000009bng x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:54 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	65141	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:54 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:54 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:54 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 3cf1b782-701e-0001-32e5-21b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230254Z-16849878b785jrf8dn0d2rczaw00000000t000000000p2hf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:54 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	65147	172.217.16.148	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:55 UTC	620	OUT	GET /ip-lookup.php HTTP/1.1 Host: sos-apps.appspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.garwoodsheating.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:55 UTC	585	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:55 GMT Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Vary: Accept-Encoding Server: nginx Access-Control-Allow-Origin: https://www.garwoodsheating.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Set-Cookie: PHPSESSID=74348cc492d25d140431242d25fed811; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:55 UTC	43	IN	Data Raw: 32 30 0d 0a 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 2c 20 31 37 32 2e 32 31 37 2e 31 36 2e 31 34 38 22 0d 0a 30 0d 0a 0d 0a Data Ascii: 20"173.254.250.71, 172.217.16.148"0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	65146	172.217.16.148	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:55 UTC	618	OUT	GET /images/core/loader.gif HTTP/1.1 Host: core-dot-sos-apps.appspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:55 UTC	414	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * vary: Accept-Encoding Date: Thu, 24 Oct 2024 23:02:55 GMT Expires: Thu, 24 Oct 2024 23:12:55 GMT Cache-Control: public, max-age=600 ETag: "A3elYw" X-Cloud-Trace-Context: e1b611c6daa2d910fb32ec187e3ba0d1 Content-Type: image/gif Server: Google Frontend Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:55 UTC	1378	IN	Data Raw: 61 32 37 0d 0a 47 49 46 38 39 61 1f 00 1f 00 f5 00 00 0d 0d 0d 1c 1c 1c 2d 2d 2d 3e 3e 3e 48 48 48 51 51 51 26 26 26 41 41 41 57 57 57 1f 1f 1f 29 29 29 4b 4b 4b 53 53 53 47 47 47 32 32 32 12 12 12 4d 4d 4d 2b 2b 2b 1e 1e 1e a2 a2 a2 ae ae ae 8f 8f 8f 38 38 38 77 77 77 5d 5d 5d 8a 8a 8a 0f 0f 0f 7d 7d 7d 96 96 96 36 36 36 10 10 10 95 95 95 a5 a5 a5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 Data Ascii: a27GIF89a--->>>HHHQQQ&&&AAAWWW)))KKKSSSGGG222MMM+++888www]]]}}}666!NETSCAPE2.0!Created with ajaxload.i
2024-10-24 23:02:55 UTC	1228	IN	Data Raw: 1c 00 22 43 82 a0 c3 e6 64 4a 8c 1f 16 b8 0a e3 06 65 ca 0b ff 7e 55 19 63 33 e3 86 0f 06 1e b8 19 41 a2 64 42 85 0b 08 8a a9 09 02 00 21 f9 04 00 0a 00 ff 00 2c 00 00 00 00 1f 00 1f 00 00 06 ff 40 80 70 48 0c 08 06 84 02 a0 40 18 08 02 c4 a8 74 68 38 20 ae 57 00 f6 7a 30 4c a7 89 c1 16 ab 1d 23 06 89 ef 50 b1 30 67 dd 88 85 42 0d 60 c0 11 65 37 e3 ab d8 df f3 66 75 73 44 09 6d 78 5b 0d 0e 09 0f 00 0f 09 0e 0d 5b 65 0b 69 43 62 64 08 10 11 6a 11 10 87 58 03 54 81 95 6a 69 66 5e 00 56 5b 10 12 74 43 12 9e 5b 07 00 01 66 9b ae 43 11 66 46 63 0d b8 51 91 5b 47 63 0e bf 44 0e 63 48 63 a4 c6 09 63 49 63 8c c6 42 0f 63 4a d3 d3 05 d1 d8 8d d6 04 cb dc ce 5b 4d c4 dc c8 5b 4e bd dc c1 58 4f b6 d3 ba 63 50 aa 58 ac bf b0 63 b3 00 06 81 1d ae a6 63 50 01 b8 94 85 Data Ascii: "CdJe~Uc3AdB!,@pH@th8 Wz0L#P0gB`e7fusDmx[[eiCbdjXTjif^V[tC[fCfFcQ[GcDcHccIcBcJ[M[NXOcPXccP
2024-10-24 23:02:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.6	65148	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:56 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:56 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:56 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 9b0fb70e-e01e-0020-42f5-24de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230256Z-r197bdfb6b4gx6v9pg74w9f47s00000001c000000000nmc2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:02:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.6	65152	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:56 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:56 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:56 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 1f9c3bb8-d01e-0014-220b-22ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230256Z-16849878b784cpcc2dr9ch74ng00000008dg00000000g31d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:56 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.6	65151	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:56 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:56 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c4337264-b01e-0070-640b-221cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230256Z-16849878b786vsxz21496wc2qn00000008f000000000bhz3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:56 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.6	65149	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:56 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230256Z-15b8d89586fqj7k5h9gbd8vs9800000000v0000000007xys x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.6	65150	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:56 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:56 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:56 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fbaa75ab-301e-0020-3742-266299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230256Z-r197bdfb6b4hsj5bywyqk9r2xw000000014g0000000014q2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:56 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	65153	216.239.32.181	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:56 UTC	1329	OUT	POST /g/collect?v=2&tid=G-KQMZSWM9K6&gtm=45je4al0v899685487za200&_p=1729810966756&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101533421~101686685~101823848&cid=1386283618.1729810968&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1729810968&sct=1&seg=0&dl=https%3A%2F%2Fwww.garwoodsheating.com%2F&dt=Garwood%27s%20Heating%20%26%20Cooling%2C%20Inc.%2C%20Air%20Conditioner%20%26%20Furnace%20Repair%20%26%20Service%20%7C%20Edwardsville%2C%20IL%2062025&en=scroll&epn.percent_scrolled=90&_et=28&tfd=10815 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.garwoodsheating.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:56 UTC	854	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.garwoodsheating.com Date: Thu, 24 Oct 2024 23:02:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	65154	35.71.131.137	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:57 UTC	776	OUT	GET /track/evnt/?adv=jsac74j&ct=0:s4sw4zh&fmt=3 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://d1eoo1tco6rr5e.cloudfront.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRgFKAEyCwjk_J_21qK6PRAFOAFCBCICCAFaB2pzYWM3NGpgAXIDYWFt
2024-10-24 23:02:57 UTC	694	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 23:02:57 GMT Content-Length: 0 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon set-cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; expires=Fri, 24 Oct 2025 23:02:57 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRIWCgdydWJpY29uEgsIlO3xhMGiuj0QBRgFKAEyCwjUufSx16K6PRAFOAFCBCICCAFaB2pzYWM3NGpgAXIHcnViaWNvbg..; expires=Fri, 24 Oct 2025 23:02:57 GMT; domain=.adsrvr.org; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	65158	3.33.220.150	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:57 UTC	755	OUT	GET /track/cmf/generic?ttd_pid=aam HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRgFKAEyCwjk_J_21qK6PRAFOAFCBCICCAFaB2pzYWM3NGpgAXIDYWFt
2024-10-24 23:02:57 UTC	696	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 23:02:57 GMT Content-Length: 409 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon set-cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; expires=Fri, 24 Oct 2025 23:02:57 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRIWCgdydWJpY29uEgsImKmThcGiuj0QBRgFIAEoATILCOT8n_bWoro9EAU4AUIEIgIIAVoHanNhYzc0amABcgdydWJpY29u; expires=Fri, 24 Oct 2025 23:02:57 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-10-24 23:02:57 UTC	409	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 39 31 64 65 66 66 31 38 2d 64 31 66 35 2d 34 64 62 63 2d 62 66 65 63 2d 33 33 65 39 66 63 30 62 63 63 31 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 26 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 46 74 72 61 63 6b 25 32 46 63 6d 66 25 32 46 72 75 62 69 63 6f 6e 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 Data Ascii: Redirecting to: <a href="https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon">https://pixel.rubiconproject.com/tap.ph

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	65155	172.217.16.148	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:57 UTC	587	OUT	GET /fonts/raty.woff HTTP/1.1 Host: core-dot-sos-apps.appspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.garwoodsheating.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:57 UTC	429	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * vary: Accept-Encoding Date: Thu, 24 Oct 2024 23:02:57 GMT Expires: Thu, 24 Oct 2024 23:12:57 GMT Cache-Control: public, max-age=600 ETag: "A3elYw" X-Cloud-Trace-Context: d6650273cb7b2c4cef18112245a78e4b Content-Type: application/octet-stream Server: Google Frontend Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:57 UTC	949	IN	Data Raw: 37 30 34 0d 0a 77 4f 46 46 4f 54 54 4f 00 00 07 04 00 0a 00 00 00 00 06 bc 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 00 f4 00 00 03 81 00 00 03 81 ad ee 48 19 4f 53 2f 32 00 00 04 78 00 00 00 60 00 00 00 60 08 23 07 d9 63 6d 61 70 00 00 04 d8 00 00 00 5c 00 00 00 5c 09 4b be b3 67 61 73 70 00 00 05 34 00 00 00 08 00 00 00 08 00 00 00 10 68 65 61 64 00 00 05 3c 00 00 00 36 00 00 00 36 00 4a 6d 71 68 68 65 61 00 00 05 74 00 00 00 24 00 00 00 24 03 bd 01 ea 68 6d 74 78 00 00 05 98 00 00 00 24 00 00 00 24 0a 94 00 61 6d 61 78 70 00 00 05 bc 00 00 00 06 00 00 00 06 00 09 50 00 6e 61 6d 65 00 00 05 c4 00 00 01 1e 00 00 01 1e 7f ce 9c 11 70 6f 73 74 00 00 06 e4 00 00 00 20 00 00 00 20 00 03 00 00 01 00 04 04 00 01 Data Ascii: 704wOFFOTTOCFF HOS/2x``#cmap\\Kgasp4head<66Jmqhheat$$hmtx$$amaxpPnamepost
2024-10-24 23:02:57 UTC	859	IN	Data Raw: 89 90 8b 8f 8b 92 90 8f 96 8d 08 f7 23 a0 cc f7 16 05 8e 92 90 8f 91 8b 90 8b 90 87 8f 84 08 cb fb 16 f7 23 76 05 96 89 90 87 8b 84 08 0e 67 f7 e7 f7 5e 15 d4 d2 fb 0c 9d 82 9c 5e e7 8b fb a7 9c 82 e5 5b 7a f1 88 9e 05 f7 23 e3 15 23 26 a4 fb 23 05 8c 85 8a 86 89 87 89 88 88 89 86 8b 88 8b 87 8c 87 8d 08 fb 14 cf fb 15 47 05 87 89 87 8a 88 8b 87 8b 87 8d 89 8e 89 8f 8b 90 8c 91 08 a3 f7 23 23 f0 05 85 91 89 91 8d 90 8c 90 90 8e 94 8d 08 f7 23 a0 cc f7 16 05 8f 92 8f 8f 91 8b 90 8b 90 87 8f 84 08 cb fb 16 f7 23 76 05 94 89 90 88 8d 86 8d 86 88 85 85 85 08 0e f8 94 14 f8 94 15 8b 0c 0a 00 00 00 00 03 02 00 01 90 00 05 00 00 01 4c 01 66 00 00 00 47 01 4c 01 66 00 00 00 f5 00 19 00 84 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 10 00 00 00 00 00 00 00 00 Data Ascii: ##vg^^[z##&#G####vLfGLf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	65156	172.217.16.148	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:57 UTC	594	OUT	GET /fonts/slick/slick.woff HTTP/1.1 Host: core-dot-sos-apps.appspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.garwoodsheating.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:57 UTC	429	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * vary: Accept-Encoding Date: Thu, 24 Oct 2024 23:02:57 GMT Expires: Thu, 24 Oct 2024 23:12:57 GMT Cache-Control: public, max-age=600 ETag: "A3elYw" X-Cloud-Trace-Context: d6650273cb7b2c4cef18112245a78e4b Content-Type: application/octet-stream Server: Google Frontend Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:57 UTC	949	IN	Data Raw: 35 36 34 0d 0a 77 4f 46 46 4f 54 54 4f 00 00 05 64 00 0b 00 00 00 00 07 5c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 43 46 46 20 00 00 01 08 00 00 02 2e 00 00 02 9b 1f fa 56 0e 46 46 54 4d 00 00 03 38 00 00 00 1a 00 00 00 1c 6d d1 c8 af 47 44 45 46 00 00 03 54 00 00 00 1c 00 00 00 20 00 32 00 04 4f 53 2f 32 00 00 03 70 00 00 00 52 00 00 00 60 50 18 ff ae 63 6d 61 70 00 00 03 c4 00 00 00 50 00 00 01 62 22 0b 44 b0 68 65 61 64 00 00 04 14 00 00 00 2e 00 00 00 36 00 01 31 fb 68 68 65 61 00 00 04 44 00 00 00 1c 00 00 00 24 03 e5 02 03 68 6d 74 78 00 00 04 60 00 00 00 0e 00 00 00 0e 04 4a 00 4a 6d 61 78 70 00 00 04 70 00 00 00 06 00 00 00 06 00 05 50 00 6e 61 6d 65 00 00 04 78 00 00 00 dc 00 00 01 6e 05 27 81 c2 70 6f 73 74 00 00 Data Ascii: 564wOFFOTTOd\CFF .VFFTM8mGDEFT 2OS/2pR`PcmapPb"Dhead.61hheaD$hmtx`JJmaxppPnamexn'post
2024-10-24 23:02:57 UTC	438	IN	Data Raw: ff 36 03 44 0d 03 e3 6d b0 4a 05 06 46 00 37 cb 0e 0b 00 00 78 9c 63 60 60 60 66 80 60 19 06 46 06 10 88 01 f2 18 c1 7c 16 06 07 20 cd c3 c0 c1 c0 04 64 33 30 24 2a 28 29 4e 50 9c f4 ff 3f 58 1d 12 ef ff e2 fb 0f ef 15 dd cb 87 9a 00 07 8c 6c 0c e8 42 d4 07 2c 54 30 83 99 0a 66 e0 00 00 39 2d 0f 17 78 9c 63 60 64 60 60 00 62 3b af 30 ef 78 7e 9b af 0c dc 4c 0c 20 70 be b0 a2 1e 4e ab 32 a8 32 de 66 bc 0d e4 72 30 80 a5 01 fd a6 09 52 00 00 78 9c 63 60 64 60 60 bc cd c0 c0 a0 c7 c4 00 02 40 36 23 03 2a 60 02 00 30 62 01 ed 02 00 00 00 02 00 00 25 00 25 00 25 00 25 00 00 00 00 50 00 00 05 00 00 78 9c 6d 8e 3d 6a c3 40 10 85 3f d9 92 43 7e 48 91 22 f5 da a5 41 42 12 aa 5c a6 d0 01 52 b8 37 66 11 22 42 82 95 7d 8f 54 a9 52 e5 18 39 40 0e 90 13 e5 ed 7a 21 45 Data Ascii: 6DmJF7xc```f`F\| d30$()NP?XlB,T0f9-xc`d``b;0x~L pN22fr0Rxc`d``@6#`0b%%%%Pxm=j@?C~H"AB\R7f"B}TR9@z!E
2024-10-24 23:02:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	65164	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:57 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:57 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:57 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: efc778c0-f01e-0052-4de5-219224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230257Z-16849878b786wvrz321uz1cknn00000008fg000000001qmr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:57 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	65160	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:57 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:57 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:57 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 46af3d48-701e-0032-6627-21a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230257Z-16849878b78hz7zj8u0h2zng1400000008g0000000007k3f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	65161	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:57 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 27632888-301e-0096-61d8-21e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230257Z-16849878b78dsttbr1qw36rxs800000008bg00000000fngk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.6	65162	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:57 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:57 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:57 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 2044f02f-601e-0001-42eb-25faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230257Z-16849878b78bcpfn2qf7sm6hsn000000016000000000sgcy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:57 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.6	65163	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:57 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:57 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:57 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2897d81f-501e-005b-6528-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230257Z-r197bdfb6b4kzncf21qcaynxz800000002p0000000007byk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:57 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	65165	3.33.220.150	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:58 UTC	755	OUT	GET /track/cmf/generic?ttd_pid=aam HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRgFKAEyCwjk_J_21qK6PRAFOAFCBCICCAFaB2pzYWM3NGpgAXIDYWFt
2024-10-24 23:02:58 UTC	711	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 23:02:58 GMT Content-Length: 439 Connection: close server: Kestrel location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=OTFkZWZmMTgtZDFmNS00ZGJjLWJmZWMtMzNlOWZjMGJjYzE3&gdpr=0&gdpr_consent=&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17 set-cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; expires=Fri, 24 Oct 2025 23:02:58 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRIVCgZnb29nbGUSCwjcodem4fS3PRAFGAUgASgBMgsI5Pyf9taiuj0QBTgBQgQiAggBWgdqc2FjNzRqYAFyBmdvb2dsZQ..; expires=Fri, 24 Oct 2025 23:02:58 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-10-24 23:02:58 UTC	439	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 73 63 26 67 6f 6f 67 6c 65 5f 68 6d 3d 4f 54 46 6b 5a 57 5a 6d 4d 54 67 74 5a 44 46 6d 4e 53 30 30 5a 47 4a 6a 4c 57 4a 6d 5a 57 4d 74 4d 7a 4e 6c 4f 57 5a 6a 4d 47 4a 6a 59 7a 45 33 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 74 74 64 5f 74 64 69 64 3d 39 31 64 65 66 66 31 38 2d 64 31 66 35 2d 34 64 62 63 2d 62 66 65 63 2d 33 33 65 39 66 63 30 62 63 63 31 37 22 3e 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b Data Ascii: Redirecting to: <a href="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=OTFkZWZmMTgtZDFmNS00ZGJjLWJmZWMtMzNlOWZjMGJjYzE3&gdpr=0&gdpr_consent=&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17">https://cm.g.doubleclick

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	65167	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:58 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:58 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230258Z-16849878b786lft2mu9uftf3y400000000w000000000p1g7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:58 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.6	65166	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:58 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 42f5c72c-c01e-00a1-6643-267e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230258Z-16849878b785jrf8dn0d2rczaw00000000x0000000005p3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.6	65170	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:58 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:58 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f826faa8-301e-0099-1457-266683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230258Z-17c5cb586f6qt228zy1nuwhy2g00000001q000000000b946 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:58 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.6	65168	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:58 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:58 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 168e2c35-b01e-00ab-10df-25dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230258Z-16849878b785jsrm4477mv3ezn00000008ag00000000cag3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:58 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.6	65169	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:58 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:02:58 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:58 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: dcef298c-a01e-003d-47df-2598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230258Z-16849878b78lhh9t0fb3392enw000000085g00000000pbxd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:02:58 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	65183	172.217.23.110	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:59 UTC	466	OUT	GET /s/player/fb725ac8/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:59 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 68576 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 20:13:28 GMT Expires: Fri, 24 Oct 2025 20:13:28 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 23 Oct 2024 04:16:42 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 10171 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:02:59 UTC	691	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 37 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 42 53 44 2d 33 2d 43 6c 61 75 73 65 0a 2a 2f 0a 2f 2a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 45 69 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6d 75 74 65 64 41 75 74 6f 70 6c 61 79 3d 21 31 3b 61 2e 65 6e 64 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 61 2e 6c 69 6d 69 74 65 64 50 6c 61 79 62 61 63 6b 44 75 72 61 74 69 6f 6e 49 6e 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 67 2e Data Ascii: (function(g){var window=this;/* Copyright 2017 Google LLC SPDX-License-Identifier: BSD-3-Clause// SPDX-License-Identifier: Apache-2.0*/'use strict';var Eib=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 5b 62 5d 3d 67 2e 66 70 5b 62 5d 29 7d 29 3b 0a 72 65 74 75 72 6e 20 61 7d 2c 48 69 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 49 3a 22 73 76 67 22 2c 0a 59 3a 7b 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 31 30 20 32 36 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 57 3a 5b 7b 49 3a 22 70 61 74 68 22 2c 46 63 3a 21 30 2c 4e 3a 22 79 74 70 2d 73 76 67 2d 66 69 6c 6c 22 2c 59 3a 7b 64 3a 22 4d 20 31 36 2e 36 38 2c 2e 39 39 20 43 20 31 33 2e 35 35 2c 31 2e 30 33 20 37 2e 30 32 2c 31 2e 31 36 20 34 2e 39 39 2c 31 2e 36 38 20 63 20 2d 31 2e 34 39 2c 2e 34 20 2d 32 2e 35 39 2c 31 2e 36 20 2d 32 2e 39 39 2c 33 20 2d 30 2e 36 39 2c 32 2e 37 20 2d 30 2e 36 38 2c Data Ascii: [b]=g.fp[b])});return a},Hib=function(){return{I:"svg",Y:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},W:[{I:"path",Fc:!0,N:"ytp-svg-fill",Y:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 39 20 31 2e 30 39 2c 2d 33 2e 30 39 20 6c 20 30 2c 2d 30 2e 35 20 2d 32 2e 39 30 2c 2d 30 2e 32 31 20 63 20 30 2c 31 20 2d 30 2e 30 38 2c 31 2e 36 20 2d 30 2e 32 38 2c 32 20 2d 30 2e 31 2c 2e 34 20 2d 30 2e 35 2c 2e 36 32 20 2d 31 2c 2e 36 32 20 2d 30 2e 33 2c 30 20 2d 30 2e 36 31 2c 2d 30 2e 31 31 20 2d 30 2e 38 31 2c 2d 30 2e 33 31 20 2d 30 2e 32 2c 2d 30 2e 33 20 2d 30 2e 33 30 2c 2d 30 2e 35 39 20 2d 30 2e 34 30 2c 2d 31 2e 30 39 20 2d 30 2e 31 2c 2d 30 2e 35 20 2d 30 2e 30 39 2c 2d 31 2e 32 31 20 2d 30 2e 30 39 2c 2d 32 2e 32 31 20 6c 20 30 2c 2d 30 2e 37 38 20 35 2e 37 31 2c 2d 30 2e 30 39 20 30 2c 2d 32 2e 36 32 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 30 2c 2d 32 2e 37 38 20 2d 30 2e 34 30 2c 2d 33 2e 36 38 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 2d Data Ascii: 9 1.09,-3.09 l 0,-0.5 -2.90,-0.21 c 0,1 -0.08,1.6 -0.28,2 -0.1,.4 -0.5,.62 -1,.62 -0.3,0 -0.61,-0.11 -0.81,-0.31 -0.2,-0.3 -0.30,-0.59 -0.40,-1.09 -0.1,-0.5 -0.09,-1.21 -0.09,-2.21 l 0,-0.78 5.71,-0.09 0,-2.62 c 0,-1.6 -0.10,-2.78 -0.40,-3.68 -0.2,-0.89 -
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 39 2c 31 2e 32 31 20 2e 30 39 2c 32 2e 32 31 20 6c 20 30 2c 31 2e 30 39 20 2d 32 2e 35 2c 30 20 30 2c 2d 31 2e 30 39 20 63 20 30 2c 2d 31 20 2d 30 2e 30 30 2c 2d 31 2e 37 31 20 2e 30 39 2c 2d 32 2e 32 31 20 30 2c 2d 30 2e 34 20 2e 31 31 2c 2d 30 2e 38 20 2e 33 31 2c 2d 31 20 2e 32 2c 2d 30 2e 33 20 2e 35 31 2c 2d 30 2e 34 30 20 2e 38 31 2c 2d 30 2e 34 30 20 7a 20 6d 20 2d 35 30 2e 34 39 2c 2e 31 32 20 63 20 2e 35 2c 30 20 2e 38 2c 2e 31 38 20 31 2c 2e 36 38 20 2e 31 39 2c 2e 35 20 2e 32 38 2c 31 2e 33 30 20 2e 32 38 2c 32 2e 34 30 20 6c 20 30 2c 34 2e 36 38 20 63 20 30 2c 31 2e 31 20 2d 30 2e 30 38 2c 31 2e 39 30 20 2d 30 2e 32 38 2c 32 2e 34 30 20 2d 30 2e 32 2c 2e 35 20 2d 30 2e 35 2c 2e 36 38 20 2d 31 2c 2e 36 38 20 2d 30 2e 35 2c 30 20 2d 30 2e 37 39 Data Ascii: 9,1.21 .09,2.21 l 0,1.09 -2.5,0 0,-1.09 c 0,-1 -0.00,-1.71 .09,-2.21 0,-0.4 .11,-0.8 .31,-1 .2,-0.3 .51,-0.40 .81,-0.40 z m -50.49,.12 c .5,0 .8,.18 1,.68 .19,.5 .28,1.30 .28,2.40 l 0,4.68 c 0,1.1 -0.08,1.90 -0.28,2.40 -0.2,.5 -0.5,.68 -1,.68 -0.5,0 -0.79
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 22 70 61 74 68 22 2c 59 3a 7b 64 3a 22 4d 31 31 30 2e 37 39 20 34 31 2e 38 39 43 31 31 35 2e 31 35 20 34 31 2e 38 39 20 31 31 37 2e 37 35 20 33 39 2e 38 33 20 31 31 37 2e 37 35 20 33 35 2e 36 35 43 31 31 37 2e 37 35 20 33 31 2e 37 39 20 31 31 35 2e 39 33 20 33 30 2e 33 39 20 31 31 31 2e 38 35 20 32 37 2e 34 37 43 31 30 39 2e 36 37 20 32 35 2e 39 31 20 31 30 38 2e 33 39 20 32 35 2e 30 39 20 31 30 38 2e 33 39 20 32 32 2e 39 35 43 31 30 38 2e 33 39 20 32 31 2e 34 37 20 31 30 39 2e 32 37 20 32 30 2e 36 31 20 31 31 30 2e 38 39 20 32 30 2e 36 31 43 31 31 32 2e 36 39 20 32 30 2e 36 31 20 31 31 33 2e 33 33 20 32 31 2e 38 31 20 31 31 33 2e 33 33 20 32 35 2e 32 39 4c 31 31 37 2e 34 35 20 32 35 2e 30 37 43 31 31 37 2e 37 37 20 31 39 2e 35 37 20 31 31 35 2e 37 31 20 Data Ascii: "path",Y:{d:"M110.79 41.89C115.15 41.89 117.75 39.83 117.75 35.65C117.75 31.79 115.93 30.39 111.85 27.47C109.67 25.91 108.39 25.09 108.39 22.95C108.39 21.47 109.27 20.61 110.89 20.61C112.69 20.61 113.33 21.81 113.33 25.29L117.45 25.07C117.77 19.57 115.71
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 39 2e 34 36 20 32 34 2e 39 37 20 34 38 2e 35 33 20 32 30 2e 33 32 43 34 37 2e 36 31 20 31 35 2e 36 36 20 34 35 2e 33 32 20 31 31 2e 33 38 20 34 31 2e 39 37 20 38 2e 30 33 43 33 38 2e 36 31 20 34 2e 36 37 20 33 34 2e 33 33 20 32 2e 33 38 20 32 39 2e 36 38 20 31 2e 34 36 43 32 35 2e 30 32 20 2e 35 33 20 32 30 2e 32 30 20 31 2e 30 31 20 31 35 2e 38 31 20 32 2e 38 32 43 31 31 2e 34 33 20 34 2e 36 34 20 37 2e 36 38 20 37 2e 37 31 20 35 2e 30 34 20 31 31 2e 36 36 43 32 2e 34 30 20 31 35 2e 36 31 20 31 20 32 30 2e 32 35 20 31 20 32 35 43 30 2e 39 39 20 32 38 2e 31 35 20 31 2e 36 31 20 33 31 2e 32 37 20 32 2e 38 32 20 33 34 2e 31 38 43 34 2e 30 33 20 33 37 2e 30 39 20 35 2e 37 39 20 33 39 2e 37 34 20 38 2e 30 32 20 34 31 2e 39 37 43 31 30 2e 32 35 20 34 34 2e 31 Data Ascii: 9.46 24.97 48.53 20.32C47.61 15.66 45.32 11.38 41.97 8.03C38.61 4.67 34.33 2.38 29.68 1.46C25.02 .53 20.20 1.01 15.81 2.82C11.43 4.64 7.68 7.71 5.04 11.66C2.40 15.61 1 20.25 1 25C0.99 28.15 1.61 31.27 2.82 34.18C4.03 37.09 5.79 39.74 8.02 41.97C10.25 44.1
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 3b 66 6f 72 28 63 3d 5b 64 5d 3b 64 2e 70 61 72 65 6e 74 21 3d 3d 76 6f 69 64 20 30 3b 29 64 3d 64 2e 70 61 72 65 6e 74 2c 61 2e 68 61 73 28 64 29 26 26 63 2e 70 75 73 68 28 64 29 3b 66 6f 72 28 3b 63 2e 6c 65 6e 67 74 68 3e 30 3b 29 7b 64 3d 63 2e 70 6f 70 28 29 3b 74 72 79 7b 64 2e 72 7a 28 29 7d 66 69 6e 61 6c 6c 79 7b 61 2e 64 65 6c 65 74 65 28 64 29 7d 7d 7d 4a 69 62 2e 64 65 6c 65 74 65 28 61 29 7d 2c 4d 69 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 0a 67 2e 4a 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 62 2e 6a 3d 3d 31 29 72 65 74 75 72 6e 20 61 3d 4c 69 62 2c 4c 69 62 3d 6e 65 77 20 53 65 74 2c 67 2e 47 28 62 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2c 32 29 3b 4b 69 62 28 61 29 3b 67 2e 76 61 28 62 29 7d 29 7d 2c Data Ascii: ;for(c=[d];d.parent!==void 0;)d=d.parent,a.has(d)&&c.push(d);for(;c.length>0;){d=c.pop();try{d.rz()}finally{a.delete(d)}}}Jib.delete(a)},Mib=function(){var a;g.J(function(b){if(b.j==1)return a=Lib,Lib=new Set,g.G(b,Promise.resolve(),2);Kib(a);g.va(b)})},
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 29 2c 64 3d 63 2e 6e 65 78 74 28 29 3b 21 64 2e 64 6f 6e 65 3b 64 3d 63 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 65 3d 64 2e 76 61 6c 75 65 3b 65 28 29 7d 7d 63 61 74 63 68 28 66 29 7b 62 2e 65 72 72 6f 72 3d 66 2c 62 2e 68 61 73 45 72 72 6f 72 3d 21 30 7d 66 69 6e 61 6c 6c 79 7b 67 2e 65 62 28 62 29 7d 61 2e 6f 46 2e 6c 65 6e 67 74 68 3d 30 7d 7d 2c 53 69 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 49 61 29 7b 61 2e 49 61 3d 21 30 3b 0a 76 61 72 20 62 3b 28 62 3d 61 5b 53 79 6d 62 6f 6c 2e 64 69 73 70 6f 73 65 5d 29 3d 3d 6e 75 6c 6c 7c 7c 62 2e 63 61 6c 6c 28 61 29 3b 64 65 6c 65 74 65 20 61 2e 70 61 72 65 6e 74 3b 56 69 62 28 61 29 7d 7d 2c 57 69 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 67 2e 24 6f 28 74 68 69 73 29 3b 0a 69 66 28 67 2e 59 Data Ascii: ),d=c.next();!d.done;d=c.next()){var e=d.value;e()}}catch(f){b.error=f,b.hasError=!0}finally{g.eb(b)}a.oF.length=0}},Sib=function(a){if(!a.Ia){a.Ia=!0;var b;(b=a[Symbol.dispose])==null\|\|b.call(a);delete a.parent;Vib(a)}},Wib=function(){g.$o(this);if(g.Y
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 6c 6c 28 61 2c 62 29 26 26 28 61 3d 61 5b 62 5d 2c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 29 7b 66 6f 72 28 76 61 72 20 64 3d 6e 75 6c 6c 2c 65 3d 21 31 2c 66 3d 30 2c 68 3d 61 2e 6c 65 6e 67 74 68 3b 66 3c 68 3b 2b 2b 66 29 7b 76 61 72 20 6c 3d 61 5b 66 5d 2c 6d 3d 6c 2e 4d 69 3b 0a 69 66 28 21 6d 29 72 65 74 75 72 6e 20 6c 2e 41 64 3b 64 3d 3d 3d 6e 75 6c 6c 26 26 28 64 3d 7b 7d 29 3b 6d 3d 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 6d 29 3f 64 5b 6d 5d 3a 64 5b 6d 5d 3d 63 28 6d 29 3b 69 66 28 6d 3d 3d 3d 6c 2e 57 69 29 72 65 74 75 72 6e 20 6c 2e 41 64 3b 6d 3d 3d 6e 75 6c 6c 26 26 28 65 3d 21 30 29 7d 69 66 28 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 62 3d 63 6a 62 5b 62 5d 3b 72 65 74 Data Ascii: ll(a,b)&&(a=a[b],a instanceof Array))){for(var d=null,e=!1,f=0,h=a.length;f<h;++f){var l=a[f],m=l.Mi;if(!m)return l.Ad;d===null&&(d={});m=Object.hasOwnProperty.call(d,m)?d[m]:d[m]=c(m);if(m===l.Wi)return l.Ad;m==null&&(e=!0)}if(e)return null}b=cjb[b];ret
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 67 2f 58 4d 4c 2f 31 39 39 38 2f 6e 61 6d 65 73 70 61 63 65 22 3a 62 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 78 6c 69 6e 6b 3a 22 2c 30 29 3d 3d 3d 30 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3a 6e 75 6c 6c 3b 64 3f 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 28 64 2c 62 2c 63 29 3a 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 62 2c 63 29 7d 7d 2c 6d 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 61 2e 73 74 79 6c 65 3b 0a 69 66 28 74 79 70 65 6f 66 20 63 3d 3d 3d 22 73 74 72 69 6e 67 22 29 61 2e 63 73 73 54 65 78 74 3d 63 3b 65 6c 73 65 7b 61 2e 63 73 73 54 65 78 74 3d 22 22 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 69 66 28 6c 6a 62 2e 63 61 6c 6c 28 63 2c 64 29 29 7b 62 3d Data Ascii: g/XML/1998/namespace":b.lastIndexOf("xlink:",0)===0?"http://www.w3.org/1999/xlink":null;d?a.setAttributeNS(d,b,c):a.setAttribute(b,c)}},mjb=function(a,b,c){a=a.style;if(typeof c==="string")a.cssText=c;else{a.cssText="";for(var d in c)if(ljb.call(c,d)){b=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	65176	142.250.185.68	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:59 UTC	1056	OUT	GET /pagead/1p-user-list/834731891/?random=1729810968152&cv=9&fst=1729810800000&num=1&label=wLPuCJfyk3UQ8_6DjgM&guid=ON&resp=GooglemKTybQhCsO&eid=375603260%2C466465926%2C512247839&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_his=1&u_tz=-240&u_java=false&u_nplug=5&u_nmime=2&sendb=1&ig=1&frm=0&url=https%3A%2F%2Fwww.garwoodsheating.com%2F&tiba=Garwood%27s%20Heating%20%26%20Cooling%2C%20Inc.%2C%20Air%20Conditioner%20%26%20Furnace%20Repair%20%26%20Service%20%7C%20Edwardsville%2C%20IL%2062025&hn=www.googleadservices.com&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwCa7L7dDaJZaW4ISKw1NXc1fv4loPFtuT0frA&random=1472466518&resp=GooglemKTybQhCsO&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:59 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 24 Oct 2024 23:02:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:02:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	65188	142.250.186.68	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:59 UTC	943	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Le7wiUTAAAAAG-hCuWRcM2y2iVhXwgujyFy8Km9&co=aHR0cHM6Ly93d3cuZ2Fyd29vZHNoZWF0aW5nLmNvbTo0NDM.&hl=en&v=lqsTZ5beIbCkK4uGEGv9JmUR&size=compact&cb=ecuhzawa4rv HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:59 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 24 Oct 2024 23:02:59 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-vX1f3Q6A3eoT2AEEw1EOpw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:59 UTC	217	IN	Data Raw: 35 37 63 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 Data Ascii: 57ca<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 Data Ascii: /css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 Data Ascii: U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 Data Ascii: t-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto';
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: m/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 Data Ascii: : normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 6c 71 73 54 5a 35 62 65 49 62 43 6b 4b 34 75 47 45 47 76 39 4a 6d 55 52 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 76 58 31 66 33 51 36 41 33 65 6f 54 32 41 45 45 77 31 45 4f 70 77 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d Data Ascii: text/javascript" src="https://www.gstatic.com/recaptcha/releases/lqsTZ5beIbCkK4uGEGv9JmUR/recaptcha__en.js" nonce="vX1f3Q6A3eoT2AEEw1EOpw"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id=
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 66 50 67 36 53 68 55 74 2d 6d 6e 4a 45 6d 62 6c 76 4f 36 6b 4f 71 2d 79 31 7a 38 39 38 44 7a 58 73 7a 32 74 38 58 32 69 37 47 44 6d 73 65 7a 50 32 32 43 34 5f 55 78 68 5f 72 30 34 74 70 31 79 63 4d 43 58 4f 62 44 70 41 41 39 5a 6a 30 6e 4a 6d 5f 78 6e 57 6f 30 37 37 68 46 39 67 62 4f 70 56 37 46 55 58 39 6b 50 52 67 6e 6f 6a 45 7a 4a 74 62 37 4e 53 6d 66 64 35 4a 38 66 55 58 4a 5a 41 4e 33 53 46 75 76 6d 42 42 71 30 78 33 43 6c 42 70 59 4c 31 6a 47 6b 4f 61 45 7a 5f 4a 79 6b 71 4a 63 79 45 41 32 34 46 34 6e 6b 4c 63 34 4d 42 4f 2d 46 70 47 52 6a 43 6e 4d 73 4e 65 65 61 49 50 62 5a 54 51 72 55 34 71 71 41 6f 4e 33 76 2d 4c 34 38 4a 7a 6d 35 42 58 4e 75 63 76 69 35 6f 4b 38 43 64 2d 75 70 59 7a 6e 47 34 4c 43 55 39 52 70 57 61 47 37 6a 61 46 53 2d 4e 6c 32 Data Ascii: fPg6ShUt-mnJEmblvO6kOq-y1z898DzXsz2t8X2i7GDmsezP22C4_Uxh_r04tp1ycMCXObDpAA9Zj0nJm_xnWo077hF9gbOpV7FUX9kPRgnojEzJtb7NSmfd5J8fUXJZAN3SFuvmBBq0x3ClBpYL1jGkOaEz_JykqJcyEA24F4nkLc4MBO-FpGRjCnMsNeeaIPbZTQrU4qqAoN3v-L48Jzm5BXNucvi5oK8Cd-upYznG4LCU9RpWaG7jaFS-Nl2
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 43 74 4e 61 32 6b 31 59 30 74 71 56 6c 70 35 62 45 68 4e 5a 47 4d 35 53 6c 4a 5a 4f 45 49 79 63 57 5a 30 4f 55 5a 74 62 6a 4a 4d 54 79 39 68 53 48 68 42 53 46 70 57 4e 6c 46 77 4b 33 63 30 4e 47 68 4b 53 54 52 31 63 6a 42 6d 53 55 4e 36 53 56 6c 52 54 47 39 35 65 6e 4a 6b 55 7a 64 48 55 44 64 71 62 6e 5a 76 51 32 5a 4a 65 6c 42 78 52 54 42 6f 59 31 5a 33 5a 53 74 48 61 58 52 35 61 54 56 50 62 57 39 70 53 55 55 30 53 57 6c 34 55 56 68 70 53 32 78 57 5a 6d 77 35 59 6a 5a 52 4d 46 70 79 53 48 42 54 55 58 67 76 56 48 4e 49 52 57 68 61 62 32 5a 4f 4b 30 46 44 53 33 6c 47 4e 57 78 6e 4d 48 52 42 4d 48 4e 42 56 6b 39 68 62 33 42 79 4e 30 64 6f 54 6a 46 44 4f 56 42 74 55 6c 46 4b 56 6e 41 32 57 58 4d 78 57 57 46 74 57 46 6c 69 52 6e 4a 6f 56 55 56 55 56 6c 4a 72 Data Ascii: CtNa2k1Y0tqVlp5bEhNZGM5SlJZOEIycWZ0OUZtbjJMTy9hSHhBSFpWNlFwK3c0NGhKSTR1cjBmSUN6SVlRTG95enJkUzdHUDdqbnZvQ2ZJelBxRTBoY1Z3ZStHaXR5aTVPbW9pSUU0SWl4UVhpS2xWZmw5YjZRMFpySHBTUXgvVHNIRWhab2ZOK0FDS3lGNWxnMHRBMHNBVk9hb3ByN0doTjFDOVBtUlFKVnA2WXMxWWFtWFliRnJoVUVUVlJr
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 6c 61 47 56 58 4e 47 73 35 51 7a 68 4e 65 56 70 53 61 7a 4a 35 55 55 52 46 62 30 78 78 54 46 59 79 54 56 5a 7a 55 6d 4e 79 4d 47 70 75 53 32 46 43 65 6d 52 51 51 69 39 4d 4f 55 52 35 56 6a 46 33 56 32 6b 76 4e 53 74 77 61 47 30 33 63 57 49 7a 62 57 74 72 53 7a 41 32 59 7a 68 6e 59 6b 46 5a 4e 48 5a 48 5a 57 64 73 53 6e 51 72 54 31 70 48 5a 44 42 42 61 43 74 33 54 33 56 33 59 55 70 52 4e 6c 51 32 5a 30 6c 6f 63 56 68 4a 55 48 56 6a 55 6e 70 4f 52 32 78 52 53 47 6c 6e 61 6e 67 30 54 30 78 79 64 6c 68 32 5a 44 64 70 51 58 56 42 57 6b 35 54 64 47 64 6e 54 6d 70 45 62 48 68 74 52 33 70 7a 61 55 63 79 4f 44 56 6a 4f 45 6c 35 57 6a 56 4b 55 32 35 34 53 79 74 32 4f 56 68 76 4d 30 6c 53 62 48 70 4e 4e 57 68 53 55 45 52 4f 55 33 59 31 54 55 31 61 4f 53 39 74 63 58 Data Ascii: laGVXNGs5QzhNeVpSazJ5UURFb0xxTFYyTVZzUmNyMGpuS2FCemRQQi9MOUR5VjF3V2kvNStwaG03cWIzbWtrSzA2YzhnYkFZNHZHZWdsSnQrT1pHZDBBaCt3T3V3YUpRNlQ2Z0locVhJUHVjUnpOR2xRSGlnang0T0xydlh2ZDdpQXVBWk5TdGdnTmpEbHhtR3pzaUcyODVjOEl5WjVKU254Syt2OVhvM0lSbHpNNWhSUEROU3Y1TU1aOS9tcX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	65190	172.217.23.110	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:59 UTC	477	OUT	GET /s/player/fb725ac8/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:59 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 338863 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 19:07:21 GMT Expires: Fri, 24 Oct 2025 19:07:21 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 23 Oct 2024 04:16:42 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 14138 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:02:59 UTC	690	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 70 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 68 3d Data Ascii: .length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.h=
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 6c 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 0a 76 61 72 20 6d 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6c 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 0a 75 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 Data Ascii: unction la(a,b){return Object.prototype.hasOwnProperty.call(a,b)}var ma=typeof Object.assign=="function"?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)la(d,e)&&(a[e]=d[e])}return a};u("Object.assi
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 77 61 28 29 7b 74 68 69 73 2e 42 3d 21 31 3b 74 68 69 73 2e 75 3d 6e 75 6c 6c 3b 74 68 69 73 2e 69 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 68 3d 31 3b 74 68 69 73 2e 44 3d 74 68 69 73 2e 6f 3d 30 3b 74 68 69 73 2e 4d 3d 74 68 69 73 2e 6a 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 69 66 28 61 2e 42 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 61 2e 42 3d 21 30 7d 0a 77 61 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 29 7b 61 2e 6a 3d 7b 65 78 63 65 70 74 69 6f 6e 3a 62 2c 65 64 3a 21 30 7d 3b 61 2e 68 3d 61 2e 6f 7c Data Ascii: wa(){this.B=!1;this.u=null;this.i=void 0;this.h=1;this.D=this.o=0;this.M=this.j=null}function xa(a){if(a.B)throw new TypeError("Generator is already running");a.B=!0}wa.prototype.H=function(a){this.i=a};function ya(a,b){a.j={exception:b,ed:!0};a.h=a.o\|
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 78 61 28 61 2e 68 29 3b 61 2e 68 2e 75 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 75 2e 6e 65 78 74 2c 62 2c 61 2e 68 2e 48 29 3a 28 61 2e 68 2e 48 28 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 78 61 28 61 2e 68 29 3b 61 2e 68 2e 75 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 75 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 68 2e 48 29 3a 28 79 61 28 61 2e 68 2c 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 44 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 Data Ascii: his.next=function(b){xa(a.h);a.h.u?b=Ea(a,a.h.u.next,b,a.h.H):(a.h.H(b),b=Fa(a));return b};this.throw=function(b){xa(a.h);a.h.u?b=Ea(a,a.h.u["throw"],b,a.h.H):(ya(a.h,b),b=Fa(a));return b};this.return=function(b){return Da(a,b)};this[Symbol.iterator]=f
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 7d 7d 7d 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 3b 0a 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 5a 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 44 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e Data Ascii: tch(l){this.o(l)}}}this.h=null};c.prototype.o=function(g){this.j(function(){throw g;})};b.prototype.o=function(){function g(l){return function(m){k\|\|(k=!0,l.call(h,m))}}var h=this,k=!1;return{resolve:g(this.Z),reject:g(this.D)}};b.prototype.Z=function
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 2e 6a 3b 72 65 74 75 72 6e 20 6b 28 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 69 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 69 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 69 28 74 68 69 73 2e 69 5b 67 5d 29 3b 74 68 69 73 2e 69 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 6f 28 29 3b 67 2e 57 62 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6f 28 29 3b 74 72 79 7b 67 2e 63 61 6c Data Ascii: .j;return k(g)};b.prototype.M=function(){if(this.i!=null){for(var g=0;g<this.i.length;++g)f.i(this.i[g]);this.i=null}};var f=new c;b.prototype.ia=function(g){var h=this.o();g.Wb(h.resolve,h.reject)};b.prototype.xa=function(g,h){var k=this.o();try{g.cal
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 20 62 28 6b 29 7b 74 68 69 73 2e 68 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 6b 3d 76 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 6c 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b Data Ascii: ction b(k){this.h=(h+=Math.random()+1).toString();if(k){k=v(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!la(k,g)){var l=new c;
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 20 30 7d 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 2e 68 61 73 28 6b 29 3f 6c 3d 66 2e 67 65 74 28 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 67 2c 66 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 6c 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 6e 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 6e 2e 6b 65 79 21 3d 3d 6e 2e 6b 65 79 7c 7c 6b 3d 3d 3d 6e 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 65 6e 74 72 79 3a 6e Data Ascii: 0}})}function d(h,k){var l=k&&typeof k;l=="object"\|\|l=="function"?f.has(k)?l=f.get(k):(l=""+ ++g,f.set(k,l)):l="p_"+k;var m=h[0][l];if(m&&la(h[0],l))for(h=0;h<m.length;h++){var n=m[h];if(k!==k&&n.key!==n.key\|\|k===n.key)return{id:l,list:m,index:h,entry:n
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 79 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 70 72 65 76 69 6f 75 73 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 28 68 3d 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 29 26 26 68 2e 76 61 6c 75 65 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d Data Ascii: y.head=null,this.size--,!0):!1};e.prototype.clear=function(){this[0]={};this[1]=this[1].previous=b();this.size=0};e.prototype.has=function(h){return!!d(this,h).entry};e.prototype.get=function(h){return(h=d(this,h).entry)&&h.value};e.prototype.entries=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	65192	172.217.18.20	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:59 UTC	385	OUT	GET /scripts/core.min.js?v=1729776912 HTTP/1.1 Host: core-dot-sos-apps.appspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:59 UTC	435	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * X-Cloud-Trace-Context: c86f34eb974e049af65c4b11ebb31b3d Server: Google Frontend Date: Thu, 24 Oct 2024 23:02:50 GMT Expires: Thu, 24 Oct 2024 23:12:50 GMT Cache-Control: public, max-age=600 ETag: "A3elYw" Content-Type: application/javascript Vary: Accept-Encoding Age: 9 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-24 23:02:59 UTC	943	IN	Data Raw: 38 30 30 30 0d 0a 69 66 28 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 6f 63 75 6d 65 6e 74 3f 65 28 74 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 65 28 74 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 7d 3a 65 28 74 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 Data Ascii: 8000if(!function(t,e){"object"==typeof module&&"object"==typeof module.exports?module.exports=t.document?e(t,!0):function(t){if(t.document)return e(t);throw new Error("jQuery requires a window with a document")}:e(t)}("undefined"!=typeof window?window:t
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 74 68 69 73 2c 74 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 77 2e 65 61 63 68 28 74 68 69 73 2c 74 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 77 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 74 2c 65 2c 74 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: this,t.context=this.context,t},each:function(t,e){return w.each(this,t,e)},map:function(i){return this.pushStack(w.map(this,function(t,e){return i.call(t,e,t)}))},slice:function(){return this.pushStack(c.apply(this,arguments))},first:function(){return thi
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 7b 76 61 72 20 65 3b 69 66 28 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 77 2e 74 79 70 65 28 74 29 7c 7c 74 2e 6e 6f 64 65 54 79 70 65 7c 7c 77 2e 69 73 57 69 6e 64 6f 77 28 74 29 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 69 66 28 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 6d 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 21 6d 2e 63 61 6c 6c 28 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 29 72 65 74 75 72 6e 21 31 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 69 66 28 67 2e 6f 77 6e 4c 61 73 74 29 66 6f 72 28 65 20 69 6e 20 74 29 72 65 74 75 72 6e 20 6d 2e 63 61 6c 6c 28 74 2c 65 29 3b 66 6f 72 28 65 20 69 6e 20 74 29 3b 72 65 74 75 72 Data Ascii: {var e;if(!t\|\|"object"!==w.type(t)\|\|t.nodeType\|\|w.isWindow(t))return!1;try{if(t.constructor&&!m.call(t,"constructor")&&!m.call(t.constructor.prototype,"isPrototypeOf"))return!1}catch(t){return!1}if(g.ownLast)for(e in t)return m.call(t,e);for(e in t);retur
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 69 29 7b 66 6f 72 28 76 61 72 20 6e 2c 73 3d 5b 5d 2c 6f 3d 30 2c 61 3d 74 2e 6c 65 6e 67 74 68 2c 72 3d 21 69 3b 6f 3c 61 3b 6f 2b 2b 29 28 6e 3d 21 65 28 74 5b 6f 5d 2c 6f 29 29 21 3d 72 26 26 73 2e 70 75 73 68 28 74 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 73 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 76 61 72 20 6e 2c 73 3d 30 2c 6f 3d 74 2e 6c 65 6e 67 74 68 2c 61 2c 72 3d 5b 5d 3b 69 66 28 55 28 74 29 29 66 6f 72 28 3b 73 3c 6f 3b 73 2b 2b 29 6e 75 6c 6c 21 3d 28 6e 3d 65 28 74 5b 73 5d 2c 73 2c 69 29 29 26 26 72 2e 70 75 73 68 28 6e 29 3b 65 6c 73 65 20 66 6f 72 28 73 20 69 6e 20 74 29 6e 3d 65 28 74 5b 73 5d 2c 73 2c 69 29 2c 6e 75 6c 6c 21 3d 6e 26 26 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 4c 2e 61 70 70 6c 79 28 5b Data Ascii: i){for(var n,s=[],o=0,a=t.length,r=!i;o<a;o++)(n=!e(t[o],o))!=r&&s.push(t[o]);return s},map:function(t,e,i){var n,s=0,o=t.length,a,r=[];if(U(t))for(;s<o;s++)null!=(n=e(t[s],s,i))&&r.push(n);else for(s in t)n=e(t[s],s,i),null!=n&&r.push(n);return L.apply([
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 51 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 53 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 72 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 72 2b 22 2b 24 22 2c 22 67 22 29 2c 74 74 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 72 2b 22 2a 2c 22 2b 72 2b 22 2a 22 29 2c 65 74 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 72 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 72 2b 22 29 22 2b 72 2b 22 2a 22 29 2c 69 74 3d 6e 65 77 20 52 65 67 45 78 70 28 22 3d 22 2b 72 2b 22 2a 28 5b 5e 5c 5c 5d 27 5c 22 5d 2a 3f 29 22 2b 72 2b 22 2a 5c 5c 5d 22 2c Data Ascii: \|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\$)[\\]]\|"+Q+"))\|.)\$\|)",S=new RegExp("^"+r+"+\|((?:^\|[^\\\\])(?:\\\\.))"+r+"+$","g"),tt=new RegExp("^"+r+","+r+""),et=new RegExp("^"+r+"([>+~]\|"+r+")"+r+""),it=new RegExp("="+r+"([^\\]'\"]?)"+r+"*\\]",
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 6d 65 6e 74 7c 7c 65 3a 76 29 21 3d 3d 78 26 26 70 28 65 29 2c 69 3d 69 7c 7c 5b 5d 2c 21 74 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 69 3b 69 66 28 31 21 3d 3d 28 72 3d 28 65 3d 65 7c 7c 78 29 2e 6e 6f 64 65 54 79 70 65 29 26 26 39 21 3d 3d 72 29 72 65 74 75 72 6e 5b 5d 3b 69 66 28 66 26 26 21 6e 29 7b 69 66 28 73 3d 72 74 2e 65 78 65 63 28 74 29 29 69 66 28 61 3d 73 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 72 29 7b 69 66 28 21 28 6f 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 29 7c 7c 21 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 69 3b 69 66 28 6f 2e 69 64 3d 3d 3d 61 29 72 65 74 75 72 6e 20 69 2e 70 75 73 68 28 6f 29 2c 69 7d 65 6c 73 65 20 69 66 28 65 2e 6f 77 6e 65 72 44 6f 63 75 Data Ascii: ment\|\|e:v)!==x&&p(e),i=i\|\|[],!t\|\|"string"!=typeof t)return i;if(1!==(r=(e=e\|\|x).nodeType)&&9!==r)return[];if(f&&!n){if(s=rt.exec(t))if(a=s[1]){if(9===r){if(!(o=e.getElementById(a))\|\|!o.parentNode)return i;if(o.id===a)return i.push(o),i}else if(e.ownerDocu
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 74 75 72 6e 20 6e 3b 69 66 28 69 29 66 6f 72 28 3b 69 3d 69 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 29 69 66 28 69 3d 3d 3d 65 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 74 3f 31 3a 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 74 2e 74 79 70 65 3d 3d 3d 69 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 74 28 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 65 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d Data Ascii: turn n;if(i)for(;i=i.nextSibling;)if(i===e)return-1;return t?1:-1}function pt(i){return function(t){var e;return"input"===t.nodeName.toLowerCase()&&t.type===i}}function ft(i){return function(t){var e=t.nodeName.toLowerCase();return("input"===e\|\|"button"==
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 7c 21 6c 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 62 29 2e 6c 65 6e 67 74 68 7d 29 2c 75 2e 67 65 74 42 79 49 64 3f 28 5f 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 65 3b 69 66 28 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 21 3d 3d 69 26 26 66 29 72 65 74 75 72 6e 28 65 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 65 5d 3a 5b 5d 7d 2c 5f 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 72 65 70 6c 61 63 65 28 44 2c 50 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d Data Ascii: \|!l.getElementsByName(b).length}),u.getById?(_.find.ID=function(t,e){var e;if(typeof e.getElementById!==i&&f)return(e=e.getElementById(t))&&e.parentNode?[e]:[]},_.filter.ID=function(t){var e=t.replace(D,P);return function(t){return t.getAttribute("id")===
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 6d 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2a 2c 3a 78 22 29 2c 6d 2e 70 75 73 68 28 22 2c 2e 2a 3a 22 29 7d 29 29 2c 28 75 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 41 2e 74 65 73 74 28 73 3d 65 2e 6d 61 74 63 68 65 73 7c 7c 65 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 65 2e 6d 6f 7a 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 65 2e 6f 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 65 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 29 29 26 26 45 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 75 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 Data Ascii: ":enabled").length\|\|m.push(":enabled",":disabled"),t.querySelectorAll(",:x"),m.push(",.:")})),(u.matchesSelector=A.test(s=e.matches\|\|e.webkitMatchesSelector\|\|e.mozMatchesSelector\|\|e.oMatchesSelector\|\|e.msMatchesSelector))&&E(function(t){u.disconnectedMa
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 3d 3d 76 3f 2d 31 3a 72 5b 6e 5d 3d 3d 3d 76 3f 31 3a 30 7d 2c 6c 29 3a 78 7d 2c 4f 2e 6d 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 4f 28 74 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 65 29 7d 2c 4f 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 21 3d 3d 78 26 26 70 28 74 29 2c 65 3d 65 2e 72 65 70 6c 61 63 65 28 69 74 2c 22 3d 27 24 31 27 5d 22 29 2c 21 28 21 75 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 21 66 7c 7c 6e 26 26 6e 2e 74 65 73 74 28 65 29 7c 7c 6d 26 26 6d 2e 74 65 73 74 28 65 29 29 29 74 72 79 7b 76 61 72 20 69 3d 73 2e 63 61 6c 6c 28 74 2c 65 29 3b 69 66 28 69 7c 7c 75 2e 64 69 73 63 Data Ascii: ==v?-1:r[n]===v?1:0},l):x},O.matches=function(t,e){return O(t,null,null,e)},O.matchesSelector=function(t,e){if((t.ownerDocument\|\|t)!==x&&p(t),e=e.replace(it,"='$1']"),!(!u.matchesSelector\|\|!f\|\|n&&n.test(e)\|\|m&&m.test(e)))try{var i=s.call(t,e);if(i\|\|u.disc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	65200	216.58.206.66	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:59 UTC	840	OUT	GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=OTFkZWZmMTgtZDFmNS00ZGJjLWJmZWMtMzNlOWZjMGJjYzE3&gdpr=0&gdpr_consent=&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmbxgMGIAdTiTueEcDg_xsiTpyJoqwcNb5BsM4xEsWO2bfSYUrHcUXhEjkG
2024-10-24 23:02:59 UTC	739	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&google_gid=CAESEMpC02vAuLVfFTx7n2BvwSs&google_cver=1 Date: Thu, 24 Oct 2024 23:02:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 386 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:02:59 UTC	386	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 6f 6f 67 6c 65 3f 67 5f 75 75 69 64 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 74 74 64 5f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	65098	142.250.186.150	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:59 UTC	681	OUT	GET /vi_webp/J_kzFgju7PA/sddefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:59 UTC	614	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 30658 Date: Thu, 24 Oct 2024 23:02:59 GMT Expires: Fri, 25 Oct 2024 01:02:59 GMT Cache-Control: public, max-age=7200 ETag: "0" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:02:59 UTC	764	IN	Data Raw: 52 49 46 46 ba 77 00 00 57 45 42 50 56 50 38 20 ae 77 00 00 10 61 02 9d 01 2a 80 02 e0 01 3e 71 30 94 46 24 a3 22 21 aa d3 dc a8 90 0e 09 65 6e e8 1f c9 01 70 d0 cb 35 f1 ff 1f 62 bc 8f f1 5f f1 7f a0 f4 c7 e4 3e fc fe 49 95 ae ff 7b 8b cd 9f ce 7f 98 f2 b3 eb ef fa a6 f1 9f 36 1e 66 7e a0 b7 b9 77 ab 3f 77 ed bc fc bb f9 df f8 be 22 f9 ec fb 06 d5 ff bf 67 3f df 7f d5 f3 67 f9 ff e9 7f ed 7f 9c f5 23 c2 9f a0 7a 87 7e 73 fd b7 d0 6a 36 9a a3 e8 53 e1 4f 3a cf bf f3 db f7 4f f7 5e c0 9f af 7c 82 7f 95 ff cf ec 13 fd 1f fe 07 ac 4f fc 7e 74 b5 22 3e 2a 8d d7 08 08 6d 9b d5 08 20 35 0e fe 82 f5 42 08 0d 43 bf a0 bd 50 82 03 50 ef e8 2f 54 20 80 d4 3b fa 0b d5 08 20 35 0e fe 82 f5 42 08 0d 43 bf a0 bd 50 82 03 50 ef e8 2f 54 20 80 d4 3b fa 0b d5 08 20 35 0e Data Ascii: RIFFwWEBPVP8 wa>q0F$"!enp5b_>I{6f~w?w"g?g#z~sj6SO:O^\|O~t">m 5BCPP/T ; 5BCPP/T ; 5
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: ef dc d2 6a c5 75 7c 46 19 b2 98 4f 35 bd 5e d9 e0 77 ff 4a ed 98 fe a5 cc cb 36 17 5a 1b 9a 6a 1c b8 8d e7 80 52 e9 3e 86 3d 11 81 7c e1 66 72 8b 0e 75 bc d7 5d 68 1b e9 c5 a7 99 33 cb 27 b7 52 21 d8 5b a9 f7 2a a5 17 0b 98 6a 51 7f b1 ef 22 ee 79 07 83 ad e1 a9 65 d0 1b 78 d2 3a f2 28 a1 dc a1 b0 7b bd a7 9a f9 b6 06 a4 fc b5 b5 6c d2 ef af b8 94 dd 3e da 3e c0 b0 24 77 34 d8 31 9a cc 6e ba ac a2 c3 93 43 06 b6 13 b1 c3 ef c9 ff 65 ac 4a 3c 72 22 9d 44 dc b6 46 21 06 d3 9b c0 e8 e5 4a 1c c9 c6 e1 9e d5 d3 e8 0b f6 ec 3a b2 e1 da d3 64 c6 27 a9 48 1c f8 a6 2d be b6 64 f8 b5 50 37 53 2e 10 0d 1f 23 ae de 57 2f 34 92 d9 d5 17 4e 89 28 35 d3 74 0d d7 c5 de 5c d7 2e 88 07 b3 14 1a 3e 01 22 dd 4c 36 e8 f4 70 4f 1a 8b f1 cf 47 4b 4e 36 10 14 b4 17 15 cb 2b c5 Data Ascii: ju\|FO5^wJ6ZjR>=\|fru]h3'R![*jQ"yex:({l>>$w41nCeJ<r"DF!J:d'H-dP7S.#W/4N(5t\.>"L6pOGKN6+
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 88 8a 35 2f dd b3 78 7b 16 69 c2 35 6a d5 26 6d 03 00 34 bf 24 80 3e af 81 1e b8 3d 5c 49 8b 11 73 f9 7c 36 ef b7 d7 60 72 f8 56 92 4c e7 48 56 04 63 28 87 f9 a4 5a e5 9d 1d d1 64 a5 35 9f 07 a9 97 a3 d9 6d 79 33 09 4e e4 cb f4 4b 0d c1 f5 a4 14 f9 f4 38 6a 77 c0 b3 40 ee 97 7a 64 24 10 17 3d a6 04 7a 3d 3f 6c e6 f2 2c 4b 1d aa 28 16 5f 47 91 1a ef c8 c3 8b f7 ee c8 24 1a 7b 0b 66 d9 c4 13 9a 7d 2b c3 80 ef c4 52 d1 43 7c f3 4f 52 4c 6a 10 50 c7 35 d1 fe 3e 5f bf 76 7b d8 b4 e4 c7 74 6e cb 74 70 3d 5d 01 2d cc c8 75 f4 dd 26 38 d1 6a 95 3b f1 6c 4d d8 8e 8e 4e 56 3a 49 bf ea 35 87 bc 33 32 f1 7b dd c6 30 af 41 11 90 c7 d4 74 bd f6 b8 dd 3a 39 04 fb 4d 3b d2 e6 4e d9 5e 06 94 71 e1 38 76 21 94 1b b7 a3 82 be 50 e0 f5 10 c1 d2 0e 90 f8 c4 64 5a 72 f1 a3 f8 Data Ascii: 5/x{i5j&m4$>=\Is\|6`rVLHVc(Zd5my3NK8jw@zd$=z=?l,K(_G${f}+RC\|ORLjP5>_v{tntp=]-u&8j;lMNV:I532{0At:9M;N^q8v!PdZr
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 4c cc 1b 06 d5 33 5f 06 94 fe 73 86 73 6e 3b bc b9 a3 e9 6d 08 cc 61 16 7b 26 03 17 fe cd 98 49 6d 1e c3 d6 d5 46 db 5c a4 c3 25 4a dd 97 9b 39 bd e2 24 be 5f ef 24 4b 09 1e bd 88 94 00 eb f0 77 22 1e 8a 09 52 59 ea 1c 3f 64 6e 20 9d b9 c7 78 b8 f7 d4 a2 51 6f 40 57 57 0f 80 5a ab 89 85 43 0d 91 ea 59 f0 61 cb ae 67 4d 43 db 4a 36 9e 9f 54 3d 37 df bb eb 01 dd b9 a2 77 2b 92 34 17 5b 9f 1d 85 45 6f 19 8b b6 77 4d 8a 43 39 6a 0c ca 5a e4 77 3e 0e 93 c9 d2 5a 43 1f 4f 50 8d 6a 39 3f 68 4b 2a 2c e9 b4 37 75 bd 76 6a c0 cf 60 e0 be 5e 9c e8 0e ee 55 40 b6 af 9f 5b d8 fe cb 18 ef 44 5c 5f b7 9c 8d e5 a1 2b 17 0c a0 e7 ec e1 01 d9 e2 75 b3 5f 38 38 d9 b5 d8 d2 19 e1 60 23 8f 19 5a 9a e6 81 48 0b 66 69 3c a7 7e 6c 45 b6 37 be 1e ad 66 50 a0 95 b0 3e 7f f7 83 51 Data Ascii: L3_ssn;ma{&ImF\%J9$_$Kw"RY?dn xQo@WWZCYagMCJ6T=7w+4[EowMC9jZw>ZCOPj9?hK*,7uvj`^U@[D\_+u_88`#ZHfi<~lE7fP>Q
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 82 c0 00 00 fe f8 9f c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12 3c a8 04 f0 e7 26 60 e0 13 45 ff d1 b7 b1 9a cf 71 6a 80 58 b1 56 df 92 e8 fc 7e df 68 3c 61 47 b9 05 76 b2 fa 89 67 00 da 39 e6 2d fa 10 16 e8 e2 c5 5c fa b7 6e 82 d3 86 37 80 83 00 03 78 35 b5 b6 b2 d6 df 50 81 90 4d a9 d3 fa 8c 37 08 15 e5 c5 2c 46 0e 64 5c 16 5d 25 d9 10 41 b1 d7 11 d7 8f 9b 97 f3 c7 30 f4 db 7d d6 dd e0 cc 44 7b 33 2d 09 a0 b4 81 46 68 31 2f 98 28 67 e6 c2 b2 90 b5 dd eb 2a 2c 1b f0 ee be 9c a5 42 6a 3d cf 3f d0 1b 5d 8b 1d b5 47 3c 58 1e 7a bc 1b ed f6 e0 1e 30 2a f9 3c 30 75 17 b0 a8 c3 e8 3c 78 33 f6 6a 87 80 2b c5 8e a4 43 07 c2 37 79 41 ed 1d ee 4f e9 cb 96 b0 5a fb 90 df 55 31 29 ab 68 0a b6 c0 16 4a 00 26 55 1a ec 16 07 6e 75 50 3e 1a c5 b7 4c 30 e9 73 e3 Data Ascii: <&`EqjXV~h<aGvg9-\n7x5PM7,Fd\]%A0}D{3-Fh1/(g,Bj=?]G<Xz0<0u<x3j+C7yAOZU1)hJ&UnuP>L0s
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 39 44 16 6a f3 96 07 91 35 50 c6 7b fc 8c de 92 28 fb 92 78 8b 88 b1 f2 94 c3 ff 5d b8 f3 0e 9b 01 90 d4 71 74 36 52 ec 33 5d 79 cd 0c 7f 9b 4b 69 8d 89 ee d6 11 94 45 2f e1 1f c6 9f e2 04 2f c3 71 63 5c b0 eb c9 10 f9 5f 54 d8 23 c8 3c fe 97 6c 4c 7d bc b1 06 ec df a2 59 ae af f9 30 8d 4a e0 dc 11 5d c7 21 66 f9 ca 71 45 f1 7b a0 d4 a7 51 ba ca fe ea f2 65 33 d5 f8 b8 96 6e 20 53 68 f0 1d 59 fb 4b 5a e5 f2 2e d6 92 73 d3 7d df d2 95 71 d4 1c 2e 63 d7 78 91 10 e9 68 2e b6 2f e9 6f 4f d1 6f 75 c1 27 2b 1d 90 74 a6 eb d4 e1 f6 8b a4 b6 d8 1c 98 9d cf ee 5d 30 c1 59 45 80 3f 00 b4 02 2c 9e 8e 0c 42 e2 45 45 fb d6 5d 23 10 e2 e8 fd 0c 13 71 ab b8 5d 9d d7 58 cd fd 54 e8 00 45 df 62 fc b8 db 08 6f a7 de 18 fd a6 ae d4 14 b7 f9 59 64 fa 70 f2 95 f7 a4 7f 1f b7 Data Ascii: 9Dj5P{(x]qt6R3]yKiE//qc\_T#<lL}Y0J]!fqE{Qe3n ShYKZ.s}q.cxh./oOou'+t]0YE?,BEE]#q]XTEboYdp
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: dd b8 e7 7f d8 a0 c3 0f 38 ed 2e 81 2b a0 ac 84 d4 b5 73 23 2a da c8 b7 0b 56 f6 85 c8 2f a9 6f 5f d1 eb f8 4e db ae 64 1d 16 04 d1 bb 04 93 6d 6f 78 2b e8 8e 00 ce bf bf f4 f2 0c fb c0 1b ff 13 3d f8 ab 2e c5 7d 03 4b c1 c6 64 b7 a2 bf 2c c7 b7 af ff 63 44 a6 e7 d1 a1 5c c9 61 b7 f6 06 c9 07 99 68 58 cf 42 3e 50 d8 ac 69 38 75 31 d5 ce 8b e2 01 88 1a 90 eb d5 7b 7e 43 12 ba b1 cb dc b9 b8 e5 c1 4e 08 3e 84 45 4c 65 68 15 ce ec 43 aa 67 96 dc 6d 05 23 94 cf 91 b7 ce f4 ef 30 0b 59 0a 46 d8 e3 5d f1 6b e2 ad 17 48 da 79 0a c4 53 d9 f3 ad 46 6c a9 4f 4c 70 21 a7 28 22 39 62 07 27 5d 26 39 43 14 55 ea 33 ce ef 16 0f a0 dc b6 e6 64 a9 64 43 75 39 45 a7 d7 f6 25 02 20 52 9d 95 35 3f fd 4e 04 83 ab 4f 95 de 7c 67 b9 3e 69 15 cb 1a 31 af 2e d3 cf fc 92 a6 ca 8e Data Ascii: 8.+s#*V/o_Ndmox+=.}Kd,cD\ahXB>Pi8u1{~CN>ELehCgm#0YF]kHySFlOLp!("9b']&9CU3ddCu9E% R5?NO\|g>i1.
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: ed 54 78 c1 16 f9 82 5e 24 99 58 47 4e f4 b1 80 62 f7 ab 7f 3e be 82 34 06 e0 56 7c 37 fd b3 b5 01 7c b1 02 ae 9f 51 64 f6 e1 f1 05 10 60 56 3b 17 8a e9 1d a0 dc 86 e2 76 8a 68 42 21 9b 93 8a 38 ae 15 b7 e2 a8 43 27 a3 74 aa 59 22 46 8b 64 b0 07 1a e5 64 1f a2 1a dd 3e c1 fd 0e 09 9c 0f 2b 9b 9d 1e cc 14 20 48 60 1b ab 79 4f 56 ca 4e 86 e0 99 94 c6 1d 67 0a e4 2e 35 ac d2 35 b1 b4 cf 68 c3 5c 42 78 02 40 e5 e6 b9 72 2d e8 07 a4 c9 df ab 93 bd 62 1c 98 1a 5f 91 10 4a 3c da 52 95 e4 0b c3 21 fe 32 d2 f6 2d 70 72 3d 6c e9 8e 59 a0 34 c2 6b b0 fc 0b f1 e1 4e 91 a4 0a cf a1 81 d4 c3 2d 36 27 f0 95 8f 8c db 2e 64 a8 41 b0 7a f7 77 2b b5 ef 3b 8d 0e 22 fb 4c ca 67 6f 45 a1 ed f2 06 39 22 6c 2d 28 68 fe 7c 84 92 b4 a2 cc 19 31 12 7b b8 26 0c 21 7a ac 8f 77 32 1b Data Ascii: Tx^$XGNb>4V\|7\|Qd`V;vhB!8C'tY"Fdd>+ H`yOVNg.55h\Bx@r-b_J<R!2-pr=lY4kN-6'.dAzw+;"LgoE9"l-(h\|1{&!zw2
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 71 f2 85 87 aa 17 2e 44 62 86 ab e9 12 58 b2 0f 96 eb c0 c8 d8 40 86 b4 83 97 c3 2a 76 84 32 03 35 15 3d 26 03 fb 59 14 39 22 1e 50 e9 f8 d3 5b 54 53 07 10 51 a7 7b 12 67 d7 28 04 a2 e2 ca 02 86 13 6b 52 59 b0 ac 2d 94 9e a3 24 c1 0d 00 d1 59 20 38 e3 ad 11 ad ab 95 07 38 b3 c1 bd 27 2b 60 09 06 d8 68 e3 df d7 e7 c1 d8 28 61 2a 50 b6 13 68 de da b0 04 5d dd b8 e0 7f 92 19 d6 36 e9 01 c7 c6 c0 bb ad dd fd 39 10 bb 56 89 43 b6 24 6d e6 41 7a e4 1c 50 5a b4 c6 8c f4 4b a3 b3 62 18 21 aa 37 a8 d5 4c 0c 3b aa 4b 29 6d c7 a1 58 fb 77 68 6e 3e e8 ab 7f 25 47 e7 96 7b 1f 01 79 dc 12 da c4 2c 69 89 a8 58 5e 19 f6 a4 00 4f 3e 73 78 6d a5 31 76 d4 50 83 51 d4 6c cb 57 7a 25 7f f1 e5 d9 3f 51 ff ec 24 ea 1a 12 4d 3c c4 7a d0 7c 4c 3f f5 33 e2 4e 12 8e 18 a4 b1 61 1a Data Ascii: q.DbX@v25=&Y9"P[TSQ{g(kRY-$Y 88'+`h(aPh]69VC$mAzPZKb!7L;K)mXwhn>%G{y,iX^O>sxm1vPQlWz%?Q$M<z\|L?3Na
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 44 2b 34 d0 50 5d 92 b1 3e a1 25 c5 76 9c ec ab 85 13 ed 75 34 32 11 7b 88 f7 45 ae 8d fc 54 fc 39 85 6c e5 06 54 3f 24 21 17 75 1b eb 6c e6 b4 5c 04 fe 6f 17 aa 9d e5 5a 86 23 c8 ba be 7b b6 69 1e fd 80 0a 12 26 20 c9 22 0d 25 1e 1e da 3d 57 a4 a4 52 80 71 3b a6 72 08 28 9b 11 c7 bf 64 e3 4d 05 91 35 dd a7 6a d5 d0 62 4c 63 36 78 fe 26 ce 74 a7 b8 9a dc e5 a6 cb 6f a5 06 bb 7d 86 7e 9c 7f d3 00 0a 10 53 f7 b9 18 7b ee 24 dd 6f 72 a7 2f 86 fd b7 61 00 e9 26 54 fd 2e 55 ff 5c 43 39 ea 6b 16 99 07 b3 6e b8 62 3e 9b 71 03 37 71 23 6a f5 35 58 ad b8 40 82 7a 12 55 6b 4a ff c8 9b d4 9f fc 8f 89 9c a6 40 63 0c 50 29 3d fb a0 eb fc 2c c1 f9 ae 00 3e 24 20 af fe 2c 65 04 2e 1f 8f 16 f3 c4 7d 66 51 64 99 c7 a2 9d 4c f9 f1 15 bd f3 36 06 3e e7 02 33 fc 6c dc e0 39 Data Ascii: D+4P]>%vu42{ET9lT?$!ul\oZ#{i& "%=WRq;r(dM5jbLc6x&to}~S{$or/a&T.U\C9knb>q7q#j5X@zUkJ@cP)=,>$ ,e.}fQdL6>3l9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	65184	172.217.18.20	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:59 UTC	375	OUT	GET /images/core/loader.gif HTTP/1.1 Host: core-dot-sos-apps.appspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:02:59 UTC	416	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * X-Cloud-Trace-Context: e1b611c6daa2d910fb32ec187e3ba0d1 Server: Google Frontend Date: Thu, 24 Oct 2024 23:02:55 GMT Expires: Thu, 24 Oct 2024 23:12:55 GMT Cache-Control: public, max-age=600 ETag: "A3elYw" Content-Type: image/gif Vary: Accept-Encoding Content-Length: 2599 Age: 4 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:02:59 UTC	962	IN	Data Raw: 47 49 46 38 39 61 1f 00 1f 00 f5 00 00 0d 0d 0d 1c 1c 1c 2d 2d 2d 3e 3e 3e 48 48 48 51 51 51 26 26 26 41 41 41 57 57 57 1f 1f 1f 29 29 29 4b 4b 4b 53 53 53 47 47 47 32 32 32 12 12 12 4d 4d 4d 2b 2b 2b 1e 1e 1e a2 a2 a2 ae ae ae 8f 8f 8f 38 38 38 77 77 77 5d 5d 5d 8a 8a 8a 0f 0f 0f 7d 7d 7d 96 96 96 36 36 36 10 10 10 95 95 95 a5 a5 a5 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 Data Ascii: GIF89a--->>>HHHQQQ&&&AAAWWW)))KKKSSSGGG222MMM+++888www]]]}}}666!NETSCAPE2.0!Created with ajaxload.info!
2024-10-24 23:02:59 UTC	1378	IN	Data Raw: 00 01 66 9b ae 43 11 66 46 63 0d b8 51 91 5b 47 63 0e bf 44 0e 63 48 63 a4 c6 09 63 49 63 8c c6 42 0f 63 4a d3 d3 05 d1 d8 b4 14 de de 13 04 cb dc 16 df de 15 97 58 c5 d8 18 e6 14 17 02 bd d8 1a 19 ee 08 b5 63 b7 bf 05 ee 14 c5 aa 58 58 fd ea c0 c1 dd 06 21 06 46 b9 4a d3 cf 97 90 74 87 34 71 f2 04 c0 dc 05 0f 43 0a bd c1 92 68 51 a3 47 c1 b2 78 fb d0 21 4a 1f 40 63 50 4a 02 b1 e0 8b 1d 38 2a b1 ec 51 c3 06 26 1c 39 0b 21 62 32 83 c6 58 95 0e 94 63 ba 70 a3 75 24 c9 92 26 4f e8 04 01 00 21 f9 04 00 0a 00 ff 00 2c 00 00 00 00 1f 00 1f 00 00 06 ff 40 80 70 48 0c 08 06 84 02 a0 40 18 08 02 c4 a8 74 68 38 20 ae 57 00 f6 7a 30 4c a7 89 c1 16 ab 1d 23 06 89 ef 50 b1 30 67 dd 88 85 42 0d 60 c0 11 65 37 e3 ab d8 df f3 66 75 73 44 09 6d 78 5b 0d 0e 09 0f 00 0f 09 Data Ascii: fCfFcQ[GcDcHccIcBcJXcXX!FJt4qChQGx!J@cPJ8*Q&9!b2Xcpu$&O!,@pH@th8 Wz0L#P0gB`e7fusDmx[
2024-10-24 23:02:59 UTC	259	IN	Data Raw: 28 58 2c 00 c1 e5 1e 0c d3 69 e7 92 2d 6f bb dd 41 22 3c 5c 7c ca 66 34 7a a1 60 03 40 f0 b8 bc cb 08 2b fa 79 59 67 7b 08 00 0c 75 44 09 0b 5c 00 65 19 18 16 50 0f 09 0e 0d 68 67 0b 6b 43 03 97 14 1c 05 1a 61 11 10 85 68 03 43 06 7b 00 1d 76 00 6b 7b 60 00 07 72 10 12 ad 42 12 a4 68 07 00 01 7b 11 b7 43 11 7b 01 02 72 0d c1 44 96 68 02 9c 68 0e c9 43 46 a6 04 72 9a d1 09 72 04 05 72 0f d1 42 0f 72 05 df d1 dc 68 de df e1 68 4c d6 e4 d9 68 4d 72 d0 df d3 69 c6 68 c8 df cb 5d 4f bf d1 c3 72 a0 cc 42 53 2b 58 2e 39 bc 00 a4 92 e3 aa d5 2b 39 b1 00 38 63 84 00 02 30 51 a4 06 21 38 35 44 11 c5 2e 0d 1c 24 f0 36 a9 d2 25 2e 99 a2 fc d1 c8 90 10 a3 43 61 18 b8 2c e5 b2 0f 1b 05 8b 08 b1 ec 42 c7 e1 c4 15 93 7b d4 24 33 30 b0 0b cb 2f e4 7a 35 db b6 a4 c9 13 3b Data Ascii: (X,i-oA"<\\|f4z`@+yYg{uD\ePhgkCahC{vk{`rBh{C{rDhhCFrrrBrhhLhMrih]OrBS+X.9+98c0Q!85D.$6%.Ca,B{$30/z5;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	65196	142.250.185.116	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:59 UTC	357	OUT	GET /ip-lookup.php HTTP/1.1 Host: sos-apps.appspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:03:00 UTC	452	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:02:59 GMT Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Vary: Accept-Encoding Server: nginx Set-Cookie: PHPSESSID=ffa27fa2ae6a83aec82ed99c1eda894c; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-10-24 23:03:00 UTC	44	IN	Data Raw: 32 31 0d 0a 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 37 31 2c 20 31 34 32 2e 32 35 30 2e 31 38 35 2e 31 31 36 22 0d 0a 30 0d 0a 0d 0a Data Ascii: 21"173.254.250.71, 142.250.185.116"0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	65202	188.114.96.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:59 UTC	540	OUT	GET /images/icon-gears.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0; _ga=GA1.2.1386283618.1729810968; _gid=GA1.2.17244489.1729810976; _gat_gtag_UA_28767219_1=1
2024-10-24 23:03:00 UTC	921	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:00 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: 69e9175ec791ba80c5e7986a46664ded CF-Cache-Status: HIT Age: 151 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6hY2ib%2BLb2CO61UmR94xC1zDH1vSb3B7pWO%2B2SehOp6fX9kv8EAmC%2FxfIYNHbwK1MOZV4b7nP5Epd0NugHo6S1TeXwdywd9rLlb1vdixlVO2kSORZVgqfD1hDeTRYiLEYeaTws5%2B5ZOgwg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d9900ebd9e867-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1423&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1118&delivery_rate=2042313&cwnd=251&unsent_bytes=0&cid=9ddb84651544a760&ts=169&x=0"
2024-10-24 23:03:00 UTC	448	IN	Data Raw: 39 64 65 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 8a 08 03 00 00 00 42 59 22 56 00 00 01 d4 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 9dePNGIHDRBY"VPLTE
2024-10-24 23:03:00 UTC	1369	IN	Data Raw: ea ea ea eb eb eb ec ec ec ed ed ed ee ee ee ef ef ef f0 f0 f0 f1 f1 f1 f2 f2 f2 f3 f3 f3 f4 f4 f4 f5 f5 f5 f6 f6 f6 f7 f7 f7 f8 f8 f8 f9 f9 f9 fa fa fa fb fb fb fc fc fc fd fd fd fe fe fe ff ff ff 0a ed 78 d7 00 00 00 5f 74 52 4e 53 00 01 07 0a 0b 0c 10 11 12 1b 1c 1f 20 22 2a 2b 35 36 3c 42 43 4d 4e 4f 53 54 55 56 5b 5e 5f 60 63 66 67 68 6a 6b 73 74 76 77 78 7b 7f 80 82 83 84 92 95 96 9b 9d 9e 9f a0 a1 a2 a3 b0 b1 ba bb bd cd ce cf d0 d3 d9 da db dc dd e1 e2 e3 e4 e5 e6 ee ef f0 f1 f2 f3 f4 f5 f6 f7 f9 fc fd fe e3 1d 79 e8 00 00 07 5a 49 44 41 54 18 19 ed c1 e9 43 13 07 1a 07 e0 17 82 ad 51 29 2a 94 ae 68 ab 6d 77 db ae 37 8a 16 50 6b 5b da 52 56 70 37 65 45 d9 08 6f 42 12 c2 21 24 10 b9 bd b8 11 04 02 81 1c f3 fb 67 37 e4 9a 99 64 26 99 64 66 fc 94 e7 Data Ascii: x_tRNS "+56<BCMNOSTUV[^_`cfghjkstvwx{yZIDATCQ)hmw7Pk[RVp7eEoB!$g7d&df
2024-10-24 23:03:00 UTC	716	IN	Data Raw: 07 38 87 77 66 76 98 8f 8c 45 91 10 1d e4 0c d7 2e 32 62 5e 96 98 0f 46 20 73 86 94 55 f5 41 ea 15 f3 d8 36 e2 42 73 6e 96 f1 ad c4 80 d8 2b 27 b3 37 84 94 61 16 bd 46 c6 9a 83 45 0b c8 d2 57 45 2a da 21 b3 bc 18 45 d2 de 1c 8b 02 9b 02 12 36 bc de 1d a4 4d b0 c8 bd 83 94 f0 30 8b dc 07 c8 d2 4e 6a 5a a1 6a c5 c1 49 8e 15 64 c4 62 c8 98 67 89 c1 6d 24 84 fc 2c 11 40 b6 7b a4 e6 1b a8 9b e0 a4 00 94 05 58 ca 35 bf 2d 08 c1 b7 5e 96 7a 8f 6c ff 20 35 9f 41 dd 12 27 ad 41 d1 be 9b e5 9c 1e cf 00 cb 78 23 c8 56 43 aa 1e 41 d5 12 27 6d 42 49 70 94 0b 9a 47 b6 4e 52 d7 04 55 ab 9c b4 8f 5c c2 9a 9b 0b 5b 41 b6 26 52 57 0f 55 9b 9c 14 42 ae 75 d6 e2 0d b2 d5 93 ba ca 6e a8 09 cf 8d 0f 79 3c a3 af 05 e4 5a 61 2d 46 23 90 fb 6f 25 e5 d1 8c 52 84 47 59 8b a9 18 64 Data Ascii: 8wfvE.2b^F sUA6Bsn+'7aFEWE*!E6M0NjZjIdbgm$,@{X5-^zl 5A'Ax#VCA'mBIpGNRU\[A&RWUBuny<Za-F#o%RGYd
2024-10-24 23:03:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	65203	188.114.96.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:59 UTC	541	OUT	GET /images/icon-wrench.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0; _ga=GA1.2.1386283618.1729810968; _gid=GA1.2.17244489.1729810976; _gat_gtag_UA_28767219_1=1
2024-10-24 23:03:00 UTC	949	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:00 GMT Content-Type: image/png Content-Length: 2214 Connection: close x-cloud-trace-context: 69e9175ec791ba80c5e7986a46664ded expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" Age: 151 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CDdE7YuzKZp%2Bs0TjtFqveaeVk1RQVBWQFOJ5nP%2BXHq98sMeIpwa%2B%2B8bG%2FOtCsOzVmaLEEcQJdbteo%2FOB7Y%2FDHeJIrmgRkBFuHrqJlS2krFWsfUoUDd%2BeIQFzh0unQn%2Fw3uz%2Fnhgf3PfBNA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d9900fd776c67-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1112&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1119&delivery_rate=2597309&cwnd=251&unsent_bytes=0&cid=8637259de513f22c&ts=154&x=0"
2024-10-24 23:03:00 UTC	420	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 8a 08 03 00 00 00 42 59 22 56 00 00 01 d4 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDRBY"VPLTE
2024-10-24 23:03:00 UTC	1369	IN	Data Raw: e2 e2 e3 e3 e3 e4 e4 e4 e5 e5 e5 e6 e6 e6 e7 e7 e7 e8 e8 e8 e9 e9 e9 ea ea ea eb eb eb ec ec ec ed ed ed ee ee ee ef ef ef f0 f0 f0 f1 f1 f1 f2 f2 f2 f3 f3 f3 f4 f4 f4 f5 f5 f5 f6 f6 f6 f7 f7 f7 f8 f8 f8 f9 f9 f9 fa fa fa fb fb fb fc fc fc fd fd fd fe fe fe ff ff ff 0a ed 78 d7 00 00 00 5f 74 52 4e 53 00 01 07 0a 0b 0c 10 11 12 1b 1c 1f 20 22 2a 2b 35 36 3c 42 43 4d 4e 4f 53 54 55 56 5b 5e 5f 60 63 66 67 68 6a 6b 73 74 76 77 78 7b 7f 80 82 83 84 92 95 96 9b 9d 9e 9f a0 a1 a2 a3 b0 b1 ba bb bd cd ce cf d0 d3 d9 da db dc dd e1 e2 e3 e4 e5 e6 ee ef f0 f1 f2 f3 f4 f5 f6 f7 f9 fc fd fe e3 1d 79 e8 00 00 06 22 49 44 41 54 18 19 ed c1 f9 43 53 57 1a 06 e0 0f 82 ad 51 29 22 94 8e 68 ab 6d a7 cb a0 28 20 5a 40 ac 6d 69 4b 19 81 99 5b 46 34 13 e1 4b c2 12 36 59 52 Data Ascii: x_tRNS "*+56<BCMNOSTUV[^_`cfghjkstvwx{y"IDATCSWQ)"hm( Z@miK[F4K6YR
2024-10-24 23:03:00 UTC	425	IN	Data Raw: 40 b4 87 cd c2 6b d0 56 4a c9 9c f1 23 4e 2f ef 7b 8c 5d 33 6c 12 5a 84 36 ff 19 4a aa 0c 71 06 78 df 10 76 bd 61 93 19 e8 bb 41 c9 79 7d 30 7b ca fb 82 2b d8 31 c8 47 26 a0 ef ff 5e 92 70 0d 66 33 7c a0 6f 71 73 79 9c 8f 0c 45 a1 ef 1a c9 f0 34 c2 64 a5 8d 0f 04 7b 3b f8 48 d7 06 f4 35 66 91 94 42 98 fd c1 42 ed 6f e1 40 21 49 aa 86 c9 52 90 05 82 af e1 c0 1d 92 e5 35 60 32 c1 02 cf e0 80 71 8a a4 15 c2 24 3a c4 c7 0c 46 e1 c0 05 52 70 0b 26 eb 43 9c 60 60 13 0e dc 22 15 9e 9f 61 12 1b 0b b2 49 70 2c 0a 07 7e f6 90 92 6c 03 66 0b 91 00 1f 18 9a 87 13 46 36 29 ca f3 23 ce 5f 53 91 9e 50 a8 3b f2 7c 29 06 27 fc 79 a4 ec 62 2b 52 a0 f5 22 69 f8 06 29 f0 0d 69 29 86 eb 8a 49 d3 95 56 b8 aa f5 0a 69 bb fc 08 2e 7a 74 99 1c 28 f0 c1 35 be 02 72 e4 9c 01 97 18 Data Ascii: @kVJ#N/{]3lZ6JqxvaAy}0{+1G&^pf3\|oqsyE4d{;H5fBBo@!IR5`2q$:FRp&C``"aIp,~lfF6)#_SP;\|)'yb+R"i)i)IVi.zt(5r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	65201	188.114.96.3	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:02:59 UTC	546	OUT	GET /images/icon-gear-wrench.png HTTP/1.1 Host: www.garwoodsheating.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: use-prod-apps=1; _ga_KQMZSWM9K6=GS1.1.1729810968.1.0.1729810968.60.0.0; _ga=GA1.2.1386283618.1729810968; _gid=GA1.2.17244489.1729810976; _gat_gtag_UA_28767219_1=1
2024-10-24 23:03:00 UTC	913	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:00 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close expires: Thu, 24 Oct 2024 23:10:29 GMT Cache-Control: public, max-age=14400 etag: "9irGzg" x-cloud-trace-context: 69e9175ec791ba80c5e7986a46664ded CF-Cache-Status: HIT Age: 151 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qPJRJ61h9Ku3GYn9URvGKHTRtcuyBdxOPXI8J3gtMqWjKvIZafrI3cHhet1OfJytnMG7tHHS10LHCV5ulqqiTkUvdBG4yAviS40DtwmMUbEZEw43KNcDT4wv2TUbDsZIFs70WgPXBLf4JQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d7d9900fae66b38-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1225&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1124&delivery_rate=2331723&cwnd=251&unsent_bytes=0&cid=d73caf50a7bb8d72&ts=155&x=0"
2024-10-24 23:03:00 UTC	456	IN	Data Raw: 36 31 31 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 57 00 00 00 58 08 03 00 00 00 b7 40 9b 8b 00 00 01 86 50 4c 54 45 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 611PNGIHDRWX@PLTE
2024-10-24 23:03:00 UTC	1104	IN	Data Raw: 1d 1e 1f 20 22 23 24 25 2a 2d 30 31 35 36 37 44 47 48 49 51 52 59 5a 87 88 89 8a 8b 8c 8d 93 9a 9b 9c 9d 9e ae b0 cd ce cf d0 dd e0 e1 e2 e3 e4 e5 e6 e9 ea ec ed ee ef f0 f2 f3 f9 fa fb a7 7b f8 05 00 00 03 f4 49 44 41 54 18 19 ed c1 fd 43 12 77 1c 07 f0 8f 2e 11 1b b9 66 5b 6e a9 0d 9d 2d a9 61 3a 13 a6 e5 72 32 3e 27 28 68 f8 78 90 32 75 6a e0 43 26 89 0f 40 dc fb 3f ef 4e d4 dd 1d df 3b 0e eb b7 7c bd e8 c6 8d 1b 5f 05 4f 97 f7 f7 67 c1 09 60 22 38 e0 f7 76 79 e8 0b 68 68 7f 1c 80 49 e0 71 7b 03 7d 96 66 ef 30 84 02 5e 37 5d db 1d 5f 08 96 42 be 3b 74 2d ae 9e 30 6c 85 7b 5d 54 bf 8e 00 6a 0a 74 52 9d 6e f9 e0 88 ef 16 d5 a3 65 00 0e 0d b4 90 73 6d 23 70 6c a4 8d 9c fa e1 15 ea f0 ea 3e 39 f3 fd 38 ea 32 de 46 4e 34 07 50 a7 40 33 d5 d6 34 80 ba 0d 34 Data Ascii: "#$%*-01567DGHIQRYZ{IDATCw.f[n-a:r2>'(hx2ujC&@?N;\|_Og`"8vyhhIq{}f0^7]_B;t-0l{]TjtRnesm#pl>982FN4P@344
2024-10-24 23:03:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	65205	142.250.186.174	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	770	OUT	GET /s/player/fb725ac8/player_ias.vflset/en_US/remote.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/J_kzFgju7PA?rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=nNJVX6kvzEc; VISITOR_INFO1_LIVE=c6FmZbEKqco; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgPQ%3D%3D
2024-10-24 23:03:00 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 120879 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:28:04 GMT Expires: Fri, 24 Oct 2025 22:28:04 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 23 Oct 2024 04:16:42 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 2096 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:03:00 UTC	691	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 67 37 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 48 6b 28 61 2c 22 7a 78 22 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 31 34 37 34 38 33 36 34 38 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2b 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 31 34 37 34 38 33 36 34 38 29 5e 67 2e 5a 61 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 68 37 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 7c 7c 28 63 3d 5b 53 74 72 69 6e 67 28 63 29 5d 29 3b 0a Data Ascii: (function(g){var window=this;'use strict';var g7=function(a){g.Hk(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.Za()).toString(36));return a},h7=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 28 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 67 2e 56 70 2e 70 72 6f 74 6f 74 79 70 65 2e 42 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 21 30 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 66 3d 3d 22 53 74 6f 72 61 67 65 3a 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 22 29 72 65 74 75 72 6e 3b 74 68 72 6f 77 20 66 3b 7d 65 3d 3d 3d 76 6f 69 64 20 30 3f 63 2e 70 75 73 68 28 64 29 3a 67 2e 73 6d 61 28 65 29 26 26 63 2e 70 75 73 68 28 64 29 7d 2c 61 29 3b 0a 72 65 74 75 72 6e 20 63 7d 2c 47 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 46 73 62 28 61 2c 62 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 67 2e 56 70 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 2e 63 61 6c 6c 28 74 68 69 73 2c 63 Data Ascii: (d){try{var e=g.Vp.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.sma(e)&&c.push(d)},a);return c},Gsb=function(a,b){Fsb(a,b).forEach(function(c){g.Vp.prototype.remove.call(this,c
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 30 3b 64 3c 63 3b 64 2b 2b 29 62 2e 70 75 73 68 28 61 5b 64 5d 29 3b 72 65 74 75 72 6e 20 62 7d 72 65 74 75 72 6e 20 67 2e 4b 67 28 61 29 7d 2c 4e 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 49 6f 26 26 74 79 70 65 6f 66 20 61 2e 49 6f 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 20 61 2e 49 6f 28 29 3b 0a 69 66 28 21 61 2e 68 6e 7c 7c 74 79 70 65 6f 66 20 61 2e 68 6e 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 69 66 28 74 79 70 65 6f 66 20 4d 61 70 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 2e 6b 65 79 73 28 29 29 3b 69 66 28 21 28 74 79 Data Ascii: {for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return g.Kg(a)},Nsb=function(a){if(a.Io&&typeof a.Io=="function")return a.Io();if(!a.hn\|\|typeof a.hn!="function"){if(typeof Map!=="undefined"&&a instanceof Map)return Array.from(a.keys());if(!(ty
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 73 73 61 67 65 5f 72 65 63 65 69 76 65 64 22 2c 62 29 7d 2c 57 73 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6a 37 28 29 3b 0a 74 68 69 73 2e 6a 3d 61 3b 61 2e 7a 6b 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 65 72 72 6f 72 22 2c 67 2e 6c 62 28 22 63 68 61 6e 6e 65 6c 5f 74 79 70 65 22 29 29 7d 2c 58 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 2e 46 6d 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 65 72 72 6f 72 22 2c 62 29 7d 2c 59 73 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6a 37 28 29 3b 0a 74 68 69 Data Ascii: ssage_received",b)},Wsb=function(){var a=j7();this.j=a;a.zk("/client_streamz/youtube/living_room/mdx/channel/error",g.lb("channel_type"))},Xsb=function(a,b){a.j.Fm("/client_streamz/youtube/living_room/mdx/channel/error",b)},Ysb=function(){var a=j7();thi
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 65 78 70 65 72 69 6d 65 6e 74 73 3d 6e 65 77 20 53 65 74 3b 74 68 69 73 2e 74 68 65 6d 65 3d 22 75 22 3b 6e 65 77 20 6c 37 3b 74 68 69 73 2e 6d 6f 64 65 6c 3d 74 68 69 73 2e 62 72 61 6e 64 3d 22 22 3b 74 68 69 73 2e 79 65 61 72 3d 30 3b 74 68 69 73 2e 63 68 69 70 73 65 74 3d 74 68 69 73 2e 6f 73 56 65 72 73 69 6f 6e 3d 74 68 69 73 2e 6f 73 3d 22 22 3b 74 68 69 73 2e 6d 64 78 44 69 61 6c 53 65 72 76 65 72 54 79 70 65 3d 22 4d 44 58 5f 44 49 41 4c 5f 53 45 52 56 45 52 5f 54 59 50 45 5f 55 4e 4b 4e 4f 57 4e 22 3b 61 26 26 28 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 63 6c 69 65 6e 74 4e 61 6d 65 3d 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 3f 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 Data Ascii: experiments=new Set;this.theme="u";new l7;this.model=this.brand="";this.year=0;this.chipset=this.osVersion=this.os="";this.mdxDialServerType="MDX_DIAL_SERVER_TYPE_UNKNOWN";a&&(this.id=a.id\|\|a.name,this.name=a.name,this.clientName=a.clientName?a.clientName
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 63 6f 6d 70 61 74 69 62 6c 65 53 65 6e 64 65 72 54 68 65 6d 65 73 2e 61 64 64 28 63 29 7d 29 7d 2c 63 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 63 6c 65 61 72 28 29 3b 0a 62 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 61 64 64 28 63 29 7d 29 7d 2c 6e 37 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 7c 7c 7b 7d 3b 0a 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 73 63 72 65 65 6e 49 64 7c 7c 22 22 3b 74 68 69 73 2e 74 6f 6b 65 6e 3d 61 2e 74 6f 6b 65 6e 7c 7c 61 2e 6c 6f 75 6e 67 65 54 6f 6b 65 6e 7c 7c 22 22 3b Data Ascii: nction(c){a.compatibleSenderThemes.add(c)})},ctb=function(a,b){a.experiments.clear();b.split(",").forEach(function(c){a.experiments.add(c)})},n7=function(a){a=a\|\|{};this.name=a.name\|\|"";this.id=a.id\|\|a.screenId\|\|"";this.token=a.token\|\|a.loungeToken\|\|"";
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 30 29 72 65 74 75 72 6e 5b 5d 3b 0a 76 61 72 20 62 3d 61 5b 30 5d 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 2c 63 3d 62 3d 3d 2d 31 3f 61 5b 30 5d 3a 61 5b 30 5d 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 62 29 3b 72 65 74 75 72 6e 20 67 2e 4e 6c 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 30 3f 64 3a 64 2e 73 75 62 73 74 72 69 6e 67 28 63 2e 6c 65 6e 67 74 68 29 7d 29 7d 2c 70 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 59 73 28 22 79 74 2d 72 65 6d 6f 74 65 2d 63 6f 6e 6e 65 63 74 65 64 2d 64 65 76 69 63 65 73 22 2c 61 2c 38 36 34 30 30 29 7d 2c 73 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 71 74 62 29 72 65 74 75 72 6e 20 71 74 62 3b 0a 76 61 72 20 61 3d 67 2e 5a 73 28 22 79 74 2d 72 65 6d 6f 74 65 2d 64 65 76 Data Ascii: 0)return[];var b=a[0].indexOf("#"),c=b==-1?a[0]:a[0].substring(0,b);return g.Nl(a,function(d,e){return e==0?d:d.substring(c.length)})},ptb=function(a){g.Ys("yt-remote-connected-devices",a,86400)},s7=function(){if(qtb)return qtb;var a=g.Zs("yt-remote-dev
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 3b 0a 76 61 72 20 61 3d 67 2e 4d 72 28 22 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 5f 77 65 62 5f 66 6c 75 73 68 5f 63 6f 75 6e 74 22 2c 2d 31 29 3b 61 21 3d 3d 2d 31 26 26 28 77 37 2e 43 3d 61 29 7d 72 65 74 75 72 6e 20 77 37 7d 2c 7a 74 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 43 68 72 6f 6d 65 5c 2f 28 5b 30 2d 39 5d 2b 29 2f 29 3b 0a 72 65 74 75 72 6e 20 61 3f 70 61 72 73 65 49 6e 74 28 61 5b 31 5d 2c 31 30 29 3a 30 7d 2c 41 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 26 26 28 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e Data Ascii: ;var a=g.Mr("client_streamz_web_flush_count",-1);a!==-1&&(w7.C=a)}return w7},ztb=function(){var a=window.navigator.userAgent.match(/Chrome\/([0-9]+)/);return a?parseInt(a[1],10):0},Atb=function(a){return!!document.currentScript&&(document.currentScript.
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 29 7d 2c 79 37 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 2e 4f 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 74 68 69 73 2e 4b 3d 63 21 3d 6e 75 6c 6c 3f 28 30 2c 67 2e 58 61 29 28 61 2c 63 29 3a 61 3b 74 68 69 73 2e 6a 6a 3d 62 3b 74 68 69 73 2e 47 3d 28 30 2c 67 2e 58 61 29 28 74 68 69 73 2e 42 35 2c 74 68 69 73 29 3b 74 68 69 73 2e 6a 3d 21 31 3b 74 68 69 73 2e 42 3d 30 3b 74 68 69 73 2e 43 3d 74 68 69 73 2e 72 64 3d 6e 75 6c 6c 3b 74 68 69 73 2e 44 3d 5b 5d 7d 2c 7a 37 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 2e 4f 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 74 68 69 73 2e 44 3d 63 21 3d 6e 75 6c 6c 3f 61 2e 62 69 6e 64 28 63 29 3a 61 3b 74 68 69 73 2e 6a 6a 3d 62 3b 74 68 69 73 2e 43 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6a 3d 21 31 3b 74 68 Data Ascii: )},y7=function(a,b,c){g.O.call(this);this.K=c!=null?(0,g.Xa)(a,c):a;this.jj=b;this.G=(0,g.Xa)(this.B5,this);this.j=!1;this.B=0;this.C=this.rd=null;this.D=[]},z7=function(a,b,c){g.O.call(this);this.D=c!=null?a.bind(c):a;this.jj=b;this.C=null;this.j=!1;th
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 2c 56 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 4f 61 3d 31 3b 0a 61 2e 56 3d 67 37 28 62 2e 63 6c 6f 6e 65 28 29 29 3b 61 2e 58 3d 63 3b 61 2e 47 61 3d 21 30 3b 55 74 62 28 61 2c 6e 75 6c 6c 29 7d 2c 55 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 41 61 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 0a 47 37 28 61 29 3b 61 2e 58 61 3d 61 2e 56 2e 63 6c 6f 6e 65 28 29 3b 68 37 28 61 2e 58 61 2c 22 74 22 2c 61 2e 52 62 29 3b 61 2e 54 3d 30 3b 76 61 72 20 63 3d 61 2e 43 2e 4f 61 3b 61 2e 42 3d 6e 65 77 20 54 74 62 3b 61 2e 6a 3d 57 74 62 28 61 2e 43 2c 63 3f 62 3a 6e 75 6c 6c 2c 21 61 2e 58 29 3b 61 2e 59 61 3e 30 26 26 28 61 2e 54 61 3d 6e 65 77 20 7a 37 28 28 30 2c 67 2e 58 61 29 28 61 2e 4a 56 2c 61 2c 61 2e 6a 29 2c 61 2e 59 61 29 Data Ascii: ,Vtb=function(a,b,c){a.Oa=1;a.V=g7(b.clone());a.X=c;a.Ga=!0;Utb(a,null)},Utb=function(a,b){a.Aa=Date.now();G7(a);a.Xa=a.V.clone();h7(a.Xa,"t",a.Rb);a.T=0;var c=a.C.Oa;a.B=new Ttb;a.j=Wtb(a.C,c?b:null,!a.X);a.Ya>0&&(a.Ta=new z7((0,g.Xa)(a.JV,a,a.j),a.Ya)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	65206	142.250.184.226	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	719	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmbxgMGIAdTiTueEcDg_xsiTpyJoqwcNb5BsM4xEsWO2bfSYUrHcUXhEjkG
2024-10-24 23:03:00 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Thu, 24 Oct 2024 23:03:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 23:03:00 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 72 49 68 5a 50 75 34 32 46 50 6e 76 72 76 68 6f 39 75 6b 30 32 33 54 5f 4a 59 33 39 63 44 6d 34 45 61 67 6f 37 32 6d 66 48 4e 4a 75 77 52 50 75 4f 47 56 30 75 47 4b 47 69 38 4b 34 57 6a 39 31 67 79 38 71 75 36 47 68 33 70 4a 48 47 5f 53 30 6b 65 41 75 4b 45 74 76 47 64 62 51 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKrIhZPu42FPnvrvho9uk023T_JY39cDm4Eago72mfHNJuwRPuOGV0uGKGi8K4Wj91gy8qu6Gh3pJHG_S0keAuKEtvGdbQ"}
2024-10-24 23:03:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	65208	142.250.185.193	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	726	OUT	GET /ytc/AIdro_mJZWekx_QC_yZgoobJQY-ml6LjcseCKRrAy9U4uWE=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:03:00 UTC	575	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 1101 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:50:28 GMT Expires: Fri, 25 Oct 2024 22:50:28 GMT Cache-Control: public, max-age=86400, no-transform Age: 752 ETag: "v0" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:03:00 UTC	803	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0c 0e 0c 0b 08 09 0c 08 0c 06 09 09 09 08 08 0d 09 08 06 06 07 06 08 07 07 08 08 08 06 08 07 06 0a 08 10 06 08 09 09 08 06 07 16 07 06 09 14 15 0a 09 08 06 17 0e 16 08 18 08 14 15 14 01 03 04 04 06 05 06 0a 06 06 0a 0b 0d 0b 0d 0f 0b 0d 14 0d 14 14 0d 12 0f 0b 0b 0d 0e 0d 11 13 08 0d 0b 14 0b 08 08 0e 14 09 0d 10 0e 14 10 11 0a 0e 0e 0e 0d 0a 0b 0e 13 0d 0b 0a 0d 10 0a 0a 0a ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 07 06 08 04 ff c4 00 2b 10 00 02 02 02 01 01 07 03 05 01 00 00 00 00 00 00 01 02 00 03 04 11 12 05 06 07 08 13 21 22 31 14 32 51 42 52 61 71 72 33 ff c4 00 1a 01 01 01 01 01 00 03 Data Ascii: JFIFDD+!"12QBRaqr3
2024-10-24 23:03:00 UTC	298	IN	Data Raw: bc 19 be 37 70 a9 f2 d5 8a ef f7 bc 98 f8 82 ee 8c 61 de 16 a2 4e 1d ea 6c a7 91 db d5 c4 e9 e9 27 f5 85 25 48 63 f2 ac bb d9 1b 31 76 b5 82 b3 aa 94 7e 99 6f 5d 3f 4f 87 a1 8e ea 87 65 2d dc 1f bc 12 e9 0c c4 20 08 02 00 80 20 1d 41 57 6b f0 ba 9e 2d 58 d9 b7 2e 2f 55 c7 1c 6b 77 e0 b5 bb 15 54 2e ac e5 43 a5 bc 50 9a 4b 02 19 46 b7 ad ce d9 5c 5b 6d 2a 11 a7 5a 4a 15 23 ae 8f ae 8b e6 e5 94 f2 59 ed 29 dc 41 46 6f 12 5e fc cf 0f 4c f0 d1 8b 4b ad f9 bd 43 18 e2 23 06 2a 3c aa bc fd 1d 8a cb 3d 8f e8 da d1 54 52 48 de b5 3d 50 d8 d4 28 c9 4e bd 68 fc 2b 4d cb 3d 38 be 3d 0f 15 67 08 3c ce 6b 1e be 66 23 c4 7f 7b 29 99 7a 79 1b fa 4c 74 64 ad 8a 94 6b 59 d8 17 b3 8b 68 aa fb 51 40 61 bf 69 df cc 9b b6 2f e3 77 55 76 7f 4c 56 13 e6 de a6 6b ba ea ac be 5e Data Ascii: 7paNl'%Hc1v~o]?Oe- AWk-X./UkwT.CPKF\[mZJ#Y)AFo^LKC#<=TRH=P(Nh+M=8=g<kf#{)zyLtdkYhQ@ai/wUvLVk^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	65207	216.58.206.70	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	697	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmbxgMGIAdTiTueEcDg_xsiTpyJoqwcNb5BsM4xEsWO2bfSYUrHcUXhEjkG
2024-10-24 23:03:00 UTC	742	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 23:02:54 GMT Expires: Thu, 24 Oct 2024 23:17:54 GMT Cache-Control: public, max-age=900 Age: 6 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:03:00 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.6	65210	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:00 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230300Z-16849878b78gvgmlcfru6nuc54000000088000000000p9yt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:00 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.6	65215	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:00 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 71d2c1fc-001e-00a2-01de-21d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230300Z-16849878b78jfqwd1dsrhqg3aw00000008c000000000qn8y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:00 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	65214	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:00 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 95c67357-201e-0051-60f5-247340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230300Z-16849878b78c2tmb7nhatnd68s00000008cg00000000cuap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:00 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	65216	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:00 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230300Z-16849878b78gvgmlcfru6nuc54000000087g00000000r7nx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	65217	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:00 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: d4d27aa7-601e-0002-1812-22a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230300Z-16849878b78s2lqfdex4tmpp7800000008eg00000000527e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:00 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	65213	3.33.220.150	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	790	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRIVCgZnb29nbGUSCwjcodem4fS3PRAFGAUgASgBMgsI5Pyf9taiuj0QBTgBQgQiAggBWgdqc2FjNzRqYAFyBmdvb2dsZQ..
2024-10-24 23:03:00 UTC	728	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 23:03:00 GMT Content-Length: 409 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon set-cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; expires=Fri, 24 Oct 2025 23:03:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRIVCgZnb29nbGUSCwjcodem4fS3PRAFEhYKB3J1Ymljb24SCwjSkJmkwaK6PRAFGAUgAigBMgsI5Pyf9taiuj0QBTgBQgQiAggBWgdqc2FjNzRqYAFyB3J1Ymljb24.; expires=Fri, 24 Oct 2025 23:03:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-10-24 23:03:00 UTC	409	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 39 31 64 65 66 66 31 38 2d 64 31 66 35 2d 34 64 62 63 2d 62 66 65 63 2d 33 33 65 39 66 63 30 62 63 63 31 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 26 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 46 74 72 61 63 6b 25 32 46 63 6d 66 25 32 46 72 75 62 69 63 6f 6e 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 Data Ascii: Redirecting to: <a href="https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon">https://pixel.rubiconproject.com/tap.ph

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	65211	142.250.186.150	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	681	OUT	GET /vi_webp/NpMhKZDN7Js/sddefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:03:00 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 43080 Date: Thu, 24 Oct 2024 23:03:00 GMT Expires: Fri, 25 Oct 2024 01:03:00 GMT Cache-Control: public, max-age=7200 ETag: "1507221541" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:03:00 UTC	755	IN	Data Raw: 52 49 46 46 40 a8 00 00 57 45 42 50 56 50 38 20 34 a8 00 00 30 a0 02 9d 01 2a 80 02 e0 01 3e 35 16 89 42 a2 21 21 16 2a 4d ec 20 03 44 b2 b7 7c 2f d6 91 f0 83 00 39 01 d3 ad 92 fd 41 f2 37 f3 dc ff da f3 bd e5 bf 28 be af e5 5f 91 ef f1 f6 4d f4 1f f8 bc c9 bd db fa 6f fa 7f 74 3f 2e bf e9 ff ef ff 71 fe 7f e3 17 f4 6f f7 9e c2 3f b0 3e a4 bd 54 7f 73 ff d5 ea e3 fb 07 fc 7f dd 2f 79 df fb 5f ba 3e fe 7f bb 7a 8a 7f 51 ff 77 d7 39 fe 4f d5 2f ce 67 ff 8f ef 27 c5 a7 f7 ff fb 9f ba 3f 0e 9f bb 3a a2 32 c1 f3 0f e3 bf d9 7f 8d fd ba f3 77 f2 ff af 7f 77 fe 23 fd 0f fd 3f f2 fe ec 79 03 ed 5f 51 df 9f 7e 5e fe 67 f9 af de 6f cd 3f 9d 3b ff f9 89 f5 1f b0 77 e6 df d7 3f e0 7d c4 fc 58 c3 a7 ae b4 1b fa b7 f9 9f 34 df d7 f4 13 f7 0f 50 cf 33 3c 46 a8 25 e4 f9 Data Ascii: RIFF@WEBPVP8 40>5B!!M D\|/9A7(_Mot?.qo?>Ts/y_>zQw9O/g'?:2ww#?y_Q~^go?;w?}X4P3<F%
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: a8 b4 e2 f7 c7 8c 02 54 73 8f 71 b3 d4 e3 2c 05 df 28 07 4f 54 71 47 bb 02 6b 82 8f 63 7a 04 bd 43 c8 2d 85 53 42 5b 5f fb a8 0b 45 66 f6 a8 ad 07 ce d8 1a 7f d3 fb 40 21 f1 90 e7 40 b9 74 fb 2e 73 69 fb 32 3f f9 07 a4 bb a4 bb 76 dd af 97 fb 04 7b ca 44 d0 e9 75 bd bb 24 31 65 0f 76 db 4e ab 58 a1 43 5c e4 ba 3d 67 b1 ad 57 12 41 6f 96 2f fe 2b 6f 1b 9d 38 37 2d e0 81 bc c4 ac b7 d0 e9 93 5c c6 d9 e6 24 38 5d 0f ea 13 2e 58 3f 5f 05 40 b9 9c ca 9a a0 4a b8 79 bf 9c c4 89 6a f1 01 61 6e 94 49 58 c8 6b b4 7c 18 d2 a2 97 53 83 fa 2f ea 3c 6e 44 e1 55 ef 46 4e 1f 5e a3 9e 9f 3d 4a b5 9e c2 a1 36 04 3d e4 cb 0e 42 58 b9 c4 70 e5 57 a3 2e 6e 0d 3a 63 b8 4a 22 7f 29 cf bc 0c 1b 73 fb 66 53 85 12 49 4a 41 29 8d 93 8b ed 4e bc bd 20 e5 a4 30 67 70 2b 74 37 38 54 Data Ascii: Tsq,(OTqGkczC-SB[_Ef@!@t.si2?v{Du$1evNXC\=gWAo/+o87-\$8].X?_@JyjanIXk\|S/<nDUFN^=J6=BXpW.n:cJ")sfSIJA)N 0gp+t78T
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 09 ac 62 01 cb ef 3d c8 56 05 36 6f 7e ea da 2e 0a 30 1e 52 e7 a7 c2 08 36 d5 7b 72 b1 fb 52 7c 8d e8 05 b3 83 2d 26 e8 04 72 91 c4 74 38 a0 8c f0 14 7e 47 19 7e 16 20 e0 d3 32 ab 44 56 9a c7 d8 9f 9d ea 7b 8e 59 df ef 85 f4 6c 16 6c 42 c2 7d 23 56 e1 d5 2a d9 f8 6f 9a 42 0b f6 94 15 c6 45 ac b9 63 34 b1 06 f3 83 bd 0c 91 3e c4 17 a4 5e 0d 5f ae e7 d0 0c f9 e3 17 e8 8b 2c 28 e4 05 24 41 11 d7 5f bf 4b ef 58 b9 da 7b f0 50 7a a1 cd 4c 2b a8 40 52 a5 1e 1d bf a7 df 89 bc e1 eb 92 03 6f e2 8e 22 47 7e 19 78 78 f2 14 90 a3 55 90 90 4f 63 dc b1 cf 08 50 50 ab 96 bf 31 0c 55 3f fe eb 57 81 c5 d4 2c fd f1 92 6e 7e 99 83 30 e9 54 0a ed 9c 9f ac fe d7 43 b6 0a 4e e1 5a 5d 24 bf 40 a2 17 8c c0 0d 9a b9 d4 78 5e 9e de 37 a2 d4 7b b0 20 4e 51 34 a0 ea 1c 1b 72 d4 d5 Data Ascii: b=V6o~.0R6{rR\|-&rt8~G~ 2DV{YllB}#V*oBEc4>^_,($A_KX{PzL+@Ro"G~xxUOcPP1U?W,n~0TCNZ]$@x^7{ NQ4r
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: a6 f7 8e 68 21 fa 9a e2 f4 4e 87 8b c7 13 6d 03 75 2a 25 67 79 b6 1d 8c ad 61 5e 82 ed 23 62 b5 e7 b8 fb 26 02 aa a5 d6 f3 9c 61 5b eb ec bf e7 86 fa 77 f7 ec 92 c5 97 4f 28 56 8d bf da 8b a8 cc a8 c1 5e e3 b0 a0 d4 d4 fb 10 dc a4 0b 1c d9 35 af b6 b6 f6 0c 8f c3 0c a5 1e d1 7e ab a0 2a d3 81 af 36 bf 49 8b be 31 82 eb 7f 3f 9a 54 20 d4 ec 2e 7d 4b 47 89 ee 5b 82 cb 09 9e f5 70 87 e9 80 a5 49 51 7c 76 20 24 8b 60 f8 16 42 6c a7 64 f7 94 86 0b b9 8a 1a 47 fe df dd 7f b3 a1 c1 07 28 67 e8 2c 63 03 a1 75 08 06 98 a7 a3 b6 b8 47 e2 fb 8b 9c 92 6c 8e ec 69 7f 86 24 bc b9 6d 7a 57 81 11 c5 cd 8e bb 66 da 5b 77 b7 bb 6d cc b7 36 c5 73 b1 99 f7 75 ff ea 9c 69 c9 30 5e 5c c5 64 4f 2e 51 fe 6a 9a 93 ea f9 cd 07 d2 0f d6 9b 2b d0 20 cf fd 07 84 39 84 a8 b6 55 d7 a6 Data Ascii: h!Nmu%gya^#b&a[wO(V^5~6I1?T .}KG[pIQ\|v $`BldG(g,cuGli$mzWf[wm6sui0^\dO.Qj+ 9U
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 20 e7 de 74 99 4f ef 7d a9 e2 d2 79 1b df 5e 8a 61 5c 5c 44 9f 94 1e b8 c5 af d2 84 e6 bb 82 43 24 2b 42 35 88 27 ed 73 e9 c3 72 ea 6c 4b b2 50 1d 37 7a e4 24 e8 0d d5 02 c3 13 19 fc 84 11 c5 eb 3f 83 51 c4 18 71 a2 e0 ee ba c8 d6 44 1f e9 48 c1 2d 51 e8 48 4c db c7 9a ec 10 49 e0 31 bc 18 99 10 fe 0f cc ef a5 e0 f6 04 13 f7 a9 55 87 6c 71 95 39 1e 09 07 40 f3 6a f4 d6 ec 85 2b 95 ab 5f bc cc 26 48 2d bc 40 ed a3 cb 8e 04 51 e9 f4 94 53 12 88 8b b7 33 aa 8e b5 5d a6 ed cf 69 81 0e c3 29 8a b2 ca a6 50 a3 ab ab 29 17 79 4c cc 3b 25 22 af df bb 71 16 b4 ff ca b0 2c f4 28 37 b2 16 7b 4d 09 9a 18 fd ff 83 2e 20 18 91 f5 19 3e 25 de 10 d9 81 3a 05 99 87 2a c0 da 2e 09 56 52 7e db ee 0f 54 27 ba 5b 6f 9e 95 7d 18 e6 94 8a 11 1f b1 71 73 65 2f 46 3c 76 85 58 08 Data Ascii: tO}y^a\\DC$+B5'srlKP7z$?QqDH-QHLI1Ulq9@j+_&H-@QS3]i)P)yL;%"q,(7{M. >%:*.VR~T'[o}qse/F<vX
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 94 33 39 06 b1 b5 51 e0 a8 2d 11 c6 52 5e 3e da 9b 35 1b 29 de 44 ea 31 7a bf 58 cb 28 de c9 39 ef 14 c3 14 66 bc 78 55 8a b5 e5 85 56 df 8e c0 b9 f0 bf f9 d4 d9 2e 9a 86 6b 55 26 9f c7 b5 57 12 ae 93 38 76 2e 6f 22 4d bc 4b c7 f1 07 37 a2 5a e9 f0 bd c9 07 1b 0b dd 39 1e bd 05 d7 1e ce 14 f6 d5 99 9a 76 36 74 02 ff 69 83 0e 18 bb 31 8b c2 f8 d7 b0 41 77 16 e4 5f bb 0f a5 45 a6 a8 5e 7c 2a 35 c6 69 9d 94 00 dc b6 8a 9b b3 3e 76 6f 16 6a 32 fa 65 b7 8f 0f 00 d3 1b f7 27 3e dc 56 d1 2f ca dc e1 e7 a7 d6 ad 2a 16 d0 ae f7 c4 bc e8 b1 62 dd 8f 3f 6f 7d 43 02 c9 e2 1a 1f 06 0a c4 92 c0 37 8d 48 51 19 8f 69 b1 f7 5e a3 a3 16 07 28 34 db 35 9c 4d da 0a bc 0b 44 39 54 a8 76 83 d4 55 5f c1 6b e2 aa e0 8a b0 47 ad 97 7e 80 cb 49 5b 8b 45 1b 7b cd 5a cb fc 96 54 f2 Data Ascii: 39Q-R^>5)D1zX(9fxUV.kU&W8v.o"MK7Z9v6ti1Aw_E^\|5i>voj2e'>V/b?o}C7HQi^(45MD9TvU_kG~I[E{ZT
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 98 58 05 3c 43 ad 18 47 b3 31 14 57 59 43 07 42 b9 0a 9a 1d f7 39 67 57 b7 d6 9f 8e 96 c4 06 4b 7b 34 46 e9 95 fe 63 6d 67 c1 df c2 1f c9 be a6 ed 72 43 90 23 2c 29 7e 38 5a b0 50 10 94 13 21 cc dd 0b c3 66 0f 7b 15 20 82 00 d8 6d 8f d1 90 13 f9 78 8e 95 14 d7 16 b9 c2 62 ba 28 5c 31 e6 e7 7b a0 06 9c b5 65 0c 01 3f ae 3a 18 db ad b2 5c 58 73 3f 3e 6e cd 8c 2b d3 8b 30 9e 16 37 e1 fa 6b 36 cd 9f a5 e5 15 48 1d 90 b1 03 19 1a 7a e7 4f 35 b0 3c 09 07 f0 cf d0 6e dd e5 8b e2 a8 11 fc 8b f6 3a 6c d2 8b 62 3a 09 45 8a a1 59 3a 58 64 ad 32 11 ec 4f 3c cb f3 91 f5 8f 8d ed a3 5e f2 03 66 05 08 44 d5 29 ff e1 97 98 8b e6 0a 4a 22 4b 21 97 51 4f e9 c6 b9 c2 00 94 83 8f 77 a6 bd e4 ae 4d 4c e4 b1 be b9 92 c8 ad 16 e6 59 ba d3 fe ff 0d ac 70 68 2b a8 12 0f 9a 10 95 Data Ascii: X<CG1WYCB9gWK{4FcmgrC#,)~8ZP!f{ mxb(\1{e?:\Xs?>n+07k6HzO5<n:lb:EY:Xd2O<^fD)J"K!QOwMLYph+
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 18 b9 b1 54 1e db f0 64 14 83 d9 08 9c 87 ee fa e1 b2 b7 60 df 81 3e 73 44 9e 73 82 21 c9 6b ea d4 91 dc 70 46 b9 57 9a 33 73 52 3f b6 79 c9 d1 54 25 52 fb e2 5e 53 58 57 7b c6 aa 74 d1 53 5b 7b 01 c5 67 e7 a1 07 65 2f 5d f0 47 56 fa 11 10 bf 98 58 0c 0f 1d 56 b6 8d d3 71 50 00 b7 9b 65 9a ed 00 27 28 96 44 66 30 3e 0c 22 91 69 f6 d6 df 8f 98 09 0b 10 a9 a1 9c e7 ef e3 0a 81 6a d5 c4 03 63 6a 8a 48 68 b3 3e 65 40 25 77 5a c0 93 d6 6f cd 5e 40 ee a8 81 e4 69 17 23 e5 87 4b 07 53 c4 36 51 28 ca 25 57 b8 21 5a 1b 0a 69 38 7d 3a a7 22 b5 00 53 5f 07 db 0b 6a 23 69 8f 68 d9 df 82 94 94 b8 4a 68 fd 52 1f d9 73 c3 4f 8d 61 39 cb 4c 7c c2 76 fa d0 0a 4f e4 f5 8f ca 72 30 48 2f 4d 5e 2e cd ea 46 97 6c 40 92 da 06 7d e5 dc 5f a6 ba 17 e6 8a 3e b5 f8 18 ef 51 d8 01 Data Ascii: Td`>sDs!kpFW3sR?yT%R^SXW{tS[{ge/]GVXVqPe'(Df0>"ijcjHh>e@%wZo^@i#KS6Q(%W!Zi8}:"S_j#ihJhRsOa9L\|vOr0H/M^.Fl@}_>Q
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: f7 6c 0b 98 d5 e9 c7 33 ba 8a 97 c1 91 68 44 eb 56 63 d4 8f 1d 3d 52 5a c3 bc 55 d4 87 d0 e8 86 54 ef 5a 7c 61 22 12 81 22 ac c0 31 7f 5e 6b 42 9a 19 88 1b 31 80 b3 31 08 c7 3e 6b 7f 1b 21 11 aa 23 08 a3 b9 f5 31 49 f0 ba a1 9c 44 87 ab d4 be c9 f4 51 70 3e 7c 88 76 af 15 95 bc d5 4d db 23 ab 77 7b 49 98 49 ae 30 49 02 ef de 5e 06 80 bc 04 3d 07 52 a3 b7 1b 2b fa e8 56 bd b7 e7 10 9b 93 e1 70 5c 03 cb 9b eb e7 d9 74 07 9a 9c c6 5d 48 6d 65 5e 5c fb 89 d8 da a0 f0 b1 55 66 8a 7f f5 82 8d 23 c2 dc 00 d9 6c 84 45 f0 2a 89 a3 b8 b7 57 6f ab 7a 20 ea 97 37 0a 77 be ea c7 b0 c7 0c 78 1f 30 46 3a 42 7b dd 66 e6 75 31 cf 2c d2 7a 37 aa 8d b6 c6 3d 6d c9 db a3 9a ee b7 34 80 79 a4 73 60 de f7 72 83 a3 e8 7f a0 0c d2 80 06 4b f4 40 fa f5 51 07 d2 07 ec 64 46 fc 74 Data Ascii: l3hDVc=RZUTZ\|a""1^kB11>k!#1IDQp>\|vM#w{II0I^=R+Vp\t]Hme^\Uf#lE*Woz 7wx0F:B{fu1,z7=m4ys`rK@QdFt
2024-10-24 23:03:00 UTC	1378	IN	Data Raw: 4c 86 e4 2c 28 fd c9 95 78 9b 5d 32 77 be 05 0b da 4b 08 5c e2 b7 c9 b3 f1 d4 9b 5f d7 c7 d9 75 5c 76 3d 60 0c ed 66 45 a7 2a 3a fb dd 11 56 25 09 31 e1 cc a0 9d 4a fa 5b 44 ff c6 8c 01 32 02 6a 0b 24 d7 5f fd 60 b9 f9 f5 d3 47 b6 1d 67 62 e2 fd 19 a3 6b b0 ea a5 bd 27 8b 4f 1d 6a 4f c3 d9 23 e2 bb 37 92 d8 62 b9 e8 a5 dc c7 1a e3 21 d1 48 65 72 29 02 d0 b3 b0 7d 77 e8 29 6b ab 2f 3a 26 dd 52 8a d0 98 22 c1 02 c3 a0 92 75 f8 99 96 c1 df 70 94 0a dc 5f bd 35 cd 2f 0f f3 8e fc 14 9b fe af 4b 7a e8 81 d5 5e 36 83 49 ca 07 48 6f 87 7d 9e cd 82 d1 17 d6 5d 24 6f e5 2b b6 c1 74 31 59 94 28 04 00 f1 53 a7 5f 0c de 6d da 8a 03 f2 a6 58 4a c8 55 6c fe d1 d2 82 5f f4 38 2e 51 10 01 36 46 69 9e 2c 40 c2 f8 3b ab 58 1a cd e6 8d 98 e7 44 14 12 cd 0b 81 b3 0f 26 0b e8 Data Ascii: L,(x]2wK\_u\v=`fE*:V%1J[D2j$_`Ggbk'OjO#7b!Her)}w)k/:&R"up_5/Kz^6IHo}]$o+t1Y(S_mXJUl_8.Q6Fi,@;XD&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	65212	142.250.185.193	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	726	OUT	GET /ytc/AIdro_nVNLosY_rSp_jV6MS57MdpHEScPexXFVHxb6nGj54=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:03:00 UTC	569	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Cross-Origin-Resource-Policy: cross-origin Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1fee3" Expires: Fri, 25 Oct 2024 23:03:00 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 23:03:00 GMT Server: fife Content-Length: 1096 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:03:00 UTC	809	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0c 0d 08 08 06 08 0e 0e 07 08 06 07 06 06 07 06 08 08 08 07 07 06 06 05 08 0c 07 07 09 07 08 0d 0e 08 10 0d 08 11 0e 0a 08 0b 16 07 11 13 14 15 15 11 0a 08 0b 18 0a 14 18 12 08 15 14 01 03 04 04 06 05 06 09 06 06 0a 14 0d 0b 0e 0e 0d 09 11 0f 14 0d 0d 0b 14 14 0a 0e 0d 08 0d 0d 0e 0f 10 14 0d 0b 0b 0e 0b 0b 08 0b 0d 0b 14 0b 12 0d 0a 0e 0b 0a 0d 14 0a 0f 08 09 14 08 0a 0e 08 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 07 08 05 09 ff c4 00 2d 10 00 01 04 01 02 05 03 02 07 01 00 00 00 00 00 00 01 00 02 03 04 11 05 12 06 08 13 22 31 07 21 32 14 23 33 41 42 51 61 71 81 09 ff c4 00 1a 01 01 01 01 01 Data Ascii: JFIFDD-"1!2#3ABQaq
2024-10-24 23:03:00 UTC	287	IN	Data Raw: af af 5c c2 23 cd bf 2f cd d3 35 06 47 5c 97 d3 be c7 cf 54 3c e6 48 7a 6e db 2c 2e 77 ea 0d cb 48 7f 9c 39 a0 e4 87 13 3b 5f a5 8d 3d f6 af 84 f3 1f a6 2d 5e 9f d8 db 8f 09 e5 0c 53 18 44 04 04 04 04 1b 8a 0f 50 b4 dd 77 4a ab a6 ea 93 b7 48 d5 b4 e6 88 e1 b5 2e c6 c5 2b dc c6 c6 e7 b1 ce 2c 6b a3 7e d6 17 56 dc d7 6e 68 c1 c0 04 f4 9e d7 0e b3 1d 69 92 dd db c7 bf af 3f 2e 16 fd a6 3d 4d 22 b7 9d ad 1d 7d fc 9c cd 13 92 aa 15 a6 8e ee ab a9 d7 7d 48 5e c9 1d 0b 7a 50 9b 3b 0e e1 19 7b a4 93 b4 e3 05 a0 12 46 40 23 ca f1 5e ce c5 8e 62 d9 32 46 df 4f cb cd 74 54 a4 f7 af 78 db af 8a 63 ce 57 af d1 6a 57 e1 fa 4c 9a 7a 74 4f 86 19 5c d2 c7 58 92 77 07 4d 20 69 c1 0c ed 8c 06 90 0f 69 38 f7 0b 1f 68 6a a3 3d e3 bb e1 1c 33 6b 35 11 9a d1 dd f0 86 7e 52 93 Data Ascii: \#/5G\T<Hzn,.wH9;_=-^SDPwJH.+,k~Vnhi?.=M"}}H^zP;{F@#^b2FOtTxcWjWLztO\XwM ii8hj=3k5~R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	65219	3.33.220.150	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	910	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&google_gid=CAESEMpC02vAuLVfFTx7n2BvwSs&google_cver=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRIVCgZnb29nbGUSCwjcodem4fS3PRAFGAUgASgBMgsI5Pyf9taiuj0QBTgBQgQiAggBWgdqc2FjNzRqYAFyBmdvb2dsZQ..
2024-10-24 23:03:00 UTC	698	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 23:03:00 GMT Content-Length: 341 Connection: close server: Kestrel location: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17 set-cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; expires=Fri, 24 Oct 2025 23:03:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRIVCgZnb29nbGUSCwj4s4WlwaK6PRAFEhcKCGFwcG5leHVzEgsI3NqvxYfwrj0QBRgFIAIoATILCOT8n_bWoro9EAU4AUIEIgIIAVoHanNhYzc0amABcghhcHBuZXh1cw..; expires=Fri, 24 Oct 2025 23:03:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-10-24 23:03:00 UTC	341	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 66 74 72 61 63 6b 25 32 66 63 6d 66 25 32 66 61 70 70 6e 65 78 75 73 25 33 66 74 74 64 25 33 64 31 25 32 36 61 6e 69 64 25 33 64 25 32 34 55 49 44 26 74 74 64 5f 74 64 69 64 3d 39 31 64 65 66 66 31 38 2d 64 31 66 35 2d 34 64 62 63 2d 62 66 65 63 2d 33 33 65 39 66 63 30 62 63 63 31 37 22 3e 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 66 74 72 61 63 6b 25 32 66 63 6d 66 25 Data Ascii: Redirecting to: <a href="https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17">https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	65223	3.33.220.150	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:00 UTC	796	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://d1eoo1tco6rr5e.cloudfront.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRIVCgZnb29nbGUSCwjcodem4fS3PRAFGAUgASgBMgsI5Pyf9taiuj0QBTgBQgQiAggBWgdqc2FjNzRqYAFyBmdvb2dsZQ..
2024-10-24 23:03:00 UTC	698	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 23:03:00 GMT Content-Length: 341 Connection: close server: Kestrel location: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17 set-cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; expires=Fri, 24 Oct 2025 23:03:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRIVCgZnb29nbGUSCwjcodem4fS3PRAFEhcKCGFwcG5leHVzEgsIlovBx4fwrj0QBRgFIAIoATILCOT8n_bWoro9EAU4AUIEIgIIAVoHanNhYzc0amABcghhcHBuZXh1cw..; expires=Fri, 24 Oct 2025 23:03:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-10-24 23:03:00 UTC	341	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 66 74 72 61 63 6b 25 32 66 63 6d 66 25 32 66 61 70 70 6e 65 78 75 73 25 33 66 74 74 64 25 33 64 31 25 32 36 61 6e 69 64 25 33 64 25 32 34 55 49 44 26 74 74 64 5f 74 64 69 64 3d 39 31 64 65 66 66 31 38 2d 64 31 66 35 2d 34 64 62 63 2d 62 66 65 63 2d 33 33 65 39 66 63 30 62 63 63 31 37 22 3e 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 66 74 72 61 63 6b 25 32 66 63 6d 66 25 Data Ascii: Redirecting to: <a href="https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17">https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	65226	172.217.23.110	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:01 UTC	465	OUT	GET /s/player/fb725ac8/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:03:01 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2465253 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 21:31:55 GMT Expires: Fri, 24 Oct 2025 21:31:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 23 Oct 2024 04:16:42 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 5466 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:03:01 UTC	690	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright Google LLC All Rights Reserved. Use of th
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 Data Ascii: modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 77 61 72 65 20 66 6f 72 20 61 6e 79 20 70 75 72 70 6f 73 65 2c 0a 20 20 20 69 6e 63 6c 75 64 69 6e 67 20 63 6f 6d 6d 65 72 63 69 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 64 3b 20 79 6f 75 20 6d 75 73 74 20 6e 6f 74 0a 20 20 20 20 20 20 63 6c 61 69 6d 20 74 68 61 74 20 79 6f 75 20 77 72 6f 74 65 20 74 68 65 20 6f 72 69 Data Ascii: ware for any purpose, including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you must not claim that you wrote the ori
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e Data Ascii: tware is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF AN
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 63 61 2c 4f 64 2c 43 63 61 2c 4e 64 2c 52 64 2c 51 64 2c 53 64 2c 56 64 2c 5a 64 2c 46 63 61 2c 47 63 61 2c 58 64 2c 48 63 61 2c 49 63 61 2c 24 64 2c 4d 63 61 2c 61 65 2c 65 65 2c 66 65 2c 67 65 2c 62 65 2c 64 65 2c 63 65 2c 6a 65 2c 45 63 61 2c 6b 65 2c 4e 63 61 2c 66 62 2c 6c 65 2c 6d 65 2c 57 64 2c 59 64 2c 6f 65 2c 50 63 61 2c 70 65 2c 71 65 2c 51 63 61 2c 69 62 2c 72 65 2c 73 65 2c 74 65 2c 75 65 2c 76 65 2c 77 65 2c 78 65 2c 52 63 61 2c 79 65 2c 53 63 61 2c 7a 65 2c 54 63 61 2c 42 65 2c 41 65 2c 43 65 2c 44 65 2c 45 65 2c 47 65 2c 48 65 2c 55 63 61 2c 57 63 61 2c 4a 65 2c 58 63 61 2c 59 63 61 2c 4b 65 2c 4c 65 2c 4f 65 2c 24 63 61 2c 61 64 61 2c 50 65 2c 65 64 61 2c 68 64 61 2c 62 64 61 2c 67 64 61 2c 66 64 61 2c 64 64 61 2c 63 64 61 2c 69 64 61 2c Data Ascii: ca,Od,Cca,Nd,Rd,Qd,Sd,Vd,Zd,Fca,Gca,Xd,Hca,Ica,$d,Mca,ae,ee,fe,ge,be,de,ce,je,Eca,ke,Nca,fb,le,me,Wd,Yd,oe,Pca,pe,qe,Qca,ib,re,se,te,ue,ve,we,xe,Rca,ye,Sca,ze,Tca,Be,Ae,Ce,De,Ee,Ge,He,Uca,Wca,Je,Xca,Yca,Ke,Le,Oe,$ca,ada,Pe,eda,hda,bda,gda,fda,dda,cda,ida,
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 6b 2c 63 68 61 2c 6b 6b 2c 6c 6b 2c 64 68 61 2c 6d 6b 2c 6e 6b 2c 6f 6b 2c 70 6b 2c 71 6b 2c 68 68 61 2c 65 68 61 2c 74 6b 2c 67 68 61 2c 75 6b 2c 66 68 61 2c 73 6b 2c 72 6b 2c 77 6b 2c 6a 68 61 2c 79 6b 2c 78 6b 2c 44 6b 2c 45 6b 2c 47 6b 2c 6d 68 61 2c 46 6b 2c 4a 6b 2c 6e 68 61 2c 4b 6b 2c 6b 68 61 2c 71 68 61 2c 72 68 61 2c 73 68 61 2c 50 6b 2c 51 6b 2c 52 6b 2c 74 68 61 2c 53 6b 2c 54 6b 2c 55 6b 2c 56 6b 2c 75 68 61 2c 57 6b 2c 58 6b 2c 59 6b 2c 76 68 61 2c 77 68 61 2c 5a 6b 2c 78 68 61 2c 50 6a 2c 41 68 61 2c 42 68 61 2c 43 68 61 2c 44 68 61 2c 79 68 61 2c 24 6b 2c 61 6c 2c 62 6c 2c 63 6c 2c 46 68 61 2c 65 6c 2c 64 6c 2c 47 68 61 2c 48 68 61 2c 49 68 61 2c 69 6c 2c 4a 68 61 2c 6a 6c 2c 6b 6c 2c 4b 68 61 2c 4c 68 61 2c 6c 6c 2c 4e 68 61 2c 6d 6c 2c Data Ascii: k,cha,kk,lk,dha,mk,nk,ok,pk,qk,hha,eha,tk,gha,uk,fha,sk,rk,wk,jha,yk,xk,Dk,Ek,Gk,mha,Fk,Jk,nha,Kk,kha,qha,rha,sha,Pk,Qk,Rk,tha,Sk,Tk,Uk,Vk,uha,Wk,Xk,Yk,vha,wha,Zk,xha,Pj,Aha,Bha,Cha,Dha,yha,$k,al,bl,cl,Fha,el,dl,Gha,Hha,Iha,il,Jha,jl,kl,Kha,Lha,ll,Nha,ml,
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 2c 49 6c 61 2c 4a 6c 61 2c 4e 6c 61 2c 4d 6c 61 2c 50 6c 61 2c 52 6c 61 2c 69 70 2c 53 6c 61 2c 68 70 2c 6b 70 2c 54 6c 61 2c 6c 70 2c 6e 70 2c 6f 70 2c 55 6c 61 2c 0a 56 6c 61 2c 57 6c 61 2c 76 70 2c 58 6c 61 2c 59 6c 61 2c 45 70 2c 5a 6c 61 2c 61 6d 61 2c 46 70 2c 62 6d 61 2c 63 6d 61 2c 69 6d 61 2c 65 6d 61 2c 49 70 2c 4a 70 2c 4b 70 2c 4d 70 2c 4e 70 2c 6e 6d 61 2c 4f 70 2c 50 70 2c 51 70 2c 70 6d 61 2c 54 70 2c 71 6d 61 2c 72 6d 61 2c 55 70 2c 74 6d 61 2c 57 70 2c 58 70 2c 59 70 2c 5a 70 2c 75 6d 61 2c 24 70 2c 62 71 2c 63 71 2c 64 71 2c 65 71 2c 76 6d 61 2c 67 71 2c 68 71 2c 69 71 2c 6a 71 2c 6b 71 2c 6c 71 2c 77 6d 61 2c 78 6d 61 2c 79 6d 61 2c 7a 6d 61 2c 41 6d 61 2c 42 6d 61 2c 6d 71 2c 43 6d 61 2c 74 71 2c 44 6d 61 2c 45 6d 61 2c 46 6d 61 2c 75 Data Ascii: ,Ila,Jla,Nla,Mla,Pla,Rla,ip,Sla,hp,kp,Tla,lp,np,op,Ula,Vla,Wla,vp,Xla,Yla,Ep,Zla,ama,Fp,bma,cma,ima,ema,Ip,Jp,Kp,Mp,Np,nma,Op,Pp,Qp,pma,Tp,qma,rma,Up,tma,Wp,Xp,Yp,Zp,uma,$p,bq,cq,dq,eq,vma,gq,hq,iq,jq,kq,lq,wma,xma,yma,zma,Ama,Bma,mq,Cma,tq,Dma,Ema,Fma,u
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 76 2c 4a 76 2c 53 71 61 2c 49 76 2c 4c 76 2c 4d 76 2c 4e 76 2c 54 71 61 2c 55 71 61 2c 50 76 2c 57 71 61 2c 53 76 2c 52 76 2c 55 76 2c 56 76 2c 57 76 2c 58 71 61 2c 58 76 2c 5a 76 2c 59 71 61 2c 61 77 2c 63 77 2c 64 77 2c 5a 71 61 2c 24 71 61 2c 61 72 61 2c 65 77 2c 67 77 2c 62 72 61 2c 68 77 2c 69 77 2c 6a 77 2c 64 72 61 2c 6b 77 2c 65 72 61 2c 6d 77 2c 70 77 2c 6f 77 2c 6e 77 2c 71 77 2c 72 77 2c 68 72 61 2c 6e 72 61 2c 70 72 61 2c 6d 72 61 2c 6c 72 61 2c 6f 72 61 2c 76 77 2c 79 77 2c 72 72 61 2c 71 72 61 2c 44 77 2c 45 77 2c 67 72 61 2c 41 72 61 2c 0a 4b 77 2c 7a 72 61 2c 44 72 61 2c 79 72 61 2c 75 77 2c 4c 77 2c 43 77 2c 49 77 2c 42 72 61 2c 41 77 2c 6a 72 61 2c 69 72 61 2c 6b 72 61 2c 78 77 2c 78 72 61 2c 50 77 2c 4b 72 61 2c 4a 72 61 2c 51 77 2c 4d Data Ascii: v,Jv,Sqa,Iv,Lv,Mv,Nv,Tqa,Uqa,Pv,Wqa,Sv,Rv,Uv,Vv,Wv,Xqa,Xv,Zv,Yqa,aw,cw,dw,Zqa,$qa,ara,ew,gw,bra,hw,iw,jw,dra,kw,era,mw,pw,ow,nw,qw,rw,hra,nra,pra,mra,lra,ora,vw,yw,rra,qra,Dw,Ew,gra,Ara,Kw,zra,Dra,yra,uw,Lw,Cw,Iw,Bra,Aw,jra,ira,kra,xw,xra,Pw,Kra,Jra,Qw,M
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 42 2c 24 42 2c 61 43 2c 77 76 61 2c 78 76 61 2c 62 43 2c 76 76 61 2c 63 43 2c 41 76 61 2c 64 43 2c 65 43 2c 66 43 2c 67 43 2c 68 43 2c 69 43 2c 6a 43 2c 6b 43 2c 6c 43 2c 6d 43 2c 6e 43 2c 6f 43 2c 70 43 2c 71 43 2c 72 43 2c 73 43 2c 74 43 2c 75 43 2c 76 43 2c 77 43 2c 78 43 2c 79 43 2c 7a 43 2c 41 43 2c 42 43 2c 43 43 2c 44 43 2c 45 43 2c 46 43 2c 47 43 2c 48 43 2c 49 43 2c 4a 43 2c 4b 43 2c 4c 43 2c 4d 43 2c 4e 43 2c 4f 43 2c 50 43 2c 51 43 2c 52 43 2c 53 43 2c 54 43 2c 55 43 2c 56 43 2c 57 43 2c 58 43 2c 59 43 2c 5a 43 2c 24 43 2c 61 44 2c 62 44 2c 63 44 2c 64 44 2c 65 44 2c 66 44 2c 67 44 2c 68 44 2c 69 44 2c 6a 44 2c 6b 44 2c 6c 44 2c 6d 44 2c 6e 44 2c 6f 44 2c 70 44 2c 71 44 2c 72 44 2c 73 44 2c 74 44 2c 76 44 2c 77 44 2c 43 76 61 2c 78 44 2c 5a 2c Data Ascii: B,$B,aC,wva,xva,bC,vva,cC,Ava,dC,eC,fC,gC,hC,iC,jC,kC,lC,mC,nC,oC,pC,qC,rC,sC,tC,uC,vC,wC,xC,yC,zC,AC,BC,CC,DC,EC,FC,GC,HC,IC,JC,KC,LC,MC,NC,OC,PC,QC,RC,SC,TC,UC,VC,WC,XC,YC,ZC,$C,aD,bD,cD,dD,eD,fD,gD,hD,iD,jD,kD,lD,mD,nD,oD,pD,qD,rD,sD,tD,vD,wD,Cva,xD,Z,
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 79 61 2c 78 49 2c 79 49 2c 42 79 61 2c 41 79 61 2c 43 79 61 2c 44 79 61 2c 45 79 61 2c 41 49 2c 42 49 2c 43 49 2c 46 79 61 2c 47 79 61 2c 48 79 61 2c 49 79 61 2c 4a 79 61 2c 4b 79 61 2c 4c 79 61 2c 4d 79 61 2c 4e 79 61 2c 4f 79 61 2c 45 49 2c 46 49 2c 50 79 61 2c 51 79 61 2c 47 49 2c 48 49 2c 52 79 61 2c 49 49 2c 4a 49 2c 4c 49 2c 53 79 61 2c 4d 49 2c 4e 49 2c 4f 49 2c 54 79 61 2c 50 49 2c 55 79 61 2c 51 49 2c 56 79 61 2c 52 49 2c 57 79 61 2c 58 79 61 2c 53 49 2c 59 79 61 2c 5a 79 61 2c 24 79 61 2c 54 49 2c 55 49 2c 56 49 2c 57 49 2c 58 49 2c 61 7a 61 2c 62 7a 61 2c 59 49 2c 5a 49 2c 24 49 2c 63 7a 61 2c 61 4a 2c 62 4a 2c 63 4a 2c 64 7a 61 2c 65 7a 61 2c 64 4a 2c 66 7a 61 2c 65 4a 2c 66 4a 2c 67 4a 2c 68 4a 2c 64 77 61 2c 67 7a 61 2c 68 7a 61 2c 69 7a 61 Data Ascii: ya,xI,yI,Bya,Aya,Cya,Dya,Eya,AI,BI,CI,Fya,Gya,Hya,Iya,Jya,Kya,Lya,Mya,Nya,Oya,EI,FI,Pya,Qya,GI,HI,Rya,II,JI,LI,Sya,MI,NI,OI,Tya,PI,Uya,QI,Vya,RI,Wya,Xya,SI,Yya,Zya,$ya,TI,UI,VI,WI,XI,aza,bza,YI,ZI,$I,cza,aJ,bJ,cJ,dza,eza,dJ,fza,eJ,fJ,gJ,hJ,dwa,gza,hza,iza

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.6	65231	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:01 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:01 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:01 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 628e7349-b01e-003d-63fd-24d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230301Z-15b8d89586fcvr6p5956n5d0rc00000005h0000000007hap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 23:03:01 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.6	65232	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:01 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230301Z-16849878b78bkvbz1ry47zvsas00000008d000000000adnv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	65227	142.250.186.150	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:01 UTC	446	OUT	GET /vi_webp/J_kzFgju7PA/sddefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:03:01 UTC	622	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 30658 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 23:02:59 GMT Expires: Fri, 25 Oct 2024 01:02:59 GMT Cache-Control: public, max-age=7200 ETag: "0" Content-Type: image/webp Vary: Origin Age: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:03:01 UTC	756	IN	Data Raw: 52 49 46 46 ba 77 00 00 57 45 42 50 56 50 38 20 ae 77 00 00 10 61 02 9d 01 2a 80 02 e0 01 3e 71 30 94 46 24 a3 22 21 aa d3 dc a8 90 0e 09 65 6e e8 1f c9 01 70 d0 cb 35 f1 ff 1f 62 bc 8f f1 5f f1 7f a0 f4 c7 e4 3e fc fe 49 95 ae ff 7b 8b cd 9f ce 7f 98 f2 b3 eb ef fa a6 f1 9f 36 1e 66 7e a0 b7 b9 77 ab 3f 77 ed bc fc bb f9 df f8 be 22 f9 ec fb 06 d5 ff bf 67 3f df 7f d5 f3 67 f9 ff e9 7f ed 7f 9c f5 23 c2 9f a0 7a 87 7e 73 fd b7 d0 6a 36 9a a3 e8 53 e1 4f 3a cf bf f3 db f7 4f f7 5e c0 9f af 7c 82 7f 95 ff cf ec 13 fd 1f fe 07 ac 4f fc 7e 74 b5 22 3e 2a 8d d7 08 08 6d 9b d5 08 20 35 0e fe 82 f5 42 08 0d 43 bf a0 bd 50 82 03 50 ef e8 2f 54 20 80 d4 3b fa 0b d5 08 20 35 0e fe 82 f5 42 08 0d 43 bf a0 bd 50 82 03 50 ef e8 2f 54 20 80 d4 3b fa 0b d5 08 20 35 0e Data Ascii: RIFFwWEBPVP8 wa>q0F$"!enp5b_>I{6f~w?w"g?g#z~sj6SO:O^\|O~t">m 5BCPP/T ; 5BCPP/T ; 5
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 23 23 da ab e1 d2 9b 5f ef dc d2 6a c5 75 7c 46 19 b2 98 4f 35 bd 5e d9 e0 77 ff 4a ed 98 fe a5 cc cb 36 17 5a 1b 9a 6a 1c b8 8d e7 80 52 e9 3e 86 3d 11 81 7c e1 66 72 8b 0e 75 bc d7 5d 68 1b e9 c5 a7 99 33 cb 27 b7 52 21 d8 5b a9 f7 2a a5 17 0b 98 6a 51 7f b1 ef 22 ee 79 07 83 ad e1 a9 65 d0 1b 78 d2 3a f2 28 a1 dc a1 b0 7b bd a7 9a f9 b6 06 a4 fc b5 b5 6c d2 ef af b8 94 dd 3e da 3e c0 b0 24 77 34 d8 31 9a cc 6e ba ac a2 c3 93 43 06 b6 13 b1 c3 ef c9 ff 65 ac 4a 3c 72 22 9d 44 dc b6 46 21 06 d3 9b c0 e8 e5 4a 1c c9 c6 e1 9e d5 d3 e8 0b f6 ec 3a b2 e1 da d3 64 c6 27 a9 48 1c f8 a6 2d be b6 64 f8 b5 50 37 53 2e 10 0d 1f 23 ae de 57 2f 34 92 d9 d5 17 4e 89 28 35 d3 74 0d d7 c5 de 5c d7 2e 88 07 b3 14 1a 3e 01 22 dd 4c 36 e8 f4 70 4f 1a 8b f1 cf 47 4b 4e 36 Data Ascii: ##_ju\|FO5^wJ6ZjR>=\|fru]h3'R![*jQ"yex:({l>>$w41nCeJ<r"DF!J:d'H-dP7S.#W/4N(5t\.>"L6pOGKN6
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 92 5e 33 c6 c9 fb 37 31 88 8a 35 2f dd b3 78 7b 16 69 c2 35 6a d5 26 6d 03 00 34 bf 24 80 3e af 81 1e b8 3d 5c 49 8b 11 73 f9 7c 36 ef b7 d7 60 72 f8 56 92 4c e7 48 56 04 63 28 87 f9 a4 5a e5 9d 1d d1 64 a5 35 9f 07 a9 97 a3 d9 6d 79 33 09 4e e4 cb f4 4b 0d c1 f5 a4 14 f9 f4 38 6a 77 c0 b3 40 ee 97 7a 64 24 10 17 3d a6 04 7a 3d 3f 6c e6 f2 2c 4b 1d aa 28 16 5f 47 91 1a ef c8 c3 8b f7 ee c8 24 1a 7b 0b 66 d9 c4 13 9a 7d 2b c3 80 ef c4 52 d1 43 7c f3 4f 52 4c 6a 10 50 c7 35 d1 fe 3e 5f bf 76 7b d8 b4 e4 c7 74 6e cb 74 70 3d 5d 01 2d cc c8 75 f4 dd 26 38 d1 6a 95 3b f1 6c 4d d8 8e 8e 4e 56 3a 49 bf ea 35 87 bc 33 32 f1 7b dd c6 30 af 41 11 90 c7 d4 74 bd f6 b8 dd 3a 39 04 fb 4d 3b d2 e6 4e d9 5e 06 94 71 e1 38 76 21 94 1b b7 a3 82 be 50 e0 f5 10 c1 d2 0e 90 Data Ascii: ^3715/x{i5j&m4$>=\Is\|6`rVLHVc(Zd5my3NK8jw@zd$=z=?l,K(_G${f}+RC\|ORLjP5>_v{tntp=]-u&8j;lMNV:I532{0At:9M;N^q8v!P
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 60 50 d9 e9 3a d5 f5 19 4c cc 1b 06 d5 33 5f 06 94 fe 73 86 73 6e 3b bc b9 a3 e9 6d 08 cc 61 16 7b 26 03 17 fe cd 98 49 6d 1e c3 d6 d5 46 db 5c a4 c3 25 4a dd 97 9b 39 bd e2 24 be 5f ef 24 4b 09 1e bd 88 94 00 eb f0 77 22 1e 8a 09 52 59 ea 1c 3f 64 6e 20 9d b9 c7 78 b8 f7 d4 a2 51 6f 40 57 57 0f 80 5a ab 89 85 43 0d 91 ea 59 f0 61 cb ae 67 4d 43 db 4a 36 9e 9f 54 3d 37 df bb eb 01 dd b9 a2 77 2b 92 34 17 5b 9f 1d 85 45 6f 19 8b b6 77 4d 8a 43 39 6a 0c ca 5a e4 77 3e 0e 93 c9 d2 5a 43 1f 4f 50 8d 6a 39 3f 68 4b 2a 2c e9 b4 37 75 bd 76 6a c0 cf 60 e0 be 5e 9c e8 0e ee 55 40 b6 af 9f 5b d8 fe cb 18 ef 44 5c 5f b7 9c 8d e5 a1 2b 17 0c a0 e7 ec e1 01 d9 e2 75 b3 5f 38 38 d9 b5 d8 d2 19 e1 60 23 8f 19 5a 9a e6 81 48 0b 66 69 3c a7 7e 6c 45 b6 37 be 1e ad 66 50 Data Ascii: `P:L3_ssn;ma{&ImF\%J9$_$Kw"RY?dn xQo@WWZCYagMCJ6T=7w+4[EowMC9jZw>ZCOPj9?hK*,7uvj`^U@[D\_+u_88`#ZHfi<~lE7fP
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: fa 0b d5 08 20 35 0e fe 82 c0 00 00 fe f8 9f c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 12 3c a8 04 f0 e7 26 60 e0 13 45 ff d1 b7 b1 9a cf 71 6a 80 58 b1 56 df 92 e8 fc 7e df 68 3c 61 47 b9 05 76 b2 fa 89 67 00 da 39 e6 2d fa 10 16 e8 e2 c5 5c fa b7 6e 82 d3 86 37 80 83 00 03 78 35 b5 b6 b2 d6 df 50 81 90 4d a9 d3 fa 8c 37 08 15 e5 c5 2c 46 0e 64 5c 16 5d 25 d9 10 41 b1 d7 11 d7 8f 9b 97 f3 c7 30 f4 db 7d d6 dd e0 cc 44 7b 33 2d 09 a0 b4 81 46 68 31 2f 98 28 67 e6 c2 b2 90 b5 dd eb 2a 2c 1b f0 ee be 9c a5 42 6a 3d cf 3f d0 1b 5d 8b 1d b5 47 3c 58 1e 7a bc 1b ed f6 e0 1e 30 2a f9 3c 30 75 17 b0 a8 c3 e8 3c 78 33 f6 6a 87 80 2b c5 8e a4 43 07 c2 37 79 41 ed 1d ee 4f e9 cb 96 b0 5a fb 90 df 55 31 29 ab 68 0a b6 c0 16 4a 00 26 55 1a ec 16 07 6e 75 50 3e Data Ascii: 5<&`EqjXV~h<aGvg9-\n7x5PM7,Fd\]%A0}D{3-Fh1/(g,Bj=?]G<Xz0<0u<x3j+C7yAOZU1)hJ&UnuP>
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: b1 c3 ea 30 c7 85 aa 73 39 44 16 6a f3 96 07 91 35 50 c6 7b fc 8c de 92 28 fb 92 78 8b 88 b1 f2 94 c3 ff 5d b8 f3 0e 9b 01 90 d4 71 74 36 52 ec 33 5d 79 cd 0c 7f 9b 4b 69 8d 89 ee d6 11 94 45 2f e1 1f c6 9f e2 04 2f c3 71 63 5c b0 eb c9 10 f9 5f 54 d8 23 c8 3c fe 97 6c 4c 7d bc b1 06 ec df a2 59 ae af f9 30 8d 4a e0 dc 11 5d c7 21 66 f9 ca 71 45 f1 7b a0 d4 a7 51 ba ca fe ea f2 65 33 d5 f8 b8 96 6e 20 53 68 f0 1d 59 fb 4b 5a e5 f2 2e d6 92 73 d3 7d df d2 95 71 d4 1c 2e 63 d7 78 91 10 e9 68 2e b6 2f e9 6f 4f d1 6f 75 c1 27 2b 1d 90 74 a6 eb d4 e1 f6 8b a4 b6 d8 1c 98 9d cf ee 5d 30 c1 59 45 80 3f 00 b4 02 2c 9e 8e 0c 42 e2 45 45 fb d6 5d 23 10 e2 e8 fd 0c 13 71 ab b8 5d 9d d7 58 cd fd 54 e8 00 45 df 62 fc b8 db 08 6f a7 de 18 fd a6 ae d4 14 b7 f9 59 64 fa Data Ascii: 0s9Dj5P{(x]qt6R3]yKiE//qc\_T#<lL}Y0J]!fqE{Qe3n ShYKZ.s}q.cxh./oOou'+t]0YE?,BEE]#q]XTEboYd
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 92 f3 c4 e1 28 95 86 1f dd b8 e7 7f d8 a0 c3 0f 38 ed 2e 81 2b a0 ac 84 d4 b5 73 23 2a da c8 b7 0b 56 f6 85 c8 2f a9 6f 5f d1 eb f8 4e db ae 64 1d 16 04 d1 bb 04 93 6d 6f 78 2b e8 8e 00 ce bf bf f4 f2 0c fb c0 1b ff 13 3d f8 ab 2e c5 7d 03 4b c1 c6 64 b7 a2 bf 2c c7 b7 af ff 63 44 a6 e7 d1 a1 5c c9 61 b7 f6 06 c9 07 99 68 58 cf 42 3e 50 d8 ac 69 38 75 31 d5 ce 8b e2 01 88 1a 90 eb d5 7b 7e 43 12 ba b1 cb dc b9 b8 e5 c1 4e 08 3e 84 45 4c 65 68 15 ce ec 43 aa 67 96 dc 6d 05 23 94 cf 91 b7 ce f4 ef 30 0b 59 0a 46 d8 e3 5d f1 6b e2 ad 17 48 da 79 0a c4 53 d9 f3 ad 46 6c a9 4f 4c 70 21 a7 28 22 39 62 07 27 5d 26 39 43 14 55 ea 33 ce ef 16 0f a0 dc b6 e6 64 a9 64 43 75 39 45 a7 d7 f6 25 02 20 52 9d 95 35 3f fd 4e 04 83 ab 4f 95 de 7c 67 b9 3e 69 15 cb 1a 31 af Data Ascii: (8.+s#*V/o_Ndmox+=.}Kd,cD\ahXB>Pi8u1{~CN>ELehCgm#0YF]kHySFlOLp!("9b']&9CU3ddCu9E% R5?NO\|g>i1
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 85 b1 3c 8a b4 47 7a ab ed 54 78 c1 16 f9 82 5e 24 99 58 47 4e f4 b1 80 62 f7 ab 7f 3e be 82 34 06 e0 56 7c 37 fd b3 b5 01 7c b1 02 ae 9f 51 64 f6 e1 f1 05 10 60 56 3b 17 8a e9 1d a0 dc 86 e2 76 8a 68 42 21 9b 93 8a 38 ae 15 b7 e2 a8 43 27 a3 74 aa 59 22 46 8b 64 b0 07 1a e5 64 1f a2 1a dd 3e c1 fd 0e 09 9c 0f 2b 9b 9d 1e cc 14 20 48 60 1b ab 79 4f 56 ca 4e 86 e0 99 94 c6 1d 67 0a e4 2e 35 ac d2 35 b1 b4 cf 68 c3 5c 42 78 02 40 e5 e6 b9 72 2d e8 07 a4 c9 df ab 93 bd 62 1c 98 1a 5f 91 10 4a 3c da 52 95 e4 0b c3 21 fe 32 d2 f6 2d 70 72 3d 6c e9 8e 59 a0 34 c2 6b b0 fc 0b f1 e1 4e 91 a4 0a cf a1 81 d4 c3 2d 36 27 f0 95 8f 8c db 2e 64 a8 41 b0 7a f7 77 2b b5 ef 3b 8d 0e 22 fb 4c ca 67 6f 45 a1 ed f2 06 39 22 6c 2d 28 68 fe 7c 84 92 b4 a2 cc 19 31 12 7b b8 26 Data Ascii: <GzTx^$XGNb>4V\|7\|Qd`V;vhB!8C'tY"Fdd>+ H`yOVNg.55h\Bx@r-b_J<R!2-pr=lY4kN-6'.dAzw+;"LgoE9"l-(h\|1{&
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 8e e1 f2 12 7b dc d1 10 71 f2 85 87 aa 17 2e 44 62 86 ab e9 12 58 b2 0f 96 eb c0 c8 d8 40 86 b4 83 97 c3 2a 76 84 32 03 35 15 3d 26 03 fb 59 14 39 22 1e 50 e9 f8 d3 5b 54 53 07 10 51 a7 7b 12 67 d7 28 04 a2 e2 ca 02 86 13 6b 52 59 b0 ac 2d 94 9e a3 24 c1 0d 00 d1 59 20 38 e3 ad 11 ad ab 95 07 38 b3 c1 bd 27 2b 60 09 06 d8 68 e3 df d7 e7 c1 d8 28 61 2a 50 b6 13 68 de da b0 04 5d dd b8 e0 7f 92 19 d6 36 e9 01 c7 c6 c0 bb ad dd fd 39 10 bb 56 89 43 b6 24 6d e6 41 7a e4 1c 50 5a b4 c6 8c f4 4b a3 b3 62 18 21 aa 37 a8 d5 4c 0c 3b aa 4b 29 6d c7 a1 58 fb 77 68 6e 3e e8 ab 7f 25 47 e7 96 7b 1f 01 79 dc 12 da c4 2c 69 89 a8 58 5e 19 f6 a4 00 4f 3e 73 78 6d a5 31 76 d4 50 83 51 d4 6c cb 57 7a 25 7f f1 e5 d9 3f 51 ff ec 24 ea 1a 12 4d 3c c4 7a d0 7c 4c 3f f5 33 e2 Data Ascii: {q.DbX@v25=&Y9"P[TSQ{g(kRY-$Y 88'+`h(aPh]69VC$mAzPZKb!7L;K)mXwhn>%G{y,iX^O>sxm1vPQlWz%?Q$M<z\|L?3
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 7b 96 1a f2 fd 6b 12 b4 44 2b 34 d0 50 5d 92 b1 3e a1 25 c5 76 9c ec ab 85 13 ed 75 34 32 11 7b 88 f7 45 ae 8d fc 54 fc 39 85 6c e5 06 54 3f 24 21 17 75 1b eb 6c e6 b4 5c 04 fe 6f 17 aa 9d e5 5a 86 23 c8 ba be 7b b6 69 1e fd 80 0a 12 26 20 c9 22 0d 25 1e 1e da 3d 57 a4 a4 52 80 71 3b a6 72 08 28 9b 11 c7 bf 64 e3 4d 05 91 35 dd a7 6a d5 d0 62 4c 63 36 78 fe 26 ce 74 a7 b8 9a dc e5 a6 cb 6f a5 06 bb 7d 86 7e 9c 7f d3 00 0a 10 53 f7 b9 18 7b ee 24 dd 6f 72 a7 2f 86 fd b7 61 00 e9 26 54 fd 2e 55 ff 5c 43 39 ea 6b 16 99 07 b3 6e b8 62 3e 9b 71 03 37 71 23 6a f5 35 58 ad b8 40 82 7a 12 55 6b 4a ff c8 9b d4 9f fc 8f 89 9c a6 40 63 0c 50 29 3d fb a0 eb fc 2c c1 f9 ae 00 3e 24 20 af fe 2c 65 04 2e 1f 8f 16 f3 c4 7d 66 51 64 99 c7 a2 9d 4c f9 f1 15 bd f3 36 06 3e Data Ascii: {kD+4P]>%vu42{ET9lT?$!ul\oZ#{i& "%=WRq;r(dM5jbLc6x&to}~S{$or/a&T.U\C9knb>q7q#j5X@zUkJ@cP)=,>$ ,e.}fQdL6>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	65229	142.250.184.226	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:01 UTC	719	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmbxgMGIAdTiTueEcDg_xsiTpyJoqwcNb5BsM4xEsWO2bfSYUrHcUXhEjkG
2024-10-24 23:03:01 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Thu, 24 Oct 2024 23:03:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 23:03:01 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 6f 53 6a 43 52 4a 48 55 32 5f 6a 36 46 67 4e 77 4d 38 6f 57 59 2d 66 6c 77 68 2d 55 55 6b 43 58 68 6d 54 50 78 5a 37 2d 65 70 35 6c 62 45 6e 73 36 6a 42 6f 54 6b 33 5f 6a 68 31 61 2d 52 55 35 54 75 6c 59 63 58 53 35 51 7a 67 69 43 71 44 61 36 76 61 7a 62 70 34 2d 78 31 42 41 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKoSjCRJHU2_j6FgNwM8oWY-flwh-UUkCXhmTPxZ7-ep5lbEns6jBoTk3_jh1a-RU5TulYcXS5QzgiCqDa6vazbp4-x1BA"}
2024-10-24 23:03:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	65233	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:01 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:01 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e2c56d39-d01e-0066-36df-25ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230301Z-15b8d89586fnsf5zd126eyaetw00000000ug00000000a2wf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:01 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	65235	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:01 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:01 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: c3c7965e-601e-0050-4428-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230301Z-17c5cb586f6bzvl6c2dt6tbmm400000001r00000000097sm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.6	65236	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:01 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:01 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230301Z-16849878b788tnsxzb2smucwdc00000008c000000000f6yp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:01 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	65234	142.250.186.68	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:01 UTC	642	OUT	GET /js/th/It53B4OXF04wOkLSwvG0idPTlSk2hAXwxFmUWIvLxEQ.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:03:01 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 55108 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 12:51:26 GMT Expires: Fri, 24 Oct 2025 12:51:26 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 17 Oct 2024 15:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 36695 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:03:01 UTC	567	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 3d 3d 35 34 29 44 3d 42 26 26 42 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 75 3a 37 39 3b 65 6c 73 65 20 69 66 28 44 3d 3d 38 38 29 44 3d 62 2e 63 6f 6e 73 6f 6c 65 3f 56 3a 7a 3b 65 6c 73 65 7b 69 66 28 44 3d 3d 37 39 29 72 65 74 75 72 6e 20 76 3b 69 66 28 44 3d 3d 7a 29 72 65 74 75 72 6e 20 5a 3d 39 34 2c 76 3b 44 3d 3d 32 31 26 26 28 42 3d 62 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 76 3d 49 2c 44 3d 35 34 29 7d 7d 63 61 74 63 68 28 6e 29 7b 69 66 28 5a 3d 3d 39 34 29 74 68 72 6f 77 20 6e 3b 5a 3d 3d 32 26 26 28 72 3d 6e 2c 44 3d 33 37 29 7d 7d 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 48 2c 75 29 7b 72 65 74 75 72 6e 28 75 3d 57 28 31 38 2c 32 35 2c 33 31 2c 31 36 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 2c 6e 75 6c 6c 29 29 26 26 48 2e Data Ascii: ==54)D=B&&B.createPolicy?u:79;else if(D==88)D=b.console?V:z;else{if(D==79)return v;if(D==z)return Z=94,v;D==21&&(B=b.trustedTypes,v=I,D=54)}}catch(n){if(Z==94)throw n;Z==2&&(r=n,D=37)}};(0,eval)(function(H,u){return(u=W(18,25,31,16,"error","ad",null))&&H.
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 38 3f 28 6e 3d 48 2c 72 3d 39 33 29 3a 72 3d 3d 36 30 3f 28 74 68 69 73 2e 74 79 70 65 3d 48 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 74 68 69 73 2e 74 61 72 67 65 74 3d 44 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3d 74 68 69 73 2e 46 35 3d 66 61 6c 73 65 2c 72 3d 35 38 29 3a 72 3d 3d 31 38 3f 72 3d 28 28 56 7c 32 29 26 31 35 29 3d 3d 32 3f 36 30 3a 35 38 3a 72 3d 3d 32 32 3f 28 6e 3d 21 21 28 7a 3d 44 2e 73 56 2c 2d 31 2d 7e 28 7a 7c 48 29 2d 28 7a 5e 48 29 29 26 26 21 21 28 44 2e 58 35 26 48 29 2c 72 3d 39 30 29 3a 72 3d 3d 38 31 3f 28 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 51 3d 76 6f 69 64 20 30 2c 5a 3d 5a 53 28 48 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 41 29 7b 66 6f 72 28 41 3d 75 3b 41 21 3d 39 36 3b Data Ascii: 8?(n=H,r=93):r==60?(this.type=H,this.currentTarget=this.target=D,this.defaultPrevented=this.F5=false,r=58):r==18?r=((V\|2)&15)==2?60:58:r==22?(n=!!(z=D.sV,-1-~(z\|H)-(z^H))&&!!(D.X5&H),r=90):r==81?(v=function(){},Q=void 0,Z=ZS(H,function(b,A){for(A=u;A!=96;
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 2c 50 3d 31 35 3b 65 6c 73 65 20 69 66 28 50 3d 3d 33 39 29 7b 61 3a 7b 73 77 69 74 63 68 28 42 29 7b 63 61 73 65 20 31 3a 41 3d 5a 3f 22 64 69 73 61 62 6c 65 22 3a 22 65 6e 61 62 6c 65 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 7a 3a 41 3d 5a 3f 22 68 69 67 68 6c 69 67 68 74 22 3a 22 75 6e 68 69 67 68 6c 69 67 68 74 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 44 3a 41 3d 5a 3f 22 61 63 74 69 76 61 74 65 22 3a 22 64 65 61 63 74 69 76 61 74 65 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 48 3a 41 3d 5a 3f 22 73 65 6c 65 63 74 22 3a 22 75 6e 73 65 6c 65 63 74 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 31 36 3a 41 3d 5a 3f 22 63 68 65 63 6b 22 3a 22 75 6e 63 68 65 63 6b 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 56 3a 41 3d 5a 3f 22 66 6f 63 75 73 22 Data Ascii: ,P=15;else if(P==39){a:{switch(B){case 1:A=Z?"disable":"enable";break a;case z:A=Z?"highlight":"unhighlight";break a;case D:A=Z?"activate":"deactivate";break a;case H:A=Z?"select":"unselect";break a;case 16:A=Z?"check":"uncheck";break a;case V:A=Z?"focus"
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 3f 35 35 3a 38 31 3b 65 6c 73 65 20 69 66 28 50 3d 3d 36 34 29 5a 2b 2b 2c 50 3d 33 34 3b 65 6c 73 65 20 69 66 28 50 3d 3d 37 32 29 50 3d 41 2e 70 72 6f 78 79 3f 35 3a 38 32 3b 65 6c 73 65 7b 69 66 28 50 3d 3d 34 30 29 72 65 74 75 72 6e 20 45 3b 69 66 28 50 3d 3d 39 33 29 45 3d 62 47 5b 56 5d 28 62 47 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 70 72 6f 74 6f 74 79 70 65 3a 48 2c 6c 65 6e 67 74 68 3a 48 2c 70 6f 70 3a 48 2c 70 61 72 65 6e 74 3a 48 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 48 2c 63 61 6c 6c 3a 48 2c 72 65 70 6c 61 63 65 3a 48 2c 64 6f 63 75 6d 65 6e 74 3a 48 2c 73 70 6c 69 63 65 3a 48 2c 73 74 61 63 6b 3a 48 2c 66 6c 6f 6f 72 3a 48 2c 63 6f 6e 73 6f 6c 65 3a 48 7d 29 2c 50 3d 34 30 3b 65 6c 73 65 20 69 66 28 50 3d 3d 37 38 Data Ascii: ?55:81;else if(P==64)Z++,P=34;else if(P==72)P=A.proxy?5:82;else{if(P==40)return E;if(P==93)E=bG[V](bG.prototype,{prototype:H,length:H,pop:H,parent:H,propertyIsEnumerable:H,call:H,replace:H,document:H,splice:H,stack:H,floor:H,console:H}),P=40;else if(P==78
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 3d 34 37 3f 42 3d 28 48 7c 32 34 29 3d 3d 48 3f 75 3a 37 32 3a 42 3d 3d 33 26 26 28 42 3d 34 30 29 7d 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 48 2c 56 2c 44 2c 7a 2c 5a 2c 42 2c 51 2c 6e 2c 72 29 7b 66 6f 72 28 72 3d 38 30 3b 72 21 3d 36 30 3b 29 69 66 28 72 3d 3d 33 38 29 44 2e 59 2e 73 70 6c 69 63 65 28 56 2c 56 2c 75 29 2c 72 3d 32 36 3b 65 6c 73 65 20 69 66 28 72 3d 3d 39 34 29 72 3d 28 48 5e 33 33 29 3e 3e 34 3c 31 26 26 28 48 7c 36 29 3e 3e 33 3e 3d 30 3f 33 38 3a 32 36 3b 65 6c 73 65 20 69 66 28 72 3d 3d 35 31 29 7b 66 6f 72 28 51 20 69 6e 20 5a 3d 56 2c 44 2e 4b 29 7b 66 6f 72 28 7a 3d 28 42 3d 56 2c 44 2e 4b 29 5b 51 5d 3b 42 3c 7a 2e 6c 65 6e 67 74 68 3b 42 2b 2b 29 2b 2b 5a 2c 63 28 75 2c 33 39 2c 7a 5b 42 5d 29 3b 64 65 6c 65 74 65 20 44 Data Ascii: =47?B=(H\|24)==H?u:72:B==3&&(B=40)}},G=function(u,H,V,D,z,Z,B,Q,n,r){for(r=80;r!=60;)if(r==38)D.Y.splice(V,V,u),r=26;else if(r==94)r=(H^33)>>4<1&&(H\|6)>>3>=0?38:26;else if(r==51){for(Q in Z=V,D.K){for(z=(B=V,D.K)[Q];B<z.length;B++)++Z,c(u,39,z[B]);delete D
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 76 3d 3d 38 29 62 3d 33 30 2c 63 28 56 2c 31 38 2c 41 2c 5a 29 2c 76 3d 32 38 3b 65 6c 73 65 20 69 66 28 76 3d 3d 33 34 29 76 3d 42 26 26 5a 2e 53 3f 36 32 3a 38 30 3b 65 6c 73 65 20 69 66 28 76 3d 3d 36 38 29 76 3d 38 38 3b 65 6c 73 65 20 69 66 28 76 3d 3d 38 30 29 76 3d 38 31 3b 65 6c 73 65 20 69 66 28 76 3d 3d 32 34 29 76 3d 74 79 70 65 6f 66 20 44 21 3d 3d 22 6e 75 6d 62 65 72 22 26 26 44 26 26 21 44 2e 71 68 3f 30 3a 35 39 3b 65 6c 73 65 20 69 66 28 76 3d 3d 32 37 29 45 34 28 31 31 39 2c 33 2c 44 2c 30 2c 7a 2e 50 29 2c 76 3d 35 39 3b 65 6c 73 65 20 69 66 28 76 3d 3d 33 32 29 50 3d 72 2c 76 3d 31 30 3b 65 6c 73 65 20 69 66 28 76 3d 3d 35 39 29 76 3d 75 2d 32 3e 3d 2d 36 39 26 26 28 75 2d 37 26 31 32 29 3c 33 3f 32 3a 31 30 3b 65 6c 73 65 20 69 66 28 Data Ascii: v==8)b=30,c(V,18,A,Z),v=28;else if(v==34)v=B&&Z.S?62:80;else if(v==68)v=88;else if(v==80)v=81;else if(v==24)v=typeof D!=="number"&&D&&!D.qh?0:59;else if(v==27)E4(119,3,D,0,z.P),v=59;else if(v==32)P=r,v=10;else if(v==59)v=u-2>=-69&&(u-7&12)<3?2:10;else if(
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 29 2c 72 3d 31 31 3b 65 6c 73 65 20 69 66 28 72 3d 3d 34 35 29 72 3d 37 30 3b 65 6c 73 65 20 69 66 28 72 3d 3d 37 30 29 72 3d 28 75 26 34 32 29 3d 3d 75 3f 34 39 3a 32 36 3b 65 6c 73 65 20 69 66 28 72 3d 3d 33 34 29 72 3d 28 75 3e 3e 32 26 37 29 3d 3d 33 3f 33 33 3a 31 31 3b 65 6c 73 65 20 69 66 28 72 3d 3d 38 32 29 6e 3d 21 21 28 7a 2e 58 35 26 44 29 26 26 4d 51 28 44 2c 31 39 2c 30 2c 7a 29 21 3d 56 26 26 28 21 28 7a 2e 44 6d 26 44 29 7c 7c 7a 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 72 42 28 39 2c 38 2c 33 32 2c 34 2c 48 2c 56 2c 44 29 29 29 26 26 21 7a 2e 4e 2c 72 3d 34 30 3b 65 6c 73 65 20 69 66 28 72 3d 3d 31 31 29 72 3d 75 2d 31 26 37 3f 34 30 3a 38 32 3b 65 6c 73 65 20 69 66 28 72 3d 3d 32 36 29 72 3d 28 75 3e 3e 31 26 31 35 29 3d 3d 33 3f 31 Data Ascii: ),r=11;else if(r==45)r=70;else if(r==70)r=(u&42)==u?49:26;else if(r==34)r=(u>>2&7)==3?33:11;else if(r==82)n=!!(z.X5&D)&&MQ(D,19,0,z)!=V&&(!(z.Dm&D)\|\|z.dispatchEvent(rB(9,8,32,4,H,V,D)))&&!z.N,r=40;else if(r==11)r=u-1&7?40:82;else if(r==26)r=(u>>1&15)==3?1
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 51 2e 63 61 70 74 75 72 65 3a 21 21 51 2c 7a 3d 65 28 7a 2c 32 32 29 2c 50 3d 32 3b 65 6c 73 65 20 69 66 28 50 3d 3d 38 38 29 6e 3d 56 2c 50 3d 32 31 3b 65 6c 73 65 20 69 66 28 50 3d 3d 37 37 29 50 3d 48 2b 38 3e 3e 31 3e 3d 48 26 26 28 48 2d 38 7c 35 31 29 3c 48 3f 39 31 3a 37 34 3b 65 6c 73 65 20 69 66 28 50 3d 3d 39 29 44 3d 75 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 3c 56 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 56 5b 44 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 2c 50 3d 35 37 3b 65 6c 73 65 7b 69 66 28 50 3d 3d 36 35 29 72 65 74 75 72 6e 20 41 3b 50 3d 3d 32 32 3f 28 28 72 3d 62 2e 72 43 28 42 2c 7a 2c 5a 2c 76 29 29 26 26 24 54 28 31 36 2c 74 72 75 65 2c 6e 75 6c 6c 2c 72 29 2c Data Ascii: Q.capture:!!Q,z=e(z,22),P=2;else if(P==88)n=V,P=21;else if(P==77)P=H+8>>1>=H&&(H-8\|51)<H?91:74;else if(P==9)D=u,A=function(){return D<V.length?{done:false,value:V[D++]}:{done:true}},P=57;else{if(P==65)return A;P==22?((r=b.rC(B,z,Z,v))&&$T(16,true,null,r),
2024-10-24 23:03:01 UTC	1378	IN	Data Raw: 3d 35 32 3f 76 3d 72 3c 42 2e 6c 65 6e 67 74 68 3f 35 37 3a 36 36 3a 76 3d 3d 36 36 26 26 28 76 3d 28 48 5e 33 35 29 3e 3e 33 3f 35 38 3a 31 35 29 7d 7d 2c 4d 51 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 48 2c 56 2c 44 2c 7a 2c 5a 2c 42 2c 51 2c 6e 2c 72 2c 76 29 7b 66 6f 72 28 76 3d 36 34 3b 76 21 3d 34 37 3b 29 69 66 28 76 3d 3d 36 34 29 76 3d 31 39 3b 65 6c 73 65 20 69 66 28 76 3d 3d 32 38 29 76 3d 28 28 48 5e 35 36 29 26 36 29 3e 3d 34 26 26 28 48 5e 33 32 29 3e 3e 34 3c 31 3f 32 32 3a 35 30 3b 65 6c 73 65 20 69 66 28 76 3d 3d 31 39 29 76 3d 28 48 5e 32 36 29 3e 3e 34 3f 32 38 3a 39 35 3b 65 6c 73 65 20 69 66 28 76 3d 3d 32 32 29 7b 61 3a 7b 66 6f 72 28 5a 20 69 6e 20 7a 29 69 66 28 44 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 7a 5b 5a 5d 2c 5a 2c 7a 29 29 7b Data Ascii: =52?v=r<B.length?57:66:v==66&&(v=(H^35)>>3?58:15)}},MQ=function(u,H,V,D,z,Z,B,Q,n,r,v){for(v=64;v!=47;)if(v==64)v=19;else if(v==28)v=((H^56)&6)>=4&&(H^32)>>4<1?22:50;else if(v==19)v=(H^26)>>4?28:95;else if(v==22){a:{for(Z in z)if(D.call(void 0,z[Z],Z,z)){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	65239	3.33.220.150	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:01 UTC	826	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRIVCgZnb29nbGUSCwjcodem4fS3PRAFEhcKCGFwcG5leHVzEgsIlovBx4fwrj0QBRgFIAIoATILCOT8n_bWoro9EAU4AUIEIgIIAVoHanNhYzc0amABcghhcHBuZXh1cw..
2024-10-24 23:03:01 UTC	760	IN	HTTP/1.1 302 Found Date: Thu, 24 Oct 2024 23:03:01 GMT Content-Length: 409 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon set-cookie: TDID=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17; expires=Fri, 24 Oct 2025 23:03:01 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESEgoDYWFtEgsI-p3H6Ybwrj0QBRIVCgZnb29nbGUSCwjcodem4fS3PRAFEhcKCGFwcG5leHVzEgsIlovBx4fwrj0QBRIWCgdydWJpY29uEgsIhsjtsMGiuj0QBRgFIAMoATILCOT8n_bWoro9EAU4AUIEIgIIAVoHanNhYzc0amABcgdydWJpY29u; expires=Fri, 24 Oct 2025 23:03:01 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-10-24 23:03:01 UTC	409	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 39 31 64 65 66 66 31 38 2d 64 31 66 35 2d 34 64 62 63 2d 62 66 65 63 2d 33 33 65 39 66 63 30 62 63 63 31 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 26 6e 65 78 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 25 32 46 74 72 61 63 6b 25 32 46 63 6d 66 25 32 46 72 75 62 69 63 6f 6e 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 Data Ascii: Redirecting to: <a href="https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon">https://pixel.rubiconproject.com/tap.ph

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	65237	37.252.173.215	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:01 UTC	713	OUT	GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.garwoodsheating.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:03:02 UTC	1568	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 24 Oct 2024 23:03:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3D91deff18-d1f5-4dbc-bfec-33e9fc0bcc17 AN-X-Request-Uuid: 330956b1-74ef-4aec-a815-572c766bb94d Set-Cookie: XANDR_PANID=Of0HOvV4TBc-Ir-ceRfcD9CuwjKniCBJh5eFitjNtdD2CDNSgSiXPflx1stym39_NBz2vOT6Kb8gTBkUmSLPTBgD4yFlEhXEymZtLnLBArY.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Jan-2025 23:03:01 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 12-Oct-2034 23:03:01 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=2305313710300817963; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Jan-2025 23:03:01 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 173.254.250.71; 173.254.250.71; 867.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	65240	185.89.210.46	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:02 UTC	719	OUT	GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=91deff18-d1f5-4dbc-bfec-33e9fc0bcc17 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://d1eoo1tco6rr5e.cloudfront.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:03:02 UTC	1568	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 24 Oct 2024 23:03:02 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fmatch.adsrvr.org%252ftrack%252fcmf%252fappnexus%253fttd%253d1%2526anid%253d%2524UID%26ttd_tdid%3D91deff18-d1f5-4dbc-bfec-33e9fc0bcc17 AN-X-Request-Uuid: 8b008f53-0e52-4813-99ed-ec92cabba156 Set-Cookie: XANDR_PANID=C1YRsI1PJ9wEdvgTeL4ZnijnCUIF5Af1pG-5oc78wge_ZdQTFQZQylKc6Dur75U_bzc-Uf-pVdESmp5haksSyVIYZuDB1aEnsmUNEVe0c1I.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Jan-2025 23:03:02 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 12-Oct-2034 23:03:02 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3066337848221269109; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 22-Jan-2025 23:03:02 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 173.254.250.71; 173.254.250.71; 940.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.6	65242	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:02 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 100b0a78-f01e-0003-754e-224453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230302Z-16849878b786vsxz21496wc2qn00000008f000000000bkf2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.6	65243	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:02 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: c5ea9194-001e-00ad-143a-26554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230302Z-16849878b78dsttbr1qw36rxs800000008cg00000000cs0a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.6	65249	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:02 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:02 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 1c275e9e-901e-0048-342c-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230302Z-r197bdfb6b4ld6jc5asqwvvz0w00000002c000000000d489 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:02 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	65245	172.217.23.110	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:02 UTC	467	OUT	GET /s/player/fb725ac8/player_ias.vflset/en_US/remote.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:03:02 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 120879 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 23 Oct 2024 17:51:04 GMT Expires: Thu, 23 Oct 2025 17:51:04 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 23 Oct 2024 04:16:42 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 105118 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:03:02 UTC	689	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 67 37 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 48 6b 28 61 2c 22 7a 78 22 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 31 34 37 34 38 33 36 34 38 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2b 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 31 34 37 34 38 33 36 34 38 29 5e 67 2e 5a 61 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 68 37 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 7c 7c 28 63 3d 5b 53 74 72 69 6e 67 28 63 29 5d 29 3b 0a Data Ascii: (function(g){var window=this;'use strict';var g7=function(a){g.Hk(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.Za()).toString(36));return a},h7=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 6f 6e 28 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 67 2e 56 70 2e 70 72 6f 74 6f 74 79 70 65 2e 42 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 21 30 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 66 3d 3d 22 53 74 6f 72 61 67 65 3a 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 22 29 72 65 74 75 72 6e 3b 74 68 72 6f 77 20 66 3b 7d 65 3d 3d 3d 76 6f 69 64 20 30 3f 63 2e 70 75 73 68 28 64 29 3a 67 2e 73 6d 61 28 65 29 26 26 63 2e 70 75 73 68 28 64 29 7d 2c 61 29 3b 0a 72 65 74 75 72 6e 20 63 7d 2c 47 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 46 73 62 28 61 2c 62 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 67 2e 56 70 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 2e 63 61 6c 6c 28 74 68 69 73 Data Ascii: on(d){try{var e=g.Vp.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.sma(e)&&c.push(d)},a);return c},Gsb=function(a,b){Fsb(a,b).forEach(function(c){g.Vp.prototype.remove.call(this
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 29 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 30 3b 64 3c 63 3b 64 2b 2b 29 62 2e 70 75 73 68 28 61 5b 64 5d 29 3b 72 65 74 75 72 6e 20 62 7d 72 65 74 75 72 6e 20 67 2e 4b 67 28 61 29 7d 2c 4e 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 49 6f 26 26 74 79 70 65 6f 66 20 61 2e 49 6f 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 20 61 2e 49 6f 28 29 3b 0a 69 66 28 21 61 2e 68 6e 7c 7c 74 79 70 65 6f 66 20 61 2e 68 6e 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 69 66 28 74 79 70 65 6f 66 20 4d 61 70 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 2e 6b 65 79 73 28 29 29 3b 69 66 28 21 28 Data Ascii: )){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return g.Kg(a)},Nsb=function(a){if(a.Io&&typeof a.Io=="function")return a.Io();if(!a.hn\|\|typeof a.hn!="function"){if(typeof Map!=="undefined"&&a instanceof Map)return Array.from(a.keys());if(!(
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 6d 65 73 73 61 67 65 5f 72 65 63 65 69 76 65 64 22 2c 62 29 7d 2c 57 73 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6a 37 28 29 3b 0a 74 68 69 73 2e 6a 3d 61 3b 61 2e 7a 6b 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 65 72 72 6f 72 22 2c 67 2e 6c 62 28 22 63 68 61 6e 6e 65 6c 5f 74 79 70 65 22 29 29 7d 2c 58 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 2e 46 6d 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 65 72 72 6f 72 22 2c 62 29 7d 2c 59 73 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 6a 37 28 29 3b 0a 74 Data Ascii: message_received",b)},Wsb=function(){var a=j7();this.j=a;a.zk("/client_streamz/youtube/living_room/mdx/channel/error",g.lb("channel_type"))},Xsb=function(a,b){a.j.Fm("/client_streamz/youtube/living_room/mdx/channel/error",b)},Ysb=function(){var a=j7();t
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 73 2e 65 78 70 65 72 69 6d 65 6e 74 73 3d 6e 65 77 20 53 65 74 3b 74 68 69 73 2e 74 68 65 6d 65 3d 22 75 22 3b 6e 65 77 20 6c 37 3b 74 68 69 73 2e 6d 6f 64 65 6c 3d 74 68 69 73 2e 62 72 61 6e 64 3d 22 22 3b 74 68 69 73 2e 79 65 61 72 3d 30 3b 74 68 69 73 2e 63 68 69 70 73 65 74 3d 74 68 69 73 2e 6f 73 56 65 72 73 69 6f 6e 3d 74 68 69 73 2e 6f 73 3d 22 22 3b 74 68 69 73 2e 6d 64 78 44 69 61 6c 53 65 72 76 65 72 54 79 70 65 3d 22 4d 44 58 5f 44 49 41 4c 5f 53 45 52 56 45 52 5f 54 59 50 45 5f 55 4e 4b 4e 4f 57 4e 22 3b 61 26 26 28 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 63 6c 69 65 6e 74 4e 61 6d 65 3d 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 3f 61 2e 63 6c 69 65 6e 74 4e 61 Data Ascii: s.experiments=new Set;this.theme="u";new l7;this.model=this.brand="";this.year=0;this.chipset=this.osVersion=this.os="";this.mdxDialServerType="MDX_DIAL_SERVER_TYPE_UNKNOWN";a&&(this.id=a.id\|\|a.name,this.name=a.name,this.clientName=a.clientName?a.clientNa
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 63 6f 6d 70 61 74 69 62 6c 65 53 65 6e 64 65 72 54 68 65 6d 65 73 2e 61 64 64 28 63 29 7d 29 7d 2c 63 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 63 6c 65 61 72 28 29 3b 0a 62 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 61 64 64 28 63 29 7d 29 7d 2c 6e 37 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 7c 7c 7b 7d 3b 0a 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 73 63 72 65 65 6e 49 64 7c 7c 22 22 3b 74 68 69 73 2e 74 6f 6b 65 6e 3d 61 2e 74 6f 6b 65 6e 7c 7c 61 2e 6c 6f 75 6e 67 65 54 6f 6b 65 6e 7c 7c 22 Data Ascii: function(c){a.compatibleSenderThemes.add(c)})},ctb=function(a,b){a.experiments.clear();b.split(",").forEach(function(c){a.experiments.add(c)})},n7=function(a){a=a\|\|{};this.name=a.name\|\|"";this.id=a.id\|\|a.screenId\|\|"";this.token=a.token\|\|a.loungeToken\|\|"
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 3d 3d 30 29 72 65 74 75 72 6e 5b 5d 3b 0a 76 61 72 20 62 3d 61 5b 30 5d 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 2c 63 3d 62 3d 3d 2d 31 3f 61 5b 30 5d 3a 61 5b 30 5d 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 62 29 3b 72 65 74 75 72 6e 20 67 2e 4e 6c 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 30 3f 64 3a 64 2e 73 75 62 73 74 72 69 6e 67 28 63 2e 6c 65 6e 67 74 68 29 7d 29 7d 2c 70 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 59 73 28 22 79 74 2d 72 65 6d 6f 74 65 2d 63 6f 6e 6e 65 63 74 65 64 2d 64 65 76 69 63 65 73 22 2c 61 2c 38 36 34 30 30 29 7d 2c 73 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 71 74 62 29 72 65 74 75 72 6e 20 71 74 62 3b 0a 76 61 72 20 61 3d 67 2e 5a 73 28 22 79 74 2d 72 65 6d 6f 74 65 2d 64 Data Ascii: ==0)return[];var b=a[0].indexOf("#"),c=b==-1?a[0]:a[0].substring(0,b);return g.Nl(a,function(d,e){return e==0?d:d.substring(c.length)})},ptb=function(a){g.Ys("yt-remote-connected-devices",a,86400)},s7=function(){if(qtb)return qtb;var a=g.Zs("yt-remote-d
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 62 29 3b 0a 76 61 72 20 61 3d 67 2e 4d 72 28 22 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 5f 77 65 62 5f 66 6c 75 73 68 5f 63 6f 75 6e 74 22 2c 2d 31 29 3b 61 21 3d 3d 2d 31 26 26 28 77 37 2e 43 3d 61 29 7d 72 65 74 75 72 6e 20 77 37 7d 2c 7a 74 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 43 68 72 6f 6d 65 5c 2f 28 5b 30 2d 39 5d 2b 29 2f 29 3b 0a 72 65 74 75 72 6e 20 61 3f 70 61 72 73 65 49 6e 74 28 61 5b 31 5d 2c 31 30 29 3a 30 7d 2c 41 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 26 26 28 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 Data Ascii: b);var a=g.Mr("client_streamz_web_flush_count",-1);a!==-1&&(w7.C=a)}return w7},ztb=function(){var a=window.navigator.userAgent.match(/Chrome\/([0-9]+)/);return a?parseInt(a[1],10):0},Atb=function(a){return!!document.currentScript&&(document.currentScrip
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 28 61 29 7d 2c 79 37 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 2e 4f 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 74 68 69 73 2e 4b 3d 63 21 3d 6e 75 6c 6c 3f 28 30 2c 67 2e 58 61 29 28 61 2c 63 29 3a 61 3b 74 68 69 73 2e 6a 6a 3d 62 3b 74 68 69 73 2e 47 3d 28 30 2c 67 2e 58 61 29 28 74 68 69 73 2e 42 35 2c 74 68 69 73 29 3b 74 68 69 73 2e 6a 3d 21 31 3b 74 68 69 73 2e 42 3d 30 3b 74 68 69 73 2e 43 3d 74 68 69 73 2e 72 64 3d 6e 75 6c 6c 3b 74 68 69 73 2e 44 3d 5b 5d 7d 2c 7a 37 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 2e 4f 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 74 68 69 73 2e 44 3d 63 21 3d 6e 75 6c 6c 3f 61 2e 62 69 6e 64 28 63 29 3a 61 3b 74 68 69 73 2e 6a 6a 3d 62 3b 74 68 69 73 2e 43 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6a 3d 21 31 3b Data Ascii: (a)},y7=function(a,b,c){g.O.call(this);this.K=c!=null?(0,g.Xa)(a,c):a;this.jj=b;this.G=(0,g.Xa)(this.B5,this);this.j=!1;this.B=0;this.C=this.rd=null;this.D=[]},z7=function(a,b,c){g.O.call(this);this.D=c!=null?a.bind(c):a;this.jj=b;this.C=null;this.j=!1;
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 31 7d 2c 56 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 2e 4f 61 3d 31 3b 0a 61 2e 56 3d 67 37 28 62 2e 63 6c 6f 6e 65 28 29 29 3b 61 2e 58 3d 63 3b 61 2e 47 61 3d 21 30 3b 55 74 62 28 61 2c 6e 75 6c 6c 29 7d 2c 55 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 41 61 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 0a 47 37 28 61 29 3b 61 2e 58 61 3d 61 2e 56 2e 63 6c 6f 6e 65 28 29 3b 68 37 28 61 2e 58 61 2c 22 74 22 2c 61 2e 52 62 29 3b 61 2e 54 3d 30 3b 76 61 72 20 63 3d 61 2e 43 2e 4f 61 3b 61 2e 42 3d 6e 65 77 20 54 74 62 3b 61 2e 6a 3d 57 74 62 28 61 2e 43 2c 63 3f 62 3a 6e 75 6c 6c 2c 21 61 2e 58 29 3b 61 2e 59 61 3e 30 26 26 28 61 2e 54 61 3d 6e 65 77 20 7a 37 28 28 30 2c 67 2e 58 61 29 28 61 2e 4a 56 2c 61 2c 61 2e 6a 29 2c 61 2e 59 Data Ascii: 1},Vtb=function(a,b,c){a.Oa=1;a.V=g7(b.clone());a.X=c;a.Ga=!0;Utb(a,null)},Utb=function(a,b){a.Aa=Date.now();G7(a);a.Xa=a.V.clone();h7(a.Xa,"t",a.Rb);a.T=0;var c=a.C.Oa;a.B=new Ttb;a.j=Wtb(a.C,c?b:null,!a.X);a.Ya>0&&(a.Ta=new z7((0,g.Xa)(a.JV,a,a.j),a.Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	65246	142.250.185.97	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:02 UTC	491	OUT	GET /ytc/AIdro_mJZWekx_QC_yZgoobJQY-ml6LjcseCKRrAy9U4uWE=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:03:02 UTC	575	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 1101 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 22:50:28 GMT Expires: Fri, 25 Oct 2024 22:50:28 GMT Cache-Control: public, max-age=86400, no-transform Age: 754 ETag: "v0" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:03:02 UTC	803	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0c 0e 0c 0b 08 09 0c 08 0c 06 09 09 09 08 08 0d 09 08 06 06 07 06 08 07 07 08 08 08 06 08 07 06 0a 08 10 06 08 09 09 08 06 07 16 07 06 09 14 15 0a 09 08 06 17 0e 16 08 18 08 14 15 14 01 03 04 04 06 05 06 0a 06 06 0a 0b 0d 0b 0d 0f 0b 0d 14 0d 14 14 0d 12 0f 0b 0b 0d 0e 0d 11 13 08 0d 0b 14 0b 08 08 0e 14 09 0d 10 0e 14 10 11 0a 0e 0e 0e 0d 0a 0b 0e 13 0d 0b 0a 0d 10 0a 0a 0a ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 07 06 08 04 ff c4 00 2b 10 00 02 02 02 01 01 07 03 05 01 00 00 00 00 00 00 01 02 00 03 04 11 12 05 06 07 08 13 21 22 31 14 32 51 42 52 61 71 72 33 ff c4 00 1a 01 01 01 01 01 00 03 Data Ascii: JFIFDD+!"12QBRaqr3
2024-10-24 23:03:02 UTC	298	IN	Data Raw: bc 19 be 37 70 a9 f2 d5 8a ef f7 bc 98 f8 82 ee 8c 61 de 16 a2 4e 1d ea 6c a7 91 db d5 c4 e9 e9 27 f5 85 25 48 63 f2 ac bb d9 1b 31 76 b5 82 b3 aa 94 7e 99 6f 5d 3f 4f 87 a1 8e ea 87 65 2d dc 1f bc 12 e9 0c c4 20 08 02 00 80 20 1d 41 57 6b f0 ba 9e 2d 58 d9 b7 2e 2f 55 c7 1c 6b 77 e0 b5 bb 15 54 2e ac e5 43 a5 bc 50 9a 4b 02 19 46 b7 ad ce d9 5c 5b 6d 2a 11 a7 5a 4a 15 23 ae 8f ae 8b e6 e5 94 f2 59 ed 29 dc 41 46 6f 12 5e fc cf 0f 4c f0 d1 8b 4b ad f9 bd 43 18 e2 23 06 2a 3c aa bc fd 1d 8a cb 3d 8f e8 da d1 54 52 48 de b5 3d 50 d8 d4 28 c9 4e bd 68 fc 2b 4d cb 3d 38 be 3d 0f 15 67 08 3c ce 6b 1e be 66 23 c4 7f 7b 29 99 7a 79 1b fa 4c 74 64 ad 8a 94 6b 59 d8 17 b3 8b 68 aa fb 51 40 61 bf 69 df cc 9b b6 2f e3 77 55 76 7f 4c 56 13 e6 de a6 6b ba ea ac be 5e Data Ascii: 7paNl'%Hc1v~o]?Oe- AWk-X./UkwT.CPKF\[mZJ#Y)AFo^LKC#<=TRH=P(Nh+M=8=g<kf#{)zyLtdkYhQ@ai/wUvLVk^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	65244	142.250.184.194	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:02 UTC	515	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmbxgMGIAdTiTueEcDg_xsiTpyJoqwcNb5BsM4xEsWO2bfSYUrHcUXhEjkG
2024-10-24 23:03:02 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Thu, 24 Oct 2024 23:03:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-24 23:03:02 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 35 70 30 4f 68 4e 46 5f 62 2d 50 4d 4d 51 79 38 43 59 4c 55 4b 4f 35 6b 62 5a 46 35 67 37 5a 73 38 6c 4c 54 38 64 41 71 4b 54 6f 41 54 4c 54 76 79 61 47 4b 62 44 6c 7a 4c 50 53 74 43 49 4c 39 52 31 67 47 34 38 57 70 46 38 4c 75 2d 56 5a 57 51 34 4a 48 73 45 43 48 37 54 41 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKp5p0OhNF_b-PMMQy8CYLUKO5kbZF5g7Zs8lLT8dAqKToATLTvyaGKbDlzLPStCIL9R1gG48WpF8Lu-VZWQ4JHsECH7TA"}
2024-10-24 23:03:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	65247	142.250.185.97	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:02 UTC	491	OUT	GET /ytc/AIdro_nVNLosY_rSp_jV6MS57MdpHEScPexXFVHxb6nGj54=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:03:02 UTC	577	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 1096 X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 23:03:00 GMT Expires: Fri, 25 Oct 2024 23:03:00 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1fee3" Content-Type: image/jpeg Vary: Origin Age: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:03:02 UTC	801	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0c 0d 08 08 06 08 0e 0e 07 08 06 07 06 06 07 06 08 08 08 07 07 06 06 05 08 0c 07 07 09 07 08 0d 0e 08 10 0d 08 11 0e 0a 08 0b 16 07 11 13 14 15 15 11 0a 08 0b 18 0a 14 18 12 08 15 14 01 03 04 04 06 05 06 09 06 06 0a 14 0d 0b 0e 0e 0d 09 11 0f 14 0d 0d 0b 14 14 0a 0e 0d 08 0d 0d 0e 0f 10 14 0d 0b 0b 0e 0b 0b 08 0b 0d 0b 14 0b 12 0d 0a 0e 0b 0a 0d 14 0a 0f 08 09 14 08 0a 0e 08 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 07 08 05 09 ff c4 00 2d 10 00 01 04 01 02 05 03 02 07 01 00 00 00 00 00 00 01 00 02 03 04 11 05 12 06 08 13 22 31 07 21 32 14 23 33 41 42 51 61 71 81 09 ff c4 00 1a 01 01 01 01 01 Data Ascii: JFIFDD-"1!2#3ABQaq
2024-10-24 23:03:02 UTC	295	IN	Data Raw: 1f 55 0a 6b 29 97 6a e5 af af 5c c2 23 cd bf 2f cd d3 35 06 47 5c 97 d3 be c7 cf 54 3c e6 48 7a 6e db 2c 2e 77 ea 0d cb 48 7f 9c 39 a0 e4 87 13 3b 5f a5 8d 3d f6 af 84 f3 1f a6 2d 5e 9f d8 db 8f 09 e5 0c 53 18 44 04 04 04 04 1b 8a 0f 50 b4 dd 77 4a ab a6 ea 93 b7 48 d5 b4 e6 88 e1 b5 2e c6 c5 2b dc c6 c6 e7 b1 ce 2c 6b a3 7e d6 17 56 dc d7 6e 68 c1 c0 04 f4 9e d7 0e b3 1d 69 92 dd db c7 bf af 3f 2e 16 fd a6 3d 4d 22 b7 9d ad 1d 7d fc 9c cd 13 92 aa 15 a6 8e ee ab a9 d7 7d 48 5e c9 1d 0b 7a 50 9b 3b 0e e1 19 7b a4 93 b4 e3 05 a0 12 46 40 23 ca f1 5e ce c5 8e 62 d9 32 46 df 4f cb cd 74 54 a4 f7 af 78 db af 8a 63 ce 57 af d1 6a 57 e1 fa 4c 9a 7a 74 4f 86 19 5c d2 c7 58 92 77 07 4d 20 69 c1 0c ed 8c 06 90 0f 69 38 f7 0b 1f 68 6a a3 3d e3 bb e1 1c 33 6b 35 11 Data Ascii: Uk)j\#/5G\T<Hzn,.wH9;_=-^SDPwJH.+,k~Vnhi?.=M"}}H^zP;{F@#^b2FOtTxcWjWLztO\XwM ii8hj=3k5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	65250	142.250.186.150	443	5324	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:02 UTC	446	OUT	GET /vi_webp/NpMhKZDN7Js/sddefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 23:03:02 UTC	631	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 43080 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 24 Oct 2024 23:03:00 GMT Expires: Fri, 25 Oct 2024 01:03:00 GMT Cache-Control: public, max-age=7200 ETag: "1507221541" Content-Type: image/webp Vary: Origin Age: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-24 23:03:02 UTC	747	IN	Data Raw: 52 49 46 46 40 a8 00 00 57 45 42 50 56 50 38 20 34 a8 00 00 30 a0 02 9d 01 2a 80 02 e0 01 3e 35 16 89 42 a2 21 21 16 2a 4d ec 20 03 44 b2 b7 7c 2f d6 91 f0 83 00 39 01 d3 ad 92 fd 41 f2 37 f3 dc ff da f3 bd e5 bf 28 be af e5 5f 91 ef f1 f6 4d f4 1f f8 bc c9 bd db fa 6f fa 7f 74 3f 2e bf e9 ff ef ff 71 fe 7f e3 17 f4 6f f7 9e c2 3f b0 3e a4 bd 54 7f 73 ff d5 ea e3 fb 07 fc 7f dd 2f 79 df fb 5f ba 3e fe 7f bb 7a 8a 7f 51 ff 77 d7 39 fe 4f d5 2f ce 67 ff 8f ef 27 c5 a7 f7 ff fb 9f ba 3f 0e 9f bb 3a a2 32 c1 f3 0f e3 bf d9 7f 8d fd ba f3 77 f2 ff af 7f 77 fe 23 fd 0f fd 3f f2 fe ec 79 03 ed 5f 51 df 9f 7e 5e fe 67 f9 af de 6f cd 3f 9d 3b ff f9 89 f5 1f b0 77 e6 df d7 3f e0 7d c4 fc 58 c3 a7 ae b4 1b fa b7 f9 9f 34 df d7 f4 13 f7 0f 50 cf 33 3c 46 a8 25 e4 f9 Data Ascii: RIFF@WEBPVP8 40>5B!!M D\|/9A7(_Mot?.qo?>Ts/y_>zQw9O/g'?:2ww#?y_Q~^go?;w?}X4P3<F%
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 2f 27 62 97 56 a8 1f 71 a8 b4 e2 f7 c7 8c 02 54 73 8f 71 b3 d4 e3 2c 05 df 28 07 4f 54 71 47 bb 02 6b 82 8f 63 7a 04 bd 43 c8 2d 85 53 42 5b 5f fb a8 0b 45 66 f6 a8 ad 07 ce d8 1a 7f d3 fb 40 21 f1 90 e7 40 b9 74 fb 2e 73 69 fb 32 3f f9 07 a4 bb a4 bb 76 dd af 97 fb 04 7b ca 44 d0 e9 75 bd bb 24 31 65 0f 76 db 4e ab 58 a1 43 5c e4 ba 3d 67 b1 ad 57 12 41 6f 96 2f fe 2b 6f 1b 9d 38 37 2d e0 81 bc c4 ac b7 d0 e9 93 5c c6 d9 e6 24 38 5d 0f ea 13 2e 58 3f 5f 05 40 b9 9c ca 9a a0 4a b8 79 bf 9c c4 89 6a f1 01 61 6e 94 49 58 c8 6b b4 7c 18 d2 a2 97 53 83 fa 2f ea 3c 6e 44 e1 55 ef 46 4e 1f 5e a3 9e 9f 3d 4a b5 9e c2 a1 36 04 3d e4 cb 0e 42 58 b9 c4 70 e5 57 a3 2e 6e 0d 3a 63 b8 4a 22 7f 29 cf bc 0c 1b 73 fb 66 53 85 12 49 4a 41 29 8d 93 8b ed 4e bc bd 20 e5 a4 Data Ascii: /'bVqTsq,(OTqGkczC-SB[_Ef@!@t.si2?v{Du$1evNXC\=gWAo/+o87-\$8].X?_@JyjanIXk\|S/<nDUFN^=J6=BXpW.n:cJ")sfSIJA)N
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: ba 65 e7 c7 98 73 83 4b 09 ac 62 01 cb ef 3d c8 56 05 36 6f 7e ea da 2e 0a 30 1e 52 e7 a7 c2 08 36 d5 7b 72 b1 fb 52 7c 8d e8 05 b3 83 2d 26 e8 04 72 91 c4 74 38 a0 8c f0 14 7e 47 19 7e 16 20 e0 d3 32 ab 44 56 9a c7 d8 9f 9d ea 7b 8e 59 df ef 85 f4 6c 16 6c 42 c2 7d 23 56 e1 d5 2a d9 f8 6f 9a 42 0b f6 94 15 c6 45 ac b9 63 34 b1 06 f3 83 bd 0c 91 3e c4 17 a4 5e 0d 5f ae e7 d0 0c f9 e3 17 e8 8b 2c 28 e4 05 24 41 11 d7 5f bf 4b ef 58 b9 da 7b f0 50 7a a1 cd 4c 2b a8 40 52 a5 1e 1d bf a7 df 89 bc e1 eb 92 03 6f e2 8e 22 47 7e 19 78 78 f2 14 90 a3 55 90 90 4f 63 dc b1 cf 08 50 50 ab 96 bf 31 0c 55 3f fe eb 57 81 c5 d4 2c fd f1 92 6e 7e 99 83 30 e9 54 0a ed 9c 9f ac fe d7 43 b6 0a 4e e1 5a 5d 24 bf 40 a2 17 8c c0 0d 9a b9 d4 78 5e 9e de 37 a2 d4 7b b0 20 4e 51 Data Ascii: esKb=V6o~.0R6{rR\|-&rt8~G~ 2DV{YllB}#V*oBEc4>^_,($A_KX{PzL+@Ro"G~xxUOcPP1U?W,n~0TCNZ]$@x^7{ NQ
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 31 03 cb 27 da d6 77 85 a6 f7 8e 68 21 fa 9a e2 f4 4e 87 8b c7 13 6d 03 75 2a 25 67 79 b6 1d 8c ad 61 5e 82 ed 23 62 b5 e7 b8 fb 26 02 aa a5 d6 f3 9c 61 5b eb ec bf e7 86 fa 77 f7 ec 92 c5 97 4f 28 56 8d bf da 8b a8 cc a8 c1 5e e3 b0 a0 d4 d4 fb 10 dc a4 0b 1c d9 35 af b6 b6 f6 0c 8f c3 0c a5 1e d1 7e ab a0 2a d3 81 af 36 bf 49 8b be 31 82 eb 7f 3f 9a 54 20 d4 ec 2e 7d 4b 47 89 ee 5b 82 cb 09 9e f5 70 87 e9 80 a5 49 51 7c 76 20 24 8b 60 f8 16 42 6c a7 64 f7 94 86 0b b9 8a 1a 47 fe df dd 7f b3 a1 c1 07 28 67 e8 2c 63 03 a1 75 08 06 98 a7 a3 b6 b8 47 e2 fb 8b 9c 92 6c 8e ec 69 7f 86 24 bc b9 6d 7a 57 81 11 c5 cd 8e bb 66 da 5b 77 b7 bb 6d cc b7 36 c5 73 b1 99 f7 75 ff ea 9c 69 c9 30 5e 5c c5 64 4f 2e 51 fe 6a 9a 93 ea f9 cd 07 d2 0f d6 9b 2b d0 20 cf fd 07 Data Ascii: 1'wh!Nmu%gya^#b&a[wO(V^5~6I1?T .}KG[pIQ\|v $`BldG(g,cuGli$mzWf[wm6sui0^\dO.Qj+
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 07 99 d5 71 24 6f f5 a5 20 e7 de 74 99 4f ef 7d a9 e2 d2 79 1b df 5e 8a 61 5c 5c 44 9f 94 1e b8 c5 af d2 84 e6 bb 82 43 24 2b 42 35 88 27 ed 73 e9 c3 72 ea 6c 4b b2 50 1d 37 7a e4 24 e8 0d d5 02 c3 13 19 fc 84 11 c5 eb 3f 83 51 c4 18 71 a2 e0 ee ba c8 d6 44 1f e9 48 c1 2d 51 e8 48 4c db c7 9a ec 10 49 e0 31 bc 18 99 10 fe 0f cc ef a5 e0 f6 04 13 f7 a9 55 87 6c 71 95 39 1e 09 07 40 f3 6a f4 d6 ec 85 2b 95 ab 5f bc cc 26 48 2d bc 40 ed a3 cb 8e 04 51 e9 f4 94 53 12 88 8b b7 33 aa 8e b5 5d a6 ed cf 69 81 0e c3 29 8a b2 ca a6 50 a3 ab ab 29 17 79 4c cc 3b 25 22 af df bb 71 16 b4 ff ca b0 2c f4 28 37 b2 16 7b 4d 09 9a 18 fd ff 83 2e 20 18 91 f5 19 3e 25 de 10 d9 81 3a 05 99 87 2a c0 da 2e 09 56 52 7e db ee 0f 54 27 ba 5b 6f 9e 95 7d 18 e6 94 8a 11 1f b1 71 73 Data Ascii: q$o tO}y^a\\DC$+B5'srlKP7z$?QqDH-QHLI1Ulq9@j+_&H-@QS3]i)P)yL;%"q,(7{M. >%:*.VR~T'[o}qs
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 12 c6 a6 69 8b 06 12 41 94 33 39 06 b1 b5 51 e0 a8 2d 11 c6 52 5e 3e da 9b 35 1b 29 de 44 ea 31 7a bf 58 cb 28 de c9 39 ef 14 c3 14 66 bc 78 55 8a b5 e5 85 56 df 8e c0 b9 f0 bf f9 d4 d9 2e 9a 86 6b 55 26 9f c7 b5 57 12 ae 93 38 76 2e 6f 22 4d bc 4b c7 f1 07 37 a2 5a e9 f0 bd c9 07 1b 0b dd 39 1e bd 05 d7 1e ce 14 f6 d5 99 9a 76 36 74 02 ff 69 83 0e 18 bb 31 8b c2 f8 d7 b0 41 77 16 e4 5f bb 0f a5 45 a6 a8 5e 7c 2a 35 c6 69 9d 94 00 dc b6 8a 9b b3 3e 76 6f 16 6a 32 fa 65 b7 8f 0f 00 d3 1b f7 27 3e dc 56 d1 2f ca dc e1 e7 a7 d6 ad 2a 16 d0 ae f7 c4 bc e8 b1 62 dd 8f 3f 6f 7d 43 02 c9 e2 1a 1f 06 0a c4 92 c0 37 8d 48 51 19 8f 69 b1 f7 5e a3 a3 16 07 28 34 db 35 9c 4d da 0a bc 0b 44 39 54 a8 76 83 d4 55 5f c1 6b e2 aa e0 8a b0 47 ad 97 7e 80 cb 49 5b 8b 45 1b Data Ascii: iA39Q-R^>5)D1zX(9fxUV.kU&W8v.o"MK7Z9v6ti1Aw_E^\|5i>voj2e'>V/b?o}C7HQi^(45MD9TvU_kG~I[E
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 56 a5 e0 2d 7f 29 48 04 98 58 05 3c 43 ad 18 47 b3 31 14 57 59 43 07 42 b9 0a 9a 1d f7 39 67 57 b7 d6 9f 8e 96 c4 06 4b 7b 34 46 e9 95 fe 63 6d 67 c1 df c2 1f c9 be a6 ed 72 43 90 23 2c 29 7e 38 5a b0 50 10 94 13 21 cc dd 0b c3 66 0f 7b 15 20 82 00 d8 6d 8f d1 90 13 f9 78 8e 95 14 d7 16 b9 c2 62 ba 28 5c 31 e6 e7 7b a0 06 9c b5 65 0c 01 3f ae 3a 18 db ad b2 5c 58 73 3f 3e 6e cd 8c 2b d3 8b 30 9e 16 37 e1 fa 6b 36 cd 9f a5 e5 15 48 1d 90 b1 03 19 1a 7a e7 4f 35 b0 3c 09 07 f0 cf d0 6e dd e5 8b e2 a8 11 fc 8b f6 3a 6c d2 8b 62 3a 09 45 8a a1 59 3a 58 64 ad 32 11 ec 4f 3c cb f3 91 f5 8f 8d ed a3 5e f2 03 66 05 08 44 d5 29 ff e1 97 98 8b e6 0a 4a 22 4b 21 97 51 4f e9 c6 b9 c2 00 94 83 8f 77 a6 bd e4 ae 4d 4c e4 b1 be b9 92 c8 ad 16 e6 59 ba d3 fe ff 0d ac 70 Data Ascii: V-)HX<CG1WYCB9gWK{4FcmgrC#,)~8ZP!f{ mxb(\1{e?:\Xs?>n+07k6HzO5<n:lb:EY:Xd2O<^fD)J"K!QOwMLYp
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 5d 80 12 bf 42 96 59 b2 18 b9 b1 54 1e db f0 64 14 83 d9 08 9c 87 ee fa e1 b2 b7 60 df 81 3e 73 44 9e 73 82 21 c9 6b ea d4 91 dc 70 46 b9 57 9a 33 73 52 3f b6 79 c9 d1 54 25 52 fb e2 5e 53 58 57 7b c6 aa 74 d1 53 5b 7b 01 c5 67 e7 a1 07 65 2f 5d f0 47 56 fa 11 10 bf 98 58 0c 0f 1d 56 b6 8d d3 71 50 00 b7 9b 65 9a ed 00 27 28 96 44 66 30 3e 0c 22 91 69 f6 d6 df 8f 98 09 0b 10 a9 a1 9c e7 ef e3 0a 81 6a d5 c4 03 63 6a 8a 48 68 b3 3e 65 40 25 77 5a c0 93 d6 6f cd 5e 40 ee a8 81 e4 69 17 23 e5 87 4b 07 53 c4 36 51 28 ca 25 57 b8 21 5a 1b 0a 69 38 7d 3a a7 22 b5 00 53 5f 07 db 0b 6a 23 69 8f 68 d9 df 82 94 94 b8 4a 68 fd 52 1f d9 73 c3 4f 8d 61 39 cb 4c 7c c2 76 fa d0 0a 4f e4 f5 8f ca 72 30 48 2f 4d 5e 2e cd ea 46 97 6c 40 92 da 06 7d e5 dc 5f a6 ba 17 e6 8a Data Ascii: ]BYTd`>sDs!kpFW3sR?yT%R^SXW{tS[{ge/]GVXVqPe'(Df0>"ijcjHh>e@%wZo^@i#KS6Q(%W!Zi8}:"S_j#ihJhRsOa9L\|vOr0H/M^.Fl@}_
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: 56 b2 c7 11 d1 04 97 29 f7 6c 0b 98 d5 e9 c7 33 ba 8a 97 c1 91 68 44 eb 56 63 d4 8f 1d 3d 52 5a c3 bc 55 d4 87 d0 e8 86 54 ef 5a 7c 61 22 12 81 22 ac c0 31 7f 5e 6b 42 9a 19 88 1b 31 80 b3 31 08 c7 3e 6b 7f 1b 21 11 aa 23 08 a3 b9 f5 31 49 f0 ba a1 9c 44 87 ab d4 be c9 f4 51 70 3e 7c 88 76 af 15 95 bc d5 4d db 23 ab 77 7b 49 98 49 ae 30 49 02 ef de 5e 06 80 bc 04 3d 07 52 a3 b7 1b 2b fa e8 56 bd b7 e7 10 9b 93 e1 70 5c 03 cb 9b eb e7 d9 74 07 9a 9c c6 5d 48 6d 65 5e 5c fb 89 d8 da a0 f0 b1 55 66 8a 7f f5 82 8d 23 c2 dc 00 d9 6c 84 45 f0 2a 89 a3 b8 b7 57 6f ab 7a 20 ea 97 37 0a 77 be ea c7 b0 c7 0c 78 1f 30 46 3a 42 7b dd 66 e6 75 31 cf 2c d2 7a 37 aa 8d b6 c6 3d 6d c9 db a3 9a ee b7 34 80 79 a4 73 60 de f7 72 83 a3 e8 7f a0 0c d2 80 06 4b f4 40 fa f5 51 Data Ascii: V)l3hDVc=RZUTZ\|a""1^kB11>k!#1IDQp>\|vM#w{II0I^=R+Vp\t]Hme^\Uf#lE*Woz 7wx0F:B{fu1,z7=m4ys`rK@Q
2024-10-24 23:03:02 UTC	1378	IN	Data Raw: a8 2c a2 34 9e 50 eb 70 4c 86 e4 2c 28 fd c9 95 78 9b 5d 32 77 be 05 0b da 4b 08 5c e2 b7 c9 b3 f1 d4 9b 5f d7 c7 d9 75 5c 76 3d 60 0c ed 66 45 a7 2a 3a fb dd 11 56 25 09 31 e1 cc a0 9d 4a fa 5b 44 ff c6 8c 01 32 02 6a 0b 24 d7 5f fd 60 b9 f9 f5 d3 47 b6 1d 67 62 e2 fd 19 a3 6b b0 ea a5 bd 27 8b 4f 1d 6a 4f c3 d9 23 e2 bb 37 92 d8 62 b9 e8 a5 dc c7 1a e3 21 d1 48 65 72 29 02 d0 b3 b0 7d 77 e8 29 6b ab 2f 3a 26 dd 52 8a d0 98 22 c1 02 c3 a0 92 75 f8 99 96 c1 df 70 94 0a dc 5f bd 35 cd 2f 0f f3 8e fc 14 9b fe af 4b 7a e8 81 d5 5e 36 83 49 ca 07 48 6f 87 7d 9e cd 82 d1 17 d6 5d 24 6f e5 2b b6 c1 74 31 59 94 28 04 00 f1 53 a7 5f 0c de 6d da 8a 03 f2 a6 58 4a c8 55 6c fe d1 d2 82 5f f4 38 2e 51 10 01 36 46 69 9e 2c 40 c2 f8 3b ab 58 1a cd e6 8d 98 e7 44 14 12 Data Ascii: ,4PpL,(x]2wK\_u\v=`fE*:V%1J[D2j$_`Ggbk'OjO#7b!Her)}w)k/:&R"up_5/Kz^6IHo}]$o+t1Y(S_mXJUl_8.Q6Fi,@;XD

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	65252	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:02 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:02 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 75bf4e1c-f01e-0085-073a-2688ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230302Z-r197bdfb6b4hsj5bywyqk9r2xw000000011g000000009qgm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:02 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.6	65251	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 23:03:02 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-24 23:03:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 23:03:02 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 04ff5eee-d01e-0049-7af2-24e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241024T230302Z-15b8d89586fst84k5f3z220tec0000000f4g00000000dwwc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 23:03:02 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Target ID:	0
Start time:	19:02:38
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:02:39
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 --field-trial-handle=2216,i,2334288279004458650,9609088969978004780,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:02:42
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://garwoodsheating.com/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	19:03:01
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6012 --field-trial-handle=2216,i,2334288279004458650,9609088969978004780,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	19:03:01
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6508 --field-trial-handle=2216,i,2334288279004458650,9609088969978004780,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.garwoodsheating.com/	Matcher: Template: google matched
Source: https://www.garwoodsheating.com/about/reviews/#reviews-list	Matcher: Template: google matched
Source: https://www.garwoodsheating.com/about/reviews/#reviews-list	Matcher: Template: google matched
Source: https://www.garwoodsheating.com/about/reviews/#reviews-list	Matcher: Template: google matched

Source: https://www.garwoodsheating.com/	HTTP Parser: No favicon
Source: https://www.garwoodsheating.com/	HTTP Parser: No favicon
Source: https://www.garwoodsheating.com/	HTTP Parser: No favicon
Source: https://www.garwoodsheating.com/about/reviews/#reviews-list	HTTP Parser: No favicon
Source: https://www.garwoodsheating.com/about/reviews/#reviews-list	HTTP Parser: No favicon
Source: https://www.garwoodsheating.com/about/reviews/#reviews-list	HTTP Parser: No favicon
Source: https://www.garwoodsheating.com/about/reviews/#reviews-list	HTTP Parser: No favicon
Source: https://www.garwoodsheating.com/about/reviews/#reviews-list	HTTP Parser: No favicon
Source: https://www.garwoodsheating.com/about/reviews/#reviews-list	HTTP Parser: No favicon
Source: https://www.garwoodsheating.com/about/reviews/#reviews-list	HTTP Parser: No favicon
Source: https://www.garwoodsheating.com/heating-air-conditioning-products/	HTTP Parser: No favicon
Source: https://www.garwoodsheating.com/heating-air-conditioning-products/	HTTP Parser: No favicon
Source: https://www.garwoodsheating.com/heating-air-conditioning-products/	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: chromecache_376.2.dr	String found in binary or memory: <div class="social-icons"><a href="https://www.facebook.com/Garwoods-Heating-Cooling-Inc-412281232195285/" target="blank"><img src="https://storage.googleapis.com/sos-websvc/files/mobile/images/facebook.png" alt="facebook.png" /></a><a href="https://www.google.com/maps/place/Garwood's+Heating+%26+Cooling+Inc/@38.8267615,-89.9413552,15z/data=!4m5!3m4!1s0x0:0x4f69a8b1c4a5fd6c!8m2!3d38.8267615!4d-89.9413552?hl=en" target="blank" rel="publisher"><img src="https://storage.googleapis.com/sos-websvc/images/logos/google-g-icon.png" alt="https://storage.googleapis.com/sos-websvc/images/logos/google-g-icon.png" /></a><a href="https://www.pinterest.com/garwoodsheating/" target="blank"><img src="https://storage.googleapis.com/sos-websvc/files/mobile/images/pinterest.png" alt="pinterest.png" /></a></div> </div> equals www.facebook.com (Facebook)
Source: chromecache_376.2.dr	String found in binary or memory: <p>At Garwood's Heating & Cooling, Inc. we strive for 100% satisfaction in everything we do. We value your opinion and invite you to tell us and others about your experience with us. Please take a few moments to tell us what you think by leaving us a <a class="review-here" href="#" >review here on our website</a> or on any of these popular review sites.</p><p><a class="read-our-reviews" href="#">Read what other customers have said about us.</a><br><div id="review-app-site-buttons"><a class="review-site-link" href="https://www.google.com/maps/place/Garwood's+Heating+%26+Cooling+Inc/@38.8267615,-89.9413552,15z/data=!4m7!3m6!1s0x0:0x4f69a8b1c4a5fd6c!8m2!3d38.8267615!4d-89.9413552!9m1!1b1?hl=en" target="blank"><img src="https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/google-button.png" alt="Google Plus Logo" class="review-site-logo"/></a><a class="review-site-link" href="https://www.facebook.com/profile.php?id=100054261951251&sk=reviews" target="blank"><img src="https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/facebook-button.png" alt="Facebook Logo" class="review-site-logo"/></a><a class="review-site-link" href="https://www.yelp.com/biz/garwoods-heating-and-cooling-inc-edwardsville-2" target="blank"><img src="https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/yelp-button.png" alt="Yelp Logo" class="review-site-logo"/></a><a class="review-site-link" href="https://www.yellowpages.com/edwardsville-il/mip/garwoods-heating-and-cooling-inc-472579074" target="blank"><img src="https://storage.googleapis.com/sos-websvc/uploads/core/images/review-app-images/yp-button.png" alt="Yellow Pages Logo" class="review-site-logo"/></a></div><p style="margin-top:0px;font-size:8px"><em>All trademarks or brands on this page are registered by their respective owner and are not affiliated with our company, nor do they endorse or sponsor our products or services.</em></p> </div> equals www.facebook.com (Facebook)
Source: chromecache_260.2.dr	String found in binary or memory: <div class="embed-responsive embed-responsive-16by9"><iframe class="embed-responsive-item" src="https://www.youtube.com/embed/NpMhKZDN7Js?rel=0 frameborder=" 0" allowfullscreen></iframe></div> equals www.youtube.com (Youtube)
Source: chromecache_260.2.dr	String found in binary or memory: <iframe class="embed-responsive-item" src="https://www.youtube.com/embed/J_kzFgju7PA?rel=0" frameborder="0" allowfullscreen></iframe> equals www.youtube.com (Youtube)
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: (g.Bk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.Bk(c,"www.youtube.com"),d=c.toString()):(c=pwa(d),sE(c)&&(d=c));c=new g.mM(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=rE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|rE(this.nf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.T?d=vs(d,h,UJa):h&&(d="embedded");this.La=d;Wqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(VJa,d);!d\|\|f&&!this.T\|\|(h=d);this.playerStyle=h;this.K=g.Vb(VJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.oa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_357.2.dr, chromecache_450.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},lk:function(){e=zb()},ud:function(){d()}}};var gc=ma(["data-gtm-yt-inspected-"]),pD=["www.youtube.com","www.youtube-nocookie.com"],qD,rD=!1; equals www.youtube.com (Youtube)
Source: chromecache_386.2.dr	String found in binary or memory: To.prototype.Ia=function(){return this.C};var qna=(new Date).getTime();var Dla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Ela=/\bocr\b/;var Gla=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Nbb=0,Obb=0,Pbb=0;var bp;g.Vo=null;g.Xo=!1;g.cp=1;bp=Symbol("SIGNAL");g.dp={version:0,v_:0,Vm:!1,hg:void 0,ez:void 0,Hn:void 0,UL:0,mj:void 0,Zu:void 0,bF:!1,zP:!1,P1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_386.2.dr	String found in binary or memory: ZIa=function(a,b){if(!a.j["0"]){var c=new eG("0","fakesb",{video:new aG(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new FN(new g.mM("http://www.youtube.com/videoplayback"),c,"fake"):new WN(new g.mM("http://www.youtube.com/videoplayback"),c,new qN(0,0),new qN(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_386.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.dj(a,{hl:d})),this.Fd(sY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Fd(g.qY(a.errorMessage)):this.Fd(sY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.dj(c, equals www.youtube.com (Youtube)
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Tf(a.errorCode,a.severity,e,NF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Hd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Ut)(),hT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Hd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_386.2.dr	String found in binary or memory: a.ismb);this.yq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=LP(this.Ca)\|\|"www.youtube.com")):r="video.google.com";this.Yn=r;MP(this,a,!0);this.Ja=new eP;g.P(this,this.Ja);q=b?b.innertubeApiKey:xs("",a.innertube_api_key);p=b?b.innertubeApiVersion:xs("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:xs("",a.innertube_context_client_version);q=g.lr("INNERTUBE_API_KEY")\|\|q;p=g.lr("INNERTUBE_API_VERSION")\|\|p;l=g.lr("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=XO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.QP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.KR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.JE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_357.2.dr, chromecache_450.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=WA(a,c,e);U(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return U(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},ZA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: g.QP=function(a){a=LP(a.Ca);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: g.cQ=function(a){var b=g.QP(a);eKa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_386.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.QP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.HP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),mu&&(a=gna())&&(b.ebc=a));return g.dj(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_357.2.dr, chromecache_450.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={rh:e,ph:f,qh:g,bi:k,di:m,Je:n,Fb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(AD(w,"iframe_api")\|\|AD(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!rD&&yD(x[A],p.Je))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_441.2.dr, chromecache_307.2.dr	String found in binary or memory: return b}nD.F="internal.enableAutoEventOnTimer";var gc=ma(["data-gtm-yt-inspected-"]),pD=["www.youtube.com","www.youtube-nocookie.com"],qD,rD=!1; equals www.youtube.com (Youtube)
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: this.Z.Aa&&(a.authuser=this.Z.Aa);this.Z.pageId&&(a.pageid=this.Z.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Bb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(ZO(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.BO(this.B)?AO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_357.2.dr, chromecache_450.2.dr	String found in binary or memory: var CC=function(a,b,c,d,e){var f=tA("fsl",c?"nv.mwt":"mwt",0),g;g=c?tA("fsl","nv.ids",[]):tA("fsl","ids",[]);if(!g.length)return!0;var k=yA(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);U(121);if(m==="https://www.facebook.com/tr/")return U(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!fz(k,hz(b, equals www.facebook.com (Facebook)
Source: chromecache_385.2.dr, chromecache_386.2.dr	String found in binary or memory: var H2={};var Keb={Hs:[{Gs:/Unable to load player module/,weight:20},{Gs:/Failed to fetch/,weight:500},{Gs:/XHR API fetch failed/,weight:10},{Gs:/JSON parsing failed after XHR fetch/,weight:10},{Gs:/Retrying OnePlatform request/,weight:10},{Gs:/CSN Missing or undefined during playback association/,weight:100},{Gs:/Non-recoverable error. Do not retry./,weight:0},{Gs:/Internal Error. Retry with an exponential backoff./,weight:0},{Gs:/API disabled by application./,weight:0}],Mr:[{callback:A8a,weight:500}]};var N8a=/[&\?]action_proxy=1/,M8a=/[&\?]token=([\w-])/,O8a=/[&\?]video_id=([\w-])/,P8a=/[&\?]index=([\d-])/,Q8a=/[&\?]m_pos_ms=([\d-])/,S8a=/[&\?]vvt=([\w-]*)/,E8a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),R8a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),H8a={android:"ANDROID", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: garwoodsheating.com
Source: global traffic	DNS traffic detected: DNS query: www.garwoodsheating.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: tag.brandcdn.com
Source: global traffic	DNS traffic detected: DNS query: core-dot-sos-apps.appspot.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservices.brandcdn.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: d1eoo1tco6rr5e.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: sos-apps.appspot.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: www.demandforce.com
Source: global traffic	DNS traffic detected: DNS query: www.demandforced3.com
Source: global traffic	DNS traffic detected: DNS query: su.addthis.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: local.demandforce.com
Source: global traffic	DNS traffic detected: DNS query: cdn.mxpnl.com
Source: global traffic	DNS traffic detected: DNS query: www.inspectlet.com
Source: global traffic	DNS traffic detected: DNS query: secure-gl.imrworldwide.com
Source: global traffic	DNS traffic detected: DNS query: cdn.inspectlet.com
Source: global traffic	DNS traffic detected: DNS query: hn.inspectlet.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://garwoodsheating.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Windows Analysis Report
http://garwoodsheating.com/