Edit tour

Windows Analysis Report
https://steamfiller.ru/

Overview

General Information

Sample URL:	https://steamfiller.ru/
Analysis ID:	1421208
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Snort IDS alert for network traffic

Phishing site detected (based on logo match)

HTML body contains password input but no form action

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4788 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 --field-trial-handle=2304,i,12457500954807628585,7784865807783938357,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5896 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://steamfiller.ru/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6392 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s.team/q/1/13885351924452522779 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5604 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1228 --field-trial-handle=1992,i,13542767117627433101,2361943962461226785,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Snort Signatures

ET EXPLOIT Possible OpenSSL HeartBleed Large HeartBeat Response from Common SSL Port (Outbound from Server) - Source IP: 172.64.145.151 - Destination IP: 192.168.2.5

Timestamp:	04/06/24-01:18:22.059036
SID:	2018382
Source Port:	443
Destination Port:	49972
Protocol:	TCP
Classtype:	Potentially Bad Traffic

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://steamfiller.ru/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://steamfiller.ru/templ/steamrepl/css/icon_9.svg	Avira URL Cloud: Label: phishing
Source: https://steamfiller.ru/templ/steamrepl/css/Rubikmedium.woff2	Avira URL Cloud: Label: phishing
Source: https://steamfiller.ru/templ/steamrepl/css/bootstrap.min.css	Avira URL Cloud: Label: phishing
Source: https://steamfiller.ru/templ/steamrepl/js/bootstrap.min-1.js	Avira URL Cloud: Label: phishing
Source: https://steamfiller.ru/templ/steamrepl/css/Rubik.woff2	Avira URL Cloud: Label: phishing
Source: https://steamfiller.ru/templ/steamrepl/css/main.aa7e6b15.css	Avira URL Cloud: Label: phishing
Source: https://steamfiller.ru/templ/steamrepl/js/bootstrap.min.js	Avira URL Cloud: Label: phishing

Phishing

Phishing site detected (based on logo match)

Source: https://steamfiller.ru/

Matcher: Template: visa matched

Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1

HTTP Parser: Title: Sign In does not match URL

Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1

HTTP Parser: <input type="password" .../> found

Source: https://steamfiller.ru/	HTTP Parser: No <meta name="author".. found
Source: https://steamfiller.ru/kzt/	HTTP Parser: No <meta name="author".. found
Source: https://steamfiller.ru/try/	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1	HTTP Parser: No <meta name="author".. found

Source: https://steamfiller.ru/	HTTP Parser: No <meta name="copyright".. found
Source: https://steamfiller.ru/kzt/	HTTP Parser: No <meta name="copyright".. found
Source: https://steamfiller.ru/try/	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49763 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.5:49720 version: TLS 1.2

Networking

Snort IDS alert for network traffic

Source: Traffic

Snort IDS: 2018382 ET EXPLOIT Possible OpenSSL HeartBleed Large HeartBeat Response from Common SSL Port (Outbound from Server) 172.64.145.151:443 -> 192.168.2.5:49972

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49763 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.202.106.101
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/css/bootstrap.min-1.css HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/css/bootstrap.min.css HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/css/main.min.css HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/css/main.aa7e6b15.css HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/js/jquery-3.6.0.min.js HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/js/bootstrap.min.js HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/js/bootstrap.min-1.js HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/js/scripts.min.js HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/img/mira.svg HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/img/sbp.svg HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/img/payment_2.svg HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/img/logo_steam.svg HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/img/mira.svg HTTP/1.1Host: steamfiller.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/img/sbp.svg HTTP/1.1Host: steamfiller.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/img/tetherusdtlogo.png HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/img/popup_img.png HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/css/icon_9.svg HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamfiller.ru/templ/steamrepl/css/main.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /metrika/tag.js HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/css/icon_close.svg HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamfiller.ru/templ/steamrepl/css/main.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/img/payment_2.svg HTTP/1.1Host: steamfiller.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/img/logo_steam.svg HTTP/1.1Host: steamfiller.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/css/Rubikbold.woff2 HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://steamfiller.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://steamfiller.ru/templ/steamrepl/css/main.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/css/Rubikmedium.woff2 HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://steamfiller.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://steamfiller.ru/templ/steamrepl/css/main.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/css/Rubik.woff2 HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://steamfiller.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://steamfiller.ru/templ/steamrepl/css/main.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/css/Rubikblack.woff2 HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://steamfiller.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://steamfiller.ru/templ/steamrepl/css/main.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_check HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/css/icon_9.svg HTTP/1.1Host: steamfiller.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/css/icon_close.svg HTTP/1.1Host: steamfiller.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/img/popup_img.png HTTP/1.1Host: steamfiller.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037
Source: global traffic	HTTP traffic detected: GET /templ/steamrepl/img/tetherusdtlogo.png HTTP/1.1Host: steamfiller.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037
Source: global traffic	HTTP traffic detected: GET /metrika/metrika_match.html HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10330.zWvyBesHHsFVsmMi3eIC8_h8n3XFR_ymk68uII-f6Myu1ZsL9JEJCSGoF8rRXxLU.LYAIfYldOJuYfDLvlEPHE68-ggg%2C HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; yandexuid=2756805351712359034; yashr=4434275431712359034
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A900713691%3Az%3A120%3Ai%3A20240406011716%3Aet%3A1712359037%3Ac%3A1%3Arn%3A720576105%3Arqn%3A1%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A6509%3Awv%3A2%3Ads%3A0%2C554%2C1440%2C540%2C4%2C0%2C%2C3061%2C1%2C%2C%2C%2C6321%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359026612%3Arqnl%3A1%3Ast%3A1712359038%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(1)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://steamfiller.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; i=qvv92BE7I9QbBa+1PMf9GMyBEEMlW2WLOd5y0u4kEGaQuiQmDjNBLbLAXkkDQjgCtA4lrXInJRJiL+OHDJsm11YGwNA=; yandexuid=3334042821712359038; yashr=2699580691712359038
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?token=10330.woy656fu46y5_DcDSjB97Mazs-_kGfS4OruiYv9WFn18Zj-naQjLwkR83mSWLa7t4r2cr6wOmU1IvltOHb6NnQBh-5H0NNHsDMCmgustlQLblfYsCzbtHSgj_ONY8OAVCU8DTc10K_4TmEg-34RNn9f3BJ0D81_oqttTrzU1TxAkXGiffY-DWdjIjOsXOoFn907mt5c-7wPwj2qhORpKDT8V4Nj1QK2qOPGXiPKnfnk%2C.21dgMVT84n2ZnBqRNXF8v61X_z4%2C HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; i=hfvmf7TJUmAApOnyuiVMuJNBbNnDtDgZ919RHntomfEQx/r+7SRpbNeKirXEpddTEdX3vLS+mIqQdD4CXzBYgal2Adk=; yandexuid=5417444001712359039; yashr=4645585121712359039
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; i=qvv92BE7I9QbBa+1PMf9GMyBEEMlW2WLOd5y0u4kEGaQuiQmDjNBLbLAXkkDQjgCtA4lrXInJRJiL+OHDJsm11YGwNA=; yandexuid=3334042821712359038; yashr=2699580691712359038
Source: global traffic	HTTP traffic detected: GET /watch/95654225/1?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A900713691%3Az%3A120%3Ai%3A20240406011716%3Aet%3A1712359037%3Ac%3A1%3Arn%3A720576105%3Arqn%3A1%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A6509%3Awv%3A2%3Ads%3A0%2C554%2C1440%2C540%2C4%2C0%2C%2C3061%2C1%2C%2C%2C%2C6321%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359026612%3Arqnl%3A1%3Ast%3A1712359038%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29eco%2821037572%29aw%281%29rcm%281%29cdl%28na%29ti%281%29 HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://steamfiller.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; i=hfvmf7TJUmAApOnyuiVMuJNBbNnDtDgZ919RHntomfEQx/r+7SRpbNeKirXEpddTEdX3vLS+mIqQdD4CXzBYgal2Adk=; yashr=4645585121712359039; yabs-sid=610093571712359040; yandexuid=3334042821712359038; yuidss=3334042821712359038; ymex=1743895040.yrts.1712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
Source: global traffic	HTTP traffic detected: GET /favicon.svg HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?token=10330.woy656fu46y5_DcDSjB97Mazs-_kGfS4OruiYv9WFn18Zj-naQjLwkR83mSWLa7t4r2cr6wOmU1IvltOHb6NnQBh-5H0NNHsDMCmgustlQLblfYsCzbtHSgj_ONY8OAVCU8DTc10K_4TmEg-34RNn9f3BJ0D81_oqttTrzU1TxAkXGiffY-DWdjIjOsXOoFn907mt5c-7wPwj2qhORpKDT8V4Nj1QK2qOPGXiPKnfnk%2C.21dgMVT84n2ZnBqRNXF8v61X_z4%2C HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; yp=1712445441.yu.5417444001712359039; ymex=1714951041.oyu.5417444001712359039; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==
Source: global traffic	HTTP traffic detected: GET /watch/95654225/1?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A900713691%3Az%3A120%3Ai%3A20240406011716%3Aet%3A1712359037%3Ac%3A1%3Arn%3A720576105%3Arqn%3A1%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A6509%3Awv%3A2%3Ads%3A0%2C554%2C1440%2C540%2C4%2C0%2C%2C3061%2C1%2C%2C%2C%2C6321%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359026612%3Arqnl%3A1%3Ast%3A1712359038%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29eco%2821037572%29aw%281%29rcm%281%29cdl%28na%29ti%281%29 HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; yp=1712445441.yu.5417444001712359039; ymex=1714951041.oyu.5417444001712359039; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==
Source: global traffic	HTTP traffic detected: GET /favicon.svg HTTP/1.1Host: steamfiller.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=410881914&browser-info=we%3A1%3Aet%3A1712359045%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011725%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359045&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=600848379&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359045%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011724%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359045&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET /pages/feedback/ HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET /clmap/95654225?page-url=https%3A%2F%2Fsteamfiller.ru%2F&pointer-click=rn%3A759265095%3Ax%3A41582%3Ay%3A30110%3At%3A98%3Ap%3A%3BWAA1AA%C2%84AAAA%3AX%3A938%3AY%3A309&browser-info=u%3A1712359037123674141%3Av%3A1290%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Arqnl%3A1%3Ast%3A1712359047&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://steamfiller.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=2&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=282114613&browser-info=we%3A1%3Aet%3A1712359046%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011725%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359046&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
Source: global traffic	HTTP traffic detected: GET /clmap/95654225?page-url=https%3A%2F%2Fsteamfiller.ru%2F&pointer-click=rn%3A759265095%3Ax%3A41582%3Ay%3A30110%3At%3A98%3Ap%3A%3BWAA1AA%C2%84AAAA%3AX%3A938%3AY%3A309&browser-info=u%3A1712359037123674141%3Av%3A1290%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Arqnl%3A1%3Ast%3A1712359047&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-check=32641&wv-type=0&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=16435977&browser-info=we%3A1%3Aet%3A1712359047%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011726%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359047&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=3&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=914984155&browser-info=we%3A1%3Aet%3A1712359047%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011726%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359047&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=2&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=881030426&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359047%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011726%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359047&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A131641893%3Az%3A120%3Ai%3A20240406011728%3Aet%3A1712359048%3Ac%3A1%3Arn%3A41568339%3Arqn%3A2%3Au%3A1712359037123674141%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C553%2C968%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359046794%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359048%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(0)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://steamfiller.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A1056222005%3Az%3A120%3Ai%3A20240406011728%3Aet%3A1712359049%3Ac%3A1%3Arn%3A109557605%3Arqn%3A3%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1626%3Awv%3A2%3Ads%3A0%2C374%2C1100%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359046978%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359049%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://steamfiller.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A131641893%3Az%3A120%3Ai%3A20240406011728%3Aet%3A1712359048%3Ac%3A1%3Arn%3A41568339%3Arqn%3A2%3Au%3A1712359037123674141%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C553%2C968%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359046794%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359048%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(0)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A1056222005%3Az%3A120%3Ai%3A20240406011728%3Aet%3A1712359049%3Ac%3A1%3Arn%3A109557605%3Arqn%3A3%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1626%3Awv%3A2%3Ads%3A0%2C374%2C1100%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359046978%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359049%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
Source: global traffic	HTTP traffic detected: GET //pages/faq/ HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET /pages/faq/ HTTP/1.1Host: steamfiller.ruConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A310184681%3Az%3A120%3Ai%3A20240406011732%3Aet%3A1712359053%3Ac%3A1%3Arn%3A113059509%3Arqn%3A4%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1989%3Awv%3A2%3Ads%3A0%2C0%2C717%2C%2C1123%2C1121%2C1%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359050977%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359053%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://steamfiller.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A310184681%3Az%3A120%3Ai%3A20240406011732%3Aet%3A1712359053%3Ac%3A1%3Arn%3A113059509%3Arqn%3A4%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1989%3Awv%3A2%3Ads%3A0%2C0%2C717%2C%2C1123%2C1121%2C1%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359050977%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359053%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /kzt/ HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A853926178%3Az%3A120%3Ai%3A20240406011737%3Aet%3A1712359058%3Ac%3A1%3Arn%3A731497905%3Arqn%3A5%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A2301%3Awv%3A2%3Ads%3A0%2C572%2C1466%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359055011%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359058%3At%3A%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam%20%D0%9A%D0%B0%D0%B7%D0%B0%D1%85%D1%81%D1%82%D0%B0%D0%BD%20%D0%BE%D1%82%207000%20%E2%82%B8%20-%20%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://steamfiller.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A853926178%3Az%3A120%3Ai%3A20240406011737%3Aet%3A1712359058%3Ac%3A1%3Arn%3A731497905%3Arqn%3A5%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A2301%3Awv%3A2%3Ads%3A0%2C572%2C1466%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359055011%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359058%3At%3A%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam%20%D0%9A%D0%B0%D0%B7%D0%B0%D1%85%D1%81%D1%82%D0%B0%D0%BD%20%D0%BE%D1%82%207000%20%E2%82%B8%20-%20%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=1056222005&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&rn=586329562&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359058%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011737%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359058&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /try/ HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=131641893&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=826086009&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359059%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011739%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359059&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A442277962%3Az%3A120%3Ai%3A20240406011741%3Aet%3A1712359062%3Ac%3A1%3Arn%3A385017140%3Arqn%3A6%3Au%3A1712359037123674141%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C704%2C%2C2%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359060975%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359062%3At%3A%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam%20%D0%A2%D1%83%D1%80%D1%86%D0%B8%D1%8F%20%D0%B8%20Global%20%D0%BE%D1%82%2015%20USD%20-%20%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://steamfiller.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=853926178&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&rn=661638731&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359061%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011740%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359061&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /account/ HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A442277962%3Az%3A120%3Ai%3A20240406011741%3Aet%3A1712359062%3Ac%3A1%3Arn%3A385017140%3Arqn%3A6%3Au%3A1712359037123674141%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C704%2C%2C2%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359060975%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359062%3At%3A%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam%20%D0%A2%D1%83%D1%80%D1%86%D0%B8%D1%8F%20%D0%B8%20Global%20%D0%BE%D1%82%2015%20USD%20-%20%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=1056222005&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&rn=1027243488&browser-info=we%3A1%3Aet%3A1712359062%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011741%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359062&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /login/?redir=account%2F&redir_ssl=1 HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=310184681&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=1011974261&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359062%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011741%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359062&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=131641893&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=774375018&browser-info=we%3A1%3Aet%3A1712359063%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011742%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359063&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_global.css?v=qUG5Ub5rrq2J&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/buttons.css?v=Grv-5yNFuEfg&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/v6/store.css?v=fqF6X6wSBa3N&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/v6/cart.css?v=PUI5e8sxLsB9&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/v6/browse.css?v=wWw5tW1y7nea&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/login.css?v=N_ALu0tisSbF&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/css/shared_responsive.css?v=CG8Em6e-Ozq3&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_global.js?v=n5zImpoIZ8NN&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/main.js?v=X9J2yQeNBQCi&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=853926178&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&rn=803033375&browser-info=we%3A1%3Aet%3A1712359064%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011743%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359064&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /public/javascript/dynamicstore.js?v=Nd21hnbFh_KC&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/login.js?v=uyGwRKXH0yy-&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/applications/store/main.css?v=t81gm6SF3BGU&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=qUG5Ub5rrq2J&l=english&_cdn=cloudflareAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_logo.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/manifest.js?v=sbQ8ylrvPWaV&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/libraries~b28b7af69.js?v=ysrKn5WbfO7I&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/main.js?v=iWo9qaWJIuZH&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/logo_steam_footer.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/footerLogo_valve_new.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=310184681&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=964554916&browser-info=we%3A1%3Aet%3A1712359066%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011745%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359066&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /public/shared/images/responsive/header_logo.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/ico/ico_facebook.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/ico/ico_twitter.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=qUG5Ub5rrq2J&l=english&_cdn=cloudflareAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://store.steampowered.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflareAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Thin.ttf?v=4.015 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://store.steampowered.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflareAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://store.steampowered.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflareAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/joinsteam/new_login_bg_strong_mask.jpg HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.cloudflare.steamstatic.com/public/shared/css/login.css?v=N_ALu0tisSbF&l=english&_cdn=cloudflareAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/crypto/jsbn.js HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/javascript/crypto/rsa.js HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/shared_english-json.js?contenthash=6b4792eaeb66b96b16e2 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/sales_english-json.js?contenthash=70f95eb8c0363204a8e3 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/main_english-json.js?contenthash=485049d171f183ac5e03 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/marketing_english-json.js?contenthash=a0f8e137c9f8a0086b7b HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Black.ttf?v=4.015 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://store.steampowered.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflareAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/v6/logo_steam_footer.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/footerLogo_valve_new.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/ico/ico_facebook.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/images/ico/ico_twitter.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/joinsteam/new_login_bg_strong_mask.jpg HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=2&wv-type=7&wmode=0&wv-hit=853926178&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&rn=1044954885&browser-info=we%3A1%3Aet%3A1712359067%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011746%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359067&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /public/css/applications/store/9424.css?contenthash=f4849e7dabab0475bc1b HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/applications/store/login.css?contenthash=308e62712ce8998ce357 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/460.js?contenthash=e69f7790614c12c82978 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/6882.js?contenthash=715a72e84664238b26c1 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/7247.js?contenthash=b29dba9d0d5460b0cd58 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/9424.js?contenthash=e670f3ca9e3d01a52001 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/login.js?contenthash=0a2de2771eef68b1e7bd HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/applications/store/navevents.js?contenthash=f90db20908eeaa871cf2 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0; ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
Source: global traffic	HTTP traffic detected: GET /jwt/ajaxrefresh HTTP/1.1Host: login.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
Source: global traffic	HTTP traffic detected: GET /pages/faq/ HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET /IAuthenticationService/BeginAuthSessionViaQR/v1 HTTP/1.1Host: api.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A825216580%3Az%3A120%3Ai%3A20240406011756%3Aet%3A1712359077%3Ac%3A1%3Arn%3A584610710%3Arqn%3A10%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1401%3Awv%3A2%3Ads%3A0%2C0%2C1145%2C291%2C3%2C0%2C%2C58%2C1%2C%2C%2C%2C1536%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359074991%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359077%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://steamfiller.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=442277962&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&rn=141212650&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359076%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011755%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359076&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A825216580%3Az%3A120%3Ai%3A20240406011756%3Aet%3A1712359077%3Ac%3A1%3Arn%3A584610710%3Arqn%3A10%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1401%3Awv%3A2%3Ads%3A0%2C0%2C1145%2C291%2C3%2C0%2C%2C58%2C1%2C%2C%2C%2C1536%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359074991%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359077%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-check=24687&wv-type=0&wmode=0&wv-hit=1056222005&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&rn=977289180&browser-info=we%3A1%3Aet%3A1712359079%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011758%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359079&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1Host: api.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=442277962&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&rn=648745000&browser-info=we%3A1%3Aet%3A1712359080%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011759%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359080&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /IClientMetricsService/ReportClientError/v1 HTTP/1.1Host: api.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=909386357&browser-info=we%3A1%3Aet%3A1712359081%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011801%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359081&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=907255817&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359081%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011800%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359081&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-check=24944&wv-type=0&wmode=0&wv-hit=310184681&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=649098613&browser-info=we%3A1%3Aet%3A1712359084%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011803%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359084&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1Host: api.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
Source: global traffic	HTTP traffic detected: GET /pages/faq/ HTTP/1.1Host: steamfiller.ruConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=2&wv-type=7&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=1044244577&browser-info=we%3A1%3Aet%3A1712359087%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011806%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359087&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-check=34967&wv-type=0&wmode=0&wv-hit=853926178&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&rn=963682877&browser-info=we%3A1%3Aet%3A1712359088%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011807%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359088&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A906334581%3Az%3A120%3Ai%3A20240406011809%3Aet%3A1712359090%3Ac%3A1%3Arn%3A246901983%3Arqn%3A12%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1780%3Awv%3A2%3Ads%3A0%2C0%2C1163%2C633%2C41%2C38%2C1%2C88%2C1%2C%2C%2C%2C1927%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359087549%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359090%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://steamfiller.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
Source: global traffic	HTTP traffic detected: GET /account/ HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0; ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
Source: global traffic	HTTP traffic detected: GET /login/?redir=account%2F&redir_ssl=1 HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0; ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A906334581%3Az%3A120%3Ai%3A20240406011809%3Aet%3A1712359090%3Ac%3A1%3Arn%3A246901983%3Arqn%3A12%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1780%3Awv%3A2%3Ads%3A0%2C0%2C1163%2C633%2C41%2C38%2C1%2C88%2C1%2C%2C%2C%2C1927%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359087549%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359090%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=3&wv-type=7&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=36618891&browser-info=we%3A1%3Aet%3A1712359091%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011810%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359091&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1Host: api.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
Source: global traffic	HTTP traffic detected: GET /jwt/ajaxrefresh HTTP/1.1Host: login.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
Source: global traffic	HTTP traffic detected: GET /IAuthenticationService/BeginAuthSessionViaQR/v1 HTTP/1.1Host: api.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-check=15178&wv-type=0&wmode=0&wv-hit=442277962&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&rn=404172621&browser-info=we%3A1%3Aet%3A1712359094%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011814%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359094&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /pages/faq/ HTTP/1.1Host: steamfiller.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
Source: global traffic	HTTP traffic detected: GET /q/1/13885351924452522779 HTTP/1.1Host: s.teamConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /about/qrlogin/1/13885351924452522779 HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0; ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
Source: global traffic	HTTP traffic detected: GET /public/css/styles_about.css?v=KuY6YbIF4rkW&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/promo/newstore2016.css?v=zveyQLrdu9JU&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/css/slick/slick.css?v=ZSVHTEnT3WNW&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&_cdn=cloudflare&load=effects,controls,slider HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/about.js?v=T9HhtJ81mJgN&l=english&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A106143261%3Az%3A120%3Ai%3A20240406011818%3Aet%3A1712359098%3Ac%3A1%3Arn%3A801127397%3Arqn%3A14%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C1157%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359097013%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359099%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(0)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://steamfiller.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://steamfiller.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
Source: global traffic	HTTP traffic detected: GET /public/javascript/slick/slick.js?v=.UvbXNQdQm-AJ&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/javascript/rellax/rellax.min.js?v=.KbIxshHXB6Um&_cdn=cloudflare HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/videos/about_hero_loop_web.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store//about/logo_steam.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-windows.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.cloudflare.steamstatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dynamicstore/saledata/?cc=US HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://store.steampowered.com/about/qrlogin/1/13885351924452522779Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0; ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
Source: global traffic	HTTP traffic detected: GET /store/about/icon-macos.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steamos.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-chromeos.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A106143261%3Az%3A120%3Ai%3A20240406011818%3Aet%3A1712359098%3Ac%3A1%3Arn%3A801127397%3Arqn%3A14%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C1157%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359097013%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359099%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(0)rcm(0)cdl(na)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/capsule_231x87.jpg?t=1709666906 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1675200/capsule_231x87.jpg?t=1699990406 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1938090/capsule_231x87.jpg?t=1712178612 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/359550/capsule_231x87.jpg?t=1711470437 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2054970/capsule_231x87.jpg?t=1711745105 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/230410/capsule_231x87.jpg?t=1711638801 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/videos/about_hero_loop_web.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1Host: api.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
Source: global traffic	HTTP traffic detected: GET /store//about/logo_steam.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-windows.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Light.ttf?v=4.015 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://store.steampowered.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflareAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/fonts/MotivaSans-Bold.ttf?v=4.015 HTTP/1.1Host: store.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://store.steampowered.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflareAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-chromeos.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steamos.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-macos.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dynamicstore/saledata/?cc=US HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0; ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
Source: global traffic	HTTP traffic detected: GET /steam/apps/2399830/capsule_231x87.jpg?t=1712339593 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1091500/capsule_231x87.jpg?t=1706698946 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/capsule_231x87.jpg?t=1698860631 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2881650/capsule_231x87.jpg?t=1712153694 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/306130/capsule_231x87.jpg?t=1712247229 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/553850/capsule_231x87.jpg?t=1709666906 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1675200/capsule_231x87.jpg?t=1699990406 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1938090/capsule_231x87.jpg?t=1712178612 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1962663/capsule_231x87.jpg?t=1712172838 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/359550/capsule_231x87.jpg?t=1711470437 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2054970/capsule_231x87.jpg?t=1711745105 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/230410/capsule_231x87.jpg?t=1711638801 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1086940/capsule_231x87.jpg?t=1711532262 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/252490/capsule_231x87.jpg?t=1701938429 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1172470/capsule_231x87.jpg?t=1708706824 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2519060/capsule_231x87.jpg?t=1712178634 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community_pt1.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community_pt2.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community_pt3.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_hardware.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_hardware_pt1.png?v=2 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_hardware_pt2.png?v=2 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_steamworks.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/306130/capsule_231x87.jpg?t=1712247229 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1Host: api.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
Source: global traffic	HTTP traffic detected: GET /steam/apps/2881650/capsule_231x87.jpg?t=1712153694 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/730/capsule_231x87.jpg?t=1698860631 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1091500/capsule_231x87.jpg?t=1706698946 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_steamworks_pt1.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2399830/capsule_231x87.jpg?t=1712339593 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_steamworks_pt2.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/logo-steamworks.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1962663/capsule_231x87.jpg?t=1712172838 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steamchat.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-gamehubs.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-broadcasts.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=906334581&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=153530237&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359100%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011819%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359100&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /steam/apps/1086940/capsule_231x87.jpg?t=1711532262 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/2519060/capsule_231x87.jpg?t=1712178634 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/1172470/capsule_231x87.jpg?t=1708706824 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /steam/apps/252490/capsule_231x87.jpg?t=1701938429 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steamworkshop.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steammobile.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-earlyaccess.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community_pt1.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-languages.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-payment.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-controllers.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_hardware_pt2.png?v=2 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community_pt2.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_community_pt3.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/videos/about_hero_loop_web.webm HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://store.steampowered.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_steamworks.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_hardware.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_hardware_pt1.png?v=2 HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_steamworks_pt1.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/cta_hero_steamworks_pt2.png HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/logo-steamworks.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steamchat.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-broadcasts.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-gamehubs.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=906334581&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=270149841&browser-info=we%3A1%3Aet%3A1712359104%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011823%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359104&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /IClientMetricsService/ReportClientError/v1 HTTP/1.1Host: api.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steamworkshop.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-steammobile.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-earlyaccess.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-languages.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-controllers.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /store/about/icon-payment.svg HTTP/1.1Host: cdn.cloudflare.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1Host: api.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
Source: global traffic	HTTP traffic detected: GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1Host: api.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
Source: global traffic	HTTP traffic detected: GET /webvisor/95654225?wv-part=1&wv-check=54053&wv-type=0&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=572967889&browser-info=we%3A1%3Aet%3A1712359108%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011827%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359108&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1

Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory:   \|  <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.facebook.com%2FSteam" target="_blank" rel=" noopener"><img src="https://store.cloudflare.steamstatic.com/public/images/ico/ico_facebook.png" alt="Facebook"> Steam</a> equals www.facebook.com (Facebook)
Source: chromecache_180.2.dr	String found in binary or memory: var youtubeurl = location.protocol + '//www.youtube.com/embed/' + videoid + '?showinfo=0&autohide=1&fs=1&hd=1&modestbranding=1&rel=0&showsearch=0&wmode=direct&autoplay=1'; equals www.youtube.com (Youtube)
Source: chromecache_179.2.dr	String found in binary or memory: if (-1 != document.URL.indexOf("www.youtube.com/watch")) equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: steamfiller.ru

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1712359010054&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: chromecache_202.2.dr	String found in binary or memory: http://blogs.law.harvard.edu/ivan)
Source: chromecache_218.2.dr, chromecache_291.2.dr	String found in binary or memory: http://creativecommons.org/ns#
Source: chromecache_202.2.dr	String found in binary or memory: http://diveintomark.org/)
Source: chromecache_202.2.dr	String found in binary or memory: http://encytemedia.com/)
Source: chromecache_283.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_283.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_283.2.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_283.2.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_202.2.dr	String found in binary or memory: http://mir.aculo.us)
Source: chromecache_202.2.dr	String found in binary or memory: http://script.aculo.us
Source: chromecache_202.2.dr	String found in binary or memory: http://script.aculo.us/
Source: chromecache_347.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_218.2.dr, chromecache_291.2.dr	String found in binary or memory: http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
Source: chromecache_270.2.dr, chromecache_188.2.dr, chromecache_353.2.dr, chromecache_248.2.dr, chromecache_182.2.dr, chromecache_267.2.dr, chromecache_278.2.dr, chromecache_363.2.dr, chromecache_318.2.dr, chromecache_336.2.dr, chromecache_250.2.dr, chromecache_273.2.dr, chromecache_186.2.dr	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/.
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: http://twitter.com/steam
Source: chromecache_365.2.dr	String found in binary or memory: http://www.dota2.com
Source: chromecache_323.2.dr, chromecache_203.2.dr, chromecache_295.2.dr, chromecache_183.2.dr	String found in binary or memory: http://www.gimp.org/xmp/
Source: chromecache_218.2.dr, chromecache_291.2.dr	String found in binary or memory: http://www.inkscape.org/namespaces/inkscape
Source: chromecache_347.2.dr	String found in binary or memory: http://www.prototypejs.org/
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: http://www.steampowered.com/steamworks/
Source: chromecache_202.2.dr	String found in binary or memory: http://www.tirsen.com)
Source: chromecache_276.2.dr	String found in binary or memory: http://www.valvesoftware.com
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: http://www.valvesoftware.com/about
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: chromecache_220.2.dr	String found in binary or memory: http://www.youworkforthem.com/designer/293/niramekko
Source: chromecache_220.2.dr	String found in binary or memory: http://www.youworkforthem.com/font-license
Source: chromecache_220.2.dr	String found in binary or memory: http://www.youworkforthem.com/product.php?sku=T2982
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/client/installer/SteamSetup.exe
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/client/installer/steam.deb
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/client/installer/steam.dmg
Source: chromecache_259.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/1086940/capsule_231x87.jpg?t=1711532262
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/1091500/capsule_231x87.jpg?t=1706698946
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/1172470/capsule_231x87.jpg?t=1708706824
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/1675200/capsule_231x87.jpg?t=1699990406
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/1938090/capsule_231x87.jpg?t=1712178612
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/1962663/capsule_231x87.jpg?t=1712172838
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/2054970/capsule_231x87.jpg?t=1711745105
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/230410/capsule_231x87.jpg?t=1711638801
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/2399830/capsule_231x87.jpg?t=1712339593
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/2519060/capsule_231x87.jpg?t=1712178634
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/252490/capsule_231x87.jpg?t=1701938429
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/2881650/capsule_231x87.jpg?t=1712153694
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/306130/capsule_231x87.jpg?t=1712247229
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/359550/capsule_231x87.jpg?t=1711470437
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/553850/capsule_231x87.jpg?t=1709666906
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/steam/apps/730/capsule_231x87.jpg?t=1698860631
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store//about/logo_steam.svg
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_community.png
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_community_pt1.png
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_community_pt2.png
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_community_pt3.png
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_hardware.png
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_hardware_pt1.png?v=2
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_hardware_pt2.png?v=2
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_steamworks.png
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_steamworks_pt1.png
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_steamworks_pt2.png
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/icon-broadcasts.svg
Source: chromecache_276.2.dr, chromecache_301.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/icon-chromeos.svg
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/icon-controllers.svg
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/icon-earlyaccess.svg
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/icon-gamehubs.svg
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/icon-languages.svg
Source: chromecache_276.2.dr, chromecache_301.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/icon-macos.svg
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/icon-payment.svg
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/icon-steamchat.svg
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/icon-steammobile.svg
Source: chromecache_276.2.dr, chromecache_301.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/icon-steamos.svg
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/icon-steamworkshop.svg
Source: chromecache_301.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/icon-windows.svg
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/logo-steamworks.svg
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/social-og.jpg
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/videos/about_hero_loop_web.mp4
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/videos/about_hero_loop_web.png
Source: chromecache_276.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/about/videos/about_hero_loop_web.webm
Source: chromecache_214.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/promo/newstore2016/header_background.jpg
Source: chromecache_214.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/promo/newstore2016/homepage_long_01.jpg?v=1);
Source: chromecache_266.2.dr	String found in binary or memory: https://cdn.cloudflare.steamstatic.com/store/promo/summer2020/tiling_orange.png?v=2
Source: chromecache_180.2.dr	String found in binary or memory: https://checkout.steampowered.com/parental/ajaxlock
Source: chromecache_180.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/
Source: chromecache_332.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/login/throbber.gif
Source: chromecache_331.2.dr, chromecache_275.2.dr, chromecache_244.2.dr, chromecache_348.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_331.2.dr, chromecache_244.2.dr	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_331.2.dr, chromecache_244.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://help.steampowered.com/en/
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://help.steampowered.com/en/?snr=1_44_44_
Source: chromecache_180.2.dr	String found in binary or memory: https://help.steampowered.com/en/wizard/HelpWithLimitedAccount
Source: chromecache_306.2.dr	String found in binary or memory: https://iframe-tasks.yandex
Source: chromecache_306.2.dr	String found in binary or memory: https://iframe-toloka.com
Source: chromecache_306.2.dr	String found in binary or memory: https://mc.yandex.
Source: chromecache_306.2.dr	String found in binary or memory: https://mc.yandex.md/cc
Source: chromecache_276.2.dr	String found in binary or memory: https://partner.steamgames.com/
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://partner.steamgames.com/steamdirect
Source: chromecache_299.2.dr, chromecache_350.2.dr, chromecache_280.2.dr, chromecache_345.2.dr, chromecache_285.2.dr, chromecache_343.2.dr	String found in binary or memory: https://plau.cohttps://plau.co
Source: chromecache_299.2.dr, chromecache_350.2.dr, chromecache_280.2.dr, chromecache_345.2.dr, chromecache_285.2.dr, chromecache_343.2.dr	String found in binary or memory: https://plau.cohttps://plau.coCopyright
Source: chromecache_299.2.dr, chromecache_350.2.dr, chromecache_285.2.dr, chromecache_343.2.dr	String found in binary or memory: https://plau.cohttps://plau.coMotiva
Source: chromecache_180.2.dr	String found in binary or memory: https://player.vimeo.com/video/
Source: chromecache_306.2.dr	String found in binary or memory: https://s3.mds.yandex.net/internal-metrika-betas
Source: chromecache_180.2.dr	String found in binary or memory: https://sketchfab.com/models/
Source: chromecache_267.2.dr	String found in binary or memory: https://steam.tv
Source: chromecache_180.2.dr	String found in binary or memory: https://steam.tv/parental/ajaxlock
Source: chromecache_180.2.dr	String found in binary or memory: https://steamcommunity.com
Source: chromecache_276.2.dr	String found in binary or memory: https://steamcommunity.com/
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: chromecache_180.2.dr	String found in binary or memory: https://steamcommunity.com/chat/
Source: chromecache_180.2.dr	String found in binary or memory: https://steamcommunity.com/chat/friend/
Source: chromecache_180.2.dr	String found in binary or memory: https://steamcommunity.com/chat/group/
Source: chromecache_276.2.dr	String found in binary or memory: https://steamcommunity.com/communitycontent/
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://steamcommunity.com/discussions/
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://steamcommunity.com/market/
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: chromecache_276.2.dr	String found in binary or memory: https://steamcommunity.com/updates/broadcasting
Source: chromecache_276.2.dr	String found in binary or memory: https://steamcommunity.com/updates/chatupdate
Source: chromecache_276.2.dr	String found in binary or memory: https://steamcommunity.com/workshop
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://steamcommunity.com/workshop/
Source: chromecache_224.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/css/applications/store/main.css?v=t81gm6SF3BGU&l
Source: chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/css/promo/newstore2016.css?v=zveyQLrdu9JU&l=engl
Source: chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/css/slick/slick.css?v=ZSVHTEnT3WNW&l=english&amp
Source: chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/css/styles_about.css?v=KuY6YbIF4rkW&l=english&am
Source: chromecache_224.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/css/v6/browse.css?v=wWw5tW1y7nea&l=english&_
Source: chromecache_224.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/css/v6/cart.css?v=PUI5e8sxLsB9&l=english&_cd
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/css/v6/store.css?v=fqF6X6wSBa3N&l=english&_c
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/footerLogo_valve_new.png
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/ico/ico_twitter.png
Source: chromecache_259.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/promo/lunar2019/lny2019_title_en.png
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/images/v6/logo_steam_footer.png
Source: chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/javascript/about.js?v=T9HhtJ81mJgN&l=english&amp
Source: chromecache_224.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js
Source: chromecache_224.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/javascript/applications/store/main.js?v=iWo9qaWJIuZH
Source: chromecache_224.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/javascript/applications/store/manifest.js?v=sbQ8ylrv
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/javascript/dynamicstore.js?v=Nd21hnbFh_KC&l=engl
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/javascript/main.js?v=X9J2yQeNBQCi&l=english&
Source: chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy&_cdn
Source: chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/javascript/rellax/rellax.min.js?v=.KbIxshHXB6Um&
Source: chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk
Source: chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/javascript/slick/slick.js?v=.UvbXNQdQm-AJ&_cdn=c
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/css/buttons.css?v=Grv-5yNFuEfg&l=english&
Source: chromecache_224.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/css/login.css?v=N_ALu0tisSbF&l=english&am
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=engl
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=qUG5Ub5rrq2J&l=en
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/css/shared_responsive.css?v=CG8Em6e-Ozq3&
Source: chromecache_220.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015
Source: chromecache_220.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Source: chromecache_220.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-BoldItalic.ttf?v=4.015
Source: chromecache_220.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Source: chromecache_220.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Source: chromecache_220.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Source: chromecache_220.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Source: chromecache_220.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015
Source: chromecache_220.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015
Source: chromecache_211.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/buttons/icon_double_arrows.png
Source: chromecache_211.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);
Source: chromecache_211.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/buttons/icons_18.png?v=3);
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_airelement_1-2.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_airelement_3-4.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_airelement_5-6.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_airelement_7-8.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_airelement_9-10.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_angle.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_arrows.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_books.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_chevrons.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_circle2.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_crystals.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_earthelement.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_fireelement.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_flag.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_1-2.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_3-4.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_5-6.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_7-8.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_9-10.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_grunge_1.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_grunge_2.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_grunge_3.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_grunge_4.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_grunge_5.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_halftone_1.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_halftone_2.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_halftone_3.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_hexagons.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_mandala_1-2.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_mandala_3-4.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_mandala_5-6.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_mandala_7-8.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_mandala_9-10.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_patterns_1-2.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_patterns_5-6.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_patterns_7-8.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_patterns_9-10.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_shapes_1.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_shapes_2.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_shapes_3.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_shapes_4.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_shapes_5.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_shields.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_space.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_spiro_1-2.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_spiro_3-4.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_spiro_5-6.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_spiro_7-8.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_spiro_9-10.png?v=2
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_waterelement.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_wings.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/friendindicator_small.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_downloa
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/header/globalheader_highlight.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/header/inbox_async_game.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/header/inbox_async_game_invite.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/header/inbox_icons_sprite.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/header/inbox_moderator_message.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/header/inbox_tradeoffers.png
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/header/notification_bell.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-logo.svg
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-playable.svg
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-unknown.svg
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-unsupported.svg
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-verified.svg
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/ico/icon_content_warning.png
Source: chromecache_257.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/joinsteam/new_login_bg_steam_china.jpg
Source: chromecache_257.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/joinsteam/new_login_bg_steam_china_mob
Source: chromecache_257.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg
Source: chromecache_257.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask_mob
Source: chromecache_257.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/login/code_box.png?v=1
Source: chromecache_257.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/login/emailauth_icons2.png
Source: chromecache_257.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/login/friendlyname_box.png?v=1
Source: chromecache_257.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/login/ipt_lockout_bg.png
Source: chromecache_257.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/login/ipt_lockout_icon.png
Source: chromecache_257.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/login/throbber.gif
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/popups/btn_arrow_down.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/popups/hover_arrow_both.gif
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: chromecache_189.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: chromecache_224.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/responsive/share_steam_logo.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/v6/icon_expand.png
Source: chromecache_332.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/images/v6/icon_expand_white.png
Source: chromecache_365.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/javascript/crypto/jsbn.js
Source: chromecache_365.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/javascript/crypto/rsa.js
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nli
Source: chromecache_224.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/javascript/login.js?v=uyGwRKXH0yy-&l=engl
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=n5zImpoIZ8NN&am
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSv
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.cloudflare.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cd
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com//login?redir=app/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_14_qrlogin__global-header
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_60_4__global-header
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_60_4__global-responsive-menu
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/about
Source: chromecache_180.2.dr	String found in binary or memory: https://store.steampowered.com/about/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_14_qrlogin__global-header
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_60_4__global-header
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/account/cookiepreferences/?snr=1_44_44_
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/account/languagepreferences/
Source: chromecache_259.2.dr	String found in binary or memory: https://store.steampowered.com/account/preferences
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/account/setlanguage/
Source: chromecache_259.2.dr, chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/api/addtowishlist
Source: chromecache_259.2.dr, chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/api/removefromwishlist
Source: chromecache_259.2.dr	String found in binary or memory: https://store.steampowered.com/app/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/1086940/Baldurs_Gate_3/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/1091500/Cyberpunk_2077/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/1172470/Apex_Legends/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/1675200/Steam_Deck/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/1938090/Call_of_Duty/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/1962663/Call_of_Duty_Warzone/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/2054970/Dragons_Dogma_2/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/230410/Warframe/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/2399830/ARK_Survival_Ascended/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/2519060/Call_of_Duty_Modern_Warfare_III/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/252490/Rust/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/2881650/Content_Warning/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/306130/The_Elder_Scrolls_Online/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/359550/Tom_Clancys_Rainbow_Six_Siege/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/553850/HELLDIVERS_2/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/730/CounterStrike_2/
Source: chromecache_259.2.dr	String found in binary or memory: https://store.steampowered.com/bundle/
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/cart/
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/curators/ajaxfollow
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/curators/ajaxignore
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/digitalgiftcards/?snr=1_44_44_
Source: chromecache_259.2.dr	String found in binary or memory: https://store.steampowered.com/dynamicstore/saledata/?cc=
Source: chromecache_259.2.dr	String found in binary or memory: https://store.steampowered.com/dynamicstore/userdata/?id=
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_14_qrlogin__global-header
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_60_4__global-header
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_60_4__global-responsive-menu
Source: chromecache_259.2.dr	String found in binary or memory: https://store.steampowered.com/explore/howitworks/
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/freelicense/addfreebundle/
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/freelicense/addfreelicense/
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/friends/recommendgame
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/genre/Early%20Access/
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/gotflash
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/hardware_recycling/?snr=1_44_44_
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/join/?redir=account%2F&snr=1_60_4__62
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/legal/?snr=1_44_44_
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/login/?redir=about%2Fqrlogin%2F1%2F13885351924452522779&redir_ssl=1&s
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/login/?redir=login%2F%3Fredir%3Daccount%252F%26redir_ssl%3D1&redir_ss
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/logout/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/mobile
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_14_qrlogin__global-header
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_60_4__global-header
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_60_4__global-responsive-menu
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_14_qrlogin__global-header
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_60_4__global-header
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_60_4__global-responsive-menu
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_44_44_
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_60_4__global-responsive-menu
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/recommended/ignorerecommendation/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/search/?category1=993
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/search/?term=
Source: chromecache_180.2.dr	String found in binary or memory: https://store.steampowered.com/search/results/
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/search/smallcapscroll
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/search/suggest
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/search/tab
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_14_qrlogin__global-header
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_60_4__global-header
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_60_4__global-responsive-menu
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_44_44_
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_60_4__global-responsive-menu
Source: chromecache_259.2.dr	String found in binary or memory: https://store.steampowered.com/sub/
Source: chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_44_44_
Source: chromecache_224.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_60_4__global-responsive-menu
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/tag/en/
Source: chromecache_187.2.dr	String found in binary or memory: https://store.steampowered.com/tagdata/recommendedtags
Source: chromecache_259.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/
Source: chromecache_276.2.dr	String found in binary or memory: https://support.google.com/chromebook?p=steam_on_chromebook
Source: chromecache_224.2.dr, chromecache_276.2.dr	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: chromecache_306.2.dr	String found in binary or memory: https://yandex.com/an/sync_cookie
Source: chromecache_306.2.dr	String found in binary or memory: https://yastatic.net/s3/gdpr/v3/gdpr
Source: chromecache_306.2.dr	String found in binary or memory: https://yastatic.net/s3/metrika
Source: chromecache_306.2.dr	String found in binary or memory: https://yastatic.net/s3/metrika/2.1540128042.1/form-selector/button_ru.js
Source: chromecache_306.2.dr	String found in binary or memory: https://yastatic.net/s3/taxi-front/yango-gdpr-popup/
Source: chromecache_306.2.dr	String found in binary or memory: https://ymetrica1.com/watch/3/1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443

Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.202.106.101:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@41/341@36/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 --field-trial-handle=2304,i,12457500954807628585,7784865807783938357,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://steamfiller.ru/"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s.team/q/1/13885351924452522779
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1228 --field-trial-handle=1992,i,13542767117627433101,2361943962461226785,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 --field-trial-handle=2304,i,12457500954807628585,7784865807783938357,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1228 --field-trial-handle=1992,i,13542767117627433101,2361943962461226785,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://steamfiller.ru/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://steam.tv	0%	URL Reputation	safe
http://diveintomark.org/)	0%	URL Reputation	safe
https://steamfiller.ru/templ/steamrepl/css/icon_9.svg	100%	Avira URL Cloud	phishing
https://steamfiller.ru/templ/steamrepl/css/Rubikmedium.woff2	100%	Avira URL Cloud	phishing
https://steamfiller.ru/templ/steamrepl/css/bootstrap.min.css	100%	Avira URL Cloud	phishing
https://steamfiller.ru/templ/steamrepl/js/bootstrap.min-1.js	100%	Avira URL Cloud	phishing
https://steamfiller.ru/templ/steamrepl/css/Rubik.woff2	100%	Avira URL Cloud	phishing
https://steamfiller.ru/templ/steamrepl/css/main.aa7e6b15.css	100%	Avira URL Cloud	phishing
https://steamfiller.ru/templ/steamrepl/js/bootstrap.min.js	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mc.yandex.ru	93.158.134.119	true	false	high
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
store.cloudflare.steamstatic.com	172.64.145.151	true	false	high
steamfiller.ru	85.193.90.99	true	false	unknown
api.steampowered.com	23.61.62.148	true	false	high
s.team	23.45.135.116	true	false	unknown
store.steampowered.com	23.46.213.117	true	false	high
www.google.com	142.250.64.228	true	false	high
login.steampowered.com	23.61.62.148	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
cdn.cloudflare.steamstatic.com	172.64.145.151	true	false	high
mc.yandex.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://store.cloudflare.steamstatic.com/public/javascript/applications/store/7247.js?contenthash=b29dba9d0d5460b0cd58	false		high
https://cdn.cloudflare.steamstatic.com/steam/apps/2399830/capsule_231x87.jpg?t=1712339593	false		high
https://cdn.cloudflare.steamstatic.com/store/about/icon-steamchat.svg	false		high
https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_steamworks_pt2.png	false		high
https://steamfiller.ru/templ/steamrepl/css/icon_9.svg	false	Avira URL Cloud: phishing	unknown
https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015	false		high
https://steamfiller.ru/templ/steamrepl/css/Rubikmedium.woff2	false	Avira URL Cloud: phishing	unknown
https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_hardware_pt1.png?v=2	false		high
https://steamfiller.ru/templ/steamrepl/js/bootstrap.min-1.js	false	Avira URL Cloud: phishing	unknown
https://store.cloudflare.steamstatic.com/public/css/v6/browse.css?v=wWw5tW1y7nea&l=english&_cdn=cloudflare	false		high
https://mc.yandex.ru/sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10330.zWvyBesHHsFVsmMi3eIC8_h8n3XFR_ymk68uII-f6Myu1ZsL9JEJCSGoF8rRXxLU.LYAIfYldOJuYfDLvlEPHE68-ggg%2C	false		high
https://mc.yandex.com/webvisor/95654225?wv-part=2&wv-type=7&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=1044244577&browser-info=we%3A1%3Aet%3A1712359087%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011806%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359087&t=gdpr(14)ti(1)	false		high
https://mc.yandex.com/watch/95654225/1?page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&hittoken=1712359078_61930c0d3eb79a647e801da4fb717f8c97495a88e192069e45ff99a19de36eb7&browser-info=nb%3A1%3Acl%3A1126%3Aar%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A1%3Als%3A1173339980762%3Ahid%3A825216580%3Az%3A120%3Ai%3A20240406011814%3Aet%3A1712359094%3Ac%3A1%3Arn%3A388961451%3Arqn%3A13%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2342%2C2342%2C0%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1712359074991%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359094&t=gdpr(14)clc(0-0-0)rqnt(2)eco(21037572)lt(62400)aw(0)rcm(0)cdl(na)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D	false		high
https://steamfiller.ru/templ/steamrepl/css/Rubik.woff2	false	Avira URL Cloud: phishing	unknown
https://cdn.cloudflare.steamstatic.com/steam/apps/553850/capsule_231x87.jpg?t=1709666906	false		high
https://api.steampowered.com/IAuthenticationService/BeginAuthSessionViaQR/v1	false		high
https://mc.yandex.com/webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=442277962&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&rn=141212650&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359076%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011755%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359076&t=gdpr(14)ti(1)	false		high
https://store.steampowered.com/favicon.ico	false		high
https://steamfiller.ru/templ/steamrepl/css/bootstrap.min.css	false	Avira URL Cloud: phishing	unknown
https://store.cloudflare.steamstatic.com/public/javascript/applications/store/navevents.js?contenthash=f90db20908eeaa871cf2	false		high
https://store.cloudflare.steamstatic.com/public/javascript/rellax/rellax.min.js?v=.KbIxshHXB6Um&_cdn=cloudflare	false		high
https://store.cloudflare.steamstatic.com/public/javascript/applications/store/login.js?contenthash=0a2de2771eef68b1e7bd	false		high
https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015	false		high
https://steamfiller.ru/templ/steamrepl/js/bootstrap.min.js	false	Avira URL Cloud: phishing	unknown
https://mc.yandex.com/webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=1056222005&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&rn=1027243488&browser-info=we%3A1%3Aet%3A1712359062%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011741%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359062&t=gdpr(14)ti(1)	false		high
https://cdn.cloudflare.steamstatic.com/store/about/icon-macos.svg	false		high
https://cdn.cloudflare.steamstatic.com/store/about/icon-steamworkshop.svg	false		high
https://steamfiller.ru/templ/steamrepl/css/main.aa7e6b15.css	false	Avira URL Cloud: phishing	unknown
https://store.cloudflare.steamstatic.com/public/javascript/applications/store/marketing_english-json.js?contenthash=a0f8e137c9f8a0086b7b	false		high
https://store.cloudflare.steamstatic.com/public/images/ico/ico_facebook.png	false		high
https://steamfiller.ru/kzt/	false		unknown
https://cdn.cloudflare.steamstatic.com/store/about/icon-languages.svg	false		high
https://store.cloudflare.steamstatic.com/public/images/ico/ico_twitter.png	false		high
https://mc.yandex.com/webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=853926178&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&rn=803033375&browser-info=we%3A1%3Aet%3A1712359064%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011743%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359064&t=gdpr(14)ti(1)	false		high
https://mc.yandex.com/sync_cookie_image_check	false		high
https://store.steampowered.com/account/	false		high
https://cdn.cloudflare.steamstatic.com/steam/apps/230410/capsule_231x87.jpg?t=1711638801	false		high
https://cdn.cloudflare.steamstatic.com/steam/apps/1091500/capsule_231x87.jpg?t=1706698946	false		high
https://cdn.cloudflare.steamstatic.com/store/about/icon-windows.svg	false		high
https://cdn.cloudflare.steamstatic.com/steam/apps/2519060/capsule_231x87.jpg?t=1712178634	false		high
https://cdn.cloudflare.steamstatic.com/store/about/icon-broadcasts.svg	false		high
https://mc.yandex.com/watch/95654225/1?page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&hittoken=1712359053_eb4f10e780968ec3dd74d22e4b5e005642e679bea92ed16a529d3c473f861a6c&browser-info=nb%3A1%3Acl%3A297%3Aar%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A1%3Als%3A1173339980762%3Ahid%3A310184681%3Az%3A120%3Ai%3A20240406011750%3Aet%3A1712359071%3Ac%3A1%3Arn%3A341129470%3Arqn%3A8%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C281%2C%2C%2C%2C12%2C1%2C2185%2C2185%2C1%2C2136%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1712359050977%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359071&t=gdpr(14)clc(0-0-0)rqnt(2)eco(21037572)lt(6100)aw(0)rcm(0)cdl(na)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://steamcommunity.com/chat/group/	chromecache_180.2.dr	false		high
https://cdn.cloudflare.steamstatic.com/store/about/social-og.jpg	chromecache_276.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nli	chromecache_224.2.dr, chromecache_276.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/css/slick/slick.css?v=ZSVHTEnT3WNW&l=english&amp	chromecache_276.2.dr	false		high
https://cdn.cloudflare.steamstatic.com/store/about/videos/about_hero_loop_web.mp4	chromecache_276.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png	chromecache_189.2.dr	false		high
https://steam.tv	chromecache_267.2.dr	false	URL Reputation: safe	unknown
https://store.cloudflare.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cd	chromecache_224.2.dr, chromecache_276.2.dr	false		high
https://yastatic.net/s3/metrika	chromecache_306.2.dr	false		high
https://steamcommunity.com/chat/	chromecache_180.2.dr	false		high
https://store.steampowered.com/privacy_agreement/?snr=1_14_qrlogin__global-responsive-menu	chromecache_276.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015	chromecache_220.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_9-10.png?v=2	chromecache_332.2.dr	false		high
https://store.steampowered.com/friends/recommendgame	chromecache_187.2.dr	false		high
https://store.steampowered.com/about/?snr=1_14_qrlogin__global-header	chromecache_276.2.dr	false		high
https://store.steampowered.com/?snr=1_14_qrlogin__global-header	chromecache_276.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_crystals.png	chromecache_332.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/login/ipt_lockout_icon.png	chromecache_257.2.dr	false		high
https://store.steampowered.com/news/?snr=1_14_qrlogin__global-responsive-menu	chromecache_276.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_mandala_1-2.png?v=2	chromecache_332.2.dr	false		high
https://cdn.cloudflare.steamstatic.com/store/promo/newstore2016/header_background.jpg	chromecache_214.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/css/v6/browse.css?v=wWw5tW1y7nea&l=english&_	chromecache_224.2.dr	false		high
https://help.steampowered.com/en/	chromecache_224.2.dr, chromecache_276.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/buttons/icons_18.png?v=3);	chromecache_211.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk	chromecache_276.2.dr	false		high
https://store.steampowered.com/?snr=1_14_qrlogin__global-responsive-menu	chromecache_276.2.dr	false		high
https://store.steampowered.com/genre/Early%20Access/	chromecache_276.2.dr	false		high
http://diveintomark.org/)	chromecache_202.2.dr	false	URL Reputation: safe	unknown
https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_5-6.png?v=2	chromecache_332.2.dr	false		high
https://store.steampowered.com/?snr=1_60_4__global-header	chromecache_224.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-playable.svg	chromecache_332.2.dr	false		high
https://store.steampowered.com/stats/?snr=1_14_qrlogin__global-header	chromecache_276.2.dr	false		high
http://www.steampowered.com/steamworks/	chromecache_224.2.dr, chromecache_276.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_angle.png	chromecache_332.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_geo_7-8.png?v=2	chromecache_332.2.dr	false		high
https://steamcommunity.com/workshop/	chromecache_224.2.dr, chromecache_276.2.dr	false		high
https://store.steampowered.com/steam_refunds/?snr=1_44_44_	chromecache_224.2.dr, chromecache_276.2.dr	false		high
https://store.steampowered.com/search/smallcapscroll	chromecache_187.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_halftone_2.png?v=2	chromecache_332.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/ico/ico-deck-unsupported.svg	chromecache_332.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/login/ipt_lockout_bg.png	chromecache_257.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/header/inbox_tradeoffers.png	chromecache_332.2.dr	false		high
https://store.steampowered.com/search/results/	chromecache_180.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/css/buttons.css?v=Grv-5yNFuEfg&l=english&	chromecache_224.2.dr, chromecache_276.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_mandala_3-4.png?v=2	chromecache_332.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask_mob	chromecache_257.2.dr	false		high
https://partner.steamgames.com/steamdirect	chromecache_224.2.dr, chromecache_276.2.dr	false		high
https://yastatic.net/s3/gdpr/v3/gdpr	chromecache_306.2.dr	false		high
https://getbootstrap.com/)	chromecache_331.2.dr, chromecache_275.2.dr, chromecache_244.2.dr, chromecache_348.2.dr	false		high
https://steamcommunity.com	chromecache_180.2.dr	false		high
https://store.steampowered.com/freelicense/addfreebundle/	chromecache_187.2.dr	false		high
http://creativecommons.org/ns#	chromecache_218.2.dr, chromecache_291.2.dr	false		high
https://store.steampowered.com/app/2519060/Call_of_Duty_Modern_Warfare_III/	chromecache_276.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_patterns_1-2.png?v=2	chromecache_332.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/shared/images/community/levels_hexagons.png	chromecache_332.2.dr	false		high
https://store.cloudflare.steamstatic.com/public/javascript/slick/slick.js?v=.UvbXNQdQm-AJ&_cdn=c	chromecache_276.2.dr	false		high
https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css	chromecache_331.2.dr, chromecache_244.2.dr	false		high
https://store.steampowered.com/mobile	chromecache_276.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.42.105	unknown	United States	13335	CLOUDFLARENETUS	false
23.46.213.117	store.steampowered.com	United States	16625	AKAMAI-ASUS	false
23.45.135.116	s.team	United States	16625	AKAMAI-ASUS	false
142.250.64.228	www.google.com	United States	15169	GOOGLEUS	false
96.17.60.195	unknown	United States	16625	AKAMAI-ASUS	false
23.47.27.74	unknown	United States	16625	AKAMAI-ASUS	false
172.64.145.151	store.cloudflare.steamstatic.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
93.158.134.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
85.193.90.99	steamfiller.ru	Russian Federation	203561	KTK-TELECOMRU	false
23.61.62.148	api.steampowered.com	United States	16625	AKAMAI-ASUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1421208
Start date and time:	2024-04-06 01:16:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://steamfiller.ru/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@41/341@36/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://steamfiller.ru/pages/feedback/ Browse: https://steamfiller.ru//pages/faq/ Browse: https://steamfiller.ru/kzt/ Browse: https://steamfiller.ru/try/ Browse: https://store.steampowered.com/account/ Browse: https://steamfiller.ru/pages/faq/ Browse: https://steamfiller.ru//pages/faq/ Browse: https://store.steampowered.com/account/ Browse: https://steamfiller.ru/pages/faq/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.217.163, 142.250.64.142, 142.251.107.84, 34.104.35.123, 192.178.50.74, 142.250.217.202, 142.250.217.234, 172.217.3.74, 172.217.15.202, 142.251.35.234, 142.250.64.138, 142.250.64.170, 142.250.217.170, 192.178.50.42, 142.250.189.138, 142.250.64.202, 13.85.23.86, 199.232.210.172, 192.229.211.108, 13.95.31.18, 13.85.23.206, 172.217.2.202, 192.178.50.67, 23.45.182.104, 23.45.182.100, 23.45.182.73, 23.45.182.96, 23.45.182.92, 23.45.182.69, 23.45.182.70
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://steamfiller.ru/

Source	URL
Screenshot	https://s.team/q/1/13885351924452522779

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 5 22:17:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9875045556651445
Encrypted:	false
SSDEEP:	48:8bdVT9h4HiidAKZdA19ehwiZUklqehKy+3:8XTBFy
MD5:	8252D3AC89D7C8AA5656F4C794363784
SHA1:	759AB3192458409BE7C9F6CF243203E241C0735C
SHA-256:	A25305FACAC7A486D2F5646BF4A9E3817FFC23411806A49FE72D9E0DA145B048
SHA-512:	F07C216B527AA0B60637AE7A9393472E5AAA28F0A9F90940A64A5BF65972354F30A47A0C2C44D4314121551CEBBE949183CAE5B18E62084382B659F65C771365
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....O.`....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X!.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X!.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X!.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X!............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X$............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........).#j.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 5 22:17:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.004556025028651
Encrypted:	false
SSDEEP:	48:80dVT9h4HiidAKZdA1weh/iZUkAQkqeh1y+2:8KTz9Qoy
MD5:	0360C7BCEBF7909FC5BBE848EF5EEFA1
SHA1:	475D3E02603B9EFBB8173A7B658098376FF361BD
SHA-256:	2CD3078D2E553DD553E3B5A27E7B87D39E16006A09F6EC37C0B8D9C6956F9BAD
SHA-512:	4C5EAA52B9AB59041400119727416A9B78CFFDAE566F5FF47DE9A63447A75E0A3753F5256A615A926D3A72E6308B804161C4F0C03570AE60C3F8DB3A0EF391F5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......`....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X!.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X!.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X!.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X!............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X$............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........).#j.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.011363924795795
Encrypted:	false
SSDEEP:	48:8xCdVT9hsHiidAKZdA14tseh7sFiZUkmgqeh7sby+BX:8xcTnn5y
MD5:	EE5B237528C4E2D79900297F9AC0712C
SHA1:	0854509D2E73D7F7B3DB585E23736CFBEABF3E87
SHA-256:	C3FD6BC4C25C357A04BDFA43C8F963D423D0BFD165ECED05891591C9A4426449
SHA-512:	72FCB8E278AAD689D38FAA797BAD110C35FB1A60F0F2A9F4A7C675EF1EFD4AB94E67EDB16BD45569A8F0880C88AE1C55BC2B9367D5B78A22D63C8B93FB28E057
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X!.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X!.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X!.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X!............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........).#j.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 5 22:17:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.999552219540546
Encrypted:	false
SSDEEP:	48:86dVT9h4HiidAKZdA1vehDiZUkwqehxy+R:8kTwzy
MD5:	278ADB4A6C74171AB43C3B57166CCC41
SHA1:	E8AE36F7F0F8C97FA8DADFFB26C7AA949EBE9DA7
SHA-256:	58CD573D49DA447FE15BD2737F213F6D5214100129BFED19468C67C85E84FCDD
SHA-512:	E8E6632E4F6E22E6E4A08CA4DA6DE27EB9D81778C4104AF7E47FC47E32E4632FF276EE4863759DC3D30A94448EB26D417161D4C9FE2C24A4C442E4A688127744
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....gI~`....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X!.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X!.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X!.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X!............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X$............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........).#j.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 5 22:17:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9919919399247927
Encrypted:	false
SSDEEP:	48:8XhdVT9h4HiidAKZdA1hehBiZUk1W1qehPy+C:8BTw9vy
MD5:	32C5C09C444E4D08045BB7F3A8A03D3E
SHA1:	76E4E9FEAA9E6B91463B40329916A48C0B410433
SHA-256:	E2C06064FDF0861E8CC023C8B3EE7B459CE48518BB537F5D71F46504B3ADE4FF
SHA-512:	4EF7F92FFB93A8B7D403B53706D285B1E194BED53CD590421C9A4DF36F86ABF1A3776183D6DE1B184118C176C9530D81F5B5B9E9B97AC4B08FCE95AD1417D295
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....?..`....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X!.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X!.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X!.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X!............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X$............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........).#j.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 5 22:17:06 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.004276745047783
Encrypted:	false
SSDEEP:	48:8bdVT9h4HiidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb5y+yT+:8XT+T/TbxWOvTb5y7T
MD5:	08A272B4FCF4EA70E9A336B62148D33C
SHA1:	B705075B8F4AC86BD093A5CB5DEB2AD871478E2C
SHA-256:	EDBC79C6AEAD47501D00BEC508C0A6128AC8EA36479D8EC00805B786F0C9C62F
SHA-512:	93F33D75B7D1F7D86ABE446810169158AA1E54B4C9C309FA4BAB89F5F2828A2F9180E6CFA78AC6764FC80B975D39C73FE7DF62626D72FF4E8158BC8B4DCEAB92
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......v`....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X!.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X!.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X!.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X!............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X$............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........).#j.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4298
Entropy (8bit):	4.635237014085188
Encrypted:	false
SSDEEP:	96:a+f+I/+hqFwozCxb7rg1jZU07rPEBT0HXBVLjn2tFQ2Q5d:X+I/8qFwh5g1FLrPEWRtnirQf
MD5:	BD36CB9687484D582930354864210A91
SHA1:	4BC5DFA71E0EBE80A1A4360152E76A5B133A084B
SHA-256:	722C4826277966EDF479138B565EFB7BDBF1C875701BCD55D2A29422C2F93F5E
SHA-512:	4F81331487105BA60B16996CD12D19415F146A70EB01C9DDB02D5A788E605A051E8FE79C3FCD4F7D8490FA61D022177C3B6B78CCF443B8C84EA7BC12722F4607
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/logo-steamworks.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 150 32" style="enable-background:new 0 0 150 32;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M7.3,30.4c-0.8,0.6-1.8,1-3.1,1c-0.9,0-1.7-0.1-2.4-0.4S0.6,30.4,0,29.8l1.5-1.5c0.3,0.4,0.8,0.6,1.2,0.8......s1,0.2,1.6,0.2c1.4,0,2-0.5,2-1.5c0-0.4-0.1-0.7-0.3-1s-0.6-0.4-1.1-0.5l-0.7-0.1l-0.8-0.1c-1-0.1-1.7-0.5-2.2-1......c-0.5-0.6-0.8-1.3-0.8-2.3c0-1.1,0.4-2,1.1-2.6c0.7-0.7,1.7-1,2.9-1c0.8,0,1.5,0.1,2.1,0.3s1.1,0.6,1.6,1.1l-1.4,1.5......c-0.3-0.3-0.7-0.5-1.1-0.7c-0.4-0.1-0.8-0.2-1.3-0.2c-0.6,0-1,0.1-1.3,0.4c-0.3,0.3-0.5,0.6-0.5,1.1c0,0.3,0.1,0.6,0.4,0.8......s0.6,0.4,1,0.5l0.7,0.1l0.7,0.1c0.5,0.1,1,0.2,1.3,0.3c0.3,0.1,0.7,0.3,0.9,0.6c0.6,0.6,0.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	10599
Entropy (8bit):	7.953207527965745
Encrypted:	false
SSDEEP:	192:iu0y8mRMwa9sen1u+FdMSpiVzwbRNZ9w9/JkEAp/w:2VmmwkP/j3Kz6Z9wJH
MD5:	6A7D2877493FEC8665FCBF847541F0CA
SHA1:	A2C20F103D4A9A6794D072814A14D29FDF114572
SHA-256:	29F48E6C86553DACDD276C76E7F8F5F4C630E851A3F0569AED1F081E8431DCCD
SHA-512:	3E558FF6CDB162C3EC2F149367EB8E14724BBF25CD8430AF94DEC2F1198CF98D7C39E5C46DDA9708768268E3668D6429A5AB10E96FC8C0AA3717F9D838D1B249
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/306130/capsule_231x87.jpg?t=1712247229
Preview:	..................................................................................................................................................Adobe.d...........W..............................................................................................!."1A..Qa.#2q.B..$b..3..R..%CSr........................!.1A.Q.aq."2........B............?..;.e,..U.y..........f..m.[.....$.....BaT../....{.&.!Ee...%"..j..g.c.5.v..{.[u...Z........A..v..hNA<{F...9g..09.~..4.gX..G"......... .Z..4+ ..c.5..q`.@.7.F.....3.v.X.......6}...&d.O.E.rq...4k.....$x........u...y....1+H@.)...V......GZ....U1S[.ay.f!c.(.;1...Yzh.m.^N.b..\|BP\.}l.5..[($..kk.....i....q#.R.L.Y..k..M.<.NU............).'..U<w(7. .....1T,..3...2.J;8^-...[......sem>..."....]%-SS....K)....x.....Fw....6.c..J....n.Y.7.x.(...+..X.5.......:+".T.J.7...D......G......n.[.k.i..z...F..u.......>;.2f...$vd.6...3.2`m..5.......9.d.N}3.M..2.....;H.)..H...........3.i...Ym.\|@.3..T.`....(b.v.)yB..j....=['..X......R(n1

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1060 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20936
Entropy (8bit):	7.638157819271697
Encrypted:	false
SSDEEP:	384:QC68qmIxMlLODO69/DruzJY2YLwuNshyjLbtGyBmq9drF:QnxMlLUO69/+Y2YLwuN1Lb0wmCrF
MD5:	CA723D6FABFBFD032FC2716EEBDC9570
SHA1:	D189CEDCFCE4053AC7ECAAC5608B1A8D3F563405
SHA-256:	69E7FEE72E3437295C892CECB4E4F32AF8BBA9725A358019C7F2EDA1E2B2160A
SHA-512:	B32B9B7ED6C5DB747B816093F174D945C835AFA7E8F588B9CAB5288739BA6945C4A7A169A2BFC107C4F9CC8D20416CE864BE7B6B83B3EC75A8D0756B50CF145E
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_community_pt3.png
Preview:	.PNG........IHDR...$...X.......7.....tEXtSoftware.Adobe ImageReadyq.e<..QjIDATx...i.e.y...s.....{..=.!...6")q.E..,Y6..-....@.$..... ..O..#p. 1..0..a ..8q,z...#.......,...j...sr.soUw....f.....Z.g.*....y.7.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	14104
Entropy (8bit):	7.964339671585999
Encrypted:	false
SSDEEP:	384:ZkE7XYeEOm/0+Kq6DWVPgQS92uFekYToz495pJp0V:XEj/PKq6b9HekYTPW
MD5:	949FBAD5C4CEB461BF1886181CFEFEA4
SHA1:	C71B33B1C54D9C699945987C173BB51ADFED5914
SHA-256:	5A1EFACF6359A36D160253C0A68026D9CD48727999065FE15D1D12F28FF44EDF
SHA-512:	19755E29185DEE784623D9F80E9032D8B66FDB3A8DF442E1F4379D842B40D3BC7CCC7BE40B2A3E8466AA0EB4C7AE9061FC2139AC0373AA3763128869FD292217
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................>.........................!..1.A.."Qaq.#2B...R...$b..3S...r..................................7........................!1AQ..aq....."....2.B..R$4...............?...i.Z.&2...@...n.H...Y..s.....(.KU...M".0......9......3M#+\.9a..0s..c..S#KS.D.O ......N.9.[.>F.......J...IOx..(.d..TE..'...D..3....Z;.f.{m..R..C$..kc.bvvV.R.r....X0......+.:.,....u....K.~;.a.J.P#.444K.d....[.I.[.H..s:E.8.r..g.m.X....Gz..f....j."MD.KW.Wd........:...L.bZ..cC.?e.a..'y.M.P_4.W;M\W.Eu3IO[N.WB...r. ...x.o.I......u8j...x.bi..#m..rFB.c.?..C....m.])-o-...m..$.K.e.........i.........T.(.#R.r..7..:pI.B.:6.....E....4.UUo...aF..8......r8I)y?.h.cz..Vci.S.m.:.Jj.r.TRG.#.D.I!.....;...\...#.:LGH.....=...B.k....G>..l+% ..5@m.mz. $.S..h......0..w....:....%L.6H.F....t.R.8.u..... >...c.e

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2213
Entropy (8bit):	4.859929051286054
Encrypted:	false
SSDEEP:	48:rHU4mVNJoFtEWNBhEsNNrEeMdCoqM6VNc0NrWNtylpw6NihRd9Nydcg3SWNO95gm:rHRi6lK8PiTbu93C
MD5:	4FD1E1B49F3598980DC2B260B66A89C0
SHA1:	818B65159E35AB980DE9C00F24C0BEEAC7E3FDF8
SHA-256:	83D8195AEC4990C3EC59DE990B2F0E703FF31054ACDD73B1637254A7716BD5F6
SHA-512:	BCAD622E210374A8FDE4D29565407EBD221390C467C560E04E74C31764533939A8C485994B7B8B27F647CAD07ED59204B92C224FE97699B47CC0754526BF03FD
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/about.js?v=T9HhtJ81mJgN&l=english&_cdn=cloudflare
Preview:	..$J( document ).ready(...function( )...{....console.log('ready');......function elFadeIn(selected_el)....{.....var windowHeight = $J( window ).height();.....$J( selected_el ).each(......function()......{.......var thisPos = $J( this ).offset().top;.......var topOfWindow = $J( window ).scrollTop();.........if ( topOfWindow + windowHeight - 200 > thisPos ).......{........$J( this ).find( 'img:not(.visible)' ).each(.........function(idx, img).........{..........$J(img).addClass('visible');.........}........);.......}......}.....);....}......var $slick_slider = $J( '#about_steam_features_grid' );......var settings = {.....centerMode: true,.....centerPadding: '10vw',.....slidesToShow: 1,.....dots: true,.....arrows: false,.....infinite: true....}......if ( $J( window ).width() < 750 )....{.....$slick_slider.slick( settings ).on(......'setPosition',......function ( event, slick )......{.......slick.$slides.css( 'height', slick.$slideTrack.height() + 'px ');......}.....);....}......$J( window

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	9277
Entropy (8bit):	7.952972412421695
Encrypted:	false
SSDEEP:	192:XzlWkvEmJsZKt0WrCNC5fjGb1pw/MOQr5JBLgpBY1d7nRChfh7kNO8YTep:8kd6ZBWfE+M5Lmy1d7RQp7kN5p
MD5:	F8152001DAD116FF508680C812325B89
SHA1:	0DB016FCCCDF485386C88B2776B4C73BC3C4D888
SHA-256:	F324272EE9A1009B0B0799F142A59E17C882859BEA2AE5257D7140701BA3CAC9
SHA-512:	B2154120A4E475058FD3834E5132A2A623C005A466B23FC079C42B86093F465E6AEA9976EE2A970F0CAE9FE1F24D5EFA86390EF778DD0673A5C0C057904978C6
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................B...........................!.1."AQ.2q.a..#6BR...$3rt...Fbu....&C..................................=.......................!1..A.."Qqa....2B......46..35CErst.b............?..\|p..M+....Y7..I.6Yn6....>_......j...s...\|(.q.o..T<.....0...H.N.q....c;.v.D.....Dzu>z..Aj0...B..\..7<gxyJ.GhDc%.._%..)......U..{bx.j..I......tn.[.......)_`H.%d...).Z.U.R..T.>.?.lT.rA..u.......s..=......'.=.O'.....6..mlO...<.^..`..q%..3.K.m.&...1.Y..b.R...@.J.{.ea...X.I..!,.K.....!,.K.......X.......% .z_....CIn.&..Sc......L.fk...l..6...\|..w(.m..,..5....%.'...O.....}kd.I.^.,.2...z .NZ.(Aq...>..a....,=..3qa.seu..R6..\|...'2.&u..&S....nE.i....6.Qd9..d..`,...]>....NY4...$..R.oY.6..3.]y+.N....m.....r...H.8..Kd!%.rTE.r2.q.......G.{.l.....l.E..(.R.NJ...t...,.......x..i-.s(..mKQ..

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	9294
Entropy (8bit):	7.9458968864760795
Encrypted:	false
SSDEEP:	192:3X9vgGs3lj2nj81F4x/x4xktovTvQWa6mkFXbzyjZLREahNPg3+2H5H:96p2jZ/tKroWDNbMZLREyNPguEN
MD5:	3CB2A8BC6B5401D48521D4B6500D258F
SHA1:	CD43833F0C0E7F8C74D620914D9447BC8151B336
SHA-256:	153DF736AF51B73496267059E547141828D2828FDD29EE56122CDB9637D76509
SHA-512:	4D36B919366F1F0F4CA156841DEED93E21A80CBB7F54390F77D0329E69E31EB7B914C62171A210D3113BDAB0470B9E342947F5DBDAF37FA39471C2ADF62996BD
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................H...........................!.1."AQ.aq..2.#B....$36R.....(7Sbt..Cu.......................................?.......................!.1.AQ.."aq......2.....#B...45R36Frs..............?..\|p..H.0..T@I>.0.q...Hm.n...8...K..U5.N...Ie.....~,o.~Xu..._sK.46...P."..sa.,i;XX...........bI...$...6..{q.h......4.),..?..7P.....d+.mJ.vV..e.1......=Z.gN.l}.V.M....n......H.bnU..6.`.k $.\J...{*'p....r]...(...-..jM...M.....:...2....vU..I#}.~_\...&]..\|?-)>N.O.#.)...@..k:...T.T....F<..s(....Z..ACi...{.U...XR.8.....H..h.:........x>:.,..{...o.~qK[...c..0.qj.R..,s..;y...R.o...Sw..;..c.i.Z....-.....[2..\|.U..}../!.....`./....a:.o...P.Y..~.J..b..B....l.{.Gh.M..q.~.,2.EF_s.....V.D.....OQ.978XP.X.....D...` ...` .......5}Q.G.F...E.=..........ZYR<.<.... ......#...\|...[..9..l"....]

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	14104
Entropy (8bit):	7.964339671585999
Encrypted:	false
SSDEEP:	384:ZkE7XYeEOm/0+Kq6DWVPgQS92uFekYToz495pJp0V:XEj/PKq6b9HekYTPW
MD5:	949FBAD5C4CEB461BF1886181CFEFEA4
SHA1:	C71B33B1C54D9C699945987C173BB51ADFED5914
SHA-256:	5A1EFACF6359A36D160253C0A68026D9CD48727999065FE15D1D12F28FF44EDF
SHA-512:	19755E29185DEE784623D9F80E9032D8B66FDB3A8DF442E1F4379D842B40D3BC7CCC7BE40B2A3E8466AA0EB4C7AE9061FC2139AC0373AA3763128869FD292217
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/2054970/capsule_231x87.jpg?t=1711745105
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................>.........................!..1.A.."Qaq.#2B...R...$b..3S...r..................................7........................!1AQ..aq....."....2.B..R$4...............?...i.Z.&2...@...n.H...Y..s.....(.KU...M".0......9......3M#+\.9a..0s..c..S#KS.D.O ......N.9.[.>F.......J...IOx..(.d..TE..'...D..3....Z;.f.{m..R..C$..kc.bvvV.R.r....X0......+.:.,....u....K.~;.a.J.P#.444K.d....[.I.[.H..s:E.8.r..g.m.X....Gz..f....j."MD.KW.Wd........:...L.bZ..cC.?e.a..'y.M.P_4.W;M\W.Eu3IO[N.WB...r. ...x.o.I......u8j...x.bi..#m..rFB.c.?..C....m.])-o-...m..$.K.e.........i.........T.(.#R.r..7..:pI.B.:6.....E....4.UUo...aF..8......r8I)y?.h.cz..Vci.S.m.:.Jj.r.TRG.#.D.I!.....;...\...#.:LGH.....=...B.k....G>..l+% ..5@m.mz. $.S..h......0..w....:....%L.6H.F....t.R.8.u..... >...c.e

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	WebM
Category:	downloaded
Size (bytes):	986085
Entropy (8bit):	7.994415096566992
Encrypted:	true
SSDEEP:	24576:QergMVTQda9S7jNuKy3RMXqQHoB9QNELZoHspPcAZZMTmfrj535zmtPD3K8C:r1ua9cuTiHoTQNELmH69ZvTj53l4PI
MD5:	98EAF699F517FF88BB2F595BDDB2C5D8
SHA1:	EAE1D3E4C6E6A8F9636C0EFB0A04ECBABE8B63CA
SHA-256:	7AA34824DBE8DBFD8011576A365DCD057127406D61702634D69F0240325CC582
SHA-512:	7D9623CA066012A200A01BF48E0617FCFB35CAD0EFFF091BC3B7931E98B72B95DF66205CFA904AE9B84D92C9FCEA421B366D9EF3023C023488CDABF91B5EF8C5
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/videos/about_hero_loop_web.webm:2f73f7f4b9262d:0
Preview:	.E..B...B...B..B..B..webmB...B....S.g.........M.t.M..S...I.fS..nM..S...T.kS...M..S...C.uS....M..S...S.kS....b..............................................I.f....B@D..F.:.Da....`v>X.M..libwebm-0.2.1.0WA.fnord WebM for Premiere, built Jun 15 2017.T.k.....s..r$...Q.....V_VP9.....x....#..A..U..U...U...U....C.u......"....fQ.....I.B.7p1..8$.........>..}....~......../...xo.......\|.....q....tV.c..v..~.D3.R[....2%...Q.H..w....$.i..........2..0..\|...F&.,........\|...........FF.o.2.3y.l...>?e$.IN.g4.....qp.l.H.{.....H...5.....s;....$.=...%.#T^Yj.q.rQ._...<..-.3!..A.p6U.p.r.j.6....X..P.. .:...SJ.y..k.s..~..fu..D.`.T^+..[..`~..........\|........y....%E....".... ...7I.{$"..Z..x.....D..{.c5...$...Q!w...F.N.n?..qY..5..7n}iM.{Q".V.r.=..w........%.:....W....z...sR.1.=."*...@..L..v.M.G].5....r.......T....?..lm...w...J..d...fU.,m..\..\oI.......W..... ......~,...&j...vM..).a....?.\Y..pP.V'..0..._.n......c@....n\|.#....../.XT.W>....9.!...t..c.E.7..r\

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1693
Entropy (8bit):	4.273532873042263
Encrypted:	false
SSDEEP:	48:pI+6A5+MC76EBptJS8/IxvIfsz1b2q+21MzRlD7GZ1E:m+6yC76sptJx/IJN1q37ce
MD5:	82D5CDD07FBF92996B76F983B73B86A0
SHA1:	F2E7BEE23A231029F359556B3D7105D4FF95AC15
SHA-256:	6C259DB6C1F2380B1BBB9EC66512F8ADBF3365DE399FDCF0C6E2331ACAE69C02
SHA-512:	A26102D255BF4A87743C52E625D62629C36678FC0648412151CA9E7CBFB47AAC003077A7C3258012B1706B14FE5BEC933E1113FB873D8A6539CF1589ECD884B9
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/icon-gamehubs.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="39.724" height="39.726" viewBox="0 0 39.724 39.726">.. <path id="Path_1124" data-name="Path 1124" d="M1571.885,2573.343a4.966,4.966,0,1,0-7.2,0,7.5,7.5,0,0,0-1.3.917,8.749,8.749,0,0,0-3.484-3.338,6.207,6.207,0,1,0-8.06,0,8.758,8.758,0,0,0-3.484,3.338,7.507,7.507,0,0,0-1.3-.917,4.966,4.966,0,1,0-7.2,0,7.452,7.452,0,0,0-3.85,6.517v4.965a2.482,2.482,0,0,0,2.483,2.483v6.207a2.482,2.482,0,0,0,2.483,2.483h4.965a2.482,2.482,0,0,0,2.483-2.483v-4.059a2.477,2.477,0,0,0,1.241.335v7.448a2.482,2.482,0,0,0,2.483,2.483h7.448a2.482,2.482,0,0,0,2.483-2.483v-7.448a2.46,2.46,0,0,0,1.241-.335v4.058A2.482,2.482,0,0,0,1565.8,2596h4.965a2.482,2.482,0,0,0,2.483-2.483v-6.207a2.482,2.482,0,0,0,2.483-2.483v-4.966A7.457,7.457,0,0,0,1571.885,2573.343Zm-28.427-5.9a2.483,2.483,0,1,1-2.483,2.483A2.482,2.482,0,0,1,1543.457,2567.448Zm2.483,13.034v13.034h-1.862v-8.689a.621.621,0,1,0-1.241,0v8.689h-1.862v-13.034a.621.621,0,0,0-1.241,0v4.345h-1.241v-4.966a4.965,4.965,0,0,1,8

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	11395
Entropy (8bit):	5.263154477395774
Encrypted:	false
SSDEEP:	192:Zh6vqbjETmhTKN8xveEK6lIgpROZ793t37NAmr3LETECO+2Mlx1DWX73Mf+uEm4m:Zhcf33TCO+2gByhC
MD5:	C16C39B56D72EE779A4C29FB1BB60DD3
SHA1:	F0A8114D6E311F91357B3A9041DBCD96857B90EC
SHA-256:	5CD83EEE34169798040BBF6221263F6C5A5CBE5801C285813566EC1153DFCE09
SHA-512:	BB79CF68FA15EA0D4C883C4069AC22E121503F8031F8D17B9E6480D4CE8C701B81835789FA2E2D65841D2124EA88CD35CA982748B79FBB76C28C5A32BA21F8ED
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/css/v6/browse.css?v=wWw5tW1y7nea&l=english&_cdn=cloudflare
Preview:	/* CSS Document /.....browse_header .page_title .blockbg {...background-color: #ff9900;...color: #000000;..}.....browse_floating_link {...float: right;...width: 288px;..}.....browse_links a {...color: #b0aeac;..}.....browse_links a.linkbar .rightblock {...color: #626366;..}.....tabbar {...white-space: nowrap;...margin-bottom: 10px;...overflow-x: auto;...overflow-y: hidden;..}..../ the preferred way is to wrap tabbar in tabbar_ctn, which helps handle horizontal scrolling on mobile */...tabbar_ctn {...margin-bottom: 10px;..}...tabbar_ctn .tabbar {...margin-bottom: 0;..}.....tabarea_filler {.. height: 40px;..}...tabarea .tab {.. display: inline-block;.. margin-right: 0px;.. border-top-left-radius: 3px;.. border-top-right-radius: 3px;.. margin-top: 3px;.. padding: 1px;..}...tabarea .tab .tab_browse_option_label,...tabarea .tab .tab_content {.. background: rgba( 0, 0, 0, 0.2 );.. border-top-left-radius: 3px;.. border-top-right-radius: 3px;.. font-size: 13p

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	179572
Entropy (8bit):	4.048969782654755
Encrypted:	false
SSDEEP:	1536:FVPgvVG9q41yJFQwEhBhc3Qiyowz+qMpxM90yw88g8gLswDUoSC7e0bxA0yho27/:FVtowP90a8g8ghSrqAQOL/cL/uUM
MD5:	CF17C36C6A074196840E1961ED4192F2
SHA1:	CBDDEE287752F8AA549DF744D86097867B4EBA78
SHA-256:	CDBECE6C4868BFC92D3F1073DD9F7435B570EABD4B74B88D919C64A8D6C4DF2A
SHA-512:	6A3A1A84E9A3634AE115BB3EFC905D2C889F6536164CB474E7207DB82D96A2B5E639F28A2BB065659997C95FAA84E8A27045A287A0327A4D97768564538D5A3E
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/js/scripts.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!(function (e, t) {. "use strict";. "object" == typeof module && "object" == typeof module.exports. ? (module.exports = e.document. ? t(e, !0). : function (e) {. if (!e.document). throw new Error("jQuery requires a window with a document");. return t(e);. }). : t(e);.})("undefined" != typeof window ? window : this, function (C, e) {. "use strict";. var t = [],. E = C.document,. r = Object.getPrototypeOf,. s = t.slice,. g = t.concat,. u = t.push,. i = t.indexOf,. n = {},. o = n.toString,. v = n.hasOwnProperty,. a = v.toString,. l = a.call(Object),. y = {},. m = function (e) {. return "function" == typeof e && "number" != typeof e.nodeType;. },. x = function (e) {. return null != e && e === e.window;. },. c = { type: !0, src: !0, nonce: !0, noModule: !0 };. function b(e, t, n)

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2636), with CRLF line terminators
Category:	downloaded
Size (bytes):	154445
Entropy (8bit):	5.3379939297927015
Encrypted:	false
SSDEEP:	1536:D1lZAh60MhmjGFhx1e5lnl9asPdVcTzWMnyN3qxVqGoteFANNfsflM6kQuOEmTMu:708x1e5/9a6dVcm9qVqZfrUEoIm
MD5:	9F9CC89A9A0867C34DD1D0037355F271
SHA1:	8EE5457B4D1FA545CAC689FB29D2CAD63EC4DFCC
SHA-256:	35192355B2FB5BF8AFBE54F747A196C5C7EF9843489C01FC0A628305926CC402
SHA-512:	FEAA8F71B823794F2EA95F9D2A41A0F9FF9A12FC2A3DA7BD3156911CC9ECDDA6FE5B29FE97FB9E873C654E311BA30DA9BA3F5D1397265F671988D28B891B1F8F
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/javascript/shared_global.js?v=n5zImpoIZ8NN&l=english&_cdn=cloudflare
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1212
Entropy (8bit):	4.955390112206397
Encrypted:	false
SSDEEP:	24:2dC5A6LfEhXUzXwv3HDIVgCawkkGb8MjzZ+EqnP:cGA+fEtUUb9wkktMHZ+E+
MD5:	A12CFFB3B582F0D0F6EA9C9C36B74A5E
SHA1:	2555282495D3802EB37BFDBF8B1F97507E125642
SHA-256:	CAABF4747B164EB5FA61A0D1461443961FF2FFAE35EB60869F2E4F93D1530CF1
SHA-512:	14D2F2F8B3CFC0A3B0E3892010AA9CB06550455A3DA20EF75A47BEADE2D39DF4584759F81AC26EA26CA227767FC6E45B0838D927D77FC1DDE40E68050E39BCD6
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/icon-macos.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">..<style type="text/css">....st0{fill:#24ACE3;}....st1{fill:#FFFFFF;}..</style>..<path class="st1" d="M18.1,15.6c-0.3,0.7-0.7,1.3-1.1,1.9c-0.6,0.8-1,1.4-1.4,1.7c-0.6,0.5-1.1,0.8-1.8,0.8c-0.5,0-1-0.1-1.6-0.4...c-0.6-0.3-1.2-0.4-1.8-0.4c-0.6,0-1.2,0.1-1.8,0.4C7.9,19.8,7.4,20,7,20c-0.6,0-1.2-0.2-1.8-0.8c-0.4-0.3-0.9-0.9-1.4-1.7...c-0.6-0.9-1.1-1.9-1.5-3c-0.4-1.2-0.6-2.5-0.6-3.6c0-1.3,0.3-2.5,0.9-3.5c0.5-0.8,1.1-1.4,1.8-1.8C5,5,5.8,4.8,6.7,4.8...c0.5,0,1.1,0.1,1.9,0.4c0.8,0.3,1.3,0.4,1.5,0.4c0.2,0,0.7-0.2,1.7-0.5c0.9-0.3,1.7-0.5,2.3-0.4c1.7,0.1,2.9,0.8,3.8,2...c-1.5,0.9-2.2,2.2-2.2,3.8c0,1.3,0.5,2.3,1.4,3.2c0.4,0.4,0.9,0.7,1.4,0.9C18.3,15,18.2,15.3,

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (22635), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	22801
Entropy (8bit):	4.872762598703403
Encrypted:	false
SSDEEP:	384:+VicfSf4+JAslpN+MhZxEOIqisxp9RO6orsH1XQSmRyeyZ/84t1SSzNQvIkoVMxW:lp4+blpNN7VMxsgE3kSd5/VQ4FD
MD5:	B174E1E8495B798E65DD8D9FD0350986
SHA1:	241B41AE6273A21F37A5F3FF88F511D5D8300D61
SHA-256:	A6E39DE88E1C19E344A7ABE1F7EC08BFF3532952F477B44AB15E106C965F0AA8
SHA-512:	443C308D84D5D6932E2A26FA29934BDCEF571CFA2B1B61A82DA63AE32728EE80C2573C4C975EBF24A168392C1C5056319D87C8F3FEACDFC6A015B5D670DCE6E9
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/applications/store/marketing_english-json.js?contenthash=a0f8e137c9f8a0086b7b
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[4929],{5:e=>{e.exports=JSON.parse('{"language":"english","label_play_free_until_custom":"Play for free until %1$s.","promo_ends_custom":"Offer ends %1$s.","label_play_free_generic":"Play for Free!","label_free_weekend":"Free Weekend","label_free_week":"Free Week","label_just_updated":"Just Updated","label_for_a_limited_time_only":"FOR A LIMITED TIME ONLY","msg_prepurchase_and_play_beta_now":"Pre-Purchase and Play the Beta Now!","msg_play_beta_now":"PLAY THE BETA NOW!","msg_prepurchase_and_get_beta_access":"Pre-Purchase and get Beta Access","msg_steam_workshop_now_available":"Steam Workshop Now Available","msg_now_with_steam_workshop":"Now with Steam Workshop","msg_now_with_steamworks":"Now with Steamworks","msg_now_available_on_steamos":"Now Available o

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 939 x 794, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18662
Entropy (8bit):	7.009465320427675
Encrypted:	false
SSDEEP:	384:zpuhH5rl7BBz3mdeo3ycYPh/FvwgxFkOXJkEzYw:zpo9l6ycI2Q3J7Yw
MD5:	3A89AD3F879E00EC76BF99C5B26FF433
SHA1:	CE76F802547972A4E2E81AF6777FAEDE59F0D1CA
SHA-256:	4B272584CF3AF27124948620C34E5ACFC912A15F55061B69FAE64B01FD35B28B
SHA-512:	208988FE0FDF965B56C067E774DA15355C6C9F118CDFA16A98913620E11FAED1B5A394209326CD4295CB877AF91772F924426E1E32424404803EB81CE7329334
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............`t.U...~zTXtRaw profile type exif..x..Yr#;.E...^.Ip.r8F..z.}..l...z.%..)..........{..x./.\[.R<..Ic..._.....64..G_.]......~.Vn....?..\....6...uB.....A.v.....]...I.M...~;./...#.}.........^....b...Gb....-.o..}.I.n:...~...0...N....1U..E/.<.....h.x_"_.\...../...?~.9..]\|...M./..9..........P.#^w..la[7.j.W>...z+..>.WX~..{....NHa..N..u...)n.+71.(.`..5N1....UT.4....I.S.pm.~.k...+.4....?~..>p..B.f.u...b4c..!g.,..p.F..../.U@0..-D......G&..haa.z..P.].&b.2A@...P..1..0d....QR. .r..%c.....mk...Z.sd.1N2..,E.t.J).?55\|.g.).\r.-k.EJ..R.%.^.&Ws-..V..&-..J..5m]..I3k.MU{g.......8d...(..6t...4.,..6u...,..*...t..6..........v.t.)..v..'jwX....Z.../.la}..h.....I6..,..@...8t4.\|.)EC.0.J...Q2.f+.b .v....v...5...n....."...."...w.-.w.B...fT/D......oW....^...+.....,......s..C.M.t..q.JU....Y'.v..1...Nr..!......c.s:..>S.d>!..p...O.w.....Z.Td.6..(.[.W..E>....J..)i...<..O%.rF,....>.V...PoR..L......WH..9......Qs....i...g.....P..../N..<O.hv

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2843
Entropy (8bit):	6.967423493204583
Encrypted:	false
SSDEEP:	48:o2/61MYLNnwknA9WpitbEsg9wlO/cHJ3z3VHi3bEs/Hc5mmDhhIZwldFWbd/9maH:/SyYRwknmWpiVbgx/mHqb/Hc5thdlubX
MD5:	41E851F8E42B6BF3414278871E93E8A2
SHA1:	A3811C7E1157F77950EC1F0558293BC90E432E82
SHA-256:	399F74C4E69EAC8B59B149293F9A573955FEF0A62B242CFA70346070013E0966
SHA-512:	F3C3549F1390B52791196E6F19584CBD4C4DB2B51FEF78C9C607C944079FED69B75E8F88594C3D647F2DDC29F282BF41BE455BE328AB27C091B4A37C41B00965
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2019-08-09T13:37:29-07:00" xmp:ModifyDate="2020-06-17T17:39:04-07:00" xmp:MetadataDate="2020-06-17T17:39:04-07:00" xmpMM:InstanceID="xmp.iid:a6176093-d0df-1f4a-86f8-26e70acca1dd" xmpMM:DocumentID="adobe:docid:photoshop:5cf069c4-c89c-fa4c-8c00-dff9f3add583" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1161
Entropy (8bit):	6.483902966293242
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVNxhpyJ3Vlt8vmG8ll6f7iX:HZNn2lPzoJ3PtQmBY0
MD5:	E406E5A22E4F3CFA580D3BB57420150E
SHA1:	5B381E535BB0CE6003A461F3124FA1238DFBCEDB
SHA-256:	760589F903C5E9BD169B38F941F9A3DC88A23897E9CC5B622D3D91F5C204B9E4
SHA-512:	E33CB7BD10104A1E8C2D3F2B3885D65EF3769F7250445C8341D6D2AD2367749CCDC48DAABE4EA39CB80EE0362AF9D01E48370DB858BA01F956A1A6B8C04217C1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:399EA8C592D411EE91E8F6773DB0009B" xmpMM:DocumentID="xmp.did:399EA8C692D411EE91E8F6773DB0009B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:399EA8C392D411EE91E8F6773DB0009B" stRef:documentID="xmp.did:399EA8C492D411EE91E8F6773DB0009B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.d......IDATx.b..U.d``.......@...4.....0......PWU.p..Q....1\=...2I.\Fg.&3de.....BX..4 ...L...!#....... )!..7m..

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1195283
Entropy (8bit):	5.35128867601403
Encrypted:	false
SSDEEP:	12288:vLQVfUTLFru30N4Hgf2je6NEjPoPNB3ejSF2p:vLQV6r+0T+eDoKv
MD5:	CACACA9F959B7CEEC8E94C27D615962E
SHA1:	8A0E4FFFB6263C9B2765B57440E90DF3D4E0A0A4
SHA-256:	9A0421B9B9F4E21AFEE545AC64E4D56A6A733020FFD9643033842EF6C35BE8B1
SHA-512:	D5915059AC4094255E087CD684FB302492D282866E9F5FFF5070FC5523D751C6B569EFE36455974F8E4C640F7F604126305B305C083C0C88D1E580AF53573A7B
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=ysrKn5WbfO7I&l=english&_cdn=cloudflare
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[3250],{80751:(e,t,r)=>{e.exports=r(19862)},24291:(e,t,r)=>{"use strict";var i=r(86435),n=r(36551),a=r(57675),s=r(35597),o=r(3951),l=r(9452),u=r(11197),c=r(34399),d=r(76e3),g=r(6123),m=r(91586);e.exports=function(e){return new Promise((function(t,r){var p,f=e.data,y=e.headers,h=e.responseType;function b(){e.cancelToken&&e.cancelToken.unsubscribe(p),e.signal&&e.signal.removeEventListener("abort",p)}i.isFormData(f)&&i.isStandardBrowserEnv()&&delete y["Content-Type"];var _=new XMLHttpRequest;if(e.auth){var B=e.auth.username\|\|"",w=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";y.Authorization="Basic "+btoa(B+":"+w)}var S=o(e.baseURL,e.url);function v(){if(_){var i="getAllResponseHeaders"in _?l(_.getAllResponseHeaders()):null,a={data:h&&"text"!==h&&"json

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	downloaded
Size (bytes):	89044
Entropy (8bit):	5.2937300429046
Encrypted:	false
SSDEEP:	1536:qOpYuxcehc6Ac/ErY3z5N/a8axkNM2EVshJQIxrMKvPQDsPsdCkCatn0noz4:3YjgPMDsoozz
MD5:	5FD276C9078D0500A28C2EA7A3DA9490
SHA1:	210078B421ACDA30C4427E78920368A75FA1A48C
SHA-256:	AB6A9B43CAA125492B22C8CA95509F0F1800C40BD598A59DED7493F100EBAF94
SHA-512:	B039047B96D7A15F853139AEB60AFF0C0D74AF5AFF079B735F93DE14184310878AACE3F89932FF2E01B8B5A07DC6DA13A9ED264FA71153F57E45FFB23FD7DBA4
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/main.js?v=X9J2yQeNBQCi&l=english&_cdn=cloudflare
Preview:	..function GotFlashPopup()..{...var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');...win.focus();..}....//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, del

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	828397
Entropy (8bit):	5.641424377399735
Encrypted:	false
SSDEEP:	6144:LtvrePPcYh2qF41N0fhruKKYsF2zPnOe4Y6nJW8fXzzkOPtV99wHgHVob//g8g2:Lto5q1NahDlsF2D74rJW8/bM/Fv
MD5:	896A3DA9A58922E6470F200F5E299E20
SHA1:	F4175D0AEA54AB6073B8C291A4AE458A28A3122F
SHA-256:	2A4E307D490A53F8D82B8B8371E1F8DD4B6E874E564D10BE7E044E94ED9DC69C
SHA-512:	17EFBFCE67E084C14D575B10453F532D35904AD69D683E24BFFDF2563ED33227A84A85B2B03C7E2A705D2BE38EE0B7403ABF3738DB3C44CE8352B03588B3CB2C
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/applications/store/main.js?v=iWo9qaWJIuZH&l=english&_cdn=cloudflare
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[179],{51194:e=>{e.exports={FocusRingRoot:"_3PH_XZYjqRMfVtlm5hbWz3",FocusRing:"_1IZrQ5Gmmvv0TMVF07zSq0",flash:"_1YTKZzpZzBEruHqjfaSm2q",growOutline:"Z3LxSTUmQb5RlaA4-G2RD",fadeOutline:"_2hZu3k2oOq-M2UmoA0An2N",blinker:"_3wFMMgT2t6sECeNlGtBjDN",DebugFocusRing:"YxeOZVLgl_cW7IESy3NHt",FocusRingOnHiddenItem:"_2OusVQKikkszayzpUDX35h"}},87123:e=>{e.exports={ScrollPanel:"_1CXdiS1qYxpxp_UoUYeo1k",ScrollY:"_313lBO-jwNHzNrjZznA-74",ScrollX:"_1oRGoiP88OvaMu0R8O6zNR",ScrollBoth:"_3S2KoD34fIYgAqKqp_j4F4"}},74736:e=>{e.exports={HoverPosition:"_3XUANycKE9h4rEXlPo3TIW",Ready:"qEo88cpdjUGTMNgC_QK8c",NoSpace:"_2NTbbe3ZK4ExTBIfPyPTpZ",EnablePointerEvents:"_2MP9nTdz-JMvAvlIcFdd8r",HoverAboveModal:"_1SHX2kGS9WtIThx3v7JOV-",HoverPositionOuter:"EUN4GPmCCaj1QX2Yy9CVb"}},27241:e=>{e.exports=

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	18931
Entropy (8bit):	5.515016108460179
Encrypted:	false
SSDEEP:	384:QwtVMAjYb2JalUNlpczHK7DTiHiEiN/mm+pqOw6GNNZhweP8/F:QmS6FJJNzczHK7D2Hix/T+pqOwlNzi
MD5:	086F049BA7BE3B3AB7551F792E4CBCE1
SHA1:	292C885B0515D7F2F96615284A7C1A4B8A48294A
SHA-256:	B38FC1074EF68863C2841111B9E20D98EA0305C1E39308DC7AD3A6F3FD39117A
SHA-512:	645F23B5598D0C38286C2A68268CB0BC60DB9F6DE7620297F94BA14AFE218D18359D124EBB1518D31CD8960BAED7870AF8FD6960902B1C9496D945247FBB2D78
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/css/shared_responsive.css?v=CG8Em6e-Ozq3&l=english&_cdn=cloudflare
Preview:	...responsive_page_frame {...position: relative;..}....body.movescrolltocontent .responsive_page_frame {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;...overflow: auto;..}....body.overflow_hidden,..body.overflow_hidden .responsive_page_frame {...overflow: hidden;...position: relative;..}....html.responsive {...height: 100%;..}....html.responsive body {...min-height: 100%;...height: auto;...position: relative;..}....html.responsive body.movescrolltocontent {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;..}.....responsive_page_content {..}.....partner_events .responsive_page_content {.. height: 100vh;..}.....responsive_page_menu_ctn {...position: fixed;...top: 0;...bottom: 0;...overflow: hidden;.....background: black;.....z-index: 30;...width: 280px;..}.....responsive_page_frame:not(.in_menu_drag) .responsive_page_menu_ctn {...transition: left 0.5s, right 0.5s;..}.....responsive_page_menu_ctn.mainmenu {...left: -280px;..}.....responsive_page_menu_

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	24657
Entropy (8bit):	5.319718503552118
Encrypted:	false
SSDEEP:	384:aUXvnJo2dacv5Wc4gOV+n0Xmz85JX1c/jc0NL+lMF2KDnXhOMucpqWqGil/wSwf3:aU/nq2dd4gmLWqGil/wS20m
MD5:	A52BC800AB6E9DF5A05A5153EEA29FFB
SHA1:	8661643FCBC7498DD7317D100EC62D1C1C6886FF
SHA-256:	57CFAF9B92C98541F769090CD0229A30013CEA7CFAFC18519CA654BFAE29E14E
SHA-512:	1BCACD0EC7C3D633D6296FFF3325802D6352805F0D2CF1EEA39237424229ECFFAD6CB2AEE4248E28B1ECA02FF0646B58240851A246BBCF0AA1083830D5D9081E
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19112), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	30770
Entropy (8bit):	5.9192193919145355
Encrypted:	false
SSDEEP:	768:kM/TQ4O/wWvLA6fLYj0M2dYEuoCHjvQeIn9/wWLq:k8s4O/wWvDfLYj0M2dYEuoCHrQe69/w5
MD5:	668D9B56F55F6D79DDD295267B68518A
SHA1:	AD521277E7BA515FEEE28E4FB3CD62AFDB6CA218
SHA-256:	DDC12EFF57A9E957968AF6B2B8619545DD26F3FEC3D85C4C607E5D0560FED7D5
SHA-512:	4B998E0CB01E3318F0F4D6709DAE9D18A18157328164EAF5B072454B2258712D0C9BD8DF9A3D4C721470F07B9C53D00B7DDA74159071A42448CF90E11967C83B
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/css/applications/store/9424.css?contenthash=f4849e7dabab0475bc1b
Preview:	............ZOBYq36SukEm_Fi_77g2q{position:relative;display:flex;flex-direction:column}.ZOBYq36SukEm_Fi_77g2q ._1Wl13domZv872ZcbC_PVbv{display:flex;flex-direction:row;flex:1;padding-top:10px}@media screen and (max-width: 700px){.ZOBYq36SukEm_Fi_77g2q ._1Wl13domZv872ZcbC_PVbv{flex-direction:column}}.ZOBYq36SukEm_Fi_77g2q .ERYporYCW1a-i4hFKkqM9{display:flex;flex-direction:row}.ZOBYq36SukEm_Fi_77g2q ._30Wg_JuATv6bZVQSiEOa3n{margin-top:5px}.ZOBYq36SukEm_Fi_77g2q ._1KeaVf4k5xaici5wKntAlv{flex:2}.ZOBYq36SukEm_Fi_77g2q ._1S9pkF1XVQsK6z-06HLup{display:flex;flex:2}.ZOBYq36SukEm_Fi_77g2q ._2ZDySoTopw8XofnCKLNxDL{flex:0;display:grid;gap:4px;margin-left:40px}@media screen and (max-width: 700px){.ZOBYq36SukEm_Fi_77g2q ._2ZDySoTopw8XofnCKLNxDL{display:flex;flex-direction:column;align-items:center;margin-left:0;margin-top:48px}}.ZOBYq36SukEm_Fi_77g2q ._2ZDySoTopw8XofnCKLNxDL ._3ph6wntM-n97-sHIlGQBnD{display:flex;flex-direction:column;align-items:flex-start;width:200px}.ZOBYq36SukEm_Fi_77g2q ._2ZDySoT

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	14527
Entropy (8bit):	7.947617495774518
Encrypted:	false
SSDEEP:	384:oVNkG9ntr9PQHzThDzgWDigJnJRFhgmVhm6ZuZ:6RnzPOTh1DigJnJRfPm6Q
MD5:	0E106043AA095D5F9CC22B09E1B0574E
SHA1:	763BA3E4F94A38ECC614F4217C4EC9EAE7A3FF1D
SHA-256:	61042B3BB2B1FFB93ED93EF3719CD42BEF0E9F997B4566DE3DF2BFA6F462C4BD
SHA-512:	91A040A916AC1CB8A42019018AFB1B533A04164FD5DCA1469BC0BE7546B62A74E76F40F472F6FFC89FADCED7A28EE87243D31A35C00AB634BB7E1EC099B0B056
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/553850/capsule_231x87.jpg?t=1709666906
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................C..........................!.1."AQa..q.#2..Bb...$R......4CSr.......................................>.........................!1.AQa."q....2......#B..Rbr..C%3S..............?../R]a..%#...o.Mr..m..............W..CZ)..Z..m..ps...5/W..".1LqS. .....^g.V...+..-.e..9.K..Z...P......W.s.......E .....\|.E!.M{.$..jo..SNmRJ...'..`.H....w...N,.......4V....P#...I.\.H..0..i>eLv.(....z.C..3).I...M.6........p>.W...,..$..J.....?..(#..+..D.F.*.. .%.).}.:....!E ...... .f0`.....29...P.S"..-.>..[Y..l.W.H.Y......MX..2.A..=.u.j..:T...)...P.... 7..\.e)}.C ...K.5.).T.v..z.e..h...+.\../...'.w/.&.3..lzQ..s..9#..Y.n3.........FG.t.....&4..E...P. a....XI...k.].H.JS..j.~`I......tR.d7.....S.T...`...c...Ad...i...oZgz....T?.....W.....j.m9...J......S.YJ........)..o...FM..%..

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	541
Entropy (8bit):	4.531184254812198
Encrypted:	false
SSDEEP:	12:trL+quCoEQ/yFPnxNFlWsaHKBpk/u4tNNF/7L:t3+quqQQxsZUkPtd/7L
MD5:	A2C8976FBBBBFD4377A6710891498842
SHA1:	8DF82284A17CABF834D9BE9567A7B1FB0B713A70
SHA-256:	165F9AA0105F13B923F228AFB19010BD442E0BA3A9027225C057EF4E53652AEF
SHA-512:	1A41BF09BA546F4F8C4CFAC9C7878BF6FBA7612EEE866ACCDF4052731076C02BB16A3E97A6FF9AF279F80A8630AC8C865EE32270C966E790A40DC73BA7E9651A
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/css/icon_9.svg
Preview:	<svg width="14" height="11" viewBox="0 0 14 11" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M5.36085 10.6886C5.22721 10.823 5.04489 10.898 4.85549 10.898C4.66609 10.898 4.48376 10.823 4.35012 10.6886L0.314136 6.65195C-0.104712 6.2331 -0.104712 5.55391 0.314136 5.13585L0.819501 4.63035C1.23848 4.21151 1.91688 4.21151 2.33573 4.63035L4.85549 7.15024L11.6642 0.341357C12.0832 -0.0774902 12.7623 -0.0774902 13.1805 0.341357L13.6858 0.846854C14.1047 1.2657 14.1047 1.94476 13.6858 2.36295L5.36085 10.6886Z" fill="#A6F1D1"/>.</svg>.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	10011
Entropy (8bit):	7.944762888245754
Encrypted:	false
SSDEEP:	192:XsxwgWDz6EtwmYvKPub9xOhIiXk22hEynoXObdOE7fjnjB2Vjv/YY4:cxwS2wm8K2b9xO+cp2WYdO+f41y
MD5:	5BC9B62F5E6FD1E1B134E335D851D92F
SHA1:	4CA2224974F63DA6A0D231BB93EFB3F858D4DD26
SHA-256:	1B00B1B86DD1837A6FB3160569F17635751254184DE4F5839E679D1FCE7AF2C5
SHA-512:	064E79C67A8B1C524262DFFBB128F66E4A870EB8570A0A34CB69693D8B1FE4D553C47C727884D5C13F92C7F7394019F36ECA8BCF8C2F30E80E8F73A744A55651
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................W...............................................B.............................!1"A...2Qa..BV..RUbq...3r.#$ST.......................................E.........................!1.AQ."aq..2....BSb...#Rr....$3...5CDT..............?....].1.D..EU.(..D.&`..H"A.0D.. ..H"A...D.D..AU ..H"A....D.$.<...O8"A..E.x"A...ET.(...7....)N..f_.O......v.....$.d..p.!.8E2..O. I.......7+..gk.....>\|...5d$. .."y.......H"A..`..UH"w.$.<....D>PD.. ..H'h"b...5.=2...O.9v]-e..F!\|.<....{..C.c...k...........\|&..T].#F..d..\|....G...."{L...3X.)O3$.:.ek..'.F..6..........Z.f....h?..........7.6.fv.j\|......l..UAqc.....O.e..tT.24f....9y.`.l..t%G...S.87......]..g....u.Lk....1....D..R.".^...k:..%n..~f.2...C..HRTIF....g...'..2}!..8.<?.t..)..8.....2.t.X.Q}Jo...A. .\|...^j..r.6.D.$. ..H"A...D.& ..H"..I.L...M30...S...R.YHPJ..N.....1..B.&6.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HQrL:k
MD5:	04253228A002B2136240FB5EC4CEE3BE
SHA1:	4CB0E9CBF7AB825C27CFDB6D93D1180655866488
SHA-256:	04308125E9B3F3A2CD2FF301408FA4DA9797C305D33430D876B39448291DF282
SHA-512:	86451115E65CE98FEC834805E6D411F9CE3E85E7D94B2D76348BDC062B511C273C72121B02D095A7A5F8570D1924E5A30110E61CB53A4E2BFBC630F4F9CE2B0F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnciuvzvfzIfhIFDTE9lDA=?alt=proto
Preview:	CgkKBw0xPZQwGgA=

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/sync_cookie_image_decide?token=10330.woy656fu46y5_DcDSjB97Mazs-_kGfS4OruiYv9WFn18Zj-naQjLwkR83mSWLa7t4r2cr6wOmU1IvltOHb6NnQBh-5H0NNHsDMCmgustlQLblfYsCzbtHSgj_ONY8OAVCU8DTc10K_4TmEg-34RNn9f3BJ0D81_oqttTrzU1TxAkXGiffY-DWdjIjOsXOoFn907mt5c-7wPwj2qhORpKDT8V4Nj1QK2qOPGXiPKnfnk%2C.21dgMVT84n2ZnBqRNXF8v61X_z4%2C
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1060 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6427
Entropy (8bit):	6.187565203288304
Encrypted:	false
SSDEEP:	96:zbUNBPYl5xRgFlONXbhj+7JMzj3xcImxk3VguCLPgv5dIpB8sM7O:zb4xA2Fl0rlLjT5sPkdIpB8VO
MD5:	237F39233045DD53513440D0A98C29CB
SHA1:	46DA5F906BEDEAEDD745A299DD7CE3865E942D51
SHA-256:	47A61EA9199A1C916D082EFD47E70E42035F2218751FE0FA2514733EAE5EA2CB
SHA-512:	E5566715B4C70F4A3CD18F59DCDECB7088B8EF6CCCA19E5760F7DD29179EB7517D0494202D3BC57010962C5496B5B981E14991FFF853F01FEDE0DB8D93EE5931
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...X.......7.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...O.U.y..{.{.f.k...0f.6C.......Zf..VR...2m.....]....z..V]8..,....H.)...Xj.."aL.......`....K2.a<....?.....\|..s...w........................................................................................................................................................................................................................................................................................................................................................................................................................................................A?m.gS8}'.....pL..<..`...@..d...?.......[..[....F8..;tpNt.z.@..e..=.....8 .P..:..G...`..G...8..?..4......@...B...w...d!...,&#bR...ri..5.~er..........$..e.......'.[3...R.......on..7^.7..;t..t.P..m..=1....P..(&#.w...e.s.>..w.......3.O.sCT..GB...UF<%.P...2M5..(^.mf........s.y..;....[$$:l..O.{b...fa..a..,.R......6...}k...w2Q.......;..y8=/.P.........u.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.284183719779189
Encrypted:	false
SSDEEP:	3:tXMlSNDrPUbql:t8lSBjUbql
MD5:	89A022138DAA614E95AD7A3B9AE198C9
SHA1:	7D91DA531C71F444BE043BB095B3C9FE45D36BD6
SHA-256:	D1A7039F33569760901D2298295A6EDE0841EF03BF01C080B407941004DAA915
SHA-512:	D7A228A873307228BCB7C48C96016A390A54961322D9A68DE2C8142BD4D208C47C39BA24EF202AB367E86B6F6BF1B2E537840C3A295DA5EFD94DAF3880183BE0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmpxiXbITt9jxIFDZFhlU4SBQ01hlQc?alt=proto
Preview:	ChwKDQ2RYZVOGgQIVhgCIAEKCw01hlQcGgQISxgC

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3692
Entropy (8bit):	4.541096987955606
Encrypted:	false
SSDEEP:	96:xUMi/QqnuFLVlI8nCrqJvGjsZe51ANllIDYbmsU2:xUUI5rqJvMoSq/
MD5:	19167C3199C6DF4F5D5D60BADFDF2198
SHA1:	4F1A79809D6F037E5B9FD2CD845ECF8D5EC7386B
SHA-256:	DB203D24E6E273D96875BBABDA7F92AD8E5EA266A8120796E9CBD99ACFA2A44E
SHA-512:	52ABE82400506A8AED277AED40D98A2057E9170E6D9B8484C67C7C52983BC750A3375BD1F8F1F38C9E733A0B3CF9BCBB7C4E79C9CBB05D2EC31D5814803834AE
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/img/mira.svg
Preview:	<svg width="80" height="41" viewBox="0 0 80 41" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M17.0302 25.4572C17.5338 25.4541 19.0303 25.3194 19.6642 27.4587C20.0912 28.8999 20.7714 31.2605 21.7047 34.5406H22.0849C23.0858 31.0825 23.7734 28.7218 24.1477 27.4587C24.7882 25.2971 26.3894 25.4572 27.0299 25.4572L31.9715 25.4572V40.8291H26.9349V31.7702H26.5971L23.7895 40.8291H20.0001L17.1924 31.7635H16.8547V40.8291H11.8181V25.4572L17.0302 25.4572ZM39.2039 25.4572V34.5228H39.6057L43.0209 27.0682C43.6839 25.5847 45.0969 25.4572 45.0969 25.4572H49.9708V40.8291H44.829V31.7635H44.4272L41.0789 39.2181C40.416 40.6948 38.936 40.8291 38.936 40.8291H34.0621V25.4572H39.2039ZM67.7431 32.762C67.0259 34.7945 64.7735 36.25 62.2798 36.25H56.8876V40.8291H51.9981V32.762H67.7431Z" fill="#0F754E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M62.5155 25.4571H51.7416C51.998 28.8794 54.9452 31.8091 57.9962 31.8091H68.0827C68.6648 28.9648 66.661 25.4571 62.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	89437
Entropy (8bit):	4.934831850769131
Encrypted:	false
SSDEEP:	1536:LlaY4P+xmlvr+k3mCQHNl9EvOxzXQApcGBPVCGUb6WFA66WqiLOrVQXWl:E1XZEl9EvOxzLcGBkQ1WA
MD5:	31ED48071CE4B62C24520C95BCDE6026
SHA1:	C073152E6835FBA2DED4CC215F3985266BE23F2B
SHA-256:	08B39451EABACA10CD735816CDC5AF4A35B05FBB197E2082235B6E16BE62DEDB
SHA-512:	1CB651EC52D7EB67A961436A48340D0B783BC944CD54008D00E8B26D933D0668380126C6ACAE89EF10906FD96E8DA9ED4EF773DFD9C761F608FF7EBDA5554AE7
Malicious:	false
Reputation:	low
URL:	"https://store.cloudflare.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&_cdn=cloudflare&load=effects,controls,slider"
Preview:	// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008....// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)..// ..// Permission is hereby granted, free of charge, to any person obtaining..// a copy of this software and associated documentation files (the..// "Software"), to deal in the Software without restriction, including..// without limitation the rights to use, copy, modify, merge, publish,..// distribute, sublicense, and/or sell copies of the Software, and to..// permit persons to whom the Software is furnished to do so, subject to..// the following conditions:..// ..// The above copyright notice and this permission notice shall be..// included in all copies or substantial portions of the Software...//..// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,..// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF..// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND..// NONINFRINGEMENT. IN NO EV

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 939 x 794, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18662
Entropy (8bit):	7.009465320427675
Encrypted:	false
SSDEEP:	384:zpuhH5rl7BBz3mdeo3ycYPh/FvwgxFkOXJkEzYw:zpo9l6ycI2Q3J7Yw
MD5:	3A89AD3F879E00EC76BF99C5B26FF433
SHA1:	CE76F802547972A4E2E81AF6777FAEDE59F0D1CA
SHA-256:	4B272584CF3AF27124948620C34E5ACFC912A15F55061B69FAE64B01FD35B28B
SHA-512:	208988FE0FDF965B56C067E774DA15355C6C9F118CDFA16A98913620E11FAED1B5A394209326CD4295CB877AF91772F924426E1E32424404803EB81CE7329334
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_hardware_pt2.png?v=2
Preview:	.PNG........IHDR.............`t.U...~zTXtRaw profile type exif..x..Yr#;.E...^.Ip.r8F..z.}..l...z.%..)..........{..x./.\[.R<..Ic..._.....64..G_.]......~.Vn....?..\....6...uB.....A.v.....]...I.M...~;./...#.}.........^....b...Gb....-.o..}.I.n:...~...0...N....1U..E/.<.....h.x_"_.\...../...?~.9..]\|...M./..9..........P.#^w..la[7.j.W>...z+..>.WX~..{....NHa..N..u...)n.+71.(.`..5N1....UT.4....I.S.pm.~.k...+.4....?~..>p..B.f.u...b4c..!g.,..p.F..../.U@0..-D......G&..haa.z..P.].&b.2A@...P..1..0d....QR. .r..%c.....mk...Z.sd.1N2..,E.t.J).?55\|.g.).\r.-k.EJ..R.%.^.&Ws-..V..&-..J..5m]..I3k.MU{g.......8d...(..6t...4.,..6u...,..*...t..6..........v.t.)..v..'jwX....Z.../.la}..h.....I6..,..@...8t4.\|.)EC.0.J...Q2.f+.b .v....v...5...n....."...."...w.-.w.B...fT/D......oW....^...+.....,......s..C.M.t..q.JU....Y'.v..1...Nr..!......c.s:..>S.d>!..p...O.w.....Z.Td.6..(.[.W..E>....J..)i...<..O%.rF,....>.V...PoR..L......WH..9......Qs....i...g.....P..../N..<O.hv

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	9528
Entropy (8bit):	7.937835312972649
Encrypted:	false
SSDEEP:	192:1XOfbIERlZ90uFQu5HelemlVpa648xoHBEj42hjlIeD2LpP1c6ft+:1yIEz30GlelPM648xKEj42h6997Q
MD5:	87F8FB68FA4E3D2A34293B0683B6F315
SHA1:	6392A2B53A5E8D13FCEEEE920D6B5B1E72500182
SHA-256:	198DBFD5AF0CE6AD9D0FF88679C60264802A466DBC15D38EDADAAE60A725D9D9
SHA-512:	C5E4B4EEB8760E980AD82235B233377E8D0A201E69627007A8264F359536F8DED2A25704BF63B86749FDDAB3CCFA76DF45E8990D87652D8AFBDA49271F96B58D
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/730/capsule_231x87.jpg?t=1698860631
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................E..........................!.1..AQ"a..2q...#BR.Vbr.......$...3CWs....................................B.......................!.1.A."Qaq....2...BT...#......U..%3Rr................?...QZ..rsB.4!$...@......) .N...!7)JR.!D.c..!p.h.....v......Xip!R_Q!..`...N.....b.{.M...'....[.RTx...n...N(.........hqnnQ......5...:l......U..in[.G.?.5tS.:.P...$c=...\-..G}.jT....'.%X(%..$..K.AsH=.p...pk...~....]m...#kR.K..P'i.....r...7..S.p(BP.R.............Z.....e6R...%.......~..j>..V..0....\|.}.l}.b.G.9>'.m.-m.ODt..s.&$...#..J<..<9.)Cr..O...x....+..sq!.C.30y.bF.+........'1..=..%)....?..)..H\."J...l..uvm... ..$\|=.0..q.[....$..r.#.^..k...@....[.N[:(B(B(B(B(BO-..F{.jF.iB...R.U..ra....,..w.C..AK..P.P.P.P.P.qk...$$.{....kR.y...b..#.O'*...&......7.4..i.h..n.&U....g..

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	8619
Entropy (8bit):	7.944316879702331
Encrypted:	false
SSDEEP:	192:PWlmv+8WVPrqb/0eB5C75cj0PHYlaazLRs+uZ:PwmiVPrSxmk09WPi
MD5:	274304D7D04E5B86D93A5CAB3760E85D
SHA1:	C2461F84D9E47552839E98F9D0B677E304679D1E
SHA-256:	4B8BB680FAF5225212D58509C3392BC1CC322D09B34694E3D586764F3CE8EC1F
SHA-512:	AAC80C52C0ED188D84ED350DDC70FD26D90235675DAC4BCC515DC633673CABA968D2F6E29658F1D9FA636C20DA91E595337260598BEB1EE41006FF3F737E28DB
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/1962663/capsule_231x87.jpg?t=1712172838
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................S..........................!..1."AQa.2q.....#BR....$36bct......458r....%&Uu..............................................................!.1..AQ"2a...Bq...3C..............?..uz.O8V...d.c..Ih.J(d.VAJ..v......Z..Z.Y!.7>6....sw.f..TAU.....O...!...L......J..h.-..))....qff...I".Y&...,v.........&...........B.Jl.ko..#.../...]..m..!.N.'k.a...DP....U>.$..DS..-....H.....zDy4........,../I......S.:b............^.M...Y.p.......`.....(..>...b...]..L..;..Q.k.k....B./.I..? .,....i.;!....x.Zd%+..J..I..t5.............6...Q...n..e.-.W...<Z2"...)...2.&..9.1..q...J.X.B@..o.a....!.m.y...}5F)y...N.Ar....%)R..M.6....h>..2.'..R(ty.\|..!..BX.b.5){.!Z.u.m...v.B.Z.....%W.....GDT2./"&.r...F.....p}zW@X6..,..b..._..O[h..%..5k..M..^.......R.@?....&=.l.M8...-M..{..<<\|qnK..

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3355
Entropy (8bit):	5.396115949174596
Encrypted:	false
SSDEEP:	48:jrE1CT8Pi/CCsj5x9cHcYVGwGnrGdrtjcd/UfxGD/CtByLF3vDD+FQyB8pCkP:IawCp8E/0Ec+ByBv+FQyCzP
MD5:	9AF8AAEF60A740E8062CCDA7EFE7C179
SHA1:	1D72FFFE2679D8E55F35C1CEEFA29261C55E0A43
SHA-256:	7173A15A85C666C409667810A53ED83FE73505988FF8496EE65C8EE03D683A6A
SHA-512:	349F5F3958A19BE9B83DE6A18F22786B0C9D79815ABA89F721EE4A2C2DA66098F24794AEA023D84E645F17BCB7A9A5E65EAC331C79530010AA08707329F32114
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/javascript/crypto/rsa.js
Preview:	var RSAPublicKey = function($modulus_hex, $encryptionExponent_hex) {...this.modulus = new BigInteger( $modulus_hex, 16);...this.encryptionExponent = new BigInteger( $encryptionExponent_hex, 16);..};....var Base64 = {...base64: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",...encode: function($input) {....if (!$input) {.....return false;....}....var $output = "";....var $chr1, $chr2, $chr3;....var $enc1, $enc2, $enc3, $enc4;....var $i = 0;....do {.....$chr1 = $input.charCodeAt($i++);.....$chr2 = $input.charCodeAt($i++);.....$chr3 = $input.charCodeAt($i++);.....$enc1 = $chr1 >> 2;.....$enc2 = (($chr1 & 3) << 4) \| ($chr2 >> 4);.....$enc3 = (($chr2 & 15) << 2) \| ($chr3 >> 6);.....$enc4 = $chr3 & 63;.....if (isNaN($chr2)) $enc3 = $enc4 = 64;.....else if (isNaN($chr3)) $enc4 = 64;.....$output += this.base64.charAt($enc1) + this.base64.charAt($enc2) + this.base64.charAt($enc3) + this.base64.charAt($enc4);....} while ($i < $input.length);....return $output;...},...decode:

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1060 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9460
Entropy (8bit):	6.9553107921422805
Encrypted:	false
SSDEEP:	192:mpzvyi/u/yUfBtBWJo3d511sSqU4arodpBj:mpryiG/yUfqo3H12Sqveodpp
MD5:	013CC4F64229A1D0FCCE500A8D018436
SHA1:	DD721C5AB5BC5E9B687129B53F598C6EF02AB5D9
SHA-256:	80D883706E6FFB8D603E67E6A13151119D43C56073E2F6106C1A059522797192
SHA-512:	81FC0F8167A0BAB72A5FA7533DCF14E93ECA87ED35B601BDD8754639937DA10315162D14568FFB85A8546FB38A41EF35666524DF8CD525E48943F9AB7294ED9A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...X.......7.....tEXtSoftware.Adobe ImageReadyq.e<..$.IDATx...O..W.(.rb./.....E 2xaH`:.B.."k7....{Wn..h...8..m/......w.@[..x!...!.K............c..e.J...V.~?8H]R....T..y..e........MwA....u...p.QhWr._..".....+..@U.$.....V.iMxJ.L.q\|..\o.P..u...f.t{W...)O. .+.>....o?.)...}....6W...M.F...k.T....P...P.Q.f..........hW...cz.(5.....+.....,.$..R....v.\..nn...S....>X.../..DL...A............'..........l.8.!.\.[\|:.FD...p3^3.JX.....,.$..'...f..M.m\|.G.6..e.g\vU..p...Po.+..W..`s...W.....h.Gz...PC..{...)..v....j5."..^#.g...h/..w.kE.p.}....1....*\|.......8]hI.......%.'i...x..^X~7...,..N.......'.u......S@.`...p..\..$.GT\......... /.FDq...T......m...v..@..3.W.M.."..(['.....R...E.H@.'y..".v3......j.7v.v+{.F....@M..k<.a...t'..............~.....b<.#.T.gM].r....W..;...]....u4:"..<.Q.X.4.a<(.j.t...q}lY...bX....`....\Gc.......v.......) ..\|4..M.w.,.#.w...]...W..'cm..$.....,W;{w$.....Q.h....R[...w...K.8...X.8.!{.0e..0O0!./.S>>..$.....T/......Q..t.>.-...7.m"

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	11642
Entropy (8bit):	7.950244654537195
Encrypted:	false
SSDEEP:	192:UyBYLTk6W+hSwW4CZI8Hi+SEPaFwBvf1U75dsEdEUvrRyyqD+IjLaBr:PBwkvNJImdPjLUDsQEGkbD+Inur
MD5:	6E15A1F7269678CFFC4655F296DD6B0D
SHA1:	01B4820E38BD01A57AFE08368CB47EE4D94FA378
SHA-256:	C64957A0E1D45636503BFE4D57F3AE54BFE72B950DF39056D47719E425DCA75E
SHA-512:	FE073090301E93BCE17DA0CF54D7F0DAF15F41340862CC65E8C077927846C98B4280E7CC2062294DD9F8B6D5A7E6BDCA521EDEC3B6A76E743623B7412703EB19
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....C....................................................................C.......................................................................W..............................................F...........................!.1."AQ..2aq.#.B.R...b.....%3CS...$467Ers.................................>........................!..1AQa..q...."2.....3BRbr..#$.4C...............?....].........VNtb........m.E8.j.h.k.p.........9..Ey....w.....K/...o....H.N.N..a..a.>.....x.....osJ..5(..M.{...7.x5...Q_.]...?..r2p...W%;._.rxD..%A.-....pY.6n.c..6..X`..Gqm.]m..).$.}.8.).\...._._.c...%..^{x......Y1q.zK.x..U.n.m.....a.N.....J.....x...y..d.)...Ci!).;.Q.....l...u.x.-wG.....I...J.q.H...=.'q.)O.0G...-$n#......G.(n.].......n{R...%.\.k6..8.<..r.-BS.HO..JZ...............A\|.l^..........b.Pj.o[C..u,.8f...$`....d..t.F.......~/......uj../;J.....%\|.rG.N..GE..m..%...q...@. .s..BX:yR.4.C..uj-....A......N....R.&c.y.+{R..%%.\."..#.....q(...bj.%6.ILy.R.....=..!Q.......

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1536
Entropy (8bit):	4.885324918426383
Encrypted:	false
SSDEEP:	24:2dC5A6LfEljJgXMsTQ2R4GPtuXDL5S5QbJzHomynoA/2slwNLrzy8OH:cGA+fElj87B4GkXDVSiblHomyL2slwd+
MD5:	D681F523EAAE5CD2368935891D03A802
SHA1:	995210025EE01F1C8EE8C5D06CE4FFA1E4AC64C0
SHA-256:	6FED568378A03B0F897F80CAB2ADB730DD37E62EE8417C784B9FF6C86FF7C97D
SHA-512:	3E51A11B6E4D4498C150E6DDB2321A5BF41DD47C1866EF7AEF5D5DBCC0FE4744E26E64090DF8AAEAB50609EF747659D21CFC8D292C8B1FEE04C7033D7D220858
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 30 30" style="enable-background:new 0 0 30 30;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<path class="st0" d="M25.1,6.4h-6.3c-0.2-0.5-0.6-1-1-1.4L20.8,2c0.2-0.2,0.2-0.4,0-0.6c-0.2-0.2-0.4-0.2-0.6,0l-3,3...c-0.6-0.4-1.4-0.6-2.2-0.6c-0.8,0-1.5,0.2-2.2,0.6l-3-3c-0.2-0.2-0.4-0.2-0.6,0C9.1,1.6,9.1,1.9,9.2,2L12.1,5...c-0.4,0.4-0.8,0.9-1,1.4H4.9C3,6.4,1.5,7.9,1.5,9.7v15.2c0,1.9,1.5,3.4,3.4,3.4h20.3c1.9,0,3.4-1.5,3.4-3.4V9.7...C28.5,7.9,27,6.4,25.1,6.4z M15,4.7c1.2,0,2.3,0.6,2.9,1.7h-5.8C12.7,5.3,13.8,4.7,15,4.7z M26.8,24.9c0,0.9-0.8,1.7-1.7,1.7H4.9...c-0.9,0-1.7-0.8-1.7-1.7V9.7c0-0.9,0.8-1.7,1.7-1.7h20.3c0.9,0,1.7,0.8,1.7,1.7V24.9z M20.9,10.6v13.5H5.7V10.6H20.9 M20.9,9.7H5.7...c-0.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33754
Entropy (8bit):	5.263648577784315
Encrypted:	false
SSDEEP:	768:1rv31+3R8zIF/3doix2R1pW81qWZRhcJGHJhmJfLN:FpP1vZRx/yLN
MD5:	1ABBFEE72345B847E0B73A9883886383
SHA1:	D1F919987C45F96F8C217927A85FF7E78EDF77D6
SHA-256:	7B456EF87383967D7B709A1FACAF1AD2581307F61BFED51EB272EE48F01E9544
SHA-512:	EDDF2714C15E4A3A90AEDD84521E527FAAD792AC5E9A7E9732738FB6A2A613F79E55E70776A1807212363931BDA8E5F33CA4414B996DED99D31433E97F722B51
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/css/buttons.css?v=Grv-5yNFuEfg&l=english&_cdn=cloudflare
Preview:	.btn_green_white_innerfade {...border-radius: 2px;...border: none;...padding: 1px;...display: inline-block;...cursor: pointer;...text-decoration: none !important;...color: #D2E885 !important;........background: #a4d007;.....background: -webkit-linear-gradient( top, #a4d007 5%, #536904 95%);..background: linear-gradient( to bottom, #a4d007 5%, #536904 95%);..}......btn_green_white_innerfade > span {....border-radius: 2px;....display: block;...........background: #799905;.....background: -webkit-linear-gradient( top, #799905 5%, #536904 95%);..background: linear-gradient( to bottom, #799905 5%, #536904 95%);....}.....btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {...text-decoration: none !important;...color: #fff !important;........background: #b6d908;.....background: -webkit-linear-gradient( top, #b6d908 5%, #80a006 95%);..background: linear-gradient( to bottom, #b6d908 5%, #80a006 95%);..}......btn_green_white_innerfade:not(.btn_disable

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	909
Entropy (8bit):	5.227289567410614
Encrypted:	false
SSDEEP:	12:TMHdw95i/nzVc/KYf3UWbMHDunZkALoTR/WPRnRgXsOvOPfrQfUL3hYcQfF3V+nF:2dC5A6LfEljekJ/U6O3rQrbOzUq
MD5:	EB6A8F3B1987EF551C5CBA0E3C8A31BC
SHA1:	24FB244648E743743EFB551D6E5E4E110C6B9172
SHA-256:	8DE1B771193EC086420605FE46A27D394C858BCE7FAB5B99945E0B0BA0BE7355
SHA-512:	AC2CD0F8F4F6179AD9A69A89AA703099F64727B5944B533916CB2E79D9445024A3201954BCD5CC597F04F79EBAB4347009153BD1AD75CACAD8E7F945EB552D7E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 30 30" style="enable-background:new 0 0 30 30;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<path class="st0" d="M15,3.3c3.2,0,6.2,1.2,8.4,3.5c2.2,2.2,3.5,5.2,3.5,8.4s-1.2,6.2-3.5,8.4c-2.2,2.2-5.2,3.5-8.4,3.5...s-6.2-1.2-8.4-3.5c-2.2-2.2-3.5-5.2-3.5-8.4s1.2-6.2,3.5-8.4C8.8,4.6,11.8,3.3,15,3.3 M15,1.6C7.5,1.6,1.4,7.7,1.4,15.2...S7.5,28.8,15,28.8c7.5,0,13.6-6.1,13.6-13.6S22.5,1.6,15,1.6L15,1.6z M21,20.3c0.6,0,1.2-0.3,1.5-0.9c0.5-0.8,0.2-1.9-0.6-2.3...l-5.1-2.9V6.7C16.7,5.8,15.9,5,15,5c-0.9,0-1.7,0.8-1.7,1.7v8.5c0,0.6,0.3,1.2,0.9,1.5l6,3.4C20.4,20.3,20.7,20.3,21,20.3L21,20.3z".../>..</svg>..

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (532)
Category:	downloaded
Size (bytes):	2120
Entropy (8bit):	5.475321660491406
Encrypted:	false
SSDEEP:	48:pf41S9DetyBfmZvYzrEB46d58oxMuwZICgryMpj:GS9evZvwM4sUjU
MD5:	DDCB981B1555F3011E3D550508DA75A8
SHA1:	305978A0C5924B7E34E1DA42914156079C8BE631
SHA-256:	E9F67688FEE0150690C92917640AA09F8A80D6B6366B90113F0C5772DFF669CE
SHA-512:	F7B7D124E0717C8DDDBD1653649934FFFCB4D613F317CE65A8F8F2A6B2A0C978930C6C1969F96B993C6021D83753F7140A23FF992D35CC865D62C69C015456C8
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/metrika/metrika_match.html
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">.<html>.<head>. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta http-equiv="Content-Type" content="text/html;charset=UTF-8">.</head>.<body>.<script>(function(){try{(function(){function l(a){var b=a.document;if(b.hasStorageAccess)b.hasStorageAccess().then(function(c){a.parent.postMessage("sc.sar"+(c?"1":"2"),"")})["catch"](function(){a.parent.postMessage("sc.sarc","")})}function q(a){function b(c,d){var f="sc.topics-response"+c;a.parent.postMessage(d?f+""+d:f,"")}a.document.browsingTopics().then(function(c){return b("1",JSON.stringify(c))})["catch"](function(){return b("e")})}function g(a,b){return function(){e[a]&&(e[a].timeout&&(clearTimeout(e[a].timeout),.e[a].timeout=0,window.parent.postMessage(["sc.image",a,b].join(""),"")),e[a].g=null)}}function m(a){try{if(a.data&&a.data.split){var b=a.data.split("");if("sc.images"===b[0])for(a=1;a<b.length;a++){var c=b[a];a:{var

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	4737
Entropy (8bit):	5.102311533073085
Encrypted:	false
SSDEEP:	96:NMvm3SkJQeSk6rjDixEIIN725cpQo4PUBikiCY:TSkVSkdjlPHb
MD5:	CEF7B240BADDBBD25489EBD7CEEE20A3
SHA1:	CEAA1258AA0E92362C79216F474F57DB00178A0E
SHA-256:	1055AB19FC7DD62FF9B62B078E97586B6485315BF0D4CA41EC1CD9684C9BDF33
SHA-512:	F5C69F6807FE5BE6505D22187DDEE1654F19906BE1877FDC7587B7EBC49A49665ACEEC04F64FD2C4FD972B18FE450100E4887BFFD2376F268201A6458C8F6E7E
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/css/promo/newstore2016.css?v=zveyQLrdu9JU&l=english&_cdn=cloudflare
Preview:	..body.v6.promoannounce {....}....body.v6.promoannounce .page_content_container {...background-image: none;...background: -webkit-linear-gradient( top, rgba( 0, 0, 0, 1 ) 555px, rgba( 27, 40, 56, 1 ) 1317px);..background: linear-gradient( to bottom, rgba( 0, 0, 0, 1 ) 555px, rgba( 27, 40, 56, 1 ) 1317px);..background-repeat: no-repeat;...background-color: rgba( 27, 40, 56, 1 );....}.....page_header_bg {.. position: absolute;.. height: 400px;.. width: 100%;.. background-color: #66c0f4;...background-image: url( 'https://cdn.cloudflare.steamstatic.com/store/promo/newstore2016/header_background.jpg' );...background-repeat: repeat-x;..}.....page_content.announce {.. height: auto;..}....#title_text {.. left: 0px;.. top: 90px;.. z-index: 1;..}....#title_desc {.. top: 210px;.. z-index: 1;.....font-family: "Motiva Sans", Sans-serif;....font-weight: 300; /* light */.......color: #fff;..}....#callouts {.. position: relative;.. height: 3723px;.... background:

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	8231
Entropy (8bit):	7.941814608737955
Encrypted:	false
SSDEEP:	192:/o6G4ZBdM6dRytFPj2P4DItFs+97sgXxXb/ULAOCiR:/x6vqwDeFs+aEWTCiR
MD5:	748D0159D5E892438A35B15BF1AE5423
SHA1:	BDF0A874047956FCB06B104F484854B9C3DCA900
SHA-256:	62EFE837EEC95AB53989E494E9BF64B580389270980D5E0086803C0AB67C3E7D
SHA-512:	6825B19CEC8B7D7E9265FE2EAD413A56879F45694E7389E2A842D02578F0283ADDA79388698B3FE18103B9F127B8CF4C52E90952D5DCBD25204964A8301819FC
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/359550/capsule_231x87.jpg?t=1711470437
Preview:	......JFIF.............C....................................................................C.......................................................................W...............................................?...........................!1..AQ."aq.2..B...#.....3Rr..$Cb.................................,.......................!1."AQ.aq2...3B................?..g...[....4...........}...X.....i.X...q....T.>..P.v&Lz..B...a..}.i.c.A......g.F>.T.aP..?Q.HV8(T..1...!b.....cQE&0h.g.......}OC.jh..2.....s.C.....R=....b..Fp.w...P.....@O........b.....<...)....k.7e.Z...}.4.G.........=.GT..F...B..-..5i.8h.k..(..Z$E.EG.#...V.+3.1..y.Q..z...@c..}4.......$v5..!.....R..' ..?}5B.z4A.@8......}4!@+....M(A...}R%.,........"i.E,.....f?...Lq.<.@.'..O..}.O.........S.[.....b>..s....<..`.ea..#?.KH.....@W-....'.j.....t$...K.;A"../H....D...HL.C...t...d..aG.......9;.>.SC.&"....t....eO..,6..\|g,~.M .OJW..N{..0.rl+s.O......b.d1.cP....?..I..2.L...;.*(.]4.8.....]=..m0...p6f.....-@.j.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1060 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20936
Entropy (8bit):	7.638157819271697
Encrypted:	false
SSDEEP:	384:QC68qmIxMlLODO69/DruzJY2YLwuNshyjLbtGyBmq9drF:QnxMlLUO69/+Y2YLwuN1Lb0wmCrF
MD5:	CA723D6FABFBFD032FC2716EEBDC9570
SHA1:	D189CEDCFCE4053AC7ECAAC5608B1A8D3F563405
SHA-256:	69E7FEE72E3437295C892CECB4E4F32AF8BBA9725A358019C7F2EDA1E2B2160A
SHA-512:	B32B9B7ED6C5DB747B816093F174D945C835AFA7E8F588B9CAB5288739BA6945C4A7A169A2BFC107C4F9CC8D20416CE864BE7B6B83B3EC75A8D0756B50CF145E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...X.......7.....tEXtSoftware.Adobe ImageReadyq.e<..QjIDATx...i.e.y...s.....{..=.!...6")q.E..,Y6..-....@.$..... ..O..#p. 1..0..a ..8q,z...#.......,...j...sr.soUw....f.....Z.g.*....y.7.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	17579
Entropy (8bit):	4.449677892153786
Encrypted:	false
SSDEEP:	384:QSu5YLIxaly+6Q4Wfx+L5PHiw6dZDbYiSpJVUq3jKPr17+gGoxUf6pB:QBGI3+6QxW/9Agj+ijA3x1B
MD5:	BD5C88021F835B223C294DC13814E6C8
SHA1:	BDB4232B4FB713DC1D1ACBC2E41BE676384124ED
SHA-256:	E3F59E387FEE812986645E2111A74A27BFF4CB73A6025782D1AB33CE408C51FF
SHA-512:	88FA9BADE1688DD0A625383B31EE141885610D0B8DC9AEAE4C9AE958F7694F484306652B1FBE7FF50ED66B49D724207EFF493726791D9AA8E113843EC1A3F613
Malicious:	false
Reputation:	low
Preview:	<svg. xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:cc="http://creativecommons.org/ns#". xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#". xmlns:svg="http://www.w3.org/2000/svg". xmlns="http://www.w3.org/2000/svg". xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd". xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape". width="239". height="120". fill="none". version="1.1". id="svg102". sodipodi:docname="logo-black.svg". inkscape:version="0.92.3 (2405546, 2018-03-11)">. <metadata. id="metadata108">. <rdf:RDF>. <cc:Work. rdf:about="">. <dc:format>image/svg+xml</dc:format>. <dc:type. rdf:resource="http://purl.org/dc/dcmitype/StillImage" />. </cc:Work>. </rdf:RDF>. </metadata>. <defs. id="defs106" />. <sodipodi:namedview. pagecolor="#ffffff". bordercolor="#666666". borderopacity="1". objecttolerance="10". gridtolerance="10". guidetolerance="10

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2682
Entropy (8bit):	5.181729418329873
Encrypted:	false
SSDEEP:	48:y3/p1p6iBbbjR3+Mufk5kSR3+MufkywR3+MufktStR3+MufkFXR3+MufkRCR3+MA:ip1p6eUMuptMuJjMuoFMuAoMuYdMuxwG
MD5:	D82D4E87D405553C8AA398E16659FBF8
SHA1:	6D046F98095EF625E5C81545E4B4FAEAF1F2A45D
SHA-256:	AFB487CB0927509900A94F5FE65E9FA66C264A1524D21DD7AFAA4C75386E2DD2
SHA-512:	761226A62727B51165125FC36D3FAC567991192795BB53058A9E4C5B95A2EE001E8053977D8F71079027425B0C11D21A244CF685C7A05DFEB0DDC2E76023EE70
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflare
Preview:	/.. Font: ..Motiva Sans.. URL: ..http://www.youworkforthem.com/product.php?sku=T2982.. Foundry: .Niramekko.. Foundry: .http://www.youworkforthem.com/designer/293/niramekko.. Copyright:.Copyright 2011 by Rodrigo Saiani. All rights reserved... Version: .1.0.. Created:.August 09, 2012.. License: .http://www.youworkforthem.com/font-license.. License: .The WebFont(s) listed in this document must follow the YouWorkForThem..... WebFont license rules. All other parties are strictly restricted..... from using the WebFonts(s) listed without a purchased license...... All details above must always remain unaltered and visible in your CSS... /....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015') format('truetype');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Light.tt

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	761
Entropy (8bit):	5.572854824741326
Encrypted:	false
SSDEEP:	12:TMHdw95i/nzVc/KYf3UTOsXHpjasVtDLmgdS7UeayTTIdw04q:2dC5A6LfEhXUsVRB9uIxF
MD5:	756C086E45B9A4A0392EAAB9E61F698A
SHA1:	A75712CA9D5A9029EB1F3C4FF28BBC58209E5BCA
SHA-256:	B82A0A7BEEA06E8F89DAEC7EB7A91C25296B4168B43C0C597654B6931E6BC636
SHA-512:	40830EB759000F287A2038FD6FE3A9945E8583299F4FD4E4B2570AA4DC84508AA5C489FD701CCAA8676D2A45F2AA4604D0787F1C77BB1E76731C7573459ADCAD
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">..<style type="text/css">....st0{fill:#24ACE3;}....st1{fill:#FFFFFF;}..</style>..<g id="g3000_1_" transform="matrix(0.04824549,0,0,0.04824549,0,38079.698)">...<path id="path13_1_" class="st1" d="M0-789241.4l169.8-23.4v163.9H0L0-789241.4z M169.8-789079.9v162L0-788941.2l0-138.7H169.8....L169.8-789079.9z M188.6-789267.3l226-31.1v197.5h-226V-789267.3z M414.6-789079.9v195.6l-226-31.1v-164.6H414.6z"/>..</g>..</svg>..

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1243
Entropy (8bit):	5.102207940417109
Encrypted:	false
SSDEEP:	24:2dC5A6LfEhXUGbdQbWuKy+TYJvNkIQ/Ef3C45XHavRlLTNpxyRGNY:cGA+fEtUMzPyYYj9KEfS45XHavRZNnQT
MD5:	8D0070A77D9F490286D136A40F15DAD0
SHA1:	AAA0E6834DFAA4624E04223A8926714CD83688FF
SHA-256:	D46C60D96EFE34A372F59B9B4844F2AC5301E0FA1E0C460BC5E888134AF9A57C
SHA-512:	48DBC6751648844AAC5EF3FDEE3F841EBAB5AA61D55EBDE70C9A68CD172FC9EC4CC55BB16398F9576B3720944169D59DDC47AD20FADDC4275AF74297A426AE15
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">..<style type="text/css">....st0{fill:#24ACE3;}....st1{fill:#FFFFFF;}..</style>..<g>...<g>....<path class="st1" d="M10,0C4.7,0,0.4,4.1,0,9.2l5.4,2.2c0.5-0.3,1-0.5,1.6-0.5c0.1,0,0.1,0,0.2,0l2.4-3.5c0,0,0,0,0,0.....c0-2.1,1.7-3.8,3.8-3.8c2.1,0,3.8,1.7,3.8,3.8c0,2.1-1.7,3.8-3.8,3.8c0,0-0.1,0-0.1,0l-3.4,2.4c0,0,0,0.1,0,0.1.....c0,1.6-1.3,2.8-2.8,2.8c-1.4,0-2.5-1-2.8-2.3l-3.8-1.6C1.5,17,5.4,20,10,20c5.5,0,10-4.5,10-10C20,4.5,15.5,0,10,0z"/>....<path class="st1" d="M6.3,15.2L5,14.7c0.2,0.5,0.6,0.8,1.1,1c1.1,0.5,2.3-0.1,2.8-1.1c0.2-0.5,0.2-1.1,0-1.6.....c-0.2-0.5-0.6-0.9-1.1-1.2c-0.5-0.2-1.1-0.2-1.6,0l1.3,0.5c0.8,0.3,1.2,1.3,0.8,2C8,15.2,7.1,15.5,6.3,1

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1060 x 600, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	31506
Entropy (8bit):	7.7678441127477935
Encrypted:	false
SSDEEP:	768:3Hc0imGlKnQnDB3VHOpIKemj8BOBXQLlWSqwcq:3Hc6GlKniLHOpomaOtQLVqM
MD5:	F2FCBA2BBF60E3BE5AE9350007951164
SHA1:	720C52BF4B6839EAAD37BFD52DD314F1F3B0FD73
SHA-256:	EE3B0183799320D7F188C62A44CA22CF40B2013594649B4C1CBA0D7385A27A10
SHA-512:	0DBCBD165D7CFBE46B7FA0B157973E35112A8E74E1CAF5359F11CD2E09E4FB225C96B0448A86B756D5916A22E9666F24921F5125CFC799ED51BCFEB62D17D53E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...X.......7.....tEXtSoftware.Adobe ImageReadyq.e<..z.IDATx...{.\....s....70x.$..I..I..D..>$..\T.T.rq..........+.VQ.J.J...R.l...!'N..I.d... ...DIC..HJ.......=..7.s..A..=.~..#].....uO...................t;.&....:\|..Y.a.....f.2....gh%.@........#..j\|..h`..'_>~.....C.......G..6.{.x.m....<:{.....l.M.......G...v0..}.....\.....q.SmK.Z&.2q..........U..uxFih....K..1..1E..........d/...&....6....&...;......{B.gTfPh.....`K...t..e....!.F.......t0.d...`.2./.Ue.1..$-......@g_H.5..u.n..(....U...v.\|... .t.g./...;......35...v...".`+.!.4.bo\.!...4.M..E.....8.s..:e......h....a...5#....N.Z#......H..b...d.0...........sku..1....D..]........&...j.......DeF..5...@M.....!...P.-.RT..[.]....>$.......Y]m..)....(.\....[..6...P.......4..f9Qv..]<.......Y....H.vs@..:D......j...9............'^.n.2.q]kg\..:..V...................4O.V...2.*..u......T.S.....Z.....$..z...oK..P.......u-.......-S.3x=...Y^0.....]q=..%.%......@c...3..\v{=.aTSm..z......i.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3617), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	28505
Entropy (8bit):	5.3701313636046635
Encrypted:	false
SSDEEP:	768:LT2uPCXzhzmmIy1Pv3SAVfuhVMJWbmag3KI8iCffKQjO5oj5AemzeveWGF63KI8s:LT2uPCXzhzmmIy1Pv3SAVfuhVMJWbmaj
MD5:	BF1012EFB97C870584B9BD3614304C43
SHA1:	B71AD05C069CE0269128D150F0CFC8E98CD77F46
SHA-256:	A2DC6115E4445615ACC04386A0385D9D79265E127C34673659471E30F4261F14
SHA-512:	40D112AA6C5E1DE13AD201F7B2DDFC86B7A23FC4300B3B2CBD36D593ED20DAA3113FE298F11E3F7D3259A067CF1EA7942D5F6F6ADD67F4CE122F31546E4A4EE2
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>Sign In</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflare" rel="stylesheet" type="text/css" >.<link href="https://store.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=qUG5Ub5rrq2J&l=english&_cdn=cloudflare" rel="stylesheet" type="text/css" >.<link href="https://store.cloudflare.steamstatic.com/public/shared/css/buttons.css?v=Grv-5yNFuEfg&l=english&_cdn=cloudflare" rel="stylesheet" type="text/css" >.<link href="https://store.cloudflare.steamstatic.com/public/css/v6/store.css?v=fqF6X6wSBa3N&l=english&_cdn=cloudflare" rel

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1032
Entropy (8bit):	5.185411735346805
Encrypted:	false
SSDEEP:	24:2dC5A6LfEljMo+WLgrhhMyVS/XMleFvjzhBa/:cGA+fEljMoPsMbM0c
MD5:	116677D9305F23100D373B7D4BE25DEB
SHA1:	8430EC3309C0157DA2EBC4246D7C2B4D5120CF4C
SHA-256:	54F3C1737D72FACEBD20D1A07ADA71BD2474CADE30353497FEE424172CB44E9D
SHA-512:	05729DB27F43CF728AC38F9776A35733DFF095961B94C825BC27FD7D9AE0015506D34E23A192AA6CCEDF52960B852A04485985465F31BA51B641E23B6C74991B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 30 30" style="enable-background:new 0 0 30 30;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<path class="st0" d="M20.1,1H9.9C8,1,6.5,2.5,6.5,4.4v20.4c0,1.9,1.5,3.4,3.4,3.4h10.2c1.9,0,3.4-1.5,3.4-3.4V4.4...C23.5,2.5,22,1,20.1,1z M8.2,4.4c0-0.9,0.8-1.7,1.7-1.7h10.2c0.9,0,1.7,0.8,1.7,1.7v2.6H8.2V4.4z M8.2,7.8h13.6v12.8H8.2V7.8z... M21.8,24.8c0,0.9-0.8,1.7-1.7,1.7H9.9c-0.9,0-1.7-0.8-1.7-1.7v-3.4h13.6V24.8z M15,25.6c0.9,0,1.7-0.8,1.7-1.7s-0.8-1.7-1.7-1.7...s-1.7,0.8-1.7,1.7S14.1,25.6,15,25.6z M15,23.1c0.5,0,0.9,0.4,0.9,0.9c0,0.5-0.4,0.9-0.9,0.9s-0.9-0.4-0.9-0.9...C14.1,23.5,14.5,23.1,15,23.1z M17.1,4.8c0,0.2-0.2,0.4-0.4,0.4h-3.4c-0.2,0-0.4-0.2-0.4-0.4s0.2-0.4,0.4-0.4h3.4...C16.9,4.4

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19668, version 1.131
Category:	downloaded
Size (bytes):	19668
Entropy (8bit):	7.990241935108117
Encrypted:	true
SSDEEP:	384:nD+lKfPMph0Vqpq61EesbwVNGhD7NP4S6tt/WcqSERvBwmtXdtrkd5i:nilKfPMfM61EZEPGd7NP4S6LW1Z6Mmi
MD5:	EBE57B568CE1A45977040170A435165B
SHA1:	EF41D880D087B792E2BB8463423397A252452598
SHA-256:	AF5364BB2B8A76980443DD16EE76C93C0BEE727FA6716315F017893EFC0AF40E
SHA-512:	D55088F90C8F00BD525193C115910D898F4ED45BDC9EDD5B261F8B498D35CD646F384FEA1C69B3C8A735FDB20D703BB137D5FDB6532C1361AE18F8FEAFA69CE0
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/css/Rubikbold.woff2
Preview:	wOF2......L...........Lr.............................t.`..@..N..b.....0..Z.6.$..D..$.. .. ..;..G...'........t.OT 7....D...LD..@.......t..@..Ve...F..5..u.G...s.)2..+\|.8...4wSIt..D..ah4.R.g.....m..B.c...Qp..i.z...L..\..[...on.a.....J..V/.h.. 8ac%..-.b:.WHG.Q0.h.k.5..1.GPg...F6.(&...&._.._...5\w..Y.8.DGN..u\|of..:.J.CW..^.C.....&)$M..5.7X....>.P.os.n....(..f......O... k:.......!.Mj.V..,-.<...0[...a._......9........^kKo!..y..\|.....;{.r..:8.....\|..%Br8.....[....?.K..u.. .!.....X....m...y.k0w... ..y5.....RQ:...@...!}J.f)....vQf...6\|...)9..2.2eke..B..l:..1....+.K.........?..Y..B. . .)D.}8...o..t.rS.t.xH.....lA=.wK%......=..K............n)..A.4..W.h.3...........lw..\|.m.2.%.:..r.+..v9.......'..!9B.....:k:.s\i..,7........-...o..K{.94F..s..=.C...p...h..(......_...........1..;....O&D.......a..d.E.....o.0.j..\|...d....zqj...B..(.!,p-..6.[\|.[i.d[......aG...R!.g......2.9}.w..*.W9.....)}L.1.v..w...YG..!.....c....r.@..p.o.E..N........5..)S.))H.........C.b`......0

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	775
Entropy (8bit):	5.322550197378061
Encrypted:	false
SSDEEP:	12:TMHdw95i/nzVc/KYf3UWbMHDK9maflpc5xJVcKrYQN7lfcmASWcJoj5aVHm7M:2dC5A6LfEljK9TXc3JPFN7VASGoGI
MD5:	9C57532FF10253666F56FC7F30CC5F80
SHA1:	B536FDB8232CA0AC46DC2E0F5E31DB648F13423D
SHA-256:	6241ECE3CB4519A57D45C9330FEDC531FC94B0A40EA24AFE356322C5EE6F1501
SHA-512:	AFF4BB55CC73E99E4FC9F1EEAB94346BC298ED82A7D25A97316F246ECAEF1005E6D9EF2B6F042AB895BBA7AC466B3C3B250C55691F4C5C19301334BAB6CB80CE
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/icon-steamchat.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 30 30" style="enable-background:new 0 0 30 30;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<path class="st0" d="M19.3,5.2c4.2,0,7.7,3.4,7.7,7.7c0,4.2-3.4,7.7-7.7,7.7v0h-3.4l-5.1,5.1v-5.1v0c-4.2,0-7.7-3.4-7.7-7.7...c0-4.2,3.4-7.7,7.7-7.7H19.3 M19.3,3.5h-8.5c-5.2,0-9.4,4.2-9.4,9.4c0,4.6,3.3,8.4,7.7,9.2v3.6c0,0.7,0.4,1.3,1.1,1.6...c0.2,0.1,0.4,0.1,0.7,0.1c0.4,0,0.9-0.2,1.2-0.5l4.6-4.6h2.7c5.2,0,9.4-4.2,9.4-9.4C28.6,7.7,24.4,3.5,19.3,3.5L19.3,3.5z"/>..</svg>..

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1430
Entropy (8bit):	6.915444207165524
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVag7yJ3VR7GmXF54+mC8yq8/23CMwMIE+b8Dllc:HZNn2lpWJ3nnwDNmlPbUI
MD5:	AFC159FE5F0F26FA7282505DA9887CC3
SHA1:	C1CD55380C2AF435876989F94E8B0715042C2ADE
SHA-256:	4BE942A34871DD6F8F14B43D27C31B049BE7F6544C05685D4F35ABDD329DE176
SHA-512:	8F7DCB7E99CEED8F86575A05FF7D329EE2FC67CD18C6D53B2833A6AA1EEDE2586D57688F27901D941D2B6351412957468CCE5CA69101D86911390BF04FD82763
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:6E745BD792D411EE8F80E4F5B5148EC9" xmpMM:DocumentID="xmp.did:6E745BD892D411EE8F80E4F5B5148EC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6E745BD592D411EE8F80E4F5B5148EC9" stRef:documentID="xmp.did:6E745BD692D411EE8F80E4F5B5148EC9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{KL.....IDATx.b..U.d``.......@...4.....0.4.9...[`...e.5U...6V..G..d.....I2.].......?y.............^./....&.....

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2843
Entropy (8bit):	6.967423493204583
Encrypted:	false
SSDEEP:	48:o2/61MYLNnwknA9WpitbEsg9wlO/cHJ3z3VHi3bEs/Hc5mmDhhIZwldFWbd/9maH:/SyYRwknmWpiVbgx/mHqb/Hc5thdlubX
MD5:	41E851F8E42B6BF3414278871E93E8A2
SHA1:	A3811C7E1157F77950EC1F0558293BC90E432E82
SHA-256:	399F74C4E69EAC8B59B149293F9A573955FEF0A62B242CFA70346070013E0966
SHA-512:	F3C3549F1390B52791196E6F19584CBD4C4DB2B51FEF78C9C607C944079FED69B75E8F88594C3D647F2DDC29F282BF41BE455BE328AB27C091B4A37C41B00965
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/images/v6/logo_steam_footer.png
Preview:	.PNG........IHDR...\.........:.;)....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2019-08-09T13:37:29-07:00" xmp:ModifyDate="2020-06-17T17:39:04-07:00" xmp:MetadataDate="2020-06-17T17:39:04-07:00" xmpMM:InstanceID="xmp.iid:a6176093-d0df-1f4a-86f8-26e70acca1dd" xmpMM:DocumentID="adobe:docid:photoshop:5cf069c4-c89c-fa4c-8c00-dff9f3add583" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3692
Entropy (8bit):	4.541096987955606
Encrypted:	false
SSDEEP:	96:xUMi/QqnuFLVlI8nCrqJvGjsZe51ANllIDYbmsU2:xUUI5rqJvMoSq/
MD5:	19167C3199C6DF4F5D5D60BADFDF2198
SHA1:	4F1A79809D6F037E5B9FD2CD845ECF8D5EC7386B
SHA-256:	DB203D24E6E273D96875BBABDA7F92AD8E5EA266A8120796E9CBD99ACFA2A44E
SHA-512:	52ABE82400506A8AED277AED40D98A2057E9170E6D9B8484C67C7C52983BC750A3375BD1F8F1F38C9E733A0B3CF9BCBB7C4E79C9CBB05D2EC31D5814803834AE
Malicious:	false
Reputation:	low
Preview:	<svg width="80" height="41" viewBox="0 0 80 41" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M17.0302 25.4572C17.5338 25.4541 19.0303 25.3194 19.6642 27.4587C20.0912 28.8999 20.7714 31.2605 21.7047 34.5406H22.0849C23.0858 31.0825 23.7734 28.7218 24.1477 27.4587C24.7882 25.2971 26.3894 25.4572 27.0299 25.4572L31.9715 25.4572V40.8291H26.9349V31.7702H26.5971L23.7895 40.8291H20.0001L17.1924 31.7635H16.8547V40.8291H11.8181V25.4572L17.0302 25.4572ZM39.2039 25.4572V34.5228H39.6057L43.0209 27.0682C43.6839 25.5847 45.0969 25.4572 45.0969 25.4572H49.9708V40.8291H44.829V31.7635H44.4272L41.0789 39.2181C40.416 40.6948 38.936 40.8291 38.936 40.8291H34.0621V25.4572H39.2039ZM67.7431 32.762C67.0259 34.7945 64.7735 36.25 62.2798 36.25H56.8876V40.8291H51.9981V32.762H67.7431Z" fill="#0F754E"/>.<path fill-rule="evenodd" clip-rule="evenodd" d="M62.5155 25.4571H51.7416C51.998 28.8794 54.9452 31.8091 57.9962 31.8091H68.0827C68.6648 28.9648 66.661 25.4571 62.

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1589
Entropy (8bit):	4.846757444405295
Encrypted:	false
SSDEEP:	24:t4Lx0g2jT00GwGlGNGfGasGnMGQtXSAFuWKWHtOesHj8VSFt0SvRCe2cez4hJGzE:+xG/0/zcUuInHQwbWHshIenhJdoMe8F
MD5:	09BA266E4538393140AF3DFB119FF316
SHA1:	3FE402ADCFC131C7F2428799FEC5703A96A42C69
SHA-256:	F9DFD02F603715CB12A8B0530E0C4DEC21ECF4104C053BF62DD8139F19EA47AF
SHA-512:	CDC1AB1C8BCD05659AF4040146A3EE06C4CC8C2A026ACD02E420B12F534789ECC306296553981580475C383BBE103FB3A5358044DEEF8C04B422972E98CA6399
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 65 65" fill="#fff"><use xlink:href="#B" x=".5" y=".5"/><defs><linearGradient id="A" x2="50%" x1="50%" y2="100%" y1="0%"><stop stop-color="#111d2e" offset="0%"/><stop stop-color="#051839" offset="21.2%"/><stop stop-color="#0a1b48" offset="40.7%"/><stop stop-color="#132e62" offset="58.1%"/><stop stop-color="#144b7e" offset="73.8%"/><stop stop-color="#136497" offset="87.3%"/><stop stop-color="#1387b8" offset="100%"/></linearGradient></defs><symbol id="B"><g><path d="M1.305 41.202C5.259 54.386 17.488 64 31.959 64c17.673 0 32-14.327 32-32s-14.327-32-32-32C15.001 0 1.124 13.193.028 29.874c2.074 3.477 2.879 5.628 1.275 11.328z" fill="url(#A)"/><path d="M30.31 23.985l.003.158-7.83 11.375c-1.268-.058-2.54.165-3.748.662a8.14 8.14 0 0 0-1.498.8L.042 29.893s-.398 6.546 1.26 11.424l12.156 5.016c.6 2.728 2.48 5.12 5.242 6.27a8.88 8.88 0 0 0 11.603-4.782 8.89 8.89 0 0 0 .684-3.656L42.18 36.16l.275.005c6.70

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4759
Entropy (8bit):	3.8320403432185826
Encrypted:	false
SSDEEP:	96:aLm9W6Wd6fHZaGfgNqjoqLBEmlEfVZZGcZzXNfTXXSSH7Uywn0Tn:a6FC6BaFN47VT4VZZtXN7Xj77wn0Tn
MD5:	D8AF77328087BCA3B16453A8D5CD29A8
SHA1:	E43DA3C95ED60064D5439A0F80A0D2AA2B3EB23A
SHA-256:	98990220A244C39620A11191682A4C1D540C161A1EC93CA46E5D77466D98B3FE
SHA-512:	1BDBB6BBB42E88344F16ED708DD0EE616BAAA5CDCC7045202FD1638F6B81416C492DEB30CFCB8828F0541A6BC9B5FCA43A4399CC5F61FABC89C01DC16209C775
Malicious:	false
Reputation:	low
Preview:	<svg width="81" height="41" viewBox="0 0 81 41" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M57.2408 13.4948V25.3906C57.2418 25.4341 57.234 25.4774 57.2178 25.5179C57.2017 25.5583 57.1775 25.595 57.1469 25.6258C57.1161 25.6566 57.0796 25.6808 57.0392 25.697C56.9989 25.7133 56.9558 25.7211 56.9123 25.72H54.494C54.4507 25.7211 54.4076 25.7133 54.3672 25.697C54.3269 25.6808 54.2903 25.6566 54.2596 25.6258C54.229 25.595 54.2048 25.5583 54.1886 25.5179C54.1725 25.4774 54.1647 25.4341 54.1657 25.3906V13.4948C54.1647 13.4512 54.1725 13.4079 54.1886 13.3674C54.2048 13.327 54.229 13.2904 54.2596 13.2595C54.2903 13.2287 54.3269 13.2045 54.3672 13.1884C54.4076 13.1721 54.4507 13.1642 54.494 13.1653H56.9123C56.9558 13.1642 56.9989 13.1721 57.0392 13.1884C57.0796 13.2045 57.1161 13.2287 57.1469 13.2595C57.1775 13.2904 57.2017 13.327 57.2178 13.3674C57.234 13.4079 57.2418 13.4512 57.2408 13.4948ZM76.1174 13.1653C76.2115 13.1653 76.329 13.2121 76.4458 13.3065C76.5166 13.3768 76.5166 13.4

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1212
Entropy (8bit):	4.955390112206397
Encrypted:	false
SSDEEP:	24:2dC5A6LfEhXUzXwv3HDIVgCawkkGb8MjzZ+EqnP:cGA+fEtUUb9wkktMHZ+E+
MD5:	A12CFFB3B582F0D0F6EA9C9C36B74A5E
SHA1:	2555282495D3802EB37BFDBF8B1F97507E125642
SHA-256:	CAABF4747B164EB5FA61A0D1461443961FF2FFAE35EB60869F2E4F93D1530CF1
SHA-512:	14D2F2F8B3CFC0A3B0E3892010AA9CB06550455A3DA20EF75A47BEADE2D39DF4584759F81AC26EA26CA227767FC6E45B0838D927D77FC1DDE40E68050E39BCD6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">..<style type="text/css">....st0{fill:#24ACE3;}....st1{fill:#FFFFFF;}..</style>..<path class="st1" d="M18.1,15.6c-0.3,0.7-0.7,1.3-1.1,1.9c-0.6,0.8-1,1.4-1.4,1.7c-0.6,0.5-1.1,0.8-1.8,0.8c-0.5,0-1-0.1-1.6-0.4...c-0.6-0.3-1.2-0.4-1.8-0.4c-0.6,0-1.2,0.1-1.8,0.4C7.9,19.8,7.4,20,7,20c-0.6,0-1.2-0.2-1.8-0.8c-0.4-0.3-0.9-0.9-1.4-1.7...c-0.6-0.9-1.1-1.9-1.5-3c-0.4-1.2-0.6-2.5-0.6-3.6c0-1.3,0.3-2.5,0.9-3.5c0.5-0.8,1.1-1.4,1.8-1.8C5,5,5.8,4.8,6.7,4.8...c0.5,0,1.1,0.1,1.9,0.4c0.8,0.3,1.3,0.4,1.5,0.4c0.2,0,0.7-0.2,1.7-0.5c0.9-0.3,1.7-0.5,2.3-0.4c1.7,0.1,2.9,0.8,3.8,2...c-1.5,0.9-2.2,2.2-2.2,3.8c0,1.3,0.5,2.3,1.4,3.2c0.4,0.4,0.9,0.7,1.4,0.9C18.3,15,18.2,15.3,

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1840
Entropy (8bit):	4.655269725457744
Encrypted:	false
SSDEEP:	24:VEJ7CWDdEOxx9ud0SEubERQUTS3nWclTvErUHiEt+:V+7HpxL60SnbhUTPOTv7C5
MD5:	6525474C49D3DD63567EE19B0816F4E9
SHA1:	EA407FEB9C8611F08FA9D27C51FD0C222271EC44
SHA-256:	17CFF7BC75A3CF19C7C3412C514B4C0BB651DF34BD4EE6717C6BF1F920302506
SHA-512:	09F9F7C5ED1173C5C0A82F425547DBAADEE79CFF9BEB8686EF9B30A182F0930D0EA9C2432FAD320E13CBC9A8DBAFAD22CCD2460F9EF414C115E339669B0E7237
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/css/slick/slick.css?v=ZSVHTEnT3WNW&l=english&_cdn=cloudflare
Preview:	../* Slider */...slick-slider..{.. position: relative;.... display: block;.... -moz-box-sizing: border-box;.. box-sizing: border-box;.... -webkit-user-select: none;.. -moz-user-select: none;.. -ms-user-select: none;.. user-select: none;.... -webkit-touch-callout: none;.. -khtml-user-select: none;.. -ms-touch-action: pan-y;.. touch-action: pan-y;.. -webkit-tap-highlight-color: transparent;..}.....slick-list..{.. position: relative;.... display: block;.. overflow: hidden;.... margin: 0;.. padding: 0;..}...slick-list:focus..{.. outline: none;..}...slick-list.dragging..{.. cursor: pointer;.. cursor: hand;..}.....slick-slider .slick-track,...slick-slider .slick-list..{.. -webkit-transform: translate3d(0, 0, 0);.. -moz-transform: translate3d(0, 0, 0);.. -ms-transform: translate3d(0, 0, 0);.. -o-transform: translate3d(0, 0, 0);.. transform: translate3d(0, 0, 0);..}.....sli

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	9608
Entropy (8bit):	7.948370579592546
Encrypted:	false
SSDEEP:	192:7lIJ2HiLpW9lE6vJnGxx2X23DXkvh4M0V6wC0vFPcKYl4XhNzrg0:7+zp8lE6v56x2kkJ4M0V6iNYlOhNz
MD5:	1C84A18202DFE434A1EB723AB76578B6
SHA1:	10ABD9F7D5742913F8C384EAC15E380BE9460955
SHA-256:	0A9A89B380CE55342528674AA3AE74D3DBF78BC44F92FDDA19B8F52569A80561
SHA-512:	DA3F09082A3AD3B495BBD3A1ED4564B8D1B908422DD10D354E7312BC2929C535A1D1AABD64338845A8330B80696394244C5857A2F47B7416FE0C232E06C6AE7E
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/1172470/capsule_231x87.jpg?t=1708706824
Preview:	......JFIF.............C....................................................................C.......................................................................W...............................................V.............................!1."AQa.2q.#B....CR......$3S...8Wrs....&46DUVbcftv.......................................;........................!1..AQaq.."2..B.......#3Rb....$r.............?.y...xc....qF....U..M.(.-......q...9a..P.0..6B.....%..d..ea.PUO...O...?H...mF.F.{..y...]..:5..\|..Q4)w.q.......{5GZ.....L.Y....NqL.rr.C.H.Jl.Ao.cL...{.......Fy.uN.!..2..q^.............vqX....f.hk..A:.7@..'%..\.':f.... e.(\).r.....yca..6..b...x4y...y....h.k..X....5.Q.b7.X..j.B.d:.{.t..c.<w....%E).'...+..C.N...........)..W...S......(u...T..c..}..%JCj...J.`z.)N..c....G.F.?....]>.....5*.H.S....C.q.]..Ud.{..Q..M...[H:.@6..;....Z.+..[4.[..w2Vm.f.i.G...8Lf.T.U...R~.\.P..<O.P.\........p.Q...+J...r.2.......RR...!$..).X.....Jk;..q..%W[SR....w.Y......{..T....J.y...`S

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/img/logo_steam.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	4628
Entropy (8bit):	7.8724489340157495
Encrypted:	false
SSDEEP:	96:hgIP6dVlLjvcB2yBU0XGoCfYQatjTXYVaQfmkQWwzHZmkaxx:hgIP6tjxWUq1CfYTtfrFkQWiA
MD5:	7EAEACB7114A50DEF5D1136EA179BEC0
SHA1:	838EB0F0662DCC408D1D2E4B214D1130608B3660
SHA-256:	5138DBE38499F0D4E938F23841AEA899B641499E78A8862A1F7B09C2B902305B
SHA-512:	082840F4D49F81E921CD12ABBEC3DDF5E1BBBC439104C9F1A9CC153F161C3478F34CF49FED19E12341923DD3FFE23E5A0E78515334D644AA047C2E015F7817B3
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/252490/capsule_231x87.jpg?t=1701938429
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................W..............................................V...........................!.1A....6QUVaqtu......"'27......$&3FRT.....%s.#4Dcder.....................................:...........................!1AQqr...45RSa...."T.....B...............?....0...+........p..+......3._..\.p...............1.w.\........+....Y...p.5.<..f.f......0.r..........W.\.,....r.\..`..4..20... ?\....x.%,.LK.k"....+.c.z..[..sD.s....Sj..7.Dw....'.>..K..K...q..w.?1?,y.'.N.........y..c....r{....@..x~.w......O..c..'f..........>...b~X....'f.................'.6.....Y.\|zf..fT. ."%X.k.}.m..]....9]~.q..ZK...3..g..h.mv~....d39.L..Y.....K..4..s2.X.S.\|....3O80.B...c<....\|..]..y.9......8=E.<...2q..B..a."RV.......E...K...K?v...ra....!R.E....0#..0&...#(i..O..x..Y&.d..w....: .4..R..9*....eQ..D.i.I.s..e\|....D....OX..M...b.]S.4H4].E.....M...}..y.y.....m..4..

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	69679
Entropy (8bit):	7.470982114661118
Encrypted:	false
SSDEEP:	1536:3XWmI8g4DLn+3MeMpH3NGLxHDzRcS7qN0iN1EkVU0nr8rTO:y4DLGMzpdGdHDzSOO0iN1uNC
MD5:	A440D4B512F4D2B9B63D3AB8818FC9E3
SHA1:	90DAC8C11FFFF8E0B345D11A55049C088EFF2165
SHA-256:	2DE63CB5AC9431E6FEBCD4DFD7527D98654452BDDD468FE45B93E22CEF67AE15
SHA-512:	90DEBB4D79FF0B1136FABE5809B8E6B88259A5668240F25EBDCB6B5E844A9B84415A7B37CF87FCCDD68E1CD4A686A2BA8265D603CFA513A83CB87F7B41ADFF0C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............8.y....pHYs............... .IDATx...y.]w]..&i..VZZ.P...)"........g.U......P.w.*.PH..9gr.5PA..9....B. "b.Y.Z...-.4..d.. ..%Mg&w9...<.....\|...p....Q........t.#..........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:..........G...........

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	14527
Entropy (8bit):	7.947617495774518
Encrypted:	false
SSDEEP:	384:oVNkG9ntr9PQHzThDzgWDigJnJRFhgmVhm6ZuZ:6RnzPOTh1DigJnJRfPm6Q
MD5:	0E106043AA095D5F9CC22B09E1B0574E
SHA1:	763BA3E4F94A38ECC614F4217C4EC9EAE7A3FF1D
SHA-256:	61042B3BB2B1FFB93ED93EF3719CD42BEF0E9F997B4566DE3DF2BFA6F462C4BD
SHA-512:	91A040A916AC1CB8A42019018AFB1B533A04164FD5DCA1469BC0BE7546B62A74E76F40F472F6FFC89FADCED7A28EE87243D31A35C00AB634BB7E1EC099B0B056
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................C..........................!.1."AQa..q.#2..Bb...$R......4CSr.......................................>.........................!1.AQa."q....2......#B..Rbr..C%3S..............?../R]a..%#...o.Mr..m..............W..CZ)..Z..m..ps...5/W..".1LqS. .....^g.V...+..-.e..9.K..Z...P......W.s.......E .....\|.E!.M{.$..jo..SNmRJ...'..`.H....w...N,.......4V....P#...I.\.H..0..i>eLv.(....z.C..3).I...M.6........p>.W...,..$..J.....?..(#..+..D.F.*.. .%.).}.:....!E ...... .f0`.....29...P.S"..-.>..[Y..l.W.H.Y......MX..2.A..=.u.j..:T...)...P.... 7..\.e)}.C ...K.5.).T.v..z.e..h...+.\../...'.w/.&.3..lzQ..s..9#..Y.n3.........FG.t.....&4..E...P. a....XI...k.].H.JS..j.~`I......tR.d7.....S.T...`...c...Ad...i...oZgz....T?.....W.....j.m9...J......S.YJ........)..o...FM..%..

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/images/footerLogo_valve_new.png
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (361), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	57258
Entropy (8bit):	5.243366680566906
Encrypted:	false
SSDEEP:	768:kHHithZY2ucy8vQfVYvArYRaeNBJk0XHBkwQ+JOJSk3acbAHEvaSlEP04rn/xENj:of8JXNrhBcRTUEFwiKYfBn
MD5:	3D42397BCB312EC07D70AE0D68FBADDE
SHA1:	3AF248D34E6A31B3D3269C65505458D42372EF0B
SHA-256:	53961D66B24EF8CC16B6CB5CB249CDF311AA89B6AFC70F06A242FCCC3A4EFCD3
SHA-512:	F4C325A231B11CE6A3E2899367E081CD6AC2E7AC1469542414BA0E3B57DF5897DF51615E2AD0AB6559E6B38003FFDBFA533C6E5701D0BC2F40FAE80EB4332348
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/css/v6/cart.css?v=PUI5e8sxLsB9&l=english&_cdn=cloudflare
Preview:	/* CSS Document /....body.v6 {....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal /......}.....tooltip_q_ctn {.. background: rgba(255,255,255,0.4);.. color: white;.. border-radius: 10px;.. font-size: 11px;.. padding: 1px 5px 2px 5px;.. cursor: default;..}...tooltip_q_ctn:hover {.. background: rgba(255,255,255,0.5);..}....body.v6.checkout .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -50px;..}....body.v6.checkout_microtxn .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -10px;..}....body.v6.cart_page h4 {.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal */.......font-weight: normal;...color: #c7d5e0;..}....body.v6.login .rightcol h2 {...margin-top: 0px;..}..body.v6.login .rightcol .spotlight_block {...margin-bottom: 25px;..}....#checkout_review_cart_area {...margin-top: 56px;..}....#payment_info_tab .checkout_content .payment_info_form_area {...background: rgba( 0, 0, 0, 0.2 );...paddi

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (540)
Category:	downloaded
Size (bytes):	152535
Entropy (8bit):	4.888351717392639
Encrypted:	false
SSDEEP:	1536:G1+c8DDLDcD7zeEC/d8rekYrpfEGqQ+e+kL76cS1mk8ksKDPHs6o:pDDLq8dH9E3en/6cS1mk8ksK2
MD5:	83B9669907D4EB8025F878220AA4AC95
SHA1:	D81EB5329FB7D277359E852B92AC41BD159A0665
SHA-256:	CCA9B330D467D662BF8F8B62096E8ED6C36282EE832A4B1D65A550C4FCAE1FA0
SHA-512:	16BCAEF428777AE9EB034032EACAD960E7D3B96A4293508E6A7769F4B1D6417B87127631AEAEB560FDF4316BEEC4195AF44AC9C4F0687B20764FE82FB98C4A0C
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */.html {. font-family: sans-serif;. -ms-text-size-adjust: 100%;. -webkit-text-size-adjust: 100%.}..body {. margin: 0.}..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {. display: block.}..audio, canvas, progress, video {. display: inline-block;. vertical-align: baseline.}..audio:not([controls]) {. display: none;. height: 0.}..[hidden], template {. display: none.}..a {. background-color: transparent.}..a:active, a:hover {. outline: 0.}..abbr[title] {. border-bottom: none;. text-decoration: underline;. -webkit-text-decoration: underline dotted;. -moz-text-decoration: underline dotted;. text-decoration: underline dotted.}..b, strong {. font

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	909
Entropy (8bit):	5.227289567410614
Encrypted:	false
SSDEEP:	12:TMHdw95i/nzVc/KYf3UWbMHDunZkALoTR/WPRnRgXsOvOPfrQfUL3hYcQfF3V+nF:2dC5A6LfEljekJ/U6O3rQrbOzUq
MD5:	EB6A8F3B1987EF551C5CBA0E3C8A31BC
SHA1:	24FB244648E743743EFB551D6E5E4E110C6B9172
SHA-256:	8DE1B771193EC086420605FE46A27D394C858BCE7FAB5B99945E0B0BA0BE7355
SHA-512:	AC2CD0F8F4F6179AD9A69A89AA703099F64727B5944B533916CB2E79D9445024A3201954BCD5CC597F04F79EBAB4347009153BD1AD75CACAD8E7F945EB552D7E
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/icon-earlyaccess.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 30 30" style="enable-background:new 0 0 30 30;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<path class="st0" d="M15,3.3c3.2,0,6.2,1.2,8.4,3.5c2.2,2.2,3.5,5.2,3.5,8.4s-1.2,6.2-3.5,8.4c-2.2,2.2-5.2,3.5-8.4,3.5...s-6.2-1.2-8.4-3.5c-2.2-2.2-3.5-5.2-3.5-8.4s1.2-6.2,3.5-8.4C8.8,4.6,11.8,3.3,15,3.3 M15,1.6C7.5,1.6,1.4,7.7,1.4,15.2...S7.5,28.8,15,28.8c7.5,0,13.6-6.1,13.6-13.6S22.5,1.6,15,1.6L15,1.6z M21,20.3c0.6,0,1.2-0.3,1.5-0.9c0.5-0.8,0.2-1.9-0.6-2.3...l-5.1-2.9V6.7C16.7,5.8,15.9,5,15,5c-0.9,0-1.7,0.8-1.7,1.7v8.5c0,0.6,0.3,1.2,0.9,1.5l6,3.4C20.4,20.3,20.7,20.3,21,20.3L21,20.3z".../>..</svg>..

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1160 x 732, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12815
Entropy (8bit):	7.014464142056217
Encrypted:	false
SSDEEP:	192:21v8HQ84FLNUWAptA8QSmao1JxWf2q2UPAXNd9LgybPlZRpo:0Ew84FLNKW8QI+TWf2V9d5xPlvpo
MD5:	9A5590AD97F2C09D2E43F534E70ED17B
SHA1:	EA0BA0AF73F68AFCE940ED54E23AB6859748B8A4
SHA-256:	81B1FC286CBC031A38DC4270553D0DAC16B0798D1AE26FF06C507D1413880C5D
SHA-512:	667D62B22BB896E8B4407B07A85DCD998E1EFBE1E16B77451E1A5778D22DEEDF17C6B05DD0EFD65D7708C399AB68A55480C78B17F98EFD035BF6EFA508054376
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:3887838820A311E9B7D1B6B8F5EA6CE2" xmpMM:DocumentID="xmp.did:3887838920A311E9B7D1B6B8F5EA6CE2"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3887838620A311E9B7D1B6B8F5EA6CE2" stRef:documentID="xmp.did:3887838720A311E9B7D1B6B8F5EA6CE2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...S....IDATx...Ald.}..?9....C....".q....F.% ... .%9.H..i...m4.&.8(.[c....!N.......h{.. ....F#d.@+;.@7.j..W..wH.f4;

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	9294
Entropy (8bit):	7.9458968864760795
Encrypted:	false
SSDEEP:	192:3X9vgGs3lj2nj81F4x/x4xktovTvQWa6mkFXbzyjZLREahNPg3+2H5H:96p2jZ/tKroWDNbMZLREyNPguEN
MD5:	3CB2A8BC6B5401D48521D4B6500D258F
SHA1:	CD43833F0C0E7F8C74D620914D9447BC8151B336
SHA-256:	153DF736AF51B73496267059E547141828D2828FDD29EE56122CDB9637D76509
SHA-512:	4D36B919366F1F0F4CA156841DEED93E21A80CBB7F54390F77D0329E69E31EB7B914C62171A210D3113BDAB0470B9E342947F5DBDAF37FA39471C2ADF62996BD
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/1938090/capsule_231x87.jpg?t=1712178612
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................H...........................!.1."AQ.aq..2.#B....$36R.....(7Sbt..Cu.......................................?.......................!.1.AQ.."aq......2.....#B...45R36Frs..............?..\|p..H.0..T@I>.0.q...Hm.n...8...K..U5.N...Ie.....~,o.~Xu..._sK.46...P."..sa.,i;XX...........bI...$...6..{q.h......4.),..?..7P.....d+.mJ.vV..e.1......=Z.gN.l}.V.M....n......H.bnU..6.`.k $.\J...{*'p....r]...(...-..jM...M.....:...2....vU..I#}.~_\...&]..\|?-)>N.O.#.)...@..k:...T.T....F<..s(....Z..ACi...{.U...XR.8.....H..h.:........x>:.,..{...o.~qK[...c..0.qj.R..,s..;y...R.o...Sw..;..c.i.Z....-.....[2..\|.U..}../!.....`./....a:.o...P.Y..~.J..b..B....l.{.Gh.M..q.~.,2.EF_s.....V.D.....OQ.978XP.X.....D...` ...` .......5}Q.G.F...E.=..........ZYR<.<.... ......#...\|...[..9..l"....]

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14133), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	14298
Entropy (8bit):	4.922451656521402
Encrypted:	false
SSDEEP:	384:+iMnP6zXl3CqV7E9HueUlKEghpE9u2waswSdk0:tzEqV7sHhHE/hwad10
MD5:	147305D13868EEBEAE3ED7CE0006BBE2
SHA1:	B0F8CA2EB775C7EC0149BF4495BCC4058F32B239
SHA-256:	FA35A83BDFEBD6DD197CFD63D2CC74B68516B59F63D90CF04CC25D04D2ED97D3
SHA-512:	0B53D52C951458D2F32DB08B1348C31BBFE2C84EC96597600523C1DDEC755D9F1CC5DA571D1762A6B718011F597FC47726B1C895FD22A7736EABE0D353DC2FC2
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/applications/store/navevents.js?contenthash=f90db20908eeaa871cf2
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[4103],{199:e=>{e.exports=JSON.parse('{"unknown":0,"store.steampowered.com":1,"steamcommunity.com":2,"global":3,"default":4,"application":5,"subscription":6,"search":7,"cart":8,"app":9,"global-nav":10,"global-account":11,"storemenu":12,"search-suggestion":13,"about":14,"suggest":15,"dlc":16,"storemenu-recommendedtags":17,"footer-genre-dropdown":20,"footer-category-dropdown":21,"footer-about-dropdown":22,"footer-help-dropdown":23,"footer-publisher-catalogs":24,"spotlight":40,"message":41,"marketing-message":42,"daily-deal":43,"footer":44,"header":45,"name":46,"more-details":47,"notification":48,"login":60,"prompt":61,"join-steam":62,"successful-login":63,"successful-joinsteam":64,"main-cluster":100,"featured-win-games":101,"featured-mac-games":102,"tab-Ne

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19748, version 1.131
Category:	downloaded
Size (bytes):	19748
Entropy (8bit):	7.986976909341675
Encrypted:	false
SSDEEP:	384:fRXLoduwQeSxD0hjgQyLLDhFiAU0dgtjd4oWeQSWp8q3DbTXOKEXAN+XV/E:fVLoqxAhMQyLLnw4oWeQSWPDXBEm+RE
MD5:	47C8FD561D0343299787AF919FC32EB3
SHA1:	B38DB023D9FAC030DE240496ED39E5E276AFF2FC
SHA-256:	44758A4D345FE2C7C460301567D19C9E9A5C467207C507B3CFF9560ADD600C0A
SHA-512:	814C8A42500B2855B2FD8A5A0126BF17361CB730700775C8050580BE652B1A37F46EE0FDB530A0713BABDEBEC3C8954916A9334AC8F7A76426EA993B7A6F324C
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/css/Rubik.woff2
Preview:	wOF2......M$.......p..L..............................t.`..@..V..b........7.6.$..D..$.. .....;..G.j....vEp;....aFbt;.Q.y..86...#..P...iIe.m......l.]...R%.)....cD......T.<....(.d.....lx..m2U......k....4B..O....w .D.x......IJ..,.MBZm.,\..1.8.%....c..,.]....[....U.J...7.H.v..?.0..).9zq..&/jv...t..f.5....).v7UV...@@....zD...].M.->;@..W@...P.<@.8.DQ.(..f.....{..]....e.'.....oT.6q..$Av..x..p.Gu...V.5et....1S.'.<...q">...n&..>../4..k....T)..+0:..O....Q.G. ....0.A7._.........yZS H..J.........z......4.....M4..e...s@..FZ..}....[......}.....2.`.,.{.f.vV....z.re.. ........:..\7.#.N...#.j.;Q!@.@N.)Hr..oT.2Uk..N..t.UA..4.%..@..........P ...X.B...7....V...+.m........>&KkZ%.J..;.GB.........T..O..e...a..$.Y...0e.Z.U..Lcy&7....J...k..n...p.%9'....!._.V..Z.7?D?...P.au...\....Q...aT.C$T..v$L...716.o:....7.V.bh./...^...........X...'!d[8M..0....7`..f.o..A^..................<..O.I....f9........J.Ra(...#.=....R..oo..}n..o0!...#...._{^...n.......U.*.VD.1FD..

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19514), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19679
Entropy (8bit):	5.344516872093704
Encrypted:	false
SSDEEP:	384:+rzIOCWa/OJb2ncEJRVZ43ftUwP/S+rHDwmLM4h4DnSONI1LgnVab9NRI+/nvZ:Hvab+5Ja1tSkHDwSM4h9cnYb9NRI+/nx
MD5:	B1B43CCA5AEF3D6695AF001776A0FFB2
SHA1:	B2DE00A767296EE18637C48391436C40DF8C2997
SHA-256:	6305EAAF0C55452FE485299D7DE8685E5F55C45587B0FF0C7DB5884C740AB324
SHA-512:	7946C2B324A4997D1FC40A799285F54F387DE09205C3A72D505829183A8B7CB55828CFBB548F6CC2D027D4B6E2A52D047A0FA2A821AE772A467DDAC4F731C64F
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/applications/store/manifest.js?v=sbQ8ylrvPWaV&l=english&_cdn=cloudflare
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="8808118";(()=>{"use strict";var e,a,n,s,c,d={},f={};function b(e){var a=f[e];if(void 0!==a)return a.exports;var n=f[e]={id:e,loaded:!1,exports:{}};return d[e].call(n.exports,n,n.exports,b),n.loaded=!0,n.exports}b.m=d,e=[],b.O=(a,n,s,c)=>{if(!n){var d=1/0;for(i=0;i<e.length;i++){for(var[n,s,c]=e[i],f=!0,o=0;o<n.length;o++)(!1&c\|\|d>=c)&&Object.keys(b.O).every((e=>b.O[e](n[o])))?n.splice(o--,1):(f=!1,c<d&&(d=c));if(f){e.splice(i--,1);var r=s();void 0!==r&&(a=r)}}return a}c=c\|\|0;for(var i=e.length;i>0&&e[i-1][2]>c;i--)e[i]=e[i-1];e[i]=[n,s,c]},b.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return b.d(a,{a}),a},n=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,b.t=function(e,s){if(1&s&&(e=this(e)),8&s)return e;if("object"==typeof e&&e){if(4&s&&e.__esModule)return e;if(16&s&&"function"==typeof e.t

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	11929
Entropy (8bit):	7.952170020439648
Encrypted:	false
SSDEEP:	192:ZWJoUnG4T6t391rz+XrLGNpCkXuRDQT1bocAPOSVv9M9alvJt/Lby:GXnG4TW98c+cAPxv9DvDO
MD5:	71500F3226256C0488C8448BE30CA932
SHA1:	BCB2A2A6CD9D29F997F9C12FE9DEC76792520AE5
SHA-256:	97CEB02593913A9A69E82978A5C041F8A6C866847261B34AFC613F41076956FA
SHA-512:	1547C44ADBB21F927F0D6CB49F5D51AFC88A48A3291609E9BB73D93483B3B7EDC12DA045EB8C8C6D62F63C743FD6D3705445A1E3FAE6D9E6C648C067A2AFA924
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................@.........................!....1AQ"a.2q..#B..Rb...$3..%S..r.................................../.......................!1AQ.."a2q...........R............?..s.E..c....z.D.iG^.F.$I..n..G.M.j....O.7..1..N..a.5..q..Q5........o\....x...u......K.=N..u. $......1n7....D.......!..R!...U....8.......e.....(.l.t\..hsUv.:'4....j>.T.\|.y.....L..].[.i..F..b.a..d..V...Q.n.\..=mwz.\|..[.z0..b....%e,l..^y ...{......IY.H......L\u&l.M:,`.P.....ovw......@.'1..M...k...X.)T.....,..{.....Q#h......t..=.M5....<.v,.'.$......E. alw...r...u.+...P.;.+.hb...w...&.~>.r....L....Z.<@....(t......;.5l.<.P.k P]....~....AV.1'..\C..Yv.J.Ie.i..w.q..}O...Mi&.Y..n.a..p..y.,.N}~.N.5..B.e...H.Wg .s......G..;>....Ke3.U*.e\|..Ryf..(9'.'..U.)..R...l[l..{..../.=8.....e.x..z0.A..Eo)8H......W~).kD.c\

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	16176
Entropy (8bit):	7.9591451097015815
Encrypted:	false
SSDEEP:	384:AEFpMV5IjELANrsalgkhHZSU8ODfSDvzB5LiME:ArX3LANrsaBQBaA+
MD5:	CC57DB724B2DF76541E91E393B383D23
SHA1:	46D70EF26F2DEF9ABBCD689486C5914499496579
SHA-256:	600181885286067C154DE0CE35771F5E8533614C353B13975D9DF51CEAEC28A6
SHA-512:	91A9D9DEDF32D949021A7356948F9A9AA097F2573F162A1FF30C546169CA473F797B2BF372DFEBCB1A90F3CD9E369820416CFF8A51F0ED2D4171F2EFFD1C64EE
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/2399830/capsule_231x87.jpg?t=1712339593
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................;.........................!..1.".2AQ..#aqB...R.3b$&C...r...................................5......................!..1AQaq..".......2B.#R....$............?.s.F).-e.S..52..rN=C.@$uJ..y..G..Dd.m.+.T%.......Bh...j...I<...S...Z..b.].;S.oN..i.B.aJ....f..@..$Xw.Z.t...?..!..g...3..V.....&p.b..Fy...O.=[&.F.4.j...#+{.E..$^$n@...d.K..J.2..mg,..k....f.y.<.t.?.F...M.j....1A.L.....Tc.:.yiq.....SMA..{....-U[@............D....r...Wm5QW....y..6pN.....p..7...,.(...cj.6..%uk6..LZ8..?R?.H....l@......49.=?_..$.k),..3".8....o9..^.........j.g....Nv.N.........!W.RA.o^ib.)..>&}.pP.......AQRoaL6.x......@...j..'...{.RJSO.A..... Y.3.Ql.'c#..dm#....!...R....5.....<rF.}L.s....C`..).J.ItV..M5$........GALR...h.wM.j)...Jy./.R.i $p.O..9.<.O.R.....m...'..~...u4f[\q..r

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	4298
Entropy (8bit):	4.635237014085188
Encrypted:	false
SSDEEP:	96:a+f+I/+hqFwozCxb7rg1jZU07rPEBT0HXBVLjn2tFQ2Q5d:X+I/8qFwh5g1FLrPEWRtnirQf
MD5:	BD36CB9687484D582930354864210A91
SHA1:	4BC5DFA71E0EBE80A1A4360152E76A5B133A084B
SHA-256:	722C4826277966EDF479138B565EFB7BDBF1C875701BCD55D2A29422C2F93F5E
SHA-512:	4F81331487105BA60B16996CD12D19415F146A70EB01C9DDB02D5A788E605A051E8FE79C3FCD4F7D8490FA61D022177C3B6B78CCF443B8C84EA7BC12722F4607
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 150 32" style="enable-background:new 0 0 150 32;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<g>...<g>....<g>.....<path class="st0" d="M7.3,30.4c-0.8,0.6-1.8,1-3.1,1c-0.9,0-1.7-0.1-2.4-0.4S0.6,30.4,0,29.8l1.5-1.5c0.3,0.4,0.8,0.6,1.2,0.8......s1,0.2,1.6,0.2c1.4,0,2-0.5,2-1.5c0-0.4-0.1-0.7-0.3-1s-0.6-0.4-1.1-0.5l-0.7-0.1l-0.8-0.1c-1-0.1-1.7-0.5-2.2-1......c-0.5-0.6-0.8-1.3-0.8-2.3c0-1.1,0.4-2,1.1-2.6c0.7-0.7,1.7-1,2.9-1c0.8,0,1.5,0.1,2.1,0.3s1.1,0.6,1.6,1.1l-1.4,1.5......c-0.3-0.3-0.7-0.5-1.1-0.7c-0.4-0.1-0.8-0.2-1.3-0.2c-0.6,0-1,0.1-1.3,0.4c-0.3,0.3-0.5,0.6-0.5,1.1c0,0.3,0.1,0.6,0.4,0.8......s0.6,0.4,1,0.5l0.7,0.1l0.7,0.1c0.5,0.1,1,0.2,1.3,0.3c0.3,0.1,0.7,0.3,0.9,0.6c0.6,0.6,0.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19968, version 1.131
Category:	downloaded
Size (bytes):	19968
Entropy (8bit):	7.987531613374304
Encrypted:	false
SSDEEP:	384:QIQYSYNULUaAHApBvDiMMdvfZEppROUu1PIT8fisbOeUTk:Q1gNVdHAzvOn1ZYpIT1P1fweUw
MD5:	545E770266C2C51961F267B4DD0F37EA
SHA1:	2DC52AA9B81390BEFC1E0EF6A95A0CE7C0FECD3A
SHA-256:	75A4B8F644119B7774110032BDB80B57F678631069B53D6E53B87DDEEB2915A1
SHA-512:	4995CFD216EE1CAC0702922A7127855E639B1EF189D38025F2ECD8C8BBBEF23C468C8CC154F1D251ACC21DC2EB0B6CBE9B72508F850D91A11E73D7455F31D5EA
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/css/Rubikmedium.woff2
Preview:	wOF2......N........l..M............................p.t.`..@..R..b.....\..I.6.$..D..$.. ..V..;..G...'..vr......L.....Y...f"r;........YIe...7..IX..`.R..lH.&8t.......W..h.0s.h..Y..Z............s!..6.....'...!.8....EE.$....(w.y.g.H........TCx..M...~..[...N..X.0...&.3...}..........d.&....a/jv...q[.o.B.ID.E..u.Ue....Y.9....d;X.+.J}\|;@sK......bc..X..#....o1....../..........}.}.?${"..$<CV.4...).5..Im......P.binx.......\|..4Y+j.z..dp.v.d..%..}....._9...9..;).........kr..I...T.I..g..2t.n..........Q..1.].4.?...p....(......O.J..4}@.e..zv}...EL..B...+~...:.?...1;..n....N.?Gd..Q.&Y.dH..GL..m.Z...T.9@.R....?..E.[.$...{..d7.w......m......p..[....xKn.m.....WiUL.(..z...8...}w.LH_^..b...1..O.2U[,_...)c4.D....i\U......,.....+... ...Rr.UL......t.M.R.......w.;.O..6..NmS.0e.u.]."q..>..K..(..h..?.$N. .........+.S(vZ...:e......l.3,c.1.<.....`..H.R....DM..}_&..IU=V......c...f\TS.......xk..z...1[.Dn&&c..#...........U.."b.1"".8.3.M..^..M.EB.\...=..h.B..;......!..H.j.*.`

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	16176
Entropy (8bit):	7.9591451097015815
Encrypted:	false
SSDEEP:	384:AEFpMV5IjELANrsalgkhHZSU8ODfSDvzB5LiME:ArX3LANrsaBQBaA+
MD5:	CC57DB724B2DF76541E91E393B383D23
SHA1:	46D70EF26F2DEF9ABBCD689486C5914499496579
SHA-256:	600181885286067C154DE0CE35771F5E8533614C353B13975D9DF51CEAEC28A6
SHA-512:	91A9D9DEDF32D949021A7356948F9A9AA097F2573F162A1FF30C546169CA473F797B2BF372DFEBCB1A90F3CD9E369820416CFF8A51F0ED2D4171F2EFFD1C64EE
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................;.........................!..1.".2AQ..#aqB...R.3b$&C...r...................................5......................!..1AQaq..".......2B.#R....$............?.s.F).-e.S..52..rN=C.@$uJ..y..G..Dd.m.+.T%.......Bh...j...I<...S...Z..b.].;S.oN..i.B.aJ....f..@..$Xw.Z.t...?..!..g...3..V.....&p.b..Fy...O.=[&.F.4.j...#+{.E..$^$n@...d.K..J.2..mg,..k....f.y.<.t.?.F...M.j....1A.L.....Tc.:.yiq.....SMA..{....-U[@............D....r...Wm5QW....y..6pN.....p..7...,.(...cj.6..%uk6..LZ8..?R?.H....l@......49.=?_..$.k),..3".8....o9..^.........j.g....Nv.N.........!W.RA.o^ib.)..>&}.pP.......AQRoaL6.x......@...j..'...{.RJSO.A..... Y.3.Ql.'c#..dm#....!...R....5.....<rF.}L.s....C`..).J.ItV..M5$........GALR...h.wM.j)...Jy./.R.i $p.O..9.<.O.R.....m...'..~...u4f[\q..r

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	940
Entropy (8bit):	5.026470667323779
Encrypted:	false
SSDEEP:	24:2dILxikEIZ7bMY6udPXiZpOAbM6ka60bpLZ8gUIwPU9Z:cIx9Z/H6udPylnkJqpLZh1ws9Z
MD5:	8873DE2841BAA287BD50BE1B9F183853
SHA1:	058AA5901E9FC536A560DF337439115E4071E0EC
SHA-256:	F15208EFD7D316C067ED5F70C97F0A3159861E1AE47DFD96762CFCA293B84AAB
SHA-512:	63981C8607C3B9238F778127B4E660FC88377F45674D5C026B80E6FE3EECD2C6D3E2399FC53994A45BB8FBA843742D9154B39AC98ABDD8FCE15873EF6B8E0C0F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg id="Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 500 500">.. <defs>.. <style>.. .cls-2 {.. stroke-width: 0px;.. fill: #fff;.. }.. </style>.. </defs>.. <g>.. <g>.. <path class="cls-2" d="m250,375c-46.88,0-87.7-25.78-108.98-63.87L33.59,125C12.3,161.72.2,204.49.2,250c0,129.3,98.05,235.55,223.83,248.63l77.73-134.77c-16.02,7.23-33.4,11.13-51.76,11.13Z"/>.. <path class="cls-2" d="m250,125h216.6C423.44,50.2,342.58,0,250,0,166.99,0,93.36,40.62,47.85,102.93l77.73,134.77c6.25-63.28,59.57-112.7,124.41-112.7Z"/>.. <path class="cls-2" d="m375,250c0,22.85-6.05,44.14-16.8,62.5h0l-108.2,187.5c138.09,0,250-111.91,250-250,0-36.13-7.62-70.51-21.48-101.56h-155.66c31.45,22.66,52.15,59.77,52.15,101.56Z"/>.. </g>.. <circle class="cls-2" cx="250" cy="250" r="101.56"/>.. </g>..</svg>

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	18015
Entropy (8bit):	5.233625367216046
Encrypted:	false
SSDEEP:	384:gWWEONzAIjc4rNORWcyWKPIntY8XiYXUS2qk2VfVQEOHY46ZHiZI7Z0wTmEqNXMc:gWrO9AIjc4eWcyJPInSpYXUS2qk2Vfmb
MD5:	37F00BBB4B62B126C581C7D068C55312
SHA1:	8972E6135079E1D8142A0222B85BE068AD2FA3EE
SHA-256:	018E0DC54DA547F22D89E9DED3F562101A1D7935DF6F1B077B0DA2887EB0F112
SHA-512:	E918A9668329936B1248F5B79FCBB83A26CB49857B425E345B52C688EC1A61631388BAE7A2E1DF83A089AB7026588EC36C6D4A1905A3DB007C12C101D738121F
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/css/login.css?v=N_ALu0tisSbF&l=english&_cdn=cloudflare
Preview:	...login_modal {...max-width: 502px;...font-family: Arial, Helvetica, sans-serif;...font-size: 12px;..}.....auth_modal_h1 {...color: #67c1f5;...font-size: 24px;...font-weight: normal;..}.....auth_button_h3 {.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; /* normal */.......font-size: 22px;...font-weight: normal;...color: #ffffff;..}.....auth_button_h5 {...font-size: 13px;...color: #66C0F4;...font-weight: bold;..}.....auth_message_area, .twofactorauth_message_area {...position: relative;...padding-left: 70px;...min-height: 92px;..}.....auth_icon {...position: absolute;...top: 6px;...left: 0px;...width: 67px;...height: 48px;.....background-image: url('https://store.cloudflare.steamstatic.com/public/shared/images/login/emailauth_icons2.png');...background-repeat: no-repeat;..}.....auth_icon.auth_icon_trash {...background-position: center 0px;..}.....auth_icon.auth_icon_key {...background-position: center -48px;..}.....auth_icon.auth_icon_lock {...background-position:

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	8231
Entropy (8bit):	7.941814608737955
Encrypted:	false
SSDEEP:	192:/o6G4ZBdM6dRytFPj2P4DItFs+97sgXxXb/ULAOCiR:/x6vqwDeFs+aEWTCiR
MD5:	748D0159D5E892438A35B15BF1AE5423
SHA1:	BDF0A874047956FCB06B104F484854B9C3DCA900
SHA-256:	62EFE837EEC95AB53989E494E9BF64B580389270980D5E0086803C0AB67C3E7D
SHA-512:	6825B19CEC8B7D7E9265FE2EAD413A56879F45694E7389E2A842D02578F0283ADDA79388698B3FE18103B9F127B8CF4C52E90952D5DCBD25204964A8301819FC
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................W...............................................?...........................!1..AQ."aq.2..B...#.....3Rr..$Cb.................................,.......................!1."AQ.aq2...3B................?..g...[....4...........}...X.....i.X...q....T.>..P.v&Lz..B...a..}.i.c.A......g.F>.T.aP..?Q.HV8(T..1...!b.....cQE&0h.g.......}OC.jh..2.....s.C.....R=....b..Fp.w...P.....@O........b.....<...)....k.7e.Z...}.4.G.........=.GT..F...B..-..5i.8h.k..(..Z$E.EG.#...V.+3.1..y.Q..z...@c..}4.......$v5..!.....R..' ..?}5B.z4A.@8......}4!@+....M(A...}R%.,........"i.E,.....f?...Lq.<.@.'..O..}.O.........S.[.....b>..s....<..`.ea..#?.KH.....@W-....'.j.....t$...K.;A"../H....D...HL.C...t...d..aG.......9;.>.SC.&"....t....eO..,6..\|g,~.M .OJW..N{..0.rl+s.O......b.d1.cP....?..I..2.L...;.*(.]4.8.....]=..m0...p6f.....-@.j.

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	89787
Entropy (8bit):	5.308214783304805
Encrypted:	false
SSDEEP:	1536:imsvf3ZcGj0CqB26gdz5a70sfFo1KnVn6z4EBYfhlOPBr90J6ssOZrQPysmHN4jU:K046g+Dn6z4EBiEWN4A
MD5:	35DDB58676C587F282D41AB6E27F4F10
SHA1:	7106F0E3CCE1C018FA868D8D88C073C4B4D58656
SHA-256:	5BD2AFFD08EA5A449E8B44960EF69B04BC50C41311527909AF66C193B3DC99D2
SHA-512:	EEBF3BD72FF54F0A2365EB39938544BA479F181EC10161E43E98BFFC842C5C13FD42D4E26B5097E9C499365CD1197289A1C5EDCDE268FCA98CE54C96A28925EA
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/dynamicstore.js?v=Nd21hnbFh_KC&l=english&_cdn=cloudflare
Preview:	..function GetElemSNR( $Elem )..{...var snr = $Elem.data( 'snr' );...if ( typeof snr != 'undefined' )...{....return snr;...}.....// look for links with snr parameter...var links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );...snr = null;...for ( var i = 0; i < links.length; ++i )...{....var link = links[i];....var navinfo = link.href.match( /[\?&]snr=([a-zA-Z0-9\-\_ ]+)/ );....if ( navinfo )....{.....snr = navinfo[1];.....break;....}...}.....$Elem.data( 'snr', snr );...return snr;..}....// given an array of impressions as strings, this will handle joining them all together into a singular string, but enforcing that it doesn't..// go above the cookie size limit which can otherwise cause users to become stuck since the page requests will start failing..function JoinImpressionsUpToLimit( rgImpressions )..{...//cookies generally can go up to 4k bytes, but we can have problems when we start getting that close, so cut it off earlier...var nRemainingLen = 3200;...var result = '';...for ( var

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	10095
Entropy (8bit):	7.947357815145823
Encrypted:	false
SSDEEP:	192:G6PiOKvw4faUn1b6DC7xuGbdDz9l7052hoCmHSlgbRWXx4qh7CQYgrMauW:PIa0wC7r5z9K52hsSXC5gJuW
MD5:	7E9F84D2E90887325CB8182C189B5989
SHA1:	14FF7019864396AADD688E4EB1F5B42FAB296928
SHA-256:	279744DAEF318209E822EB694720ADA12752D615CFCA74A38FBD0BCADA998CF5
SHA-512:	EE0D78C42D18395BE9AF8F8A7896945474D0D58FA44CAB89E7B03A97B1104E0690179B69F720A64BFABA9459AAEF539C388FDD5F41FCFFDF5CD7BAFCC31B6F41
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/1675200/capsule_231x87.jpg?t=1699990406
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................W...............................................B...........................!.1."AQ..a#2q....BRr3...$%4b...Cc.....................................7.......................!.1.AQa..q"2..........3B..r#Rb............?........0!l..[.....xH$.k....#..i....n......v.%.#....!..t.\......<.O..+...7m.J^.;.{.X.....-..mk...O{.....QE$Dt}.E..:.#..a.....t.......O.H..9I...H..6T?k.BF..$/......I;. ....,....q..Pm...4...d....\|..QO~..@.(A)..A....I%....R...B...Y................J"....@G"....8I..'..U!....mS.'......#.'.ka.....Y....d..W.T..-...8[..@...1 .p'(...$....w..N...\|..5..w.s`1.7P.u......b...........H..T...O..h.!B...."SQ.I.X.C.*..0%)t7..77%....YI..%;...d...8.S.t.BG...+s...+6...i6c~..ug.JS.)..M......]$`c.F..J....p$o. ..Js..y...Q&.~....,-h`.M......Gm....(S.....W..<..&[....#....#Q.jR....T..:.K?. ..JC.M/%W.$..$.$s.G

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.661932872373583
Encrypted:	false
SSDEEP:	3:YWQRAW6kYN:YWQmT
MD5:	CC23E88E5E3A1AEFB54805284245A25B
SHA1:	A255901026FA8C111C9CC658E78D3C46BE479128
SHA-256:	8F22FEBFD2EBD5AD2A15E6C3B4647CAFE6B3C7DBAC8B59530EF76A378608C4B9
SHA-512:	9B4202B9074BD2E7FBBA84BBA9C89FC0D8CA269C2FE51E496830D0C8734CFA89E8B32ADEB36DC37FBFFB253425228777062049468ECE876A144C9B6233197657
Malicious:	false
Reputation:	low
Preview:	{"success":false,"error":8}

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	940
Entropy (8bit):	5.026470667323779
Encrypted:	false
SSDEEP:	24:2dILxikEIZ7bMY6udPXiZpOAbM6ka60bpLZ8gUIwPU9Z:cIx9Z/H6udPylnkJqpLZh1ws9Z
MD5:	8873DE2841BAA287BD50BE1B9F183853
SHA1:	058AA5901E9FC536A560DF337439115E4071E0EC
SHA-256:	F15208EFD7D316C067ED5F70C97F0A3159861E1AE47DFD96762CFCA293B84AAB
SHA-512:	63981C8607C3B9238F778127B4E660FC88377F45674D5C026B80E6FE3EECD2C6D3E2399FC53994A45BB8FBA843742D9154B39AC98ABDD8FCE15873EF6B8E0C0F
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/icon-chromeos.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg id="Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 500 500">.. <defs>.. <style>.. .cls-2 {.. stroke-width: 0px;.. fill: #fff;.. }.. </style>.. </defs>.. <g>.. <g>.. <path class="cls-2" d="m250,375c-46.88,0-87.7-25.78-108.98-63.87L33.59,125C12.3,161.72.2,204.49.2,250c0,129.3,98.05,235.55,223.83,248.63l77.73-134.77c-16.02,7.23-33.4,11.13-51.76,11.13Z"/>.. <path class="cls-2" d="m250,125h216.6C423.44,50.2,342.58,0,250,0,166.99,0,93.36,40.62,47.85,102.93l77.73,134.77c6.25-63.28,59.57-112.7,124.41-112.7Z"/>.. <path class="cls-2" d="m375,250c0,22.85-6.05,44.14-16.8,62.5h0l-108.2,187.5c138.09,0,250-111.91,250-250,0-36.13-7.62-70.51-21.48-101.56h-155.66c31.45,22.66,52.15,59.77,52.15,101.56Z"/>.. </g>.. <circle class="cls-2" cx="250" cy="250" r="101.56"/>.. </g>..</svg>

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	775
Entropy (8bit):	5.322550197378061
Encrypted:	false
SSDEEP:	12:TMHdw95i/nzVc/KYf3UWbMHDK9maflpc5xJVcKrYQN7lfcmASWcJoj5aVHm7M:2dC5A6LfEljK9TXc3JPFN7VASGoGI
MD5:	9C57532FF10253666F56FC7F30CC5F80
SHA1:	B536FDB8232CA0AC46DC2E0F5E31DB648F13423D
SHA-256:	6241ECE3CB4519A57D45C9330FEDC531FC94B0A40EA24AFE356322C5EE6F1501
SHA-512:	AFF4BB55CC73E99E4FC9F1EEAB94346BC298ED82A7D25A97316F246ECAEF1005E6D9EF2B6F042AB895BBA7AC466B3C3B250C55691F4C5C19301334BAB6CB80CE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 30 30" style="enable-background:new 0 0 30 30;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<path class="st0" d="M19.3,5.2c4.2,0,7.7,3.4,7.7,7.7c0,4.2-3.4,7.7-7.7,7.7v0h-3.4l-5.1,5.1v-5.1v0c-4.2,0-7.7-3.4-7.7-7.7...c0-4.2,3.4-7.7,7.7-7.7H19.3 M19.3,3.5h-8.5c-5.2,0-9.4,4.2-9.4,9.4c0,4.6,3.3,8.4,7.7,9.2v3.6c0,0.7,0.4,1.3,1.1,1.6...c0.2,0.1,0.4,0.1,0.7,0.1c0.4,0,0.9-0.2,1.2-0.5l4.6-4.6h2.7c5.2,0,9.4-4.2,9.4-9.4C28.6,7.7,24.4,3.5,19.3,3.5L19.3,3.5z"/>..</svg>..

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	136517
Entropy (8bit):	5.309332064125679
Encrypted:	false
SSDEEP:	1536:LZuIBobvWn/B3xfemTVnPKE8wt/1TJO0MMxjTEZ5jpYwr0svwWVjg9WQ:LNRnPKE86AfMKZ5jWs0svwWVjg9b
MD5:	7EA17A5FAC1205ADCD4FDDBF6C4CFCF2
SHA1:	4D07E74FF033CC12F99225DCC40092FDAFBE1E3E
SHA-256:	50E8504F41124A79391D96B0E13404673A59FD144324CA04FC35041ED1C1BC98
SHA-512:	288B93F8B5EF5CB26632C5D91B39C3C2EC7BB3485D19BA14BD3DE711588A1810D9CA68EE552BF75B2D00E283CC3C79B74225696B3CAE153432D74778A70AC8CC
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/css/v6/store.css?v=fqF6X6wSBa3N&l=english&_cdn=cloudflare
Preview:	..* {...padding: 0;...margin: 0;..}....img {...border: none;..}......a {...text-decoration: none;...color: #ffffff;..}.......a:focus {...outline: 0px none;..}....a:hover {...text-decoration: none;.. color: #66c0f4;..}....a.nohover:hover {...text-decoration: none;..}......html {...height: 100%;..}....body.v6 {...position: relative;...min-height: 100%;...font-family: Arial, Helvetica, sans-serif;...color: #c6d4df;...font-size: 12px;..}....body.v6.in_client {...background-position: center top;..}....body.v6.game_bg {.. background: #1b2838;..}....body.v6 > div#global_header {...border-bottom-color: #171a21;..}.....v6_bg {.../* background: url( '/public/images/v6/tag_browse_header_bg.png' ) no-repeat center top; */..}....body.blue .v6_bg {...background:....url( '/public/images/v6/blue_top_center.png' ) center top no-repeat,....url( '/public/images/v6/blue_top_repeat.png' ) center top repeat-x..;.....min-height: 370px;..}....body.v6 div#store_header {...background-color: transparent;..

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64904), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	171820
Entropy (8bit):	5.091592907461997
Encrypted:	false
SSDEEP:	1536:js4PKffp9FVf2HBeZTjxI1slCWW9sEbsgsfRc117tUCqU3A8yWiSgzgPMNSrf:js4PKfx/VhTjHlCNOEArfKrxRJS+D
MD5:	BD3FBFE0A71FC9C9925BD611F823A1E4
SHA1:	C5E1A3DDB20C8FB894E069310BDF05DC655F2FA6
SHA-256:	69ADB0AF90853345093AFAD207BA98622F7D2FCC9AE1365D1C89B267F7F10D4D
SHA-512:	6E279402479886777224CB092AEE8B76D917DA3D50C255E5689AE71BC338F97ED7E32A9A0F8A9F9B2DF04416A008E257BB7045C3428C10416B8B48834784504F
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=70f95eb8c0363204a8e3
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[7952],{12445:e=>{e.exports=JSON.parse('{"language":"english","Summer2022_hunt_Intro":"Greetings from the Future!","Summer2022_hunt_Intro_1":"I am Clorthax, a time-traveling trickster! I know what you.re thinking: \\"A professional trickster? This sounds like a trick!\\" That is a reasonable concern! But what I am about to tell you is not a trick, and to prove it, I will type it in all caps: THIS IS NOT A TRICK.","Summer2022_hunt_Intro_2":"Okay, it.s a trick. But only on the people of the future! You.re going to love this. Why? Because I have stolen the ten best games from the far future, then traveled across an ocean of time to sell them to you! Exclusively on Steam!","Summer2022_hunt_Intro_3":"Anyway, I can.t outright tell you the names of thes

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1160 x 732, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	36605
Entropy (8bit):	7.807428744151307
Encrypted:	false
SSDEEP:	768:JXokGLTluiiVCxF/5czo45y9OYPekXkJ7ezNeKBEEjwOzaZzLCUSkjM3iy:JXrAr/xF/5kXI9lTq7eBe4EN9Z/mkgyy
MD5:	FA607B90A1F1988F04C533705EB0B244
SHA1:	105CBC22CF0CC15A27337BBFA9C91CBBACD97D2A
SHA-256:	5EEBF25B1AE4FC1838001EC4B6532C206B6C62560DB4F409A8F2E130D48CA9CD
SHA-512:	4914F04D5EC6BDCBCA477CA6073B684A008E474DF06495A9448C741D2F76EF4908F616A58D551346251E1DBDADA50AA768BF9AB5F07D24AD01F9F7570B1F2263
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:3FF7201120A311E9A5D8A61C985A56ED" xmpMM:DocumentID="xmp.did:3FF7201220A311E9A5D8A61C985A56ED"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3FF7200F20A311E9A5D8A61C985A56ED" stRef:documentID="xmp.did:3FF7201020A311E9A5D8A61C985A56ED"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>4-.....mIDATx...K..iz'.<...bU.Z.fAb,_@` .. .M./.....ws.60....j....../..Vm.K...,.7e.cXU0...M.y.<w......d^".......I

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	11642
Entropy (8bit):	7.950244654537195
Encrypted:	false
SSDEEP:	192:UyBYLTk6W+hSwW4CZI8Hi+SEPaFwBvf1U75dsEdEUvrRyyqD+IjLaBr:PBwkvNJImdPjLUDsQEGkbD+Inur
MD5:	6E15A1F7269678CFFC4655F296DD6B0D
SHA1:	01B4820E38BD01A57AFE08368CB47EE4D94FA378
SHA-256:	C64957A0E1D45636503BFE4D57F3AE54BFE72B950DF39056D47719E425DCA75E
SHA-512:	FE073090301E93BCE17DA0CF54D7F0DAF15F41340862CC65E8C077927846C98B4280E7CC2062294DD9F8B6D5A7E6BDCA521EDEC3B6A76E743623B7412703EB19
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/2881650/capsule_231x87.jpg?t=1712153694
Preview:	......JFIF.....,.,.....C....................................................................C.......................................................................W..............................................F...........................!.1."AQ..2aq.#.B.R...b.....%3CS...$467Ers.................................>........................!..1AQa..q...."2.....3BRbr..#$.4C...............?....].........VNtb........m.E8.j.h.k.p.........9..Ey....w.....K/...o....H.N.N..a..a.>.....x.....osJ..5(..M.{...7.x5...Q_.]...?..r2p...W%;._.rxD..%A.-....pY.6n.c..6..X`..Gqm.]m..).$.}.8.).\...._._.c...%..^{x......Y1q.zK.x..U.n.m.....a.N.....J.....x...y..d.)...Ci!).;.Q.....l...u.x.-wG.....I...J.q.H...=.'q.)O.0G...-$n#......G.(n.].......n{R...%.\.k6..8.<..r.-BS.HO..JZ...............A\|.l^..........b.Pj.o[C..u,.8f...$`....d..t.F.......~/......uj../;J.....%\|.rG.N..GE..m..%...q...@. .s..BX:yR.4.C..uj-....A......N....R.&c.y.+{R..%%.\."..#.....q(...bj.%6.ILy.R.....=..!Q.......

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65369), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	69467
Entropy (8bit):	5.646777837447357
Encrypted:	false
SSDEEP:	768:dubjRojukvorj0dl75P0c64Xx8hyU+MGkpZZfH/NjZyhG+JTp/QLpfJ3yV0IhJGh:YjIX6z9KBLV3Fnm6qkwQTWsG37
MD5:	8B26CCFCCAED1A430EE9B94F141EC5EF
SHA1:	3E265253AB13E4DE1C323B549E0EDFF0E9480577
SHA-256:	C33C8954109646D67D1034BC6EA5016FA9134F8310AB61F9D7B5F61DA3931B36
SHA-512:	8AB772CB26011431F45B3C2D529C749AC1F3F82C1EBDB6E845081BC002E782C8D683E1BA319D598DDDB4EA2BA78FEE41353C2D0EAD61C91EC8BE95FA84C53187
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/applications/store/9424.js?contenthash=e670f3ca9e3d01a52001
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[9424],{68628:e=>{e.exports={Login:"ZOBYq36SukEm_Fi_77g2q",SideBySide:"_1Wl13domZv872ZcbC_PVbv",GuestContainer:"ERYporYCW1a-i4hFKkqM9",GuestLayout:"_30Wg_JuATv6bZVQSiEOa3n",GuestText:"_1KeaVf4k5xaici5wKntAlv",GuestLink:"_1S9pkF1XVQsK6z-06HLup",QRSection:"_2ZDySoTopw8XofnCKLNxDL",MessagingContainer:"_3ph6wntM-n97-sHIlGQBnD",MessagingTag:"_3jy5Rn5GIHTYnS11f6AxKR",MessagingSubtitleCtn:"_3dSxvAKKoM5S0cN040E9VX",MessagingIcon:"_2H3fBxcnfFRliKqacCx-mk",MessagingSubtitle:"toeaxcVL2sJxvNYVGOeTB",MessagingButton:"-jjqvX7USmuMWI_3UH8vk",MessagingLink:"_1ozceuqRCXj0l4MNlnW_RC",ScanQRButton:"IsYb298MVFqJfTgMC-IrG",QRIcon:"_2zKSqxWHmjgxS59xmS6YFT",QRCodeContainer:"_3YjUmVPnH4QB_0Uthh9BmI",QR:"_1d6FZEReqGY-LD8AuorTdZ",QRHideLink:"_1mk4Aeuk_PYS54ayHqgqHQ",HideButton:"u88sc3K6gPwI9C

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.1162646156680225
Encrypted:	false
SSDEEP:	3:YHr0I1W/Aw:Y4I1W/Aw
MD5:	7D8E35AFA8792B923F4E6C5906E7C4B5
SHA1:	32168FBCD8A98B424F566046D3680648B49AC633
SHA-256:	D5C8F5FB29CA010EC4C6E11774D17B0CC27B21304811521E29141F581C061E87
SHA-512:	6C77E16CC85801E0D6732876B7A1B59F48CD19FE5FFBCF081C6EC96D496BE48421A92A4C0258AED151B922515B48553069B7188107B62AD0AB80B421B8D7CBB3
Malicious:	false
Reputation:	low
Preview:	{"bAllowAppImpressions":true}

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	9608
Entropy (8bit):	7.948370579592546
Encrypted:	false
SSDEEP:	192:7lIJ2HiLpW9lE6vJnGxx2X23DXkvh4M0V6wC0vFPcKYl4XhNzrg0:7+zp8lE6v56x2kkJ4M0V6iNYlOhNz
MD5:	1C84A18202DFE434A1EB723AB76578B6
SHA1:	10ABD9F7D5742913F8C384EAC15E380BE9460955
SHA-256:	0A9A89B380CE55342528674AA3AE74D3DBF78BC44F92FDDA19B8F52569A80561
SHA-512:	DA3F09082A3AD3B495BBD3A1ED4564B8D1B908422DD10D354E7312BC2929C535A1D1AABD64338845A8330B80696394244C5857A2F47B7416FE0C232E06C6AE7E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................W...............................................V.............................!1."AQa.2q.#B....CR......$3S...8Wrs....&46DUVbcftv.......................................;........................!1..AQaq.."2..B.......#3Rb....$r.............?.y...xc....qF....U..M.(.-......q...9a..P.0..6B.....%..d..ea.PUO...O...?H...mF.F.{..y...]..:5..\|..Q4)w.q.......{5GZ.....L.Y....NqL.rr.C.H.Jl.Ao.cL...{.......Fy.uN.!..2..q^.............vqX....f.hk..A:.7@..'%..\.':f.... e.(\).r.....yca..6..b...x4y...y....h.k..X....5.Q.b7.X..j.B.d:.{.t..c.<w....%E).'...+..C.N...........)..W...S......(u...T..c..}..%JCj...J.`z.)N..c....G.F.?....]>.....5*.H.S....C.q.]..Ud.{..Q..M...[H:.@6..;....Z.+..[4.[..w2Vm.f.i.G...8Lf.T.U...R~.\.P..<O.P.\........p.Q...+J...r.2.......RR...!$..).X.....Jk;..q..%W[SR....w.Y......{..T....J.y...`S

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55606), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	55801
Entropy (8bit):	5.011551462691833
Encrypted:	false
SSDEEP:	768:Qx7iPiXjClRckg6z0ZamNQbhk0rS23Ry+MrAI7CshpzAursRGL0g9q:s7aiXjClRvuLehkiS2LI7CshpzAuIRmE
MD5:	72188D15A6B8F01850591F57AC710D4F
SHA1:	234142FCAE7D03FEE4238E8B94B5424F35001262
SHA-256:	C17B61BE0E6206A1B8B06D23CAD46660929296143928ACE732AF481663D5FE12
SHA-512:	384399ED8FD480F094ED32AAD2EE8CE530B355A288F92FCE9F19E9E83306EAA91E187FE8F1966118ED92982FF86990640AFF7E2F138154046738589426D3C476
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/applications/store/main_english-json.js?contenthash=485049d171f183ac5e03
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6815],{63336:e=>{e.exports=JSON.parse('{"language":"english","CuratorAdmin_RSSFeed_title":"Manage my RSS Feeds","CuratorAdmin_RSSFeed_desc":"Setting up RSS feeds allows you to automate the Steam Events and Announcement creation from your existing content management platform. Your content from your site will automatically surface to Steam customers who follow you as News. ","CuratorAdmin_RSSFeed_lang_only":"Feed Language:","CuratorAdmin_Curator_lang_only":"NOTE: The curator is set to %1$s language which is different from the feed language of %2$s. Re-save the feed to update to this language.","CuratorAdmin_RSSFeed_lang":"The language is set on the group to \'%1$s\'. If this is not correct, you can edit the group profile and then re-setup this feed.","Cu

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39553)
Category:	downloaded
Size (bytes):	39680
Entropy (8bit):	5.134609532741171
Encrypted:	false
SSDEEP:	768:up/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:NorXfURXiUrmq5YW
MD5:	2F34B630FFE30BA2FF2B91E3F3C322A1
SHA1:	B16FD8226BD6BFB08E568F1B1D0A21D60247CEFB
SHA-256:	9EE2FCFF6709E4D0D24B09CA0FC56AADE12B4961ED9C43FD13B03248BFB57AFE
SHA-512:	A014E9ACC78D10A0A7A9FBAA29DEAC6EF17398542D9574B77B40BF446155D210FA43384757E3837DA41B025998EBFAB4B9B6F094033F9C226392B800DF068BCE
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/js/bootstrap.min.js
Preview:	/!. Bootstrap v3.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");!function(t){"use strict";var e=jQuery.fn.jquery.split(" ")[0].split(".");if(e[0]<2&&e[1]<9\|\|1==e[0]&&9==e[1]&&e[2]<1\|\|3<e[0])throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(),function(n){"use strict";n.fn.emulateTransitionEnd=function(t){var e=!1,i=this;n(this).one("bsTransitionEnd",function(){e=!0});return setTimeout(function(){e\|\|n(i).trigger(n.support.transition.end)},t),this},n(function(){n.support.transition=function o(){var t=document.createElement("bootstrap"),e={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var i in e)if(t.style[i]!==undefined)return{end:e[i]};return!1}(),n.support.transition&&(n.event.specia

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (430), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	45485
Entropy (8bit):	5.224314350684908
Encrypted:	false
SSDEEP:	768:VT2uP/kuIhzmmIyKvNpq1vx9X0TvTvAv9hKbTLqsxAWO37g3KI8iCffKbWh5o45p:VT2uP/kuIhzmmIyKvN81vxh0TvTvAv9D
MD5:	0B82C4DCAFAD047072A8814AB3031730
SHA1:	311E6F60BF010125EA01F86FB88351E05C017086
SHA-256:	D506655C6B4B8CDE7F75033BA0C344CC93C8D0DA20A1FA11820EE5E10A2D0A88
SHA-512:	74202D8F031951DFF02CC8A3B86B80AE71526E5F133BE3AF4E957168F34D8F0267C67A4CFFC5C4DA5F3F3BBA854DBC8B075A89055DAB40BE54F058D0315C49B1
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/about/qrlogin/1/13885351924452522779
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>Steam, The Ultimate Online Game Platform</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflare" rel="stylesheet" type="text/css" >.<link href="https://store.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=qUG5Ub5rrq2J&l=english&_cdn=cloudflare" rel="stylesheet" type="text/css" >.<link href="https://store.cloudflare.steamstatic.com/public/shared/css/buttons.css?v=Grv-5yNFuEfg&l=english&_cdn=cloudflare" rel="stylesheet" type="text/css" >.<link href="https://store.cloudflare.steamstatic.com/public/css/v6/store.css?v=fqF6X6wSBa3N&l

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 888 x 794, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	35255
Entropy (8bit):	7.871647743956511
Encrypted:	false
SSDEEP:	768:trORd4k+l2FRaXrtpnkF6XOaLAgBHGeNnhWKLdIQU9T:trORWk7KE6eavBHGZKTgT
MD5:	0463B35928BD2A797C7F05C8036F12A8
SHA1:	9741327AED844EA35B2576760969B1AF5057B2E1
SHA-256:	2294DF1409A23436656C7FB5CE2F43D3B89F3F814AC86511528F47F87C6B582B
SHA-512:	A82CD38E03A255913919C8FDCAD7FD56D1F8B0952D90DEC4C43A15F2F2EFD0B478E3A67717ED649038C54BB253843E5CEA28F4C04ADB39B0DE568A04935BCA84
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x.........[0sH....pHYs.........O%.....$zTXtCreator....sL.OJUpL+I-RpMKKM.)..Az..jz.... .IDATx....$Y........S.9EEV..B#M.4....-...."H...3 ....f..V...Nu.n.9Gf.>....Y...=\..<...0S=..f......T..._....p../....w.A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17415), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	17580
Entropy (8bit):	5.229778898464247
Encrypted:	false
SSDEEP:	192:+TJsjHO+Cu4AR/e8dGDA53c1Ip1Ap1Bp1qp1Tp10p1lp1+p1Xp14p1Gp1tp18p1A:+T2DOArJNZABqT0l+X4Gt87SJSUKyn
MD5:	EDCDF82CC4ABA1D4FDCD9813F9A378EB
SHA1:	9BE80677D93D8D5D0D8CA1494C3CB6BFD722F9B3
SHA-256:	151AB2CDE5B2F08CA90C9CD1C08AF4896ADC7C7A401CF04811E329E79AAA436B
SHA-512:	9A6B80F2BC6A151586A24E542FBFF4DB450BA7B318E6798978581632162962527AC44958B1944F6E3C27FAC30BC97403DFF9181383083DA6141A759BFD629A7E
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/applications/store/6882.js?contenthash=715a72e84664238b26c1
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6882],{6514:e=>{e.exports={LoadingWrapper:"_3Z36hMlC0g5rhADc86JeV8",Static:"kwzRJNhtPiQO0D4Wn0PLU",none:"_2iT5lTDKhbxllUncFnJhS0",bottomCircle:"_3-sjxBwrq1aRP-xn0Pwx37",noString:"M4pF_ij_g5aN0m2FqZc7u",Throbber:"_7MdwTzlZhzNS1NzYBn7Sk",throbber_small:"_29-XTCJVnFYwvPS6oJ6liL",throbber_medium:"_1yqSoIPxWwEa9VRtAQdhdy",throbber_large:"_1u2tLqxQCBluyLGN_QvmRf",throbber_center_wrapper:"Yi4EMhptGPt8XWnnnT_nC",ThrobberText:"_1ZlvfuG4Q4e9GfTYNuNI5b",blur:"_3ebLcY6yz7RZRSTq7EK5Lo",ThrobberRoundLoop:"_3SEk8c3qDYTigYcVaGHzE8",roundOuterOutline:"_3M8ArwlB5FKwDNDos_gbXp",roundOuter:"_3H7At8KqRfv4ttYb4hHZmf",roundFill:"_2FWWtb-RoV2eWwZb_2ZPr-",ThrobberFillLoop:"_1-rlbGjslOZcEUwLtOMFS5",topCircle:"_3znUFhu51nKns1e7TS-OBI",circlePulse:"_1oQUOQrI5F662TJKj8jekS",ThrobberTopCircleLoo

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;Motiva
Category:	downloaded
Size (bytes):	122684
Entropy (8bit):	6.0666961682037535
Encrypted:	false
SSDEEP:	3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh
MD5:	57613E143FF3DAE10F282E84A066DE28
SHA1:	88756CC8C6DB645B5F20AA17B14FEEFB4411C25F
SHA-256:	19B8DB163BCC51732457EFA40911B4A422F297FF3CD566467D87EAB93CEF0C14
SHA-512:	94F045E71B9276944609CA69FC4B8704E4447F9B0FC2B80789CC012235895C50EF9ECB781A3ED901A0C989BED26CAA37D4D4A9BAFFCCE2CB19606DBB16A17176
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Preview:	........... DSIG.......4....GDEF...4...,...@GPOS:>}....l..uzGSUB.d....v.....OS/2u6.........`cmap.d..........cvt F......\|....fpgm.6!....D....gasp.......t....glyf._m....\|....head...H...l...6hhea...G.......$hmtx..l.........locaCH..........maxp.......X... name..l...x...opost............prep.......\...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1060 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6427
Entropy (8bit):	6.187565203288304
Encrypted:	false
SSDEEP:	96:zbUNBPYl5xRgFlONXbhj+7JMzj3xcImxk3VguCLPgv5dIpB8sM7O:zb4xA2Fl0rlLjT5sPkdIpB8VO
MD5:	237F39233045DD53513440D0A98C29CB
SHA1:	46DA5F906BEDEAEDD745A299DD7CE3865E942D51
SHA-256:	47A61EA9199A1C916D082EFD47E70E42035F2218751FE0FA2514733EAE5EA2CB
SHA-512:	E5566715B4C70F4A3CD18F59DCDECB7088B8EF6CCCA19E5760F7DD29179EB7517D0494202D3BC57010962C5496B5B981E14991FFF853F01FEDE0DB8D93EE5931
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_community_pt2.png
Preview:	.PNG........IHDR...$...X.......7.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...O.U.y..{.{.f.k...0f.6C.......Zf..VR...2m.....]....z..V]8..,....H.)...Xj.."aL.......`....K2.a<....?.....\|..s...w........................................................................................................................................................................................................................................................................................................................................................................................................................................................A?m.gS8}'.....pL..<..`...@..d...?.......[..[....F8..;tpNt.z.@..e..=.....8 .P..:..G...`..G...8..?..4......@...B...w...d!...,&#bR...ri..5.~er..........$..e.......'.[3...R.......on..7^.7..;t..t.P..m..=1....P..(&#.w...e.s.>..w.......3.O.sCT..GB...UF<%.P...2M5..(^.mf........s.y..;....[$$:l..O.{b...fa..a..,.R......6...}k...w2Q.......;..y8=/.P.........u.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	16505
Entropy (8bit):	7.951342638062872
Encrypted:	false
SSDEEP:	384:Y9IaxPna2BZ+ftv4RQdstV2SD6Nzh7MbQkKy4GZirUs0MGw6sxtpai:Y9hFz4fVds/2SO1Ny7IrIMGw6q7
MD5:	7BD08E9630E9C60A5D6C72F46B6945D8
SHA1:	3309A46762DDF5EF9FFC015409EE7FF8804786AE
SHA-256:	8D8B3694B450752E14B2F376EBA29589B0C9C31512169BEB7E56310ACBBD0778
SHA-512:	8B718CBA1B1C66930EFCB061E0EEDD542A2C2FDDEC3E689733CEEEB3D8BC882CC014AB6D23AE1483C490AC38A5C35E6D3E3258B6E56B31EE7755BB7B6AD2496F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................A.........................!..1.A."Qa.#2q.B..$R....3b%&r....4Cc...................................:.......................!.1.AQ."aq.........2..B..#R..$br.............?.\..S..%v.h.2}..Df....c.9t.....IA..e.....P`.?~q.z0/.Z.....Z.TS..~..;.;.a[..Si..I.R.YU.K.`.;K(^9..I...ZWfsV~.#[.;...I..>....E.55.2.u..f...U...d...${..z.U.......j.R.5 .J... .d+....q,.m?.@IWL.x+..b...V..Dn).b.......i..K...W...AY..d... .U.$......8..Z..._.{.%..7....>T..tu}..!.....y".h.P.Y.x.e.....{[......>."f.... L..y.1.44......#bc.>......."...........:z..u5..#.50q......s..o.....h.\...)...=.......K$.B.....Fc@........)...iY+ .yS..:...$......(.[(.9c..!4^..,.##>FA.}.]...\..F..iv........}..L..=......P&.[.o.1_.D\...Z..g..+ZW.\|.;.!....#....Cj....V.....9~......{#.^b ..I..'ig.B.n.lm..X..8'.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	72579
Entropy (8bit):	4.404375519624922
Encrypted:	false
SSDEEP:	1536:6sBYm/fzArDRTtaj+kGVqg8tPytMuE/dIXyIrY:6sBYm/fzMDRTtaj+kGVqg8tPytMuEYY
MD5:	52F6D73507509BE009949858D33E94A3
SHA1:	5AB9922460AA84D77DB15B693D8A184B5B008736
SHA-256:	6D593B2B5913EB962FB94AD4331A074BD8CB88FEFC77BB7C9825528D59E1F8FF
SHA-512:	3736F1F1B76FCCC2C7CFDB35D1EE9099506AA9DE2DC8AC945680ECAFD53B56F16ACC7CB6CE349EFE8F499051E62484A749045A58814B4D5E825B9DF45BE44BF0
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/slick/slick.js?v=.UvbXNQdQm-AJ&_cdn=cloudflare
Preview:	/.. _ _ _ _.. ___\| (_) ___\| \| __ (_)___../ __\| \| \|/ __\| \|/ / \| / __\|..\__ \ \| \| (__\| < _ \| \__ \..\|___/_\|_\|\___\|_\|\_(_)/ \|___/.. \|__/.... Version: 1.5.0.. Author: Ken Wheeler.. Website: http://kenwheeler.github.io.. Docs: http://kenwheeler.github.io/slick.. Repo: http://github.com/kenwheeler/slick.. Issues: http://github.com/kenwheeler/slick/issues.... /../* global window, document, define, jQuery, setInterval, clearInterval */..(function(factory) {.. 'use strict';.. if (typeof define === 'function' && define.amd) {.. define(['jquery'], factory);.. } else if (typeof exports !== 'undefined') {.. module.exports = factory(require('jquery'));.. } else {.. factory(jQuery);.. }....}(function($) {.. 'use strict';.. var Slick = window.Slick \|\| {};.... Slick = (function() {.... var instanceUid = 0;.... function Slick(element, settings) {.... var _ = this,.. dataSet

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 20768, version 1.131
Category:	downloaded
Size (bytes):	20768
Entropy (8bit):	7.987716157557682
Encrypted:	false
SSDEEP:	384:7mBeZBXS5PNyjkGMs0hXRT4QMdinDuUbVjqmeoIL5OdgBTmSf:ieZBXS5FywI4Rn/nDuUgDoI1sVS
MD5:	3EDC1CD54259274F206D5899BBA36148
SHA1:	FBD67641F5267C83EA1A1C397A22F5260767C56D
SHA-256:	DF6E38C33F771EDC67A07E9B7A3E8BE81D3B24B6E10FC55C1E890DFD17ADA60F
SHA-512:	067F6590792131DED4DA553B9C252A9B928393FD801A1ED6F7662419DC7EFE5E7F3525C56049F68734C975E79B5F41EBF8C3907938E6CE2016D6DAE2955C572C
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/css/Rubikblack.woff2
Preview:	wOF2......Q ..........P............................B.t.`..@..T..b........^.6.$..D..$.. ..N..;..G...7..v... .r.o.P..v..F......L...w..d......E...^Z....;...d......'.f.)..j./..N........9C.V......oWW.M..w..b.....'.c.....kC6/....8..K0.<.lB...&'.}...../..a....c..m.+.].....>.WGwZ.U..?n.B..d..6.I.8..Ct..U...T.JQ..X..$...5..2nx~n...[.l..fE.....`.6.O.0.....`D.....Q.U:.j?.{g.AU\|..kp..-J.&..:6"F....ufS......@..A...1.d.......2q.K^..>1..Q....:EMW.&>.S...I.O......!.....X.._I...u. ..pm$....=.._..S....Q....''.S.-.C).1.?...P`.............Q.YX..........7J..........O.2t...5r......a=...~V...j.S.....b...........~-..a......Qyu>.......g..5E....mQ.~{3@T.rz.u:..DG...c.9...5.......!../+.b.4..i4n8..[...>3...JVIV@O ;..k.R........0Q....qB.......A.D..y.bD&....C.....s..XRXT..l.c....B..h.;....9k.!...:g...../.%.0e.a-@.W.Z_..d{.\|ic~\|do\|^x..^....g.r.....k... .....H.6E..J.+I...6.$..-.N.6...].....}.g.:7......M.T*M.8..!......%..q_Ki.0..=.~.vEO...s....\\..Bx...[Z?..e7.._.2.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSa
Category:	downloaded
Size (bytes):	122660
Entropy (8bit):	6.047516179670634
Encrypted:	false
SSDEEP:	3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh
MD5:	D45F521DBA72B19A4096691A165B1990
SHA1:	2A08728FBB9229ACCCBF907EFDF4091F9B9A232F
SHA-256:	6B7A3177485C193A2E80BE6269B6B12880E695A8B4349F49FCCF87F9205BADCC
SHA-512:	9262847972A50F0CF8FC4225C6E9A72DBF2C55CCBCC2A098B7F1A5BD9EA87502F3C495A0431373A3C20961439D2DAE4AF1B1DA5B9FADE670D7FCAED486831D8C
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS..n)...l..ujGSUB.d....v.....OS/2t.....\|...`cmap.d..........cvt F).....d....fpgm.6!....,....gasp.......\....glyf...d...l....head...A...$...6hhea...+...\...$hmtxv.x.........loca..g....h....maxp........... name.\....0....post............prep.......D...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1472
Entropy (8bit):	4.915242227779033
Encrypted:	false
SSDEEP:	24:2dC5A6LfEljghXYKx7A/qpMnhftwRPcwvr/Wszxxkr/NJQVSUC6uvr/ZsQyRmUDn:cGA+fEljghXYKx4nh1wREwv/kMSPvHyb
MD5:	11C7D3F8B5183772BF69CAED9E87785C
SHA1:	20480E3B6E94DE7ABAEB32276DE3ABE2D5D9276C
SHA-256:	A9ED5637AC99611D1AF2CB9515864365B9BFCFAD312B463F02C72D0FD45E4F06
SHA-512:	B596AD1D955A2795DB6F5EDCD430A96887DCDDA9986685D941F3BA3B74CF582F86954AFDFC180799E7C17F1871CB1A4BF64F1BA19DA351C9301933896A431C15
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 30 30" style="enable-background:new 0 0 30 30;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<path class="st0" d="M26.9,18.1h-1.6c-0.2-1.1-0.5-2.3-1-3.6c-1.1-3-2.9-5.1-5.3-6.2h5.3c0.2,0.7,0.9,1.3,1.6,1.3...c0.9,0,1.7-0.8,1.7-1.7S27,6.2,26.1,6.2c-0.8,0-1.5,0.5-1.6,1.3h-6V6.2c0-0.9-0.8-1.7-1.7-1.7h-3.4c-0.9,0-1.7,0.8-1.7,1.7v1.3h-6...C5.4,6.8,4.7,6.2,3.9,6.2C3,6.2,2.2,7,2.2,7.9S3,9.6,3.9,9.6c0.8,0,1.5-0.5,1.6-1.3h5.3c-2.3,1.1-4.1,3.2-5.3,6.2...c-0.5,1.2-0.8,2.5-1,3.6H3.1c-0.9,0-1.7,0.8-1.7,1.7v3.4c0,0.9,0.8,1.7,1.7,1.7h3.4c0.9,0,1.7-0.8,1.7-1.7v-3.4...c0-0.9-0.8-1.7-1.7-1.7H5.6c0.2-1,0.5-2.1,0.9-3.3c1.1-3,2.8-5,5.1-5.9v0.6c0,0.9,0.8,1.7,1.7,1.7h3.4c0.9,0,1.7-0.8,1.7-1.7V9...c2.3,0

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	downloaded
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU&_cdn=cloudflare
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	11929
Entropy (8bit):	7.952170020439648
Encrypted:	false
SSDEEP:	192:ZWJoUnG4T6t391rz+XrLGNpCkXuRDQT1bocAPOSVv9M9alvJt/Lby:GXnG4TW98c+cAPxv9DvDO
MD5:	71500F3226256C0488C8448BE30CA932
SHA1:	BCB2A2A6CD9D29F997F9C12FE9DEC76792520AE5
SHA-256:	97CEB02593913A9A69E82978A5C041F8A6C866847261B34AFC613F41076956FA
SHA-512:	1547C44ADBB21F927F0D6CB49F5D51AFC88A48A3291609E9BB73D93483B3B7EDC12DA045EB8C8C6D62F63C743FD6D3705445A1E3FAE6D9E6C648C067A2AFA924
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/230410/capsule_231x87.jpg?t=1711638801
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................@.........................!....1AQ"a.2q..#B..Rb...$3..%S..r.................................../.......................!1AQ.."a2q...........R............?..s.E..c....z.D.iG^.F.$I..n..G.M.j....O.7..1..N..a.5..q..Q5........o\....x...u......K.=N..u. $......1n7....D.......!..R!...U....8.......e.....(.l.t\..hsUv.:'4....j>.T.\|.y.....L..].[.i..F..b.a..d..V...Q.n.\..=mwz.\|..[.z0..b....%e,l..^y ...{......IY.H......L\u&l.M:,`.P.....ovw......@.'1..M...k...X.)T.....,..{.....Q#h......t..=.M5....<.v,.'.$......E. alw...r...u.+...P.;.+.hb...w...&.~>.r....L....Z.<@....(t......;.5l.<.P.k P]....~....AV.1'..\C..Yv.J.Ie.i..w.q..}O...Mi&.Y..n.a..p..y.,.N}~.N.5..B.e...H.Wg .s......G..;>....Ke3.U*.e\|..Ryf..(9'.'..U.)..R...l[l..{..../.=8.....e.x..z0.A..Eo)8H......W~).kD.c\

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 520 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	28903
Entropy (8bit):	7.9826294499796955
Encrypted:	false
SSDEEP:	768:mDMeRKaCHNYIcwEAQlIg5MwzHHAyrIsXCW0bJQi5On0I6:mgeRKttYInHgfM8uVon0I6
MD5:	31D55BBC16BDED12B4EAF4C27DDCB333
SHA1:	B1A576C302179C91B908EAFE87775414B60F3F1E
SHA-256:	C47876871807F50DE6942BC831DD932E2191D574E2F28535B607977DB97B5AF2
SHA-512:	46C8F18A61D0B17A702818A81A2594FB81E42F02AD111D429B2512D9F761AF0DC9E9BFABF13FB573CCAB274FB602EEC6FCD54D5598F20C08DF7BFEC050156E0B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......H......;.&....sRGB.........gAMA......a.....pHYs..........+....p\|IDATx^.}...E..y.K..B.HB.J..Q....f..bE.....]...).Az.Ez...{...;g......^............{.m.3f.6..m.J.R...d.+.v..d...c.........,t.....}.c.j.0..%.Q..\|.@h>..=....#..d...h...........LK..Z4...[..D.\...P...B..........9........d.`L..J.dY.l...J...9...D.U.a....!.U.)........M.U...W..6j-.U..je.S.0.....tnX.uT."..NS%4k....nff..h...f..8..~.,....n...i...!..k...<......B1A.r>.:....:.A..EI.8.:Z.7.J.A.9...!.Y4og..L..@Y. UZ.).;............R;"."}....:3.......#,..[.h.< G..&..a...0) J....SM..3.Y.N.....6.5..Y..O...k#.3.76-.....o.b,..:...f.M.1S.S..........r.D.\|...r,...8..q.B........0..D......c.@.T.......C.....k......#............k.....7t....!.7.k-T.....ux=..Xg.E...]...........,.1.....a..8d...5P;.......M{.......V.Nr6.A.5T]VG...>.1QIlS+Bs.....(.,..d..p.QW2b ........_J.....'...........\|.....+.\. .u....w...;^..%...bk.....fB.v..D...{;..J...+...n.......u%...........u.v.#...x:.;..L..@.....Bg

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	17579
Entropy (8bit):	4.449677892153786
Encrypted:	false
SSDEEP:	384:QSu5YLIxaly+6Q4Wfx+L5PHiw6dZDbYiSpJVUq3jKPr17+gGoxUf6pB:QBGI3+6QxW/9Agj+ijA3x1B
MD5:	BD5C88021F835B223C294DC13814E6C8
SHA1:	BDB4232B4FB713DC1D1ACBC2E41BE676384124ED
SHA-256:	E3F59E387FEE812986645E2111A74A27BFF4CB73A6025782D1AB33CE408C51FF
SHA-512:	88FA9BADE1688DD0A625383B31EE141885610D0B8DC9AEAE4C9AE958F7694F484306652B1FBE7FF50ED66B49D724207EFF493726791D9AA8E113843EC1A3F613
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/img/sbp.svg
Preview:	<svg. xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:cc="http://creativecommons.org/ns#". xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#". xmlns:svg="http://www.w3.org/2000/svg". xmlns="http://www.w3.org/2000/svg". xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd". xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape". width="239". height="120". fill="none". version="1.1". id="svg102". sodipodi:docname="logo-black.svg". inkscape:version="0.92.3 (2405546, 2018-03-11)">. <metadata. id="metadata108">. <rdf:RDF>. <cc:Work. rdf:about="">. <dc:format>image/svg+xml</dc:format>. <dc:type. rdf:resource="http://purl.org/dc/dcmitype/StillImage" />. </cc:Work>. </rdf:RDF>. </metadata>. <defs. id="defs106" />. <sodipodi:namedview. pagecolor="#ffffff". bordercolor="#666666". borderopacity="1". objecttolerance="10". gridtolerance="10". guidetolerance="10

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.1162646156680225
Encrypted:	false
SSDEEP:	3:YHr0I1W/Aw:Y4I1W/Aw
MD5:	7D8E35AFA8792B923F4E6C5906E7C4B5
SHA1:	32168FBCD8A98B424F566046D3680648B49AC633
SHA-256:	D5C8F5FB29CA010EC4C6E11774D17B0CC27B21304811521E29141F581C061E87
SHA-512:	6C77E16CC85801E0D6732876B7A1B59F48CD19FE5FFBCF081C6EC96D496BE48421A92A4C0258AED151B922515B48553069B7188107B62AD0AB80B421B8D7CBB3
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/dynamicstore/saledata/?cc=US
Preview:	{"bAllowAppImpressions":true}

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 939 x 794, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	66811
Entropy (8bit):	7.88204197496626
Encrypted:	false
SSDEEP:	1536:82dvbN0h+V8wfDboAzoZ86JwAN777p5ZEJaa7Ixrr5jZuFhEm:rTO4awrsbJwA979rE4a7Il99uFhv
MD5:	10F463B75D3D7B4C2AD97FF70B8935C8
SHA1:	028355FCC04F4FBF79FC0944B17DC29FC0429BF7
SHA-256:	8091287CFDC332A4E68026302F28D0D15D28C4A46C8C9916B7D7F6F8BCA06BC6
SHA-512:	C5A384D61B96AEF6FAD5196DCEC42BFA7E190DBD171EEECC711262BB9CF6487B1F32C13D299B2A3A053F7A9721CCCC6C3E844077DF639869DC55D3E7530554AC
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_hardware_pt1.png?v=2
Preview:	.PNG........IHDR.............`t.U...AzTXtRaw profile type exif..x..Yr....q....r.$2.......U...h.#...K,.K..B...?o..?5..j....#?u.7.f\|...=....NI,.?..i....O....c.8.....})./....B~.b..1.o.........Z.J~}.....b_s\|........~.......{.=m.Sr..J..Z@....~>l..\....._............?..\|~..-}.>\|.V..K. .....}..\|...\..S...h..}.....>{f..vB.......)\|..XZ......y-^..>......I+e.uSM.v...I.%.l!.>.\|ryN.2..x.......e........L....l..5qiN..%...7....R_.`]9{.Y.g.......j{......y-d.y..E........HP.D..l._=.... DL.XLd....ROq.<R"...m..K.B.RkYYd....yf..[Fz..-s:p.0#...2...d...Q'5.[i....h...{......{.Q.h..1.Xc.2.l..1.\s.....V_c.....ys..%K.-H.!S..C..z..g.y...(..].N].-..d.u.6m...-...n.......;.?.~#k..d./..Y....C$...9#a9.D......8S..3.9...+-...9...#..Rn7}...WF=s.+oa.......O.of...Y..i.<.{u..5....m.<...O../^.E....VT..k.b{..Bm.K$......kvwG...[I...[.9].5[.l..l.N.d..!...l.v..Eg0.\kkO.l.d...R.D.jS.$.jN\.zv.R..4Ue...B..E%..OF.(.}O.KGMC2..#..o"T.......B..#..\|B-..1+{.3...5B.A.u.*Wj.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	10599
Entropy (8bit):	7.953207527965745
Encrypted:	false
SSDEEP:	192:iu0y8mRMwa9sen1u+FdMSpiVzwbRNZ9w9/JkEAp/w:2VmmwkP/j3Kz6Z9wJH
MD5:	6A7D2877493FEC8665FCBF847541F0CA
SHA1:	A2C20F103D4A9A6794D072814A14D29FDF114572
SHA-256:	29F48E6C86553DACDD276C76E7F8F5F4C630E851A3F0569AED1F081E8431DCCD
SHA-512:	3E558FF6CDB162C3EC2F149367EB8E14724BBF25CD8430AF94DEC2F1198CF98D7C39E5C46DDA9708768268E3668D6429A5AB10E96FC8C0AA3717F9D838D1B249
Malicious:	false
Reputation:	low
Preview:	..................................................................................................................................................Adobe.d...........W..............................................................................................!."1A..Qa.#2q.B..$b..3..R..%CSr........................!.1A.Q.aq."2........B............?..;.e,..U.y..........f..m.[.....$.....BaT../....{.&.!Ee...%"..j..g.c.5.v..{.[u...Z........A..v..hNA<{F...9g..09.~..4.gX..G"......... .Z..4+ ..c.5..q`.@.7.F.....3.v.X.......6}...&d.O.E.rq...4k.....$x........u...y....1+H@.)...V......GZ....U1S[.ay.f!c.(.;1...Yzh.m.^N.b..\|BP\.}l.5..[($..kk.....i....q#.R.L.Y..k..M.<.NU............).'..U<w(7. .....1T,..3...2.J;8^-...[......sem>..."....]%-SS....K)....x.....Fw....6.c..J....n.Y.7.x.(...+..X.5.......:+".T.J.7...D......G......n.[.k.i..z...F..u.......>;.2f...$vd.6...3.2`m..5.......9.d.N}3.M..2.....;H.)..H...........3.i...Ym.\|@.3..T.`....(b.v.)yB..j....=['..X......R(n1

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1160 x 732, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12815
Entropy (8bit):	7.014464142056217
Encrypted:	false
SSDEEP:	192:21v8HQ84FLNUWAptA8QSmao1JxWf2q2UPAXNd9LgybPlZRpo:0Ew84FLNKW8QI+TWf2V9d5xPlvpo
MD5:	9A5590AD97F2C09D2E43F534E70ED17B
SHA1:	EA0BA0AF73F68AFCE940ED54E23AB6859748B8A4
SHA-256:	81B1FC286CBC031A38DC4270553D0DAC16B0798D1AE26FF06C507D1413880C5D
SHA-512:	667D62B22BB896E8B4407B07A85DCD998E1EFBE1E16B77451E1A5778D22DEEDF17C6B05DD0EFD65D7708C399AB68A55480C78B17F98EFD035BF6EFA508054376
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_steamworks_pt1.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:3887838820A311E9B7D1B6B8F5EA6CE2" xmpMM:DocumentID="xmp.did:3887838920A311E9B7D1B6B8F5EA6CE2"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3887838620A311E9B7D1B6B8F5EA6CE2" stRef:documentID="xmp.did:3887838720A311E9B7D1B6B8F5EA6CE2"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...S....IDATx...Ald.}..?9....C....".q....F.% ... .%9.H..i...m4.&.8(.[c....!N.......h{.. ....F#d.@+;.@7.j..W..wH.f4;

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	124529
Entropy (8bit):	7.79044844464572
Encrypted:	false
SSDEEP:	3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs
MD5:	48B805D8FA321668DB4CE8DFD96DB5B9
SHA1:	E0DED2606559C8100EF544C1F1C704E878A29B92
SHA-256:	9A75F8CC40BBE9C9499E7B2D3BAB98A447685A361489357A111479517005C954
SHA-512:	95DA761CA3F99F7808A0148CFA2416B8C03D90859BFF65B396061ADA5A4394FB50E2A4B82986CAAB07BC1FCD73980FE9B08E804B3CE897762A17D2E44935076D
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBlack4.015;Plau;MotivaSa
Category:	downloaded
Size (bytes):	120816
Entropy (8bit):	6.070220522864693
Encrypted:	false
SSDEEP:	3072:IrEEEEEueapd0oej1yAHjU/gXG7mGSCfj9:IDpd0oejdQ/gXgfh
MD5:	4F7C668AE0988BF759B831769BFD0335
SHA1:	280A11E29D10BB78D6A5B4A1F512BF3C05836E34
SHA-256:	32D4C8DC451E11DB315D047306FEEA0376FBDC3A77C0AB8F5A8AB154164734D1
SHA-512:	AF959FE2A7D5F186BD79A6B1D02C69F058ECD52E60EBD0EFFA7F23B665A41500732FFA50A6E468A5253BB58644251586AE38EC53E21EAB9140F1CF5FD291F6A5
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS..B....l..l.GSUB.d....m.....OS/2w.'.......`cmap.d..........cvt J......0....fpgm.6!.........gasp.......(....glyf...G.......jhead.g.n.......6hhea.r.....(...$hmtx......L....loca.F. ...4....maxp........... nameKN].........post............prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1160 x 732, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	43398
Entropy (8bit):	7.850844294437546
Encrypted:	false
SSDEEP:	768:5Ts0PYXH1SiiG2jgLGiPujV50la+Ehi3V77OFl8lgzbo8LmI1u6gz0:5PQXH19fLGeujVCloy5GlBs8Lz06gg
MD5:	20D616438BA3649D5E38674BC147C5B2
SHA1:	96CCE3481DF5AA13973293981AE4875CEC0D7B3F
SHA-256:	823E0109F8F10E6209B6B03A230A842D75CAC4ACEDAF1774C635D8CDF99C4887
SHA-512:	3CE582C312B6FEEDDFD94F0FB0BE198300C12320FB04F64CBB49083188D264090BEC3D8AC5AE9E74C95ED5A180354C7B17403E337F37891D2E7F7A920717ED47
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_steamworks.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...(IDATx...ol...'.".d...4..=......@...@v.,...`..+O.....;A..{...ro.}w.7.{....xm.$/...^...g....>....s...G3..!)R...E.[...f....\|.6gF..U..j..\|~./I...................0...[.~.B......#...t.v.q../.t.J.- .......?.l>.0.......q...~..............\|.e4...!y...Gw~...........t..7..p.42...$.I...w~....v`."`.z.}'.R...p....?..ig."`....&......'..2NS..D.......g(B./.K%....a.N.C...._X.......EK.oD...j$...3.../}......Q?.S...Z.~b.2....>?.S.L1.FQ,g/......~.."`...!...J..7..........=t.H...%..(...5_3...@...L.....1.^.~o.I..v.$..p`bz.I&....1.....F....{.}...J...e0.........3}..._...<~..0F.....@Y...Qr.....%vsTw\@....Pq."...........T.........D.....' .....8.....@.......N@....Pq."...........T.........D.....' .....8.....@.......N@....Pq5C....W..W.m.....>...=.xh.......W....\|.7.W....$[...>...)..@."..../....t..N.......}.T.9.3.q....x2...........0.-^:...-....`....N.Tm. ....% .....8.....@.......N@....Pq."...........T...

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	32222
Entropy (8bit):	5.191272208062059
Encrypted:	false
SSDEEP:	768:VcABiBrZ2gychEWDOOJzTWJ+kEdEEnSCWC7oBIYiyhaH3JsolgmWHozt:KycuC7oi/WHEt
MD5:	2AE63A61B205E2B91662DB381B68E79F
SHA1:	5C217E7480B9B3825F5367536CA949FB668E4C83
SHA-256:	C5262D351B071F637D56C9D81AD7B341C2C69BCF7716F88909D703203278A8E3
SHA-512:	57335CC958943EFD8983B54741121B94F056F53C948F940B100108F2B64F2258E0E0DABDE13DCE87ECCF040771B64E55E36085CD300DA4475ED79A6B31B203E4
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/css/styles_about.css?v=KuY6YbIF4rkW&l=english&_cdn=cloudflare
Preview:	../* CSS Document /..../fix global header z-index with video issue /..#global_header {...position: relative;...z-index: 9;..}......body.v6 #footer_spacer {...height: 210px;..}....body.v6.chinaabout #footer_spacer {...height: 265px;..}....body .responsive_page_template_content, body.v6 .responsive_page_template_content {.....font-family: "Motiva Sans", Sans-serif;....font-weight: 500; / medium /.......background: #1D2024;...color: #fff;..}..html.responsive.touch .responsive_page_template_content {...padding-bottom: 0 !important;..}....img {...max-width: 100%;..}....body.v6 .responsive_page_template_content h2, body.v6 .responsive_page_template_content h1 {.....font-family: "Motiva Sans", Sans-serif;....font-weight: bold; / bold */.......font-size: 8vw;...line-height: 1.2;...text-transform: none;...letter-spacing: normal;...margin-bottom: 2vw;..}..@media only screen and (min-width: 768px) {...body.v6 .responsive_page_template_content h2, body.v6 .responsive_page_template_content h1

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	679
Entropy (8bit):	4.665868115573286
Encrypted:	false
SSDEEP:	12:t4Ao2WLoWWP6z3AjstLl2/YTG3BnCejfgfSJSEJUR22JErdusS:t4Ao2SXzzAjEICe0fG22c8csS
MD5:	A2AEF9E2A1009158F3CB70EEC2EC037D
SHA1:	21768E2D64CEDCE920AE226EC123E2DB41204778
SHA-256:	099A32FD83392D5BFFBAEE7270D597A484A4075FBBF6E6494D40BC1094FBCB5D
SHA-512:	803E705BD1D12EF6D83091C4B6DAB23B698BB78330BD4279E018760C89FD0177EEAACE9C12D0B5BE5512F4EDD2A63FD8358257073FCCCD1FADB79CC0D5432501
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="39.723" height="24.828" viewBox="0 0 39.723 24.828">.. <path id="Path_1122" data-name="Path 1122" d="M6668.864,6705.067a1.861,1.861,0,0,0-3.387.041l-9.311,21.1a1.861,1.861,0,0,0,.953,2.455,1.837,1.837,0,0,0,.751.158,1.862,1.862,0,0,0,1.706-1.111l1.153-2.613h13.451l1.249,2.655a1.862,1.862,0,0,0,3.37-1.586Zm-6.5,16.311,4.864-11.028,5.189,11.028Zm31.5-8.69a1.861,1.861,0,0,0-1.783,1.325,8.069,8.069,0,1,0,0,13.488,1.862,1.862,0,0,0,3.645-.537V6714.55A1.862,1.862,0,0,0,6693.869,6712.688Zm-6.207,12.414a4.345,4.345,0,1,1,4.345-4.345A4.35,4.35,0,0,1,6687.662,6725.1Z" transform="translate(-6656.008 -6703.998)" fill="#fff"/>..</svg>..

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	60389
Entropy (8bit):	4.825969931840293
Encrypted:	false
SSDEEP:	384:fF3pH8g+L2x2Sd1wAOFzzzdwNRisnxyP2AS+9ydEtoQ5Z4cSwmve:APmDnoX66Swmve
MD5:	E7C7375300BF784D1B5F2076531B98AE
SHA1:	7AEB0B893B940150DCFED5688256C15AFC75A19B
SHA-256:	5311FC34A370A1E381CDFAC0FBC36EEACC1DE563673AFE439B832089E2BECAA6
SHA-512:	546BF64206CEAB6FB6AABE3B0826E89DFD260389B90EA5F06A2217AD7F737C9DF2E61C09B95122105C5DE66DFFE38E4E72C2FDBE3051825B83DE889911461EF4
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/css/main.aa7e6b15.css
Preview:	@font-face {.. font-display: block;.. font-family: epicsteam;.. font-style: normal;.. font-weight: 400;.. src: url("");.. src: url("") format("embedded-opentype"), url("") format("truetype"), url("") format("woff"), url("") format("svg")..}.....epicsteam {.. -webkit-font-feature-settings: normal;.. font-feature-settings: normal;.. -webkit-font-smoothing: antialiased;.. -moz-osx-font-smoothing: grayscale;.. font-family: epicsteam !important;.. font-style: normal;.. font-variant: normal;.. font-weight: 400;.. line-height: 1;.. text-transform: none..}.....icon-update:before {.. content: "."..}.....icon-wallet:before {.. content: "."..}.....icon-umoney:before {.. content: "."..}.....icon-qiwi:before {.. content: "."..}.....icon-close:before {.. content: "."..}.....icon-telegram:before {.. content: "."..}.....icon-inst:before {.. content: "."..}.....icon-vk:before {.. content: "."..}.....icon-double-righ

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (563)
Category:	downloaded
Size (bytes):	214711
Entropy (8bit):	5.518148541836148
Encrypted:	false
SSDEEP:	3072:YsztjKbFtKw/eqvEXLkgEf5fEarcWAefSBBGtijLOjge:FjetKwGqvikPxfEawWZSB6CLOjge
MD5:	C61E8397264569B55CB7B0A0BD0F7404
SHA1:	12994FB41D09AA4C3B26E9F06792BC4333DCD1E7
SHA-256:	5F467ADED3DB3061A35E449B1AC6641A096897567C280F32DB9144A5BF705D3E
SHA-512:	62D60CA7392ECF9BB56073E829F71E06E53B480D9CB8FE3067F5F5AA5C91A107DED12A6B7A98A72A563B8A1C80127D1411AA96354D199A6051C9CAFB503E6174
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.ru/metrika/tag.js
Preview:	.(function(){try{(function(){function cf(a,c,b,d){var e=this;return A(window,"c.i",function(){function f(E){(E=df(l,m,"",E)(l,m))&&(V(E.then)?E.then(g):g(E));return E}function g(E){E&&(V(E)?p.push(E):oa(E)&&x(function(N){var K=N[0];N=N[1];V(N)&&("u"===K?p.push(N):h(N,K))},Ma(E)))}function h(E,N,K){e[N]=Vl(l,m,K\|\|q,N,E)}var k,l=window;(!l\|\|isNaN(a)&&!a)&&ae();var m=Wl(a,be,c,b,d),p=[],q=[ih,df,jh];q.unshift(Xl);var r=C(T,Xa),t=M(m);m.id\|\|Ya(Ta("Invalid Metrika id: "+m.id,!0));var y=dd.C("counters",{});if(y[t])return Jb(l,.t,"dc",(k={},k.key=t,k)),y[t];y[t]=e;dd.D("counters",y);dd.Ga("counter",e);x(function(E){E(l,m)},ef);x(f,ce);f(Yl);h(Zl(l,m,p),"destruct",[ih,jh]);Rb(l,D([l,r,f,1,"a.i"],kh));x(f,W)})()}function $l(a,c){var b=""+c,d={id:1,aa:"0"},e=am(b);e?d.id=e:-1===jb(b,":")?(b=Ea(b),d.id=b):(b=b.split(":"),e=b[1],d.id=Ea(b[0]),d.aa=de(e)?"1":"0");return[ya(a,d),d]}function bm(a){return oa(a)&&P(a.code)}function cm(a,c){var b,d=c.slice(2),e=[(b={},b.require={kind:0,value:w(dm,Kc([

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	8619
Entropy (8bit):	7.944316879702331
Encrypted:	false
SSDEEP:	192:PWlmv+8WVPrqb/0eB5C75cj0PHYlaazLRs+uZ:PwmiVPrSxmk09WPi
MD5:	274304D7D04E5B86D93A5CAB3760E85D
SHA1:	C2461F84D9E47552839E98F9D0B677E304679D1E
SHA-256:	4B8BB680FAF5225212D58509C3392BC1CC322D09B34694E3D586764F3CE8EC1F
SHA-512:	AAC80C52C0ED188D84ED350DDC70FD26D90235675DAC4BCC515DC633673CABA968D2F6E29658F1D9FA636C20DA91E595337260598BEB1EE41006FF3F737E28DB
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................S..........................!..1."AQa.2q.....#BR....$36bct......458r....%&Uu..............................................................!.1..AQ"2a...Bq...3C..............?..uz.O8V...d.c..Ih.J(d.VAJ..v......Z..Z.Y!.7>6....sw.f..TAU.....O...!...L......J..h.-..))....qff...I".Y&...,v.........&...........B.Jl.ko..#.../...]..m..!.N.'k.a...DP....U>.$..DS..-....H.....zDy4........,../I......S.:b............^.M...Y.p.......`.....(..>...b...]..L..;..Q.k.k....B./.I..? .,....i.;!....x.Zd%+..J..I..t5.............6...Q...n..e.-.W...<Z2"...)...2.&..9.1..q...J.X.B@..o.a....!.m.y...}5F)y...N.Ar....%)R..M.6....h>..2.'..R(ty.\|..!..BX.b.5){.!Z.u.m...v.B.Z.....%W.....GDT2./"&.r...F.....p}zW@X6..,..b..._..O[h..%..5k..M..^.......R.@?....&=.l.M8...-M..{..<<\|qnK..

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	16505
Entropy (8bit):	7.951342638062872
Encrypted:	false
SSDEEP:	384:Y9IaxPna2BZ+ftv4RQdstV2SD6Nzh7MbQkKy4GZirUs0MGw6sxtpai:Y9hFz4fVds/2SO1Ny7IrIMGw6q7
MD5:	7BD08E9630E9C60A5D6C72F46B6945D8
SHA1:	3309A46762DDF5EF9FFC015409EE7FF8804786AE
SHA-256:	8D8B3694B450752E14B2F376EBA29589B0C9C31512169BEB7E56310ACBBD0778
SHA-512:	8B718CBA1B1C66930EFCB061E0EEDD542A2C2FDDEC3E689733CEEEB3D8BC882CC014AB6D23AE1483C490AC38A5C35E6D3E3258B6E56B31EE7755BB7B6AD2496F
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/1086940/capsule_231x87.jpg?t=1711532262
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................A.........................!..1.A."Qa.#2q.B..$R....3b%&r....4Cc...................................:.......................!.1.AQ."aq.........2..B..#R..$br.............?.\..S..%v.h.2}..Df....c.9t.....IA..e.....P`.?~q.z0/.Z.....Z.TS..~..;.;.a[..Si..I.R.YU.K.`.;K(^9..I...ZWfsV~.#[.;...I..>....E.55.2.u..f...U...d...${..z.U.......j.R.5 .J... .d+....q,.m?.@IWL.x+..b...V..Dn).b.......i..K...W...AY..d... .U.$......8..Z..._.{.%..7....>T..tu}..!.....y".h.P.Y.x.e.....{[......>."f.... L..y.1.44......#bc.>......."...........:z..u5..#.50q......s..o.....h.\...)...=.......K$.B.....Fc@........)...iY+ .yS..:...$......(.[(.9c..!4^..,.##>FA.}.]...\..F..iv........}..L..=......P&.[.o.1_.D\...Z..g..+ZW.\|.;.!....#....Cj....V.....9~......{#.^b ..I..'ig.B.n.lm..X..8'.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1161
Entropy (8bit):	6.483902966293242
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVNxhpyJ3Vlt8vmG8ll6f7iX:HZNn2lPzoJ3PtQmBY0
MD5:	E406E5A22E4F3CFA580D3BB57420150E
SHA1:	5B381E535BB0CE6003A461F3124FA1238DFBCEDB
SHA-256:	760589F903C5E9BD169B38F941F9A3DC88A23897E9CC5B622D3D91F5C204B9E4
SHA-512:	E33CB7BD10104A1E8C2D3F2B3885D65EF3769F7250445C8341D6D2AD2367749CCDC48DAABE4EA39CB80EE0362AF9D01E48370DB858BA01F956A1A6B8C04217C1
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/images/ico/ico_facebook.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:399EA8C592D411EE91E8F6773DB0009B" xmpMM:DocumentID="xmp.did:399EA8C692D411EE91E8F6773DB0009B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:399EA8C392D411EE91E8F6773DB0009B" stRef:documentID="xmp.did:399EA8C492D411EE91E8F6773DB0009B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.d......IDATx.b..U.d``.......@...4.....0......PWU.p..Q....1\=...2I.\Fg.&3de.....BX..4 ...L...!#....... )!..7m..

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 888 x 794, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	35255
Entropy (8bit):	7.871647743956511
Encrypted:	false
SSDEEP:	768:trORd4k+l2FRaXrtpnkF6XOaLAgBHGeNnhWKLdIQU9T:trORWk7KE6eavBHGZKTgT
MD5:	0463B35928BD2A797C7F05C8036F12A8
SHA1:	9741327AED844EA35B2576760969B1AF5057B2E1
SHA-256:	2294DF1409A23436656C7FB5CE2F43D3B89F3F814AC86511528F47F87C6B582B
SHA-512:	A82CD38E03A255913919C8FDCAD7FD56D1F8B0952D90DEC4C43A15F2F2EFD0B478E3A67717ED649038C54BB253843E5CEA28F4C04ADB39B0DE568A04935BCA84
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/videos/about_hero_loop_web.png
Preview:	.PNG........IHDR...x.........[0sH....pHYs.........O%.....$zTXtCreator....sL.OJUpL+I-RpMKKM.)..Az..jz.... .IDATx....$Y........S.9EEV..B#M.4....-...."H...3 ....f..V...Nu.n.9Gf.>....Y...=\..<...0S=..f......T..._....p../....w.A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1160 x 732, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	43398
Entropy (8bit):	7.850844294437546
Encrypted:	false
SSDEEP:	768:5Ts0PYXH1SiiG2jgLGiPujV50la+Ehi3V77OFl8lgzbo8LmI1u6gz0:5PQXH19fLGeujVCloy5GlBs8Lz06gg
MD5:	20D616438BA3649D5E38674BC147C5B2
SHA1:	96CCE3481DF5AA13973293981AE4875CEC0D7B3F
SHA-256:	823E0109F8F10E6209B6B03A230A842D75CAC4ACEDAF1774C635D8CDF99C4887
SHA-512:	3CE582C312B6FEEDDFD94F0FB0BE198300C12320FB04F64CBB49083188D264090BEC3D8AC5AE9E74C95ED5A180354C7B17403E337F37891D2E7F7A920717ED47
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...(IDATx...ol...'.".d...4..=......@...@v.,...`..+O.....;A..{...ro.}w.7.{....xm.$/...^...g....>....s...G3..!)R...E.[...f....\|.6gF..U..j..\|~./I...................0...[.~.B......#...t.v.q../.t.J.- .......?.l>.0.......q...~..............\|.e4...!y...Gw~...........t..7..p.42...$.I...w~....v`."`.z.}'.R...p....?..ig."`....&......'..2NS..D.......g(B./.K%....a.N.C...._X.......EK.oD...j$...3.../}......Q?.S...Z.~b.2....>?.S.L1.FQ,g/......~.."`...!...J..7..........=t.H...%..(...5_3...@...L.....1.^.~o.I..v.$..p`bz.I&....1.....F....{.}...J...e0.........3}..._...<~..0F.....@Y...Qr.....%vsTw\@....Pq."...........T.........D.....' .....8.....@.......N@....Pq."...........T.........D.....' .....8.....@.......N@....Pq5C....W..W.m.....>...=.xh.......W....\|.7.W....$[...>...)..@."..../....t..N.......}.T.9.3.q....x2...........0.-^:...-....`....N.Tm. ....% .....8.....@.......N@....Pq."...........T...

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1536
Entropy (8bit):	4.885324918426383
Encrypted:	false
SSDEEP:	24:2dC5A6LfEljJgXMsTQ2R4GPtuXDL5S5QbJzHomynoA/2slwNLrzy8OH:cGA+fElj87B4GkXDVSiblHomyL2slwd+
MD5:	D681F523EAAE5CD2368935891D03A802
SHA1:	995210025EE01F1C8EE8C5D06CE4FFA1E4AC64C0
SHA-256:	6FED568378A03B0F897F80CAB2ADB730DD37E62EE8417C784B9FF6C86FF7C97D
SHA-512:	3E51A11B6E4D4498C150E6DDB2321A5BF41DD47C1866EF7AEF5D5DBCC0FE4744E26E64090DF8AAEAB50609EF747659D21CFC8D292C8B1FEE04C7033D7D220858
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/icon-broadcasts.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 30 30" style="enable-background:new 0 0 30 30;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<path class="st0" d="M25.1,6.4h-6.3c-0.2-0.5-0.6-1-1-1.4L20.8,2c0.2-0.2,0.2-0.4,0-0.6c-0.2-0.2-0.4-0.2-0.6,0l-3,3...c-0.6-0.4-1.4-0.6-2.2-0.6c-0.8,0-1.5,0.2-2.2,0.6l-3-3c-0.2-0.2-0.4-0.2-0.6,0C9.1,1.6,9.1,1.9,9.2,2L12.1,5...c-0.4,0.4-0.8,0.9-1,1.4H4.9C3,6.4,1.5,7.9,1.5,9.7v15.2c0,1.9,1.5,3.4,3.4,3.4h20.3c1.9,0,3.4-1.5,3.4-3.4V9.7...C28.5,7.9,27,6.4,25.1,6.4z M15,4.7c1.2,0,2.3,0.6,2.9,1.7h-5.8C12.7,5.3,13.8,4.7,15,4.7z M26.8,24.9c0,0.9-0.8,1.7-1.7,1.7H4.9...c-0.9,0-1.7-0.8-1.7-1.7V9.7c0-0.9,0.8-1.7,1.7-1.7h20.3c0.9,0,1.7,0.8,1.7,1.7V24.9z M20.9,10.6v13.5H5.7V10.6H20.9 M20.9,9.7H5.7...c-0.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	69679
Entropy (8bit):	7.470982114661118
Encrypted:	false
SSDEEP:	1536:3XWmI8g4DLn+3MeMpH3NGLxHDzRcS7qN0iN1EkVU0nr8rTO:y4DLGMzpdGdHDzSOO0iN1uNC
MD5:	A440D4B512F4D2B9B63D3AB8818FC9E3
SHA1:	90DAC8C11FFFF8E0B345D11A55049C088EFF2165
SHA-256:	2DE63CB5AC9431E6FEBCD4DFD7527D98654452BDDD468FE45B93E22CEF67AE15
SHA-512:	90DEBB4D79FF0B1136FABE5809B8E6B88259A5668240F25EBDCB6B5E844A9B84415A7B37CF87FCCDD68E1CD4A686A2BA8265D603CFA513A83CB87F7B41ADFF0C
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/img/tetherusdtlogo.png
Preview:	.PNG........IHDR..............8.y....pHYs............... .IDATx...y.]w]..&i..VZZ.P...)"........g.U......P.w.*.PH..9gr.5PA..9....B. "b.Y.Z...-.4..d.. ..%Mg&w9...<.....\|...p....Q........t.#..........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:...........................t.......0...........................`@.........:..........G...........

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1243
Entropy (8bit):	5.102207940417109
Encrypted:	false
SSDEEP:	24:2dC5A6LfEhXUGbdQbWuKy+TYJvNkIQ/Ef3C45XHavRlLTNpxyRGNY:cGA+fEtUMzPyYYj9KEfS45XHavRZNnQT
MD5:	8D0070A77D9F490286D136A40F15DAD0
SHA1:	AAA0E6834DFAA4624E04223A8926714CD83688FF
SHA-256:	D46C60D96EFE34A372F59B9B4844F2AC5301E0FA1E0C460BC5E888134AF9A57C
SHA-512:	48DBC6751648844AAC5EF3FDEE3F841EBAB5AA61D55EBDE70C9A68CD172FC9EC4CC55BB16398F9576B3720944169D59DDC47AD20FADDC4275AF74297A426AE15
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/icon-steamos.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">..<style type="text/css">....st0{fill:#24ACE3;}....st1{fill:#FFFFFF;}..</style>..<g>...<g>....<path class="st1" d="M10,0C4.7,0,0.4,4.1,0,9.2l5.4,2.2c0.5-0.3,1-0.5,1.6-0.5c0.1,0,0.1,0,0.2,0l2.4-3.5c0,0,0,0,0,0.....c0-2.1,1.7-3.8,3.8-3.8c2.1,0,3.8,1.7,3.8,3.8c0,2.1-1.7,3.8-3.8,3.8c0,0-0.1,0-0.1,0l-3.4,2.4c0,0,0,0.1,0,0.1.....c0,1.6-1.3,2.8-2.8,2.8c-1.4,0-2.5-1-2.8-2.3l-3.8-1.6C1.5,17,5.4,20,10,20c5.5,0,10-4.5,10-10C20,4.5,15.5,0,10,0z"/>....<path class="st1" d="M6.3,15.2L5,14.7c0.2,0.5,0.6,0.8,1.1,1c1.1,0.5,2.3-0.1,2.8-1.1c0.2-0.5,0.2-1.1,0-1.6.....c-0.2-0.5-0.6-0.9-1.1-1.2c-0.5-0.2-1.1-0.2-1.6,0l1.3,0.5c0.8,0.3,1.2,1.3,0.8,2C8,15.2,7.1,15.5,6.3,1

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	10095
Entropy (8bit):	7.947357815145823
Encrypted:	false
SSDEEP:	192:G6PiOKvw4faUn1b6DC7xuGbdDz9l7052hoCmHSlgbRWXx4qh7CQYgrMauW:PIa0wC7r5z9K52hsSXC5gJuW
MD5:	7E9F84D2E90887325CB8182C189B5989
SHA1:	14FF7019864396AADD688E4EB1F5B42FAB296928
SHA-256:	279744DAEF318209E822EB694720ADA12752D615CFCA74A38FBD0BCADA998CF5
SHA-512:	EE0D78C42D18395BE9AF8F8A7896945474D0D58FA44CAB89E7B03A97B1104E0690179B69F720A64BFABA9459AAEF539C388FDD5F41FCFFDF5CD7BAFCC31B6F41
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................W...............................................B...........................!.1."AQ..a#2q....BRr3...$%4b...Cc.....................................7.......................!.1.AQa..q"2..........3B..r#Rb............?........0!l..[.....xH$.k....#..i....n......v.%.#....!..t.\......<.O..+...7m.J^.;.{.X.....-..mk...O{.....QE$Dt}.E..:.#..a.....t.......O.H..9I...H..6T?k.BF..$/......I;. ....,....q..Pm...4...d....\|..QO~..@.(A)..A....I%....R...B...Y................J"....@G"....8I..'..U!....mS.'......#.'.ka.....Y....d..W.T..-...8[..@...1 .p'(...$....w..N...\|..5..w.s`1.7P.u......b...........H..T...O..h.!B...."SQ.I.X.C.*..0%)t7..77%....YI..%;...d...8.S.t.BG...+s...+6...i6c~..ug.JS.)..M......]$`c.F..J....p$o. ..Js..y...Q&.~....,-h`.M......Gm....(S.....W..<..&[....#....#Q.jR....T..:.K?. ..JC.M/%W.$..$.$s.G

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	4628
Entropy (8bit):	7.8724489340157495
Encrypted:	false
SSDEEP:	96:hgIP6dVlLjvcB2yBU0XGoCfYQatjTXYVaQfmkQWwzHZmkaxx:hgIP6tjxWUq1CfYTtfrFkQWiA
MD5:	7EAEACB7114A50DEF5D1136EA179BEC0
SHA1:	838EB0F0662DCC408D1D2E4B214D1130608B3660
SHA-256:	5138DBE38499F0D4E938F23841AEA899B641499E78A8862A1F7B09C2B902305B
SHA-512:	082840F4D49F81E921CD12ABBEC3DDF5E1BBBC439104C9F1A9CC153F161C3478F34CF49FED19E12341923DD3FFE23E5A0E78515334D644AA047C2E015F7817B3
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C.......................................................................W..............................................V...........................!.1A....6QUVaqtu......"'27......$&3FRT.....%s.#4Dcder.....................................:...........................!1AQqr...45RSa...."T.....B...............?....0...+........p..+......3._..\.p...............1.w.\........+....Y...p.5.<..f.f......0.r..........W.\.,....r.\..`..4..20... ?\....x.%,.LK.k"....+.c.z..[..sD.s....Sj..7.Dw....'.>..K..K...q..w.?1?,y.'.N.........y..c....r{....@..x~.w......O..c..'f..........>...b~X....'f.................'.6.....Y.\|zf..fT. ."%X.k.}.m..]....9]~.q..ZK...3..g..h.mv~....d39.L..Y.....K..4..s2.X.S.\|....3O80.B...c<....\|..]..y.9......8=E.<...2q..B..a."RV.......E...K...K?v...ra....!R.E....0#..0&...#(i..O..x..Y&.d..w....: .4..R..9*....eQ..D.i.I.s..e\|....D....OX..M...b.]S.4H4].E.....M...}..y.y.....m..4..

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1060 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	31506
Entropy (8bit):	7.7678441127477935
Encrypted:	false
SSDEEP:	768:3Hc0imGlKnQnDB3VHOpIKemj8BOBXQLlWSqwcq:3Hc6GlKniLHOpomaOtQLVqM
MD5:	F2FCBA2BBF60E3BE5AE9350007951164
SHA1:	720C52BF4B6839EAAD37BFD52DD314F1F3B0FD73
SHA-256:	EE3B0183799320D7F188C62A44CA22CF40B2013594649B4C1CBA0D7385A27A10
SHA-512:	0DBCBD165D7CFBE46B7FA0B157973E35112A8E74E1CAF5359F11CD2E09E4FB225C96B0448A86B756D5916A22E9666F24921F5125CFC799ED51BCFEB62D17D53E
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_community.png
Preview:	.PNG........IHDR...$...X.......7.....tEXtSoftware.Adobe ImageReadyq.e<..z.IDATx...{.\....s....70x.$..I..I..D..>$..\T.T.rq..........+.VQ.J.J...R.l...!'N..I.d... ...DIC..HJ.......=..7.s..A..=.~..#].....uO...................t;.&....:\|..Y.a.....f.2....gh%.@........#..j\|..h`..'_>~.....C.......G..6.{.x.m....<:{.....l.M.......G...v0..}.....\.....q.SmK.Z&.2q..........U..uxFih....K..1..1E..........d/...&....6....&...;......{B.gTfPh.....`K...t..e....!.F.......t0.d...`.2./.Ue.1..$-......@g_H.5..u.n..(....U...v.\|... .t.g./...;......35...v...".`+.!.4.bo\.!...4.M..E.....8.s..:e......h....a...5#....N.Z#......H..b...d.0...........sku..1....D..]........&...j.......DeF..5...@M.....!...P.-.RT..[.]....>$.......Y]m..)....(.\....[..6...P.......4..f9Qv..]<.......Y....H.vs@..:D......j...9............'^.n.2.q]kg\..:..V...................4O.V...2.*..u......T.S.....Z.....$..z...oK..P.......u-.......-S.3x=...Y^0.....]q=..%.%......@c...3..\v{=.aTSm..z......i.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	21832
Entropy (8bit):	5.356064745493551
Encrypted:	false
SSDEEP:	384:+hJkU4S/iqG/aPaRew1ilkR9bwUahxmliI8QaMBM7kUtKTw:CJdpZlSmOMhxqRfamMIe
MD5:	7994F0F7B1A39E5430A7453CC707B477
SHA1:	32F8C6354343CB6286E8464772ADADA0900F00F6
SHA-256:	2C400235D4870CEC4D647E9F372108B3A3F09D1716C7A38F287DE9CE8342DE2C
SHA-512:	0BE9D620093BC208E73F052E0870F5FA04653DAC0FF3B5626771B101413E2A3F5CEA14B15D9A3FE130FB3F33FCBF8BFB3FBFD9E3079D273758934FEA79903114
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/applications/store/7247.js?contenthash=b29dba9d0d5460b0cd58
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..*/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[7247],{88765:(t,i,r)=>{var o;r.d(i,{Z:()=>N});function e(t,i,r){null!=t&&("number"==typeof t?this.fromNumber(t,i,r):null==i&&"string"!=typeof t?this.fromString(t,256):this.fromString(t,i))}function s(){return new e(null)}"Microsoft Internet Explorer"==navigator.appName?(e.prototype.am=function(t,i,r,o,e,s){for(var n=32767&i,h=i>>15;--s>=0;){var u=32767&this[t],a=this[t++]>>15,f=hu+an;e=((u=nu+((32767&f)<<15)+r[o]+(1073741823&e))>>>30)+(f>>>15)+ha+(e>>>30),r[o++]=1073741823&u}return e},o=30):"Netscape"!=navigator.appName?(e.prototype.am=function(t,i,r,o,e,s){for(;--s>=0;){var n=ithis[t++]+r[o]+e;e=Math.floor(n/67108864),r[o++]=67108863&n}return e},o=26):(e.prototype.am=function(t,i,r,o,e,s){for(var n=16383&i,h=i>>14;--s>=0;){var u=16383&this[t],a=th

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1693
Entropy (8bit):	4.273532873042263
Encrypted:	false
SSDEEP:	48:pI+6A5+MC76EBptJS8/IxvIfsz1b2q+21MzRlD7GZ1E:m+6yC76sptJx/IJN1q37ce
MD5:	82D5CDD07FBF92996B76F983B73B86A0
SHA1:	F2E7BEE23A231029F359556B3D7105D4FF95AC15
SHA-256:	6C259DB6C1F2380B1BBB9EC66512F8ADBF3365DE399FDCF0C6E2331ACAE69C02
SHA-512:	A26102D255BF4A87743C52E625D62629C36678FC0648412151CA9E7CBFB47AAC003077A7C3258012B1706B14FE5BEC933E1113FB873D8A6539CF1589ECD884B9
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="39.724" height="39.726" viewBox="0 0 39.724 39.726">.. <path id="Path_1124" data-name="Path 1124" d="M1571.885,2573.343a4.966,4.966,0,1,0-7.2,0,7.5,7.5,0,0,0-1.3.917,8.749,8.749,0,0,0-3.484-3.338,6.207,6.207,0,1,0-8.06,0,8.758,8.758,0,0,0-3.484,3.338,7.507,7.507,0,0,0-1.3-.917,4.966,4.966,0,1,0-7.2,0,7.452,7.452,0,0,0-3.85,6.517v4.965a2.482,2.482,0,0,0,2.483,2.483v6.207a2.482,2.482,0,0,0,2.483,2.483h4.965a2.482,2.482,0,0,0,2.483-2.483v-4.059a2.477,2.477,0,0,0,1.241.335v7.448a2.482,2.482,0,0,0,2.483,2.483h7.448a2.482,2.482,0,0,0,2.483-2.483v-7.448a2.46,2.46,0,0,0,1.241-.335v4.058A2.482,2.482,0,0,0,1565.8,2596h4.965a2.482,2.482,0,0,0,2.483-2.483v-6.207a2.482,2.482,0,0,0,2.483-2.483v-4.966A7.457,7.457,0,0,0,1571.885,2573.343Zm-28.427-5.9a2.483,2.483,0,1,1-2.483,2.483A2.482,2.482,0,0,1,1543.457,2567.448Zm2.483,13.034v13.034h-1.862v-8.689a.621.621,0,1,0-1.241,0v8.689h-1.862v-13.034a.621.621,0,0,0-1.241,0v4.345h-1.241v-4.966a4.965,4.965,0,0,1,8

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1345
Entropy (8bit):	4.9437663948579615
Encrypted:	false
SSDEEP:	24:2dC5A6LfEljLNRjkmsZt9ziOJMtdwVcxC5t9zSowVcx88MkDds/cWWS0uR:cGA+fEljBiISQwVcw1wVc6CdHS0uR
MD5:	9B54ED8DEE168401D489687CCF49D475
SHA1:	02E9A6E1B9A9EBEB6368CE7CDAA20461DD7A17D6
SHA-256:	53C75B06226520722685D8185CFB234759C4ED6FAC4A5F0B742FD18F0361F8C4
SHA-512:	C67CBC61959EA4BC7712FEFF9AB65DC19E4672C1F5EA78D0D36ED10A19442F0F42A3B6E1A47AD38740BFFACDB3268B13F51100554C69D4130E70CE0A293EA06E
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/icon-controllers.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 30 30" style="enable-background:new 0 0 30 30;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<path class="st0" d="M11.6,16.8c0,0.5-0.4,0.9-0.9,0.9H9v1.7c0,0.5-0.4,0.9-0.9,0.9c-0.5,0-0.9-0.4-0.9-0.9v-1.7H5.6...c-0.5,0-0.9-0.4-0.9-0.9c0-0.5,0.4-0.9,0.9-0.9h1.7v-1.7c0-0.5,0.4-0.9,0.9-0.9c0.5,0,0.9,0.4,0.9,0.9V16h1.7...C11.2,16,11.6,16.4,11.6,16.8z M23.1,15.6c-0.7,0-1.3,0.6-1.3,1.3c0,0.7,0.6,1.3,1.3,1.3c0.7,0,1.3-0.6,1.3-1.3...C24.4,16.1,23.8,15.6,23.1,15.6 M23.1,14.7c1.2,0,2.1,1,2.1,2.1c0,1.2-1,2.1-2.1,2.1S21,18,21,16.8C21,15.7,21.9,14.7,23.1,14.7...L23.1,14.7z M18,15.6c-0.7,0-1.3,0.6-1.3,1.3c0,0.7,0.6,1.3,1.3,1.3s1.3-0.6,1.3-1.3C19.3,16.1,18.7,15.6,18,15.6 M18,14.7...c1.2,0,2.1,1,

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 939 x 794, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	54376
Entropy (8bit):	7.943080497489348
Encrypted:	false
SSDEEP:	768:9qkwuT4+ox8cGKGpQ9p8ro8UO1TsQtidPndFAsj+v+gWsRgERNg+IgUGLQxpCWdi:PGyQ96ro8UOBiPSYU+dZ4ggSPCC9g5
MD5:	F50541958F39D0F2CAD3B3112D0E3A02
SHA1:	E4CA9359553D047CAC275725AAA6CB01194BB956
SHA-256:	533528013E9E1978ADFF37231678FBBB9F80434425FD7B13E196F91194651766
SHA-512:	CDAABAAD8493A8FBBEA2713E93A9563AEC8D29591AC13C2A6BD1F5BE9FE0CA8B1E33A9FC9EE51E579D79510E143C30831D7EDD060E32E4FBDAF39B62BFE05267
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_hardware.png
Preview:	.PNG........IHDR.............`t.U....sBIT....\|.d... .IDATx...i.$.}....TUow_f.f0......b(R...$H.%%..[V...:....Q"G.e'Q..-.>...%9..Q..@.}.HThQ.i..,..A...b..~g.~...y.g..f.Lwuu.....P..?..V.......7u...}.....{..]...$s[.u..)/..2.....o..3.,.$..c.......N.......5...1.E..I.E..+]......W....x.V...^.w\|....%...Z.?/..3..=..?X/....AX....t..{..\.We.CE..y.rF.....G_....#.....w...w_.D.#...k.p....~.._.......".....v.;>.W..o.i..Z............@>......(.=oy..6..`...k.h....6..N..d....a...L..G.nG.O..kA>.......Kg^x..Z....]...@......H..]..e..........0:....:.>..7{c~..:.?#s8h....:...........%.p..22...C.~w.u...a...L.....#F.{....e...k.0.....*.7?^t......x.#....@v.U..0=N..d.CE..I0.L..].......`j......\.u`B..-.....V....^.-..L.y....dGX...............b.u........a.).XsO.5...........d.....T.a...L./....L..j.]..l....`.....0YV....@6.U....@..V......CX.......a.....P:.U....@..V......CX.......a.....P:.U....@..V......CX.......a.....P:.U....@..V......CX.......a.....P:.U....@..V......CX.......a.....P:.U..

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4759
Entropy (8bit):	3.8320403432185826
Encrypted:	false
SSDEEP:	96:aLm9W6Wd6fHZaGfgNqjoqLBEmlEfVZZGcZzXNfTXXSSH7Uywn0Tn:a6FC6BaFN47VT4VZZtXN7Xj77wn0Tn
MD5:	D8AF77328087BCA3B16453A8D5CD29A8
SHA1:	E43DA3C95ED60064D5439A0F80A0D2AA2B3EB23A
SHA-256:	98990220A244C39620A11191682A4C1D540C161A1EC93CA46E5D77466D98B3FE
SHA-512:	1BDBB6BBB42E88344F16ED708DD0EE616BAAA5CDCC7045202FD1638F6B81416C492DEB30CFCB8828F0541A6BC9B5FCA43A4399CC5F61FABC89C01DC16209C775
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/img/payment_2.svg
Preview:	<svg width="81" height="41" viewBox="0 0 81 41" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M57.2408 13.4948V25.3906C57.2418 25.4341 57.234 25.4774 57.2178 25.5179C57.2017 25.5583 57.1775 25.595 57.1469 25.6258C57.1161 25.6566 57.0796 25.6808 57.0392 25.697C56.9989 25.7133 56.9558 25.7211 56.9123 25.72H54.494C54.4507 25.7211 54.4076 25.7133 54.3672 25.697C54.3269 25.6808 54.2903 25.6566 54.2596 25.6258C54.229 25.595 54.2048 25.5583 54.1886 25.5179C54.1725 25.4774 54.1647 25.4341 54.1657 25.3906V13.4948C54.1647 13.4512 54.1725 13.4079 54.1886 13.3674C54.2048 13.327 54.229 13.2904 54.2596 13.2595C54.2903 13.2287 54.3269 13.2045 54.3672 13.1884C54.4076 13.1721 54.4507 13.1642 54.494 13.1653H56.9123C56.9558 13.1642 56.9989 13.1721 57.0392 13.1884C57.0796 13.2045 57.1161 13.2287 57.1469 13.2595C57.1775 13.2904 57.2017 13.327 57.2178 13.3674C57.234 13.4079 57.2418 13.4512 57.2408 13.4948ZM76.1174 13.1653C76.2115 13.1653 76.329 13.2121 76.4458 13.3065C76.5166 13.3768 76.5166 13.4

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 939 x 794, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	66811
Entropy (8bit):	7.88204197496626
Encrypted:	false
SSDEEP:	1536:82dvbN0h+V8wfDboAzoZ86JwAN777p5ZEJaa7Ixrr5jZuFhEm:rTO4awrsbJwA979rE4a7Il99uFhv
MD5:	10F463B75D3D7B4C2AD97FF70B8935C8
SHA1:	028355FCC04F4FBF79FC0944B17DC29FC0429BF7
SHA-256:	8091287CFDC332A4E68026302F28D0D15D28C4A46C8C9916B7D7F6F8BCA06BC6
SHA-512:	C5A384D61B96AEF6FAD5196DCEC42BFA7E190DBD171EEECC711262BB9CF6487B1F32C13D299B2A3A053F7A9721CCCC6C3E844077DF639869DC55D3E7530554AC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............`t.U...AzTXtRaw profile type exif..x..Yr....q....r.$2.......U...h.#...K,.K..B...?o..?5..j....#?u.7.f\|...=....NI,.?..i....O....c.8.....})./....B~.b..1.o.........Z.J~}.....b_s\|........~.......{.=m.Sr..J..Z@....~>l..\....._............?..\|~..-}.>\|.V..K. .....}..\|...\..S...h..}.....>{f..vB.......)\|..XZ......y-^..>......I+e.uSM.v...I.%.l!.>.\|ryN.2..x.......e........L....l..5qiN..%...7....R_.`]9{.Y.g.......j{......y-d.y..E........HP.D..l._=.... DL.XLd....ROq.<R"...m..K.B.RkYYd....yf..[Fz..-s:p.0#...2...d...Q'5.[i....h...{......{.Q.h..1.Xc.2.l..1.\s.....V_c.....ys..%K.-H.!S..C..z..g.y...(..].N].-..d.u.6m...-...n.......;.?.~#k..d./..Y....C$...9#a9.D......8S..3.9...+-...9...#..Rn7}...WF=s.+oa.......O.of...Y..i.<.{u..5....m.<...O../^.E....VT..k.b{..Bm.K$......kvwG...[I...[.9].5[.l..l.N.d..!...l.v..Eg0.\kkO.l.d...R.D.jS.$.jN\.zv.R..4Ue...B..E%..OF.(.}O.KGMC2..#..o"T.......B..#..\|B-..1+{.3...5B.A.u.*Wj.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.544325652580697
Encrypted:	false
SSDEEP:	3:hWikj2hkum0KthOU1:AikjDBr
MD5:	6D93FDB56B417B26D61378095110EA11
SHA1:	99C638B5D3CBB852EF664EFC7A1E8282F3997DE9
SHA-256:	D8F0F15132104CAEF0BADCF8657B9CFCC4237F59AC844DE47E297A2F48E43AD9
SHA-512:	6A735A16B22DC3152CB359D47C9E51B1117EA624B573F24B4694734F2F90CBFE7ECF5D3684DBCF9CB08FEC7873C5399AAF58C0174A5B60ED93E3D48F971ADF34
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwn2ZtV5zmIo5BIFDYPOwY0SBQ2S9RIrEhAJ48ci2S48zdQSBQ38LUur?alt=proto
Preview:	ChIKBw2DzsGNGgAKBw2S9RIrGgAKCQoHDfwtS6saAA==

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2557
Entropy (8bit):	4.948346901928461
Encrypted:	false
SSDEEP:	48:cGA+fEjXUMEcKCNyuPqkZ1IRXJdJaCiC9tX3tGdfPNyFbap35r:a+fQXnEcYuitXJdJa1CHAdJr
MD5:	8351C9C5873C3975D9730ACE755A5EC9
SHA1:	66D9D4F9E3D73027ECF61972DE43657FFBC831EA
SHA-256:	18E6EE2ED3EA311B09C504798CCBB37FB9386840A9FCE138F0A03DFA3D5564DF
SHA-512:	F339E73C884A6A4B95913C7BF37C8ACB30FD9298D29F89EEDB36FC50B6EED196A3C3AE37EB910D38B89B387E988A08568E6E2C150513F83087B2BD81A766F0AB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 278 84" style="enable-background:new 0 0 278 84;" xml:space="preserve">..<style type="text/css">....st0{fill:#24ACE3;}....st1{fill:#FFFFFF;}..</style>..<g>...<g>....<path class="st1" d="M41.8,0C19.7,0,1.7,17,0,38.5l22.5,9.3c1.9-1.3,4.2-2.1,6.7-2.1c0.2,0,0.4,0,0.7,0l10-14.5c0-0.1,0-0.1,0-0.2.....c0-8.7,7.1-15.8,15.8-15.8c8.7,0,15.8,7.1,15.8,15.8c0,8.7-7.1,15.8-15.8,15.8c-0.1,0-0.2,0-0.4,0L41,57.1c0,0.2,0,0.4,0,0.6.....c0,6.5-5.3,11.9-11.9,11.9c-5.7,0-10.5-4.1-11.6-9.5L1.4,53.3c5,17.6,21.1,30.5,40.3,30.5c23.1,0,41.9-18.8,41.9-41.9.....C83.7,18.8,64.9,0,41.8,0z"/>....<path class="st1" d="M26.3,63.6l-5.1-2.1c0.9,1.9,2.5,3.5,4.6,4.4c4.5,1.9,9.8-0.3,11.6-4.8c0.9-2.2,0.9-4.6,0-6.8.....c-0.9-2.2-2.6-3.9-4.8-4.8c-2.2-0.9-

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	727
Entropy (8bit):	4.713816631550026
Encrypted:	false
SSDEEP:	12:t4MGW2p7xUSmkcwc/ijoI1SveHRpAijoeKhOLuxijokDK75Zijoek73qShLKqJSC:t4MGnZxUSmkQijoImScijoeKhVxijoM+
MD5:	7E02BC5A2882F8850585CC6BACB5BB4D
SHA1:	3992AD28FC11303E85CDDE91D9C66BC5249270EA
SHA-256:	402E829C4289CAE69AD2E95684804A4B63D34B306CD5F4D77E18AE2E2BA2848C
SHA-512:	4AC3E3D7207391257DD87A55E4DBE7C3238130B16C8F9DB42301011090866DF819C88861C77982BD5644C280EC248EE9FD380D9207D98090169687ABACB3C498
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="39.724" height="29.793" viewBox="0 0 39.724 29.793">.. <path id="Path_1123" data-name="Path 1123" d="M546.758,2080H516.965a4.972,4.972,0,0,0-4.965,4.966v19.862a4.972,4.972,0,0,0,4.965,4.966h29.793a4.972,4.972,0,0,0,4.966-4.966v-19.862A4.971,4.971,0,0,0,546.758,2080Zm-29.793,2.483h29.793a2.49,2.49,0,0,1,2.483,2.483v2.483H514.483v-2.483A2.49,2.49,0,0,1,516.965,2082.483Zm29.793,24.828H516.965a2.49,2.49,0,0,1-2.483-2.483v-12.414h34.758v12.414A2.49,2.49,0,0,1,546.758,2107.31Zm-1.241-9.931H533.724a.621.621,0,1,1,0-1.241h11.793a.621.621,0,1,1,0,1.241Zm0,3.724H533.724a.621.621,0,1,1,0-1.241h11.793a.621.621,0,1,1,0,1.241Z" transform="translate(-512 -2080)" fill="#fff"/>..</svg>..

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1430
Entropy (8bit):	6.915444207165524
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVag7yJ3VR7GmXF54+mC8yq8/23CMwMIE+b8Dllc:HZNn2lpWJ3nnwDNmlPbUI
MD5:	AFC159FE5F0F26FA7282505DA9887CC3
SHA1:	C1CD55380C2AF435876989F94E8B0715042C2ADE
SHA-256:	4BE942A34871DD6F8F14B43D27C31B049BE7F6544C05685D4F35ABDD329DE176
SHA-512:	8F7DCB7E99CEED8F86575A05FF7D329EE2FC67CD18C6D53B2833A6AA1EEDE2586D57688F27901D941D2B6351412957468CCE5CA69101D86911390BF04FD82763
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/images/ico/ico_twitter.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:6E745BD792D411EE8F80E4F5B5148EC9" xmpMM:DocumentID="xmp.did:6E745BD892D411EE8F80E4F5B5148EC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6E745BD592D411EE8F80E4F5B5148EC9" stRef:documentID="xmp.did:6E745BD692D411EE8F80E4F5B5148EC9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{KL.....IDATx.b..U.d``.......@...4.....0.4.9...[`...e.5U...6V..G..d.....I2.].......?y.............^./....&.....

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1589
Entropy (8bit):	4.846757444405295
Encrypted:	false
SSDEEP:	24:t4Lx0g2jT00GwGlGNGfGasGnMGQtXSAFuWKWHtOesHj8VSFt0SvRCe2cez4hJGzE:+xG/0/zcUuInHQwbWHshIenhJdoMe8F
MD5:	09BA266E4538393140AF3DFB119FF316
SHA1:	3FE402ADCFC131C7F2428799FEC5703A96A42C69
SHA-256:	F9DFD02F603715CB12A8B0530E0C4DEC21ECF4104C053BF62DD8139F19EA47AF
SHA-512:	CDC1AB1C8BCD05659AF4040146A3EE06C4CC8C2A026ACD02E420B12F534789ECC306296553981580475C383BBE103FB3A5358044DEEF8C04B422972E98CA6399
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/favicon.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 65 65" fill="#fff"><use xlink:href="#B" x=".5" y=".5"/><defs><linearGradient id="A" x2="50%" x1="50%" y2="100%" y1="0%"><stop stop-color="#111d2e" offset="0%"/><stop stop-color="#051839" offset="21.2%"/><stop stop-color="#0a1b48" offset="40.7%"/><stop stop-color="#132e62" offset="58.1%"/><stop stop-color="#144b7e" offset="73.8%"/><stop stop-color="#136497" offset="87.3%"/><stop stop-color="#1387b8" offset="100%"/></linearGradient></defs><symbol id="B"><g><path d="M1.305 41.202C5.259 54.386 17.488 64 31.959 64c17.673 0 32-14.327 32-32s-14.327-32-32-32C15.001 0 1.124 13.193.028 29.874c2.074 3.477 2.879 5.628 1.275 11.328z" fill="url(#A)"/><path d="M30.31 23.985l.003.158-7.83 11.375c-1.268-.058-2.54.165-3.748.662a8.14 8.14 0 0 0-1.498.8L.042 29.893s-.398 6.546 1.26 11.424l12.156 5.016c.6 2.728 2.48 5.12 5.242 6.27a8.88 8.88 0 0 0 11.603-4.782 8.89 8.89 0 0 0 .684-3.656L42.18 36.16l.275.005c6.70

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (377), with CRLF line terminators
Category:	downloaded
Size (bytes):	34674
Entropy (8bit):	5.421358067509858
Encrypted:	false
SSDEEP:	768:ciJQBnCB/MaberYaWM5tWgFPQVGvKMpEFbW:cMQJu/Mabc4MZPPvKzk
MD5:	3F9FAFDC9C0CDDD25D6E4D046A8D42D3
SHA1:	E277FDA3655E94DDB80F03225EFA7EE8EBD6BB30
SHA-256:	A2ADAD654A0E37C791418E897592D6213B0CBEB73B35C1DE6CA82085C4E79CE9
SHA-512:	012D99F610FBA081390225909D3915361EE5638D71EE507B3D05EB71D05C1489EF1CDC0A39DA1D2D1ADACBDFAC2C279D96EBB47C72273CC2662E06E4378EEBFE
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/javascript/crypto/jsbn.js
Preview:	..// Copyright (c) 2005 Tom Wu..// All Rights Reserved...// See "LICENSE" for details...../.. Copyright (c) 2003-2005 Tom Wu.. * All Rights Reserved... .. Permission is hereby granted, free of charge, to any person obtaining.. * a copy of this software and associated documentation files (the.. * "Software"), to deal in the Software without restriction, including.. * without limitation the rights to use, copy, modify, merge, publish,.. * distribute, sublicense, and/or sell copies of the Software, and to.. * permit persons to whom the Software is furnished to do so, subject to.. * the following conditions:.. .. The above copyright notice and this permission notice shall be.. * included in all copies or substantial portions of the Software... .. THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, .. * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY .. * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. .. .. IN NO EVENT SHAL

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	761
Entropy (8bit):	5.572854824741326
Encrypted:	false
SSDEEP:	12:TMHdw95i/nzVc/KYf3UTOsXHpjasVtDLmgdS7UeayTTIdw04q:2dC5A6LfEhXUsVRB9uIxF
MD5:	756C086E45B9A4A0392EAAB9E61F698A
SHA1:	A75712CA9D5A9029EB1F3C4FF28BBC58209E5BCA
SHA-256:	B82A0A7BEEA06E8F89DAEC7EB7A91C25296B4168B43C0C597654B6931E6BC636
SHA-512:	40830EB759000F287A2038FD6FE3A9945E8583299F4FD4E4B2570AA4DC84508AA5C489FD701CCAA8676D2A45F2AA4604D0787F1C77BB1E76731C7573459ADCAD
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/icon-windows.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">..<style type="text/css">....st0{fill:#24ACE3;}....st1{fill:#FFFFFF;}..</style>..<g id="g3000_1_" transform="matrix(0.04824549,0,0,0.04824549,0,38079.698)">...<path id="path13_1_" class="st1" d="M0-789241.4l169.8-23.4v163.9H0L0-789241.4z M169.8-789079.9v162L0-788941.2l0-138.7H169.8....L169.8-789079.9z M188.6-789267.3l226-31.1v197.5h-226V-789267.3z M414.6-789079.9v195.6l-226-31.1v-164.6H414.6z"/>..</g>..</svg>..

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	146363
Entropy (8bit):	5.017884864989683
Encrypted:	false
SSDEEP:	1536:HtIvIUGKqn/1x4JJmHtcgleOrffK00P85JP9IZphWJ23CVs:HjUK7yJxg8yS0005JP9IZphWJ23p
MD5:	279CFB2BB2001072AB902F3B48110872
SHA1:	44E05A60E1EEC8F9BDEA0D4A24401A44F48E235D
SHA-256:	B55CF5A9E14978FB7A8EF303AA41AF8B8F33ED9E292E329614549E6C1AA94D3C
SHA-512:	32716BB6FBDBEECB3704868637C6ECE6F61C6744AD6B8B6AD4C276C95303948B4E5DEA78942AE4811A55781FC301F0CC8CC6C5449CA43C5DDC9BA91A148D997D
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/css/bootstrap.min-1.css
Preview:	/!. Bootstrap v3.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). / /! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */.html {. font-family: sans-serif;. -ms-text-size-adjust: 100%;. -webkit-text-size-adjust: 100%;.}.body {. margin: 0;.}.article,.aside,.details,.figcaption,.figure,.footer,.header,.hgroup,.main,.menu,.nav,.section,.summary {. display: block;.}.audio,.canvas,.progress,.video {. display: inline-block;. vertical-align: baseline;.}.audio:not([controls]) {. display: none;. height: 0;.}.[hidden],.template {. display: none;.}.a {. background-color: transparent;.}.a:active,.a:hover {. outline: 0;.}.abbr[title] {. border-bottom: none;. text-decoration: underline;. -webkit-text-decoration: underline dotted;. -moz-text-decoration: underline dotted;. text-decoration: underline dotted;.}.b,.strong {. font-weight: 700;.}.dfn {. font-style:

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1819), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	86933
Entropy (8bit):	5.664768291484957
Encrypted:	false
SSDEEP:	1536:OeCOT9idwAQDrZjVXKIrKl6/SNQ2zYFS/S/MxDPE52DjLLjLSUWEFh5KD8ASvxrc:cIkfD3UnweoQt
MD5:	A941B951BE6BAEAD890CD2CC184A3AD0
SHA1:	DCF301217F3C96A2D7B29F7D99EE06935A200CEA
SHA-256:	BF23CC242135C8C7463FAB041335272BA5327D1236553D16E56D5FAD5915A575
SHA-512:	AD01A11BACC8C08056A7DE070439E0244D0F4230045102CDDED6F7FCBE568785DB7D08A9CAF54EE291F2B29A4B99B19F2829A0DE01D738D5101EA74694B69307
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=qUG5Ub5rrq2J&l=english&_cdn=cloudflare
Preview:	:root {.../* System greys /...--gpSystemLightestGrey: #DCDEDF;...--gpSystemLighterGrey: #B8BCBF;...--gpSystemLightGrey: #8B929A;...--gpSystemGrey: #67707B;...--gpSystemDarkGrey: #3D4450;...--gpSystemDarkerGrey: #23262E;...--gpSystemDarkestGrey: #0E141B;...../ Store blue greys /...--gpStoreLightestGrey: #CCD8E3;...--gpStoreLighterGrey: #A7BACC;...--gpStoreLightGrey: #7C8EA3;...--gpStoreGrey: #4e697d;...--gpStoreDarkGrey: #2A475E;...--gpStoreDarkerGrey: #1B2838;...--gpStoreDarkestGrey: #000F18;...../ Gradients /...--gpGradient-StoreBackground: linear-gradient(180deg, var(--gpStoreDarkGrey) 0%, var(--gpStoreDarkerGrey) 80%);...--gpGradient-LibraryBackground: radial-gradient(farthest-corner at 40px 40px,#3D4450 0%, #23262E 80%);...../ Colours */...--gpColor-Blue: #1A9FFF;...--gpColor-BlueHi: #00BBFF;...--gpColor-Green: #5ba32b;...--gpColor-GreenHi: #59BF40;...--gpColor-Orange: #E35E1C;...--gpColor-Red: #D94126;...--gpColor-RedHi: #EE563B;...--gpColor-DustyBlue: #417a9b;...--gpColor-L

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2557
Entropy (8bit):	4.948346901928461
Encrypted:	false
SSDEEP:	48:cGA+fEjXUMEcKCNyuPqkZ1IRXJdJaCiC9tX3tGdfPNyFbap35r:a+fQXnEcYuitXJdJa1CHAdJr
MD5:	8351C9C5873C3975D9730ACE755A5EC9
SHA1:	66D9D4F9E3D73027ECF61972DE43657FFBC831EA
SHA-256:	18E6EE2ED3EA311B09C504798CCBB37FB9386840A9FCE138F0A03DFA3D5564DF
SHA-512:	F339E73C884A6A4B95913C7BF37C8ACB30FD9298D29F89EEDB36FC50B6EED196A3C3AE37EB910D38B89B387E988A08568E6E2C150513F83087B2BD81A766F0AB
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store//about/logo_steam.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 278 84" style="enable-background:new 0 0 278 84;" xml:space="preserve">..<style type="text/css">....st0{fill:#24ACE3;}....st1{fill:#FFFFFF;}..</style>..<g>...<g>....<path class="st1" d="M41.8,0C19.7,0,1.7,17,0,38.5l22.5,9.3c1.9-1.3,4.2-2.1,6.7-2.1c0.2,0,0.4,0,0.7,0l10-14.5c0-0.1,0-0.1,0-0.2.....c0-8.7,7.1-15.8,15.8-15.8c8.7,0,15.8,7.1,15.8,15.8c0,8.7-7.1,15.8-15.8,15.8c-0.1,0-0.2,0-0.4,0L41,57.1c0,0.2,0,0.4,0,0.6.....c0,6.5-5.3,11.9-11.9,11.9c-5.7,0-10.5-4.1-11.6-9.5L1.4,53.3c5,17.6,21.1,30.5,40.3,30.5c23.1,0,41.9-18.8,41.9-41.9.....C83.7,18.8,64.9,0,41.8,0z"/>....<path class="st1" d="M26.3,63.6l-5.1-2.1c0.9,1.9,2.5,3.5,4.6,4.4c4.5,1.9,9.8-0.3,11.6-4.8c0.9-2.2,0.9-4.6,0-6.8.....c-0.9-2.2-2.6-3.9-4.8-4.8c-2.2-0.9-

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	869
Entropy (8bit):	4.245009292958039
Encrypted:	false
SSDEEP:	24:t3JfDuRWVfVl62LlviEYGbjyig6N4eOT1H2:3dvdL4EDbjyig651
MD5:	C79C9AAFA4173BF972C75FB88AC8070E
SHA1:	BC36E2C9F0CFBFC423CFF976DF429DB175137C75
SHA-256:	A424A23E495EF8AA3805BF90029D15FF1D125ABA4979DE8B27E544E88C0F499D
SHA-512:	9DC11A15DB09E6082AA705783CABA98528E8AA2645AD4D455337E7DACB600637B91E17BC4C261BD8494361FD1FE389839A2FE8273E2541D3D0A47F18FD2C347B
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/css/icon_close.svg
Preview:	<svg width="14" height="14" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M11.0911 0.636039L7.2273 4.49987C7.10178 4.62539 6.89825 4.62539 6.77273 4.49987L2.9089 0.636039C2.28131 0.00845498 1.26364 0.00845498 0.636056 0.636039C0.00847088 1.26362 0.00847121 2.2813 0.636056 2.90888L4.49989 6.77272C4.62541 6.89823 4.62541 7.10177 4.49989 7.22728L0.636056 11.0911C0.00847121 11.7187 0.00847088 12.7364 0.636056 13.364C1.26364 13.9915 2.28131 13.9915 2.9089 13.364L6.77273 9.50013C6.89825 9.37461 7.10178 9.37461 7.2273 9.50013L11.0911 13.364C11.7187 13.9915 12.7364 13.9915 13.364 13.364C13.9916 12.7364 13.9916 11.7187 13.364 11.0911L9.50014 7.22728C9.37463 7.10177 9.37463 6.89823 9.50014 6.77272L13.364 2.90888C13.9916 2.2813 13.9916 1.26362 13.364 0.636039C12.7364 0.00845431 11.7187 0.00845464 11.0911 0.636039Z" fill="white"/>.</svg>.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	124529
Entropy (8bit):	7.79044844464572
Encrypted:	false
SSDEEP:	3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs
MD5:	48B805D8FA321668DB4CE8DFD96DB5B9
SHA1:	E0DED2606559C8100EF544C1F1C704E878A29B92
SHA-256:	9A75F8CC40BBE9C9499E7B2D3BAB98A447685A361489357A111479517005C954
SHA-512:	95DA761CA3F99F7808A0148CFA2416B8C03D90859BFF65B396061ADA5A4394FB50E2A4B82986CAAB07BC1FCD73980FE9B08E804B3CE897762A17D2E44935076D
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (727), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	892
Entropy (8bit):	5.514363681812321
Encrypted:	false
SSDEEP:	24:+Tuj0z//T19x54f4AWyYoGcsMGPo5cr6cOjYRpBRptT:+Tuj0//T1LXyYLVo5UdF
MD5:	EAA9D66E3808E4EC87BB99B16C9AD63C
SHA1:	8FEF7E8D209AFD296FA53293C1AC73884AE6EAA0
SHA-256:	AF4D2EFD1727BB6B56C6660BAD3B87FA42DA02F2BD8DCDA79CC198CCE44E2AC5
SHA-512:	3E0CB23B4A7B58D205C71D46362E9A2AE51FCBE97AB9EDE4C0418A2F4E40615B81804D21676136C37683B62B4F9CB74475830F2B45CEC76C2A6BA262858FE390
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/applications/store/login.js?contenthash=0a2de2771eef68b1e7bd
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[4535],{24125:e=>{e.exports={LoginContainer:"_2kLRmRsLwjGDlm-ZfUpChG"}},9084:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>c});var n=r(24125),a=r(47427),o=r(99327),s=r(77581),i=r(37563),l=r(35791);function c(e){const{redirectUrl:t=i.De.STORE_BASE_URL}=e,[r]=(0,a.useState)(new s.J(i.De.WEBAPI_BASE_URL).GetAnonymousServiceTransport()),[c,u]=(0,a.useState)(!1),m=e.guest;return a.createElement("div",{className:n.LoginContainer},c?a.createElement(o.pT,null):a.createElement(o.wK,{autoFocus:!0,transport:r,platform:2,onComplete:e=>{e==l.TG.k_PrimaryDomainFail?u(!0):window.location.assign(t)},redirectUrl:t},m&&a.createElement(o.bU,{redirectURL:e.redirectUrl})))}}}]);

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1160 x 732, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	36605
Entropy (8bit):	7.807428744151307
Encrypted:	false
SSDEEP:	768:JXokGLTluiiVCxF/5czo45y9OYPekXkJ7ezNeKBEEjwOzaZzLCUSkjM3iy:JXrAr/xF/5kXI9lTq7eBe4EN9Z/mkgyy
MD5:	FA607B90A1F1988F04C533705EB0B244
SHA1:	105CBC22CF0CC15A27337BBFA9C91CBBACD97D2A
SHA-256:	5EEBF25B1AE4FC1838001EC4B6532C206B6C62560DB4F409A8F2E130D48CA9CD
SHA-512:	4914F04D5EC6BDCBCA477CA6073B684A008E474DF06495A9448C741D2F76EF4908F616A58D551346251E1DBDADA50AA768BF9AB5F07D24AD01F9F7570B1F2263
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_steamworks_pt2.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:3FF7201120A311E9A5D8A61C985A56ED" xmpMM:DocumentID="xmp.did:3FF7201220A311E9A5D8A61C985A56ED"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3FF7200F20A311E9A5D8A61C985A56ED" stRef:documentID="xmp.did:3FF7201020A311E9A5D8A61C985A56ED"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>4-.....mIDATx...K..iz'.<...bU.Z.fAb,_@` .. .M./.....ws.60....j....../..Vm.K...,.7e.cXU0...M.y.<w......d^".......I

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	9277
Entropy (8bit):	7.952972412421695
Encrypted:	false
SSDEEP:	192:XzlWkvEmJsZKt0WrCNC5fjGb1pw/MOQr5JBLgpBY1d7nRChfh7kNO8YTep:8kd6ZBWfE+M5Lmy1d7RQp7kN5p
MD5:	F8152001DAD116FF508680C812325B89
SHA1:	0DB016FCCCDF485386C88B2776B4C73BC3C4D888
SHA-256:	F324272EE9A1009B0B0799F142A59E17C882859BEA2AE5257D7140701BA3CAC9
SHA-512:	B2154120A4E475058FD3834E5132A2A623C005A466B23FC079C42B86093F465E6AEA9976EE2A970F0CAE9FE1F24D5EFA86390EF778DD0673A5C0C057904978C6
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/2519060/capsule_231x87.jpg?t=1712178634
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................B...........................!.1."AQ.2q.a..#6BR...$3rt...Fbu....&C..................................=.......................!1..A.."Qqa....2B......46..35CErst.b............?..\|p..M+....Y7..I.6Yn6....>_......j...s...\|(.q.o..T<.....0...H.N.q....c;.v.D.....Dzu>z..Aj0...B..\..7<gxyJ.GhDc%.._%..)......U..{bx.j..I......tn.[.......)_`H.%d...).Z.U.R..T.>.?.lT.rA..u.......s..=......'.=.O'.....6..mlO...<.^..`..q%..3.K.m.&...1.Y..b.R...@.J.{.ea...X.I..!,.K.....!,.K.......X.......% .z_....CIn.&..Sc......L.fk...l..6...\|..w(.m..,..5....%.'...O.....}kd.I.^.,.2...z .NZ.(Aq...>..a....,=..3qa.seu..R6..\|...'2.&u..&S....nE.i....6.Qd9..d..`,...]>....NY4...$..R.oY.6..3.]y+.N....m.....r...H.8..Kd!%.rTE.r2.q.......G.{.l.....l.E..(.R.NJ...t...,.......x..i-.s(..mKQ..

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1345
Entropy (8bit):	4.9437663948579615
Encrypted:	false
SSDEEP:	24:2dC5A6LfEljLNRjkmsZt9ziOJMtdwVcxC5t9zSowVcx88MkDds/cWWS0uR:cGA+fEljBiISQwVcw1wVc6CdHS0uR
MD5:	9B54ED8DEE168401D489687CCF49D475
SHA1:	02E9A6E1B9A9EBEB6368CE7CDAA20461DD7A17D6
SHA-256:	53C75B06226520722685D8185CFB234759C4ED6FAC4A5F0B742FD18F0361F8C4
SHA-512:	C67CBC61959EA4BC7712FEFF9AB65DC19E4672C1F5EA78D0D36ED10A19442F0F42A3B6E1A47AD38740BFFACDB3268B13F51100554C69D4130E70CE0A293EA06E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 30 30" style="enable-background:new 0 0 30 30;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<path class="st0" d="M11.6,16.8c0,0.5-0.4,0.9-0.9,0.9H9v1.7c0,0.5-0.4,0.9-0.9,0.9c-0.5,0-0.9-0.4-0.9-0.9v-1.7H5.6...c-0.5,0-0.9-0.4-0.9-0.9c0-0.5,0.4-0.9,0.9-0.9h1.7v-1.7c0-0.5,0.4-0.9,0.9-0.9c0.5,0,0.9,0.4,0.9,0.9V16h1.7...C11.2,16,11.6,16.4,11.6,16.8z M23.1,15.6c-0.7,0-1.3,0.6-1.3,1.3c0,0.7,0.6,1.3,1.3,1.3c0.7,0,1.3-0.6,1.3-1.3...C24.4,16.1,23.8,15.6,23.1,15.6 M23.1,14.7c1.2,0,2.1,1,2.1,2.1c0,1.2-1,2.1-2.1,2.1S21,18,21,16.8C21,15.7,21.9,14.7,23.1,14.7...L23.1,14.7z M18,15.6c-0.7,0-1.3,0.6-1.3,1.3c0,0.7,0.6,1.3,1.3,1.3s1.3-0.6,1.3-1.3C19.3,16.1,18.7,15.6,18,15.6 M18,14.7...c1.2,0,2.1,1,

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	42455
Entropy (8bit):	4.815685075854753
Encrypted:	false
SSDEEP:	768:TUgdFQFnCXRhERgBFbJ6fBFbFR7yJSom0hNcFYa:TUMOJCXsRgBlJ6fBbR7ISom0h2Sa
MD5:	737DEAFECF7BC51DA52A4F8EB74E1EA2
SHA1:	991EC765D665E81F4BE294C44FD87843C550B0AA
SHA-256:	D45556137B3850F12E59E49C90C17863BDC026B4E247C9AC1B961C3C52A6AB7D
SHA-512:	39615B16DB74888D67F274BE760F3272D71EE0E4262EAE87BA89C484EF6A1EF947FF8839E92B6B57675976065CFDFE60816FE9F3F1F58993700C560709A8463F
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/css/main.min.css
Preview:	@font-face {. font-family: Rubik;. src: local('Rubik Light'), local('Rubik-Light'), url("Rubiklight.woff2") format('woff2');. font-weight: 300;. font-style: normal.}..@font-face {. font-family: Rubik;. src: local('Rubik'), local('Rubik-Regular'), url("Rubik.woff2") format('woff2');. font-weight: 400;. font-style: normal.}..@font-face {. font-family: Rubik;. src: local('Rubik Medium'), local('Rubik-Medium'), url("Rubikmedium.woff2") format('woff2');. font-weight: 500;. font-style: normal.}..@font-face {. font-family: Rubik;. src: local('Rubik Bold'), local('Rubik-Bold'), url("Rubikbold.woff2") format('woff2');. font-weight: 700;. font-style: normal.}..@font-face {. font-family: Rubik;. src: local('Rubik Black'), local('Rubik-Black'), url("Rubikblack.woff2") format('woff2');. font-weight: 900;. font-style: normal.}..* {. margin: 0;. padding: 0;. -webkit-box-sizing: border-box;. box-sizing: border-box;. outline: 0

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	229
Entropy (8bit):	5.208866791114413
Encrypted:	false
SSDEEP:	6:GXO23whT+t1FQuXX6C8Vo+nViARCa3whT+tAeEM:AO2gst1W1C8VRnEARhgstAeEM
MD5:	5903FB1A517865DCA5A7D37D419249A5
SHA1:	BBD2053A90BB34CC1EA6E4A9BB96A7FE710308A6
SHA-256:	1C59C22822333FD3E2CD5CEF13C3E90D9998493438888D11B23E6A6B9EEFADD1
SHA-512:	28022995614CB23E8463FCF85FC829BAA3F9D9330BBCCA7169B1501194374B806CE9C06E5ED8E1A76799BF1680D01773ECA74F4FC2554029167140A816E67B9F
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/css/applications/store/login.css?contenthash=308e62712ce8998ce357
Preview:	............_2kLRmRsLwjGDlm-ZfUpChG{padding-top:80px;padding-bottom:150px;display:flex;flex-direction:column;align-items:center}@media screen and (max-width: 700px){._2kLRmRsLwjGDlm-ZfUpChG{padding-top:12px;padding-bottom:0px}}..

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	541
Entropy (8bit):	4.531184254812198
Encrypted:	false
SSDEEP:	12:trL+quCoEQ/yFPnxNFlWsaHKBpk/u4tNNF/7L:t3+quqQQxsZUkPtd/7L
MD5:	A2C8976FBBBBFD4377A6710891498842
SHA1:	8DF82284A17CABF834D9BE9567A7B1FB0B713A70
SHA-256:	165F9AA0105F13B923F228AFB19010BD442E0BA3A9027225C057EF4E53652AEF
SHA-512:	1A41BF09BA546F4F8C4CFAC9C7878BF6FBA7612EEE866ACCDF4052731076C02BB16A3E97A6FF9AF279F80A8630AC8C865EE32270C966E790A40DC73BA7E9651A
Malicious:	false
Reputation:	low
Preview:	<svg width="14" height="11" viewBox="0 0 14 11" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M5.36085 10.6886C5.22721 10.823 5.04489 10.898 4.85549 10.898C4.66609 10.898 4.48376 10.823 4.35012 10.6886L0.314136 6.65195C-0.104712 6.2331 -0.104712 5.55391 0.314136 5.13585L0.819501 4.63035C1.23848 4.21151 1.91688 4.21151 2.33573 4.63035L4.85549 7.15024L11.6642 0.341357C12.0832 -0.0774902 12.7623 -0.0774902 13.1805 0.341357L13.6858 0.846854C14.1047 1.2657 14.1047 1.94476 13.6858 2.36295L5.36085 10.6886Z" fill="#A6F1D1"/>.</svg>.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaS
Category:	downloaded
Size (bytes):	124048
Entropy (8bit):	6.074024700633004
Encrypted:	false
SSDEEP:	1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9
MD5:	2D64CAA5ECBF5E42CBB766CA4D85E90E
SHA1:	147420ABCEB4A7FD7E486DDDCFE68CDA7EBB3A18
SHA-256:	045B433F94502CFA873A39E72D616C73EC1B4C567B7EE0F847F442651683791F
SHA-512:	C96556EC57DAC504919E806C7DF536C4F86892B8525739289B2F2DBBF475DE883A4824069DBDD4BB1770DD484F321563A00892E6C79D48818A4B95406BF1AF96
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Preview:	........... DSIG...........GDEF...4...,...@GPOS......l..u.GSUB.d....w.....OS/2u..........`cmap.d..........cvt G..t........fpgm.6!........gasp............glyf5.}2........head...W.......6hhea...v.......$hmtx._X.........loca.:yV........maxp.......l... names...........post.......<....prep..........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/metrika/advert.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBold4.015;Plau;MotivaSan
Category:	downloaded
Size (bytes):	123884
Entropy (8bit):	6.07029634687136
Encrypted:	false
SSDEEP:	1536:M+s43BGZsrolB21EJ4q+GIbdSW7VvCtQXjPM3mz1yxvjWRVIoFMe1V13836GKCnY:T1GZXlB2SUbxVv/zM3mZyxLUZGrSDfj9
MD5:	6168553BEF8C73BA623D6FE16B25E3E9
SHA1:	4A31273B6F37F1F39B855EDD0B764EC1B7B051E0
SHA-256:	D5692B785E18340807D75F1A969595BC8B1C408FB6FD63947775705E6D6BAA66
SHA-512:	0246CEE85A88068CA348694D38E63D46C753B03AFADF8BE76ECA18D21E3DE77B495215ED2384D62658A391104F9E00DF8605EDB77339366DF332C75691928EFB
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOSD.`>...l..u.GSUB.d....wT....OS/2vb.........`cmap.d.....X....cvt Hg.....,....fpgm.6!.........gasp.......$....glyf..........Xhead...a...@...6hhea.......x...$hmtx.NL.........loca{.:.........maxp.......,... name.s.U...L...Kpost............prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.738521032323434
Encrypted:	false
SSDEEP:	3:SbuhwinKCU/FfY:SbuR/Sw
MD5:	A38D31B4E09A63BAC837B48176899D62
SHA1:	61EF21265B07D77106F5410DAD40642D84329074
SHA-256:	18C7BC5400801BE37F06E360A4E2B59DB4CC2DFB021C2CDCAE9F6050917B95F4
SHA-512:	1C5AB4FF9FD06BEAC87B0BE5916149CB0548B63D6B9A37EF026272C1630CFD46A731E37D9055F626268AB125DFEF5F69C8187C1D3F0CA0CFDADF8D08F0B74C83
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgn6ynqB9aTxjhIFDShLLYkSBQ14bxIZEgUN7OSyHQ==?alt=proto
Preview:	CiEKBw0oSy2JGgAKBw14bxIZGgAKDQ3s5LIdGgYIARABGAM=

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	169399
Entropy (8bit):	4.976254040069433
Encrypted:	false
SSDEEP:	1536:CZXcWblD1ySId1u6p3JuZolKvI28mGY7NIj4WT0PjXsW0NKWzcEjpPrmcGKJ/jfT:ocWblASIdIv8tXYPjkrmgD8d3dI
MD5:	6A39E0B509FECB928D47B8A2643FED2A
SHA1:	F67FA6CB1D09963D10BA117D6553C8E7D5BC7863
SHA-256:	D8BDEA7FFF893DBDBEAF6C2AFFEC091A77483B9EC10E7958486BC3B6CC170C96
SHA-512:	B9B8C6D9AC4928686C5EA254AC8F765C4F3690F79E5B1CCAAFFC48D4BD47872B9CC5475C038F70D804740C81915FDFCE315EBE553B628D12F7CA1CC4467075D0
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy&_cdn=cloudflare
Preview:	../* Prototype JavaScript framework, version 1.7.. * (c) 2005-2010 Sam Stephenson.. .. Prototype is freely distributable under the terms of an MIT-style license... * For details, see the Prototype web site: http://www.prototypejs.org/.. .. --------------------------------------------------------------------------/....var Prototype = {.... Version: '1.7',.... Browser: (function(){.. var ua = navigator.userAgent;.. var isOpera = Object.prototype.toString.call(window.opera) == '[object Opera]';.. return {.. IE: !!window.attachEvent && !isOpera,.. Opera: isOpera,.. WebKit: ua.indexOf('AppleWebKit/') > -1,.. Gecko: ua.indexOf('Gecko') > -1 && ua.indexOf('KHTML') === -1,.. MobileSafari: /Apple.Mobile/.test(ua).. }.. })(),.... BrowserFeatures: {.. XPath: !!document.evaluate,.... SelectorsAPI: !!document.querySelector,.... ElementExtensions: (function() {.. var constructor = window.Element

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39553)
Category:	downloaded
Size (bytes):	39680
Entropy (8bit):	5.134609532741171
Encrypted:	false
SSDEEP:	768:up/wtev6UwUx0eWN3MebE9rQuFfU8Vt0azWcsi1m3K0rmq5YW:NorXfURXiUrmq5YW
MD5:	2F34B630FFE30BA2FF2B91E3F3C322A1
SHA1:	B16FD8226BD6BFB08E568F1B1D0A21D60247CEFB
SHA-256:	9EE2FCFF6709E4D0D24B09CA0FC56AADE12B4961ED9C43FD13B03248BFB57AFE
SHA-512:	A014E9ACC78D10A0A7A9FBAA29DEAC6EF17398542D9574B77B40BF446155D210FA43384757E3837DA41B025998EBFAB4B9B6F094033F9C226392B800DF068BCE
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/js/bootstrap.min-1.js
Preview:	/!. Bootstrap v3.4.1 (https://getbootstrap.com/). * Copyright 2011-2019 Twitter, Inc.. * Licensed under the MIT license. */.if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");!function(t){"use strict";var e=jQuery.fn.jquery.split(" ")[0].split(".");if(e[0]<2&&e[1]<9\|\|1==e[0]&&9==e[1]&&e[2]<1\|\|3<e[0])throw new Error("Bootstrap's JavaScript requires jQuery version 1.9.1 or higher, but lower than version 4")}(),function(n){"use strict";n.fn.emulateTransitionEnd=function(t){var e=!1,i=this;n(this).one("bsTransitionEnd",function(){e=!0});return setTimeout(function(){e\|\|n(i).trigger(n.support.transition.end)},t),this},n(function(){n.support.transition=function o(){var t=document.createElement("bootstrap"),e={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"};for(var i in e)if(t.style[i]!==undefined)return{end:e[i]};return!1}(),n.support.transition&&(n.event.specia

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1032
Entropy (8bit):	5.185411735346805
Encrypted:	false
SSDEEP:	24:2dC5A6LfEljMo+WLgrhhMyVS/XMleFvjzhBa/:cGA+fEljMoPsMbM0c
MD5:	116677D9305F23100D373B7D4BE25DEB
SHA1:	8430EC3309C0157DA2EBC4246D7C2B4D5120CF4C
SHA-256:	54F3C1737D72FACEBD20D1A07ADA71BD2474CADE30353497FEE424172CB44E9D
SHA-512:	05729DB27F43CF728AC38F9776A35733DFF095961B94C825BC27FD7D9AE0015506D34E23A192AA6CCEDF52960B852A04485985465F31BA51B641E23B6C74991B
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/icon-steammobile.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 30 30" style="enable-background:new 0 0 30 30;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<path class="st0" d="M20.1,1H9.9C8,1,6.5,2.5,6.5,4.4v20.4c0,1.9,1.5,3.4,3.4,3.4h10.2c1.9,0,3.4-1.5,3.4-3.4V4.4...C23.5,2.5,22,1,20.1,1z M8.2,4.4c0-0.9,0.8-1.7,1.7-1.7h10.2c0.9,0,1.7,0.8,1.7,1.7v2.6H8.2V4.4z M8.2,7.8h13.6v12.8H8.2V7.8z... M21.8,24.8c0,0.9-0.8,1.7-1.7,1.7H9.9c-0.9,0-1.7-0.8-1.7-1.7v-3.4h13.6V24.8z M15,25.6c0.9,0,1.7-0.8,1.7-1.7s-0.8-1.7-1.7-1.7...s-1.7,0.8-1.7,1.7S14.1,25.6,15,25.6z M15,23.1c0.5,0,0.9,0.4,0.9,0.9c0,0.5-0.4,0.9-0.9,0.9s-0.9-0.4-0.9-0.9...C14.1,23.5,14.5,23.1,15,23.1z M17.1,4.8c0,0.2-0.2,0.4-0.4,0.4h-3.4c-0.2,0-0.4-0.2-0.4-0.4s0.2-0.4,0.4-0.4h3.4...C16.9,4.4

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSan
Category:	downloaded
Size (bytes):	118736
Entropy (8bit):	6.0569560995718
Encrypted:	false
SSDEEP:	1536:GAAAAAAAgsAAAYgIAAAAsAuErzzzz6mfzzVCA9zzzzzzdp/koLAGXImE98YfgNi9:kErZDE9BfgNiX9k3SDHewStfNwS0fj9
MD5:	CE6BDA6643B662A41B9FB570BDF72F83
SHA1:	87BCF1D2820B476AAEAEA91DC7F6DBEDD73C1CB8
SHA-256:	0ADF4D5EDBC82D28879FDFAAF7274BA05162FF8CBBDA816D69ED52F1DAE547F6
SHA-512:	8023DA9F9619D34D4E5F7C819A96356485F73FDDCB8ADB452F3CEEFA8C969C16CA78A8C8D02D8E7A213EB9C5BBE5C50745BA7602E0EE2FE36D2742FB3E979C86
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS".j....l..j.GSUB.d....k.....OS/2t..........`cmap.d..........cvt E...........fpgm.6!.........gasp............glyf;9.........Thead.z.;.......6hhea...........$hmtxj4.w...8....locaijV... ....maxp........... name............post.......\|....prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............)........................ .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1060 x 600, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9460
Entropy (8bit):	6.9553107921422805
Encrypted:	false
SSDEEP:	192:mpzvyi/u/yUfBtBWJo3d511sSqU4arodpBj:mpryiG/yUfqo3H12Sqveodpp
MD5:	013CC4F64229A1D0FCCE500A8D018436
SHA1:	DD721C5AB5BC5E9B687129B53F598C6EF02AB5D9
SHA-256:	80D883706E6FFB8D603E67E6A13151119D43C56073E2F6106C1A059522797192
SHA-512:	81FC0F8167A0BAB72A5FA7533DCF14E93ECA87ED35B601BDD8754639937DA10315162D14568FFB85A8546FB38A41EF35666524DF8CD525E48943F9AB7294ED9A
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/cta_hero_community_pt1.png
Preview:	.PNG........IHDR...$...X.......7.....tEXtSoftware.Adobe ImageReadyq.e<..$.IDATx...O..W.(.rb./.....E 2xaH`:.B.."k7....{Wn..h...8..m/......w.@[..x!...!.K............c..e.J...V.~?8H]R....T..y..e........MwA....u...p.QhWr._..".....+..@U.$.....V.iMxJ.L.q\|..\o.P..u...f.t{W...)O. .+.>....o?.)...}....6W...M.F...k.T....P...P.Q.f..........hW...cz.(5.....+.....,.$..R....v.\..nn...S....>X.../..DL...A............'..........l.8.!.\.[\|:.FD...p3^3.JX.....,.$..'...f..M.m\|.G.6..e.g\vU..p...Po.+..W..`s...W.....h.Gz...PC..{...)..v....j5."..^#.g...h/..w.kE.p.}....1....*\|.......8]hI.......%.'i...x..^X~7...,..N.......'.u......S@.`...p..\..$.GT\......... /.FDq...T......m...v..@..3.W.M.."..(['.....R...E.H@.'y..".v3......j.7v.v+{.F....@M..k<.a...t'..............~.....b<.#.T.gM].r....W..;...]....u4:"..<.Q.X.4.a<(.j.t...q}lY...bX....`....\Gc.......v.......) ..\|4..M.w.,.#.w...]...W..'cm..$.....,W;{w$.....Q.h....R[...w...K.8...X.8.!{.0e..0O0!./.S>>..$.....T/......Q..t.>.-...7.m"

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	727
Entropy (8bit):	4.713816631550026
Encrypted:	false
SSDEEP:	12:t4MGW2p7xUSmkcwc/ijoI1SveHRpAijoeKhOLuxijokDK75Zijoek73qShLKqJSC:t4MGnZxUSmkQijoImScijoeKhVxijoM+
MD5:	7E02BC5A2882F8850585CC6BACB5BB4D
SHA1:	3992AD28FC11303E85CDDE91D9C66BC5249270EA
SHA-256:	402E829C4289CAE69AD2E95684804A4B63D34B306CD5F4D77E18AE2E2BA2848C
SHA-512:	4AC3E3D7207391257DD87A55E4DBE7C3238130B16C8F9DB42301011090866DF819C88861C77982BD5644C280EC248EE9FD380D9207D98090169687ABACB3C498
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/icon-payment.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="39.724" height="29.793" viewBox="0 0 39.724 29.793">.. <path id="Path_1123" data-name="Path 1123" d="M546.758,2080H516.965a4.972,4.972,0,0,0-4.965,4.966v19.862a4.972,4.972,0,0,0,4.965,4.966h29.793a4.972,4.972,0,0,0,4.966-4.966v-19.862A4.971,4.971,0,0,0,546.758,2080Zm-29.793,2.483h29.793a2.49,2.49,0,0,1,2.483,2.483v2.483H514.483v-2.483A2.49,2.49,0,0,1,516.965,2082.483Zm29.793,24.828H516.965a2.49,2.49,0,0,1-2.483-2.483v-12.414h34.758v12.414A2.49,2.49,0,0,1,546.758,2107.31Zm-1.241-9.931H533.724a.621.621,0,1,1,0-1.241h11.793a.621.621,0,1,1,0,1.241Zm0,3.724H533.724a.621.621,0,1,1,0-1.241h11.793a.621.621,0,1,1,0,1.241Z" transform="translate(-512 -2080)" fill="#fff"/>..</svg>..

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	90114
Entropy (8bit):	5.325158762948251
Encrypted:	false
SSDEEP:	1536:qBJtu6wr048dCHASHY9ZmruYYmF0qwSds2lyUYt7LvXB60I7cxe3tHJq6J3HyPf2:r
MD5:	C2C2A59E97C2B2266B77D1E4F0886FB5
SHA1:	0281B497962D30430CE3DE8B13E2368DCCA76D64
SHA-256:	067DD8BECA6FCBEC0149C647B4144FE46CA526A6EEB8BB5D224D5D8E4F2D198C
SHA-512:	8748A6EF1465A1AC023570729EBF0DF51C625AB64BE4E3103199E15DC4C4CA4A3D7650578358E7C545F028B7FCD020E52B5138CE1ACF79C3FB7A0A985F1DF2AC
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/applications/store/460.js?contenthash=e69f7790614c12c82978
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[460],{59223:(e,r,t)=>{var i=t(99928),n=t(62679),a=function(e,r){var t=new i((r=r\|\|{}).typeNumber\|\|-1,r.errorCorrectLevel\|\|n.H);return t.addData(e),t.make(),t};a.ErrorCorrectLevel=n,e.exports=a},72529:(e,r,t)=>{var i=t(83415);function n(e){this.mode=i.MODE_8BIT_BYTE,this.data=e}n.prototype={getLength:function(e){return this.data.length},write:function(e){for(var r=0;r<this.data.length;r++)e.put(this.data.charCodeAt(r),8)}},e.exports=n},6438:e=>{function r(){this.buffer=new Array,this.length=0}r.prototype={get:function(e){var r=Math.floor(e/8);return 1==(this.buffer[r]>>>7-e%8&1)},put:function(e,r){for(var t=0;t<r;t++)this.putBit(1==(e>>>r-t-1&1))},getLengthInBits:function(){return this.length},putBit:function(e){var r=Math.floor(this.length/8);this.buffer.length<=r&&

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/js/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1472
Entropy (8bit):	4.915242227779033
Encrypted:	false
SSDEEP:	24:2dC5A6LfEljghXYKx7A/qpMnhftwRPcwvr/Wszxxkr/NJQVSUC6uvr/ZsQyRmUDn:cGA+fEljghXYKx4nh1wREwv/kMSPvHyb
MD5:	11C7D3F8B5183772BF69CAED9E87785C
SHA1:	20480E3B6E94DE7ABAEB32276DE3ABE2D5D9276C
SHA-256:	A9ED5637AC99611D1AF2CB9515864365B9BFCFAD312B463F02C72D0FD45E4F06
SHA-512:	B596AD1D955A2795DB6F5EDCD430A96887DCDDA9986685D941F3BA3B74CF582F86954AFDFC180799E7C17F1871CB1A4BF64F1BA19DA351C9301933896A431C15
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/icon-steamworkshop.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 30 30" style="enable-background:new 0 0 30 30;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}..</style>..<path class="st0" d="M26.9,18.1h-1.6c-0.2-1.1-0.5-2.3-1-3.6c-1.1-3-2.9-5.1-5.3-6.2h5.3c0.2,0.7,0.9,1.3,1.6,1.3...c0.9,0,1.7-0.8,1.7-1.7S27,6.2,26.1,6.2c-0.8,0-1.5,0.5-1.6,1.3h-6V6.2c0-0.9-0.8-1.7-1.7-1.7h-3.4c-0.9,0-1.7,0.8-1.7,1.7v1.3h-6...C5.4,6.8,4.7,6.2,3.9,6.2C3,6.2,2.2,7,2.2,7.9S3,9.6,3.9,9.6c0.8,0,1.5-0.5,1.6-1.3h5.3c-2.3,1.1-4.1,3.2-5.3,6.2...c-0.5,1.2-0.8,2.5-1,3.6H3.1c-0.9,0-1.7,0.8-1.7,1.7v3.4c0,0.9,0.8,1.7,1.7,1.7h3.4c0.9,0,1.7-0.8,1.7-1.7v-3.4...c0-0.9-0.8-1.7-1.7-1.7H5.6c0.2-1,0.5-2.1,0.9-3.3c1.1-3,2.8-5,5.1-5.9v0.6c0,0.9,0.8,1.7,1.7,1.7h3.4c0.9,0,1.7-0.8,1.7-1.7V9...c2.3,0

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (549), with CRLF line terminators
Category:	downloaded
Size (bytes):	3534
Entropy (8bit):	5.312911934963736
Encrypted:	false
SSDEEP:	48:zZVHfhrPkc2joyZlyjm9bdl+8g1dRojthpc2apt8a94NHtuiYIKBzysdC6xmUtRO:zZPrPKj2cdk8yajtY2apd943Y+6MUa
MD5:	29B231B211D707A52646E585521DCC54
SHA1:	ADFF2107EFEF3D36962F94B65082CBD0B60FBC44
SHA-256:	8FC4CECBD9539E272B4C1FB717FA7543D24DD8EB01C2F77D50F75CFBBFBC179B
SHA-512:	D6EB12CE308868F074024D3302345045396B087BE61156352DDB024F53725F4853B20431052B551A9B753E8C369CB8835E3B2382E7CDACBDFE796AB19BB2B8A7
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/rellax/rellax.min.js?v=.KbIxshHXB6Um&_cdn=cloudflare
Preview:	(function(h,g){"function"===typeof define&&define.amd?define([],g):"object"===typeof module&&module.exports?module.exports=g():h.Rellax=g()})(typeof window !== "undefined" ? window : global,function(){var h=function(g,n){var a=Object.create(h.prototype),k=0,p=0,l=0,q=0,e=[],r=!0,z=window.requestAnimationFrame\|\|window.webkitRequestAnimationFrame\|\|window.mozRequestAnimationFrame\|\|window.msRequestAnimationFrame\|\|window.oRequestAnimationFrame\|\|function(a){setTimeout(a,1E3/60)},A=window.transformProp\|\|function(){var a=document.createElement("div");..if(null===a.style.transform){var b=["Webkit","Moz","ms"],d;for(d in b)if(void 0!==a.style[b[d]+"Transform"])return b[d]+"Transform"}return"transform"}();a.options={speed:-2,center:!1,wrapper:null,round:!0,vertical:!0,horizontal:!1,callback:function(){}};n&&Object.keys(n).forEach(function(c){a.options[c]=n[c]});g\|\|(g=".rellax");var m="string"===typeof g?document.querySelectorAll(g):[g];if(0<m.length)a.elems=m;else throw Error("The elements you're

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 520 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	28903
Entropy (8bit):	7.9826294499796955
Encrypted:	false
SSDEEP:	768:mDMeRKaCHNYIcwEAQlIg5MwzHHAyrIsXCW0bJQi5On0I6:mgeRKttYInHgfM8uVon0I6
MD5:	31D55BBC16BDED12B4EAF4C27DDCB333
SHA1:	B1A576C302179C91B908EAFE87775414B60F3F1E
SHA-256:	C47876871807F50DE6942BC831DD932E2191D574E2F28535B607977DB97B5AF2
SHA-512:	46C8F18A61D0B17A702818A81A2594FB81E42F02AD111D429B2512D9F761AF0DC9E9BFABF13FB573CCAB274FB602EEC6FCD54D5598F20C08DF7BFEC050156E0B
Malicious:	false
Reputation:	low
URL:	https://steamfiller.ru/templ/steamrepl/img/popup_img.png
Preview:	.PNG........IHDR.......H......;.&....sRGB.........gAMA......a.....pHYs..........+....p\|IDATx^.}...E..y.K..B.HB.J..Q....f..bE.....]...).Az.Ez...{...;g......^............{.m.3f.6..m.J.R...d.+.v..d...c.........,t.....}.c.j.0..%.Q..\|.@h>..=....#..d...h...........LK..Z4...[..D.\...P...B..........9........d.`L..J.dY.l...J...9...D.U.a....!.U.)........M.U...W..6j-.U..je.S.0.....tnX.uT."..NS%4k....nff..h...f..8..~.,....n...i...!..k...<......B1A.r>.:....:.A..EI.8.:Z.7.J.A.9...!.Y4og..L..@Y. UZ.).;............R;"."}....:3.......#,..[.h.< G..&..a...0) J....SM..3.Y.N.....6.5..Y..O...k#.3.76-.....o.b,..:...f.M.1S.S..........r.D.\|...r,...8..q.B........0..D......c.@.T.......C.....k......#............k.....7t....!.7.k-T.....ux=..Xg.E...]...........,.1.....a..8d...5P;.......M{.......V.Nr6.A.5T]VG...>.1QIlS+Bs.....(.,..d..p.QW2b ........_J.....'...........\|.....+.\. .u....w...;^..%...bk.....fB.v..D...{;..J...+...n.......u%...........u.v.#...x:.;..L..@.....Bg

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	869
Entropy (8bit):	4.245009292958039
Encrypted:	false
SSDEEP:	24:t3JfDuRWVfVl62LlviEYGbjyig6N4eOT1H2:3dvdL4EDbjyig651
MD5:	C79C9AAFA4173BF972C75FB88AC8070E
SHA1:	BC36E2C9F0CFBFC423CFF976DF429DB175137C75
SHA-256:	A424A23E495EF8AA3805BF90029D15FF1D125ABA4979DE8B27E544E88C0F499D
SHA-512:	9DC11A15DB09E6082AA705783CABA98528E8AA2645AD4D455337E7DACB600637B91E17BC4C261BD8494361FD1FE389839A2FE8273E2541D3D0A47F18FD2C347B
Malicious:	false
Reputation:	low
Preview:	<svg width="14" height="14" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M11.0911 0.636039L7.2273 4.49987C7.10178 4.62539 6.89825 4.62539 6.77273 4.49987L2.9089 0.636039C2.28131 0.00845498 1.26364 0.00845498 0.636056 0.636039C0.00847088 1.26362 0.00847121 2.2813 0.636056 2.90888L4.49989 6.77272C4.62541 6.89823 4.62541 7.10177 4.49989 7.22728L0.636056 11.0911C0.00847121 11.7187 0.00847088 12.7364 0.636056 13.364C1.26364 13.9915 2.28131 13.9915 2.9089 13.364L6.77273 9.50013C6.89825 9.37461 7.10178 9.37461 7.2273 9.50013L11.0911 13.364C11.7187 13.9915 12.7364 13.9915 13.364 13.364C13.9916 12.7364 13.9916 11.7187 13.364 11.0911L9.50014 7.22728C9.37463 7.10177 9.37463 6.89823 9.50014 6.77272L13.364 2.90888C13.9916 2.2813 13.9916 1.26362 13.364 0.636039C12.7364 0.00845431 11.7187 0.00845464 11.0911 0.636039Z" fill="white"/>.</svg>.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	dropped
Size (bytes):	9528
Entropy (8bit):	7.937835312972649
Encrypted:	false
SSDEEP:	192:1XOfbIERlZ90uFQu5HelemlVpa648xoHBEj42hjlIeD2LpP1c6ft+:1yIEz30GlelPM648xKEj42h6997Q
MD5:	87F8FB68FA4E3D2A34293B0683B6F315
SHA1:	6392A2B53A5E8D13FCEEEE920D6B5B1E72500182
SHA-256:	198DBFD5AF0CE6AD9D0FF88679C60264802A466DBC15D38EDADAAE60A725D9D9
SHA-512:	C5E4B4EEB8760E980AD82235B233377E8D0A201E69627007A8264F359536F8DED2A25704BF63B86749FDDAB3CCFA76DF45E8990D87652D8AFBDA49271F96B58D
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................E..........................!.1..AQ"a..2q...#BR.Vbr.......$...3CWs....................................B.......................!.1.A."Qaq....2...BT...#......U..%3Rr................?...QZ..rsB.4!$...@......) .N...!7)JR.!D.c..!p.h.....v......Xip!R_Q!..`...N.....b.{.M...'....[.RTx...n...N(.........hqnnQ......5...:l......U..in[.G.?.5tS.:.P...$c=...\-..G}.jT....'.%X(%..$..K.AsH=.p...pk...~....]m...#kR.K..P'i.....r...7..S.p(BP.R.............Z.....e6R...%.......~..j>..V..0....\|.}.l}.b.G.9>'.m.-m.ODt..s.&$...#..J<..<9.)Cr..O...x....+..sq!.C.30y.bF.+........'1..=..%)....?..)..H\."J...l..uvm... ..$\|=.0..q.[....$..r.#.^..k...@....[.N[:(B(B(B(B(BO-..F{.jF.iB...R.U..ra....,..w.C..AK..P.P.P.P.P.qk...$$.{....kR.y...b..#.O'*...&......7.4..i.h..n.&U....g..

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	10011
Entropy (8bit):	7.944762888245754
Encrypted:	false
SSDEEP:	192:XsxwgWDz6EtwmYvKPub9xOhIiXk22hEynoXObdOE7fjnjB2Vjv/YY4:cxwS2wm8K2b9xO+cp2WYdO+f41y
MD5:	5BC9B62F5E6FD1E1B134E335D851D92F
SHA1:	4CA2224974F63DA6A0D231BB93EFB3F858D4DD26
SHA-256:	1B00B1B86DD1837A6FB3160569F17635751254184DE4F5839E679D1FCE7AF2C5
SHA-512:	064E79C67A8B1C524262DFFBB128F66E4A870EB8570A0A34CB69693D8B1FE4D553C47C727884D5C13F92C7F7394019F36ECA8BCF8C2F30E80E8F73A744A55651
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/steam/apps/1091500/capsule_231x87.jpg?t=1706698946
Preview:	......JFIF.............C....................................................................C.......................................................................W...............................................B.............................!1"A...2Qa..BV..RUbq...3r.#$ST.......................................E.........................!1.AQ."aq..2....BSb...#Rr....$3...5CDT..............?....].1.D..EU.(..D.&`..H"A.0D.. ..H"A...D.D..AU ..H"A....D.$.<...O8"A..E.x"A...ET.(...7....)N..f_.O......v.....$.d..p.!.8E2..O. I.......7+..gk.....>\|...5d$. .."y.......H"A..`..UH"w.$.<....D>PD.. ..H'h"b...5.=2...O.9v]-e..F!\|.<....{..C.c...k...........\|&..T].#F..d..\|....G...."{L...3X.)O3$.:.ek..'.F..6..........Z.f....h?..........7.6.fv.j\|......l..UAqc.....O.e..tT.24f....9y.`.l..t%G...S.87......]..g....u.Lk....1....D..R.".^...k:..%n..~f.2...C..HRTIF....g...'..2}!..8.<?.t..)..8.....2.t.X.Q}Jo...A. .\|...^j..r.6.D.$. ..H"A...D.& ..H"..I.L...M30...S...R.YHPJ..N.....1..B.&6.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26986), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	131153
Entropy (8bit):	5.850355159405016
Encrypted:	false
SSDEEP:	1536:9EHpFUgj8v3Yt+RCa0/+pQyprgaiuBYjB2nkyq1lze5oHsvLNb5O:OpFSiug28Fsv1I
MD5:	B7CD609BA485DC1194D2AC0473A67C9F
SHA1:	A94697CDC5826260DC6FE05380ACCF49EF7411F8
SHA-256:	F3E896AC7C983066B3572EDED05480958514E96B7574C1BD7AA32B1BF138712B
SHA-512:	4D87496368C1FFE530948D85F9E7AA13ECBCCD068079BDBD5858F1A5AED769CA2CABEA55A63341B5B34358AF7FDC7C16B8C9D925FD557B70CF5007255831EC6A
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/css/applications/store/main.css?v=t81gm6SF3BGU&l=english&_cdn=cloudflare
Preview:	...........html body.events_hub.v6{background-color:#171a21;font-family:"Motiva Sans",Arial,Helvetica,sans-serif}@media screen and (max-width: 400px){html body.events_hub.v6{scrollbar-width:none;-ms-overflow-style:none}html body.events_hub.v6::-webkit-scrollbar{display:none}}html body.events_hub.v6 #global_header{position:fixed;z-index:12;width:100%;box-sizing:border-box;transition:transform .15s ease-in-out}html body.events_hub.v6 .responsive_header{box-shadow:none;transition:transform .15s ease-in-out}html body.events_hub.v6 .responsive_page_template_content{padding-bottom:0}html body.events_hub.v6 ._2uHYtSBLSS1MxFonkOXr0O{flex:1;display:flex;flex-direction:column;min-height:0}html body.events_hub.v6 .perf_timing_area{position:absolute;bottom:0}body.rewards ._2uHYtSBLSS1MxFonkOXr0O{flex:1;display:flex;flex-direction:column;min-height:0}...pu9cOpUMN0Q4mmIX2WZPl{position:fixed;top:0;bottom:0;right:0;left:0;z-index:1599}._2qyBZV8YvxstXuSKiYDF19:focus{outline:none}.GreenEnvelopeMenu,.LQk

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65254), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	184888
Entropy (8bit):	5.05545788096334
Encrypted:	false
SSDEEP:	1536:ztAA36oGqNyRrdiEEUl6SoZsJcl1jg2vQErjitufgFwJzr6oQfV38rLOd8vl8:z09dipMm1vQErjMufgFwJzr6oQerL2
MD5:	F7DFD1DAB3127D5D3117FA7BE13632B3
SHA1:	A9A9A42D3EDC8945F61D6668A18A6BAA0D39BDA3
SHA-256:	A43BDB81784A2E88D8037C79CAC522D45348C2E4AB8FC6D32BA6CFAEC3A64989
SHA-512:	03B1166481FE7535F18B0E53E9EFAB20EF0FC0CAB169195ADE31236AEA697989B1B5CC316D52D661A2CE064D8DCA04CE3BAB0B3D6CC5C211932D27A910F2899F
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/javascript/applications/store/shared_english-json.js?contenthash=6b4792eaeb66b96b16e2
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[7975],{44965:e=>{e.exports=JSON.parse('{"language":"english","Steam_Platform":"Steam","Button_About":"About","Button_Append":"Append","Button_Back":"Back","Button_Cancel":"Cancel","Button_Close":"Close","Button_Clone":"Clone","Button_Confirm":"Confirm","Button_Copy":"Copy","Button_Copied":"Copied","Button_CopyClipboard":"Copy to Clipboard","Button_CopyLink":"Copy Link","Button_Continue":"Continue","Button_Create":"Create","Button_Delete":"Delete","Button_Discuss":"Discuss","Button_Dismiss":"Dismiss","Button_Edit":"Edit","Button_Learn":"Learn more here","Button_Publish":"Publish","Button_Post":"Post","Button_OK":"OK","Button_Done":"Done","Button_Overwrite":"Overwrite","Button_Retry":"Retry","Button_Remove":"Remove","Button_Revert":"Revert","Button_Save":

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 939 x 794, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	54376
Entropy (8bit):	7.943080497489348
Encrypted:	false
SSDEEP:	768:9qkwuT4+ox8cGKGpQ9p8ro8UO1TsQtidPndFAsj+v+gWsRgERNg+IgUGLQxpCWdi:PGyQ96ro8UOBiPSYU+dZ4ggSPCC9g5
MD5:	F50541958F39D0F2CAD3B3112D0E3A02
SHA1:	E4CA9359553D047CAC275725AAA6CB01194BB956
SHA-256:	533528013E9E1978ADFF37231678FBBB9F80434425FD7B13E196F91194651766
SHA-512:	CDAABAAD8493A8FBBEA2713E93A9563AEC8D29591AC13C2A6BD1F5BE9FE0CA8B1E33A9FC9EE51E579D79510E143C30831D7EDD060E32E4FBDAF39B62BFE05267
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............`t.U....sBIT....\|.d... .IDATx...i.$.}....TUow_f.f0......b(R...$H.%%..[V...:....Q"G.e'Q..-.>...%9..Q..@.}.HThQ.i..,..A...b..~g.~...y.g..f.Lwuu.....P..?..V.......7u...}.....{..]...$s[.u..)/..2.....o..3.,.$..c.......N.......5...1.E..I.E..+]......W....x.V...^.w\|....%...Z.?/..3..=..?X/....AX....t..{..\.We.CE..y.rF.....G_....#.....w...w_.D.#...k.p....~.._.......".....v.;>.W..o.i..Z............@>......(.=oy..6..`...k.h....6..N..d....a...L..G.nG.O..kA>.......Kg^x..Z....]...@......H..]..e..........0:....:.>..7{c~..:.?#s8h....:...........%.p..22...C.~w.u...a...L.....#F.{....e...k.0.....*.7?^t......x.#....@v.U..0=N..d.CE..I0.L..].......`j......\.u`B..-.....V....^.-..L.y....dGX...............b.u........a.).XsO.5...........d.....T.a...L./....L..j.]..l....`.....0YV....@6.U....@..V......CX.......a.....P:.U....@..V......CX.......a.....P:.U....@..V......CX.......a.....P:.U....@..V......CX.......a.....P:.U....@..V......CX.......a.....P:.U..

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24681), with CRLF line terminators
Category:	downloaded
Size (bytes):	60862
Entropy (8bit):	5.2369070441093175
Encrypted:	false
SSDEEP:	1536:AEJpvhdKdn0KEApMyw+l/oOJz9owymlgaUYCOlb+OeaLJIt:AEr5k3EhZkyuLJIt
MD5:	BB21B044A5C7D32CBEF0347160170C02
SHA1:	4DABD4AB74F02DD4CA32654938C583DDFA20FAA7
SHA-256:	3A12A87BB1DFD8E89DD7128D96B5447BAB205B530868B2A160667B223FE67E3E
SHA-512:	AA77B6F8A3382A4C2AFF05EDB95448BB5BB84073CF0E7B2B6FF89CCDC733A80CF33DF038ECBE66D349260B660BF9402DCC974171BC2CBED61AF8160D094F3BF3
Malicious:	false
Reputation:	low
URL:	https://store.cloudflare.steamstatic.com/public/shared/javascript/login.js?v=uyGwRKXH0yy-&l=english&_cdn=cloudflare
Preview:	"use strict";....function CLoginPromptManager( strBaseURL, rgOptions )..{...// normalize with trailing slash...this.m_strBaseURL = strBaseURL + ( strBaseURL.substr(-1) == '/' ? '' : '/' ) + ( this.m_bIsMobile ? 'mobilelogin' : 'login' ) + '/';...this.m_strSiteBaseURL = strBaseURL; // Actual base url, not the login base url above......// read options...rgOptions = rgOptions \|\| {};...this.m_bIsMobile = rgOptions.bIsMobile \|\| false;...this.m_strMobileClientType = rgOptions.strMobileClientType \|\| '';...this.m_strMobileClientVersion = rgOptions.strMobileClientVersion \|\| '';...this.m_bIsMobileSteamClient = ( this.m_strMobileClientType ? true : false );...this.m_bMobileClientSupportsPostMessage = rgOptions.bMobileClientSupportsPostMessage \|\| false;.....this.m_$LogonForm = $JFromIDOrElement( rgOptions.elLogonForm \|\| document.forms['logon'] );.....this.m_fnOnFailure = rgOptions.fnOnFailure \|\| null;...this.m_fnOnSuccess = rgOptions.fnOnSuccess \|\| null;.....this.m_strRedirectURL = rgOptions.strRe

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	679
Entropy (8bit):	4.665868115573286
Encrypted:	false
SSDEEP:	12:t4Ao2WLoWWP6z3AjstLl2/YTG3BnCejfgfSJSEJUR22JErdusS:t4Ao2SXzzAjEICe0fG22c8csS
MD5:	A2AEF9E2A1009158F3CB70EEC2EC037D
SHA1:	21768E2D64CEDCE920AE226EC123E2DB41204778
SHA-256:	099A32FD83392D5BFFBAEE7270D597A484A4075FBBF6E6494D40BC1094FBCB5D
SHA-512:	803E705BD1D12EF6D83091C4B6DAB23B698BB78330BD4279E018760C89FD0177EEAACE9C12D0B5BE5512F4EDD2A63FD8358257073FCCCD1FADB79CC0D5432501
Malicious:	false
Reputation:	low
URL:	https://cdn.cloudflare.steamstatic.com/store/about/icon-languages.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="39.723" height="24.828" viewBox="0 0 39.723 24.828">.. <path id="Path_1122" data-name="Path 1122" d="M6668.864,6705.067a1.861,1.861,0,0,0-3.387.041l-9.311,21.1a1.861,1.861,0,0,0,.953,2.455,1.837,1.837,0,0,0,.751.158,1.862,1.862,0,0,0,1.706-1.111l1.153-2.613h13.451l1.249,2.655a1.862,1.862,0,0,0,3.37-1.586Zm-6.5,16.311,4.864-11.028,5.189,11.028Zm31.5-8.69a1.861,1.861,0,0,0-1.783,1.325,8.069,8.069,0,1,0,0,13.488,1.862,1.862,0,0,0,3.645-.537V6714.55A1.862,1.862,0,0,0,6693.869,6712.688Zm-6.207,12.414a4.345,4.345,0,1,1,4.345-4.345A4.35,4.35,0,0,1,6687.662,6725.1Z" transform="translate(-6656.008 -6703.998)" fill="#fff"/>..</svg>..

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
04/06/24-01:18:22.059036	TCP	2018382	ET EXPLOIT Possible OpenSSL HeartBleed Large HeartBeat Response from Common SSL Port (Outbound from Server)	443	49972	172.64.145.151	192.168.2.5

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 6, 2024 01:17:00.019117117 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:00.027179003 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:00.112878084 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:07.958410978 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:07.958456039 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:07.958535910 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:07.958992004 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:07.959017038 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:07.959074020 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:07.959249020 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:07.959264040 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:07.959439039 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:07.959450006 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:08.099630117 CEST	49713	443	192.168.2.5	142.250.64.228
Apr 6, 2024 01:17:08.099657059 CEST	443	49713	142.250.64.228	192.168.2.5
Apr 6, 2024 01:17:08.099742889 CEST	49713	443	192.168.2.5	142.250.64.228
Apr 6, 2024 01:17:08.099992037 CEST	49713	443	192.168.2.5	142.250.64.228
Apr 6, 2024 01:17:08.100008011 CEST	443	49713	142.250.64.228	192.168.2.5
Apr 6, 2024 01:17:08.490741014 CEST	443	49713	142.250.64.228	192.168.2.5
Apr 6, 2024 01:17:08.491208076 CEST	49713	443	192.168.2.5	142.250.64.228
Apr 6, 2024 01:17:08.491229057 CEST	443	49713	142.250.64.228	192.168.2.5
Apr 6, 2024 01:17:08.492095947 CEST	443	49713	142.250.64.228	192.168.2.5
Apr 6, 2024 01:17:08.492181063 CEST	49713	443	192.168.2.5	142.250.64.228
Apr 6, 2024 01:17:08.493458033 CEST	49713	443	192.168.2.5	142.250.64.228
Apr 6, 2024 01:17:08.493510008 CEST	443	49713	142.250.64.228	192.168.2.5
Apr 6, 2024 01:17:08.509906054 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:08.510268927 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:08.510282993 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:08.511436939 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:08.511503935 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:08.512613058 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:08.512676954 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:08.512986898 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:08.512996912 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:08.522661924 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:08.523001909 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:08.523022890 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:08.523912907 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:08.523986101 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:08.524444103 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:08.524499893 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:08.534518957 CEST	49713	443	192.168.2.5	142.250.64.228
Apr 6, 2024 01:17:08.534528017 CEST	443	49713	142.250.64.228	192.168.2.5
Apr 6, 2024 01:17:08.565628052 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:08.565634012 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:08.565642118 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:08.582885027 CEST	49713	443	192.168.2.5	142.250.64.228
Apr 6, 2024 01:17:08.617547989 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.622657061 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:09.638777971 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:09.718229055 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:09.952428102 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.952455997 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.952462912 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.952476025 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.952481985 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.952485085 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.952574015 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.952574015 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.952590942 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.952656031 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.954813004 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.954829931 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.954938889 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.954945087 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.993400097 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.997590065 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.997595072 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.997613907 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.997621059 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.997699976 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.997701883 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.998122931 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.998136044 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.998356104 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.998377085 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.999257088 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.999258041 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.999295950 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.999295950 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.999371052 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.999377012 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.999722958 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.999725103 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:09.999736071 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:09.999738932 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.001074076 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.036243916 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.220483065 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.220499039 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.220532894 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.220567942 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.220578909 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.220598936 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.220653057 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.220653057 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.222251892 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.222275019 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.222418070 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.222426891 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.222723961 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.223877907 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.223895073 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.224080086 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.224087954 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.224133968 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.342397928 CEST	49718	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:10.342417955 CEST	443	49718	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:10.342756987 CEST	49718	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:10.345247984 CEST	49718	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:10.345261097 CEST	443	49718	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:10.488030910 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.488044024 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.488105059 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.488153934 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.488416910 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.488424063 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.488650084 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.489742994 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.489758968 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.489859104 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.489866972 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.489991903 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.490041018 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.490123987 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.490168095 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.490739107 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.490742922 CEST	443	49712	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.490773916 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.490895033 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.491184950 CEST	49712	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.495695114 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.495731115 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.500262976 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.500616074 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.500628948 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.549124002 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.549141884 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.549149036 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.549173117 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.549185038 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.549201012 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.549230099 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.549245119 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.549277067 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.549391985 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.550064087 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.550080061 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.550187111 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.550193071 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.585097075 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.591737032 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.591757059 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.593914986 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.594048977 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.594481945 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.594574928 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.594652891 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.594754934 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.594911098 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.594923973 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.595221996 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.595258951 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.595262051 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.595266104 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.595274925 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.595607042 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.596225023 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.596277952 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.596781015 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.596896887 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.597176075 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.597300053 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.599457026 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.599756002 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.599772930 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.600637913 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.600651979 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.600739002 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.603431940 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.603522062 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.603614092 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.603621960 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.605005980 CEST	443	49718	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:10.605170965 CEST	49718	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:10.613312960 CEST	49718	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:10.613318920 CEST	443	49718	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:10.613575935 CEST	443	49718	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:10.640229940 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.640255928 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.644495010 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.644495010 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.661883116 CEST	49718	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:10.720184088 CEST	49718	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:10.760235071 CEST	443	49718	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:10.826756001 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.826765060 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.826795101 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.826805115 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.826833010 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.826854944 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.826889038 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.827116966 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.827259064 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.827274084 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.827301025 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.827311993 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.827366114 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.827728987 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.827744961 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.827826023 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.827826023 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.827836037 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:10.828732967 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:10.849705935 CEST	443	49718	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:10.849915028 CEST	443	49718	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:10.850075006 CEST	49718	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:10.866592884 CEST	49718	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:10.866592884 CEST	49718	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:10.866605043 CEST	443	49718	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:10.866632938 CEST	443	49718	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:10.981021881 CEST	49720	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:10.981076956 CEST	443	49720	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:10.981162071 CEST	49720	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:10.982486010 CEST	49720	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:10.982496023 CEST	443	49720	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:11.049649000 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.049918890 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.049938917 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.051075935 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.051152945 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.051666975 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.051726103 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.051841974 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.051847935 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.099951029 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.105412006 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.105433941 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.105501890 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.105511904 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.105561018 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.106358051 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.106375933 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.106460094 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.106468916 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.107240915 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.107745886 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.107762098 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.107826948 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.107837915 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.107908010 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.108942986 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.108982086 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.109009981 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.109019041 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.109030008 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.109052896 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.109080076 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.109505892 CEST	49711	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.109520912 CEST	443	49711	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.110434055 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.110461950 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.110579014 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.111684084 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.111697912 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.154881954 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 6, 2024 01:17:11.154969931 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:11.238096952 CEST	443	49720	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:11.238162041 CEST	49720	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:11.239409924 CEST	49720	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:11.239417076 CEST	443	49720	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:11.239650011 CEST	443	49720	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:11.240756989 CEST	49720	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:11.288237095 CEST	443	49720	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:11.403350115 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.403371096 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.403377056 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.403403044 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.403414011 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.403424025 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.403423071 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.403443098 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.403456926 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.403477907 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.403496027 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.404649019 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.404664040 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.404709101 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.404715061 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.404747009 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.422952890 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.422976971 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.422991037 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.423022985 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.423036098 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.423069954 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.423094034 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.423846006 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.423863888 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.423917055 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.423923016 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.426845074 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.426865101 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.426878929 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.426923990 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.426938057 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.426954031 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.426975012 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.427774906 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.427794933 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.427829027 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.427833080 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.427864075 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.440866947 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.440887928 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.440895081 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.440905094 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.440931082 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.440946102 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.440963030 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.440984011 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.441004038 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.441567898 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.441586018 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.441633940 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.441641092 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.441669941 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.451478958 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.476057053 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.476145029 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.484417915 CEST	443	49720	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:11.484489918 CEST	443	49720	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:11.484543085 CEST	49720	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:11.486768007 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.501058102 CEST	49720	443	192.168.2.5	23.202.106.101
Apr 6, 2024 01:17:11.501074076 CEST	443	49720	23.202.106.101	192.168.2.5
Apr 6, 2024 01:17:11.509844065 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.509876013 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.509903908 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.509912968 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.509948969 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.509969950 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.509993076 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.515158892 CEST	49714	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.515172958 CEST	443	49714	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.516611099 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.516630888 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.516690016 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.523550987 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.523564100 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.676325083 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.676346064 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.676384926 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.676395893 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.676413059 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.676441908 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.676460028 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.676820040 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.676831961 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.676834106 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.676872015 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.676878929 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.676903963 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.676924944 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.677527905 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.677544117 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.677630901 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.677630901 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.677637100 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.677674055 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.680308104 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.680325985 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.680624008 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.681421995 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.681474924 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.681628942 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.706854105 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.706877947 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.706938982 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.706954002 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.706984997 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.706999063 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.707093000 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.707149982 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.707160950 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.707161903 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.707209110 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.714240074 CEST	49715	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.714253902 CEST	443	49715	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.720767021 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.720796108 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.720828056 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.720832109 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.720845938 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.720868111 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.720885038 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.721262932 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.721282959 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.721324921 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.721332073 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.721360922 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.721380949 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.721692085 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.721714973 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.721750021 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.721756935 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.721780062 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.721798897 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.728234053 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.764904976 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.764981031 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.764991045 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.765002012 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.765041113 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.809570074 CEST	49716	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.809586048 CEST	443	49716	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.863473892 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.863500118 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.863507032 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.863528013 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.863539934 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.863552094 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.863557100 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.863576889 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.863617897 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.863630056 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.864485979 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.864506006 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.864545107 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.864550114 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.864583969 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.906090021 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.906147957 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.906155109 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.906196117 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.906224012 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.906276941 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.907465935 CEST	49719	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.907479048 CEST	443	49719	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.949198961 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.949208975 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.949239016 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.949280977 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.949301004 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.949327946 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.949408054 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.950237989 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.950254917 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.950356960 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.950362921 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.950444937 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.951404095 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.951419115 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.951561928 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.951567888 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.951679945 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.952281952 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.952295065 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.952383995 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.952383995 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.952389956 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.952471018 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.952500105 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.952502966 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.952532053 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.952537060 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.952553988 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.952656031 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.955691099 CEST	49717	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.955701113 CEST	443	49717	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.991765976 CEST	49723	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.991799116 CEST	443	49723	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.991867065 CEST	49723	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.992048979 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.992074013 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.992136955 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.992563963 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.992568970 CEST	49723	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:11.992574930 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:11.992583036 CEST	443	49723	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.080971003 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.081412077 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.081424952 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.081758976 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.086360931 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.086420059 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.086777925 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.132234097 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.516689062 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.516711950 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.516731977 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.516859055 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.516881943 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.517132044 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.517136097 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.517147064 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.517184973 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.517225027 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.517232895 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.517266989 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.543927908 CEST	443	49723	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.544183969 CEST	49723	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.544203997 CEST	443	49723	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.544958115 CEST	443	49723	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.545367956 CEST	49723	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.545367956 CEST	49723	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.545378923 CEST	443	49723	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.545536041 CEST	443	49723	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.552501917 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.552679062 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.552700043 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.553592920 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.553720951 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.553935051 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.553996086 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.554065943 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.557523012 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.559957027 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.560039997 CEST	443	49721	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.560076952 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.560195923 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.560195923 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.560303926 CEST	49721	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.589663029 CEST	49723	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.596235037 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.605751038 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.605762005 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.653934002 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.908210039 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.908241034 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.908257008 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.908339024 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.908339977 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.908354044 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.908409119 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.908438921 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.908441067 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.908448935 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:12.908467054 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:12.908621073 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.077663898 CEST	443	49723	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.077686071 CEST	443	49723	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.077764988 CEST	49723	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.077781916 CEST	443	49723	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.077806950 CEST	443	49723	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.077821016 CEST	49723	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.077851057 CEST	49723	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.173151016 CEST	49723	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.173182011 CEST	443	49723	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.182153940 CEST	49725	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.182187080 CEST	443	49725	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.182260036 CEST	49725	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.182461977 CEST	49725	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.182475090 CEST	443	49725	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.184169054 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.184189081 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.184233904 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.184243917 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.184290886 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.184529066 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.184545040 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.184604883 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.184608936 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.184629917 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.184664965 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.184906960 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.184921980 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.184976101 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.184981108 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.185029984 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.369901896 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.369923115 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.369930029 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.369956970 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.369970083 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.369980097 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.369992971 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.370026112 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.370037079 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.370045900 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.370054960 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.370075941 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.370100975 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.375129938 CEST	49724	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.375140905 CEST	443	49724	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.379228115 CEST	49726	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.379254103 CEST	443	49726	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.379328966 CEST	49726	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.379654884 CEST	49726	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.379666090 CEST	443	49726	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.416953087 CEST	49727	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.416979074 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.417088032 CEST	49727	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.417262077 CEST	49728	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.417290926 CEST	443	49728	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.417351007 CEST	49728	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.417582989 CEST	49728	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.417592049 CEST	443	49728	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.417886019 CEST	49727	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.417895079 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.464262009 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.464282990 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.464329004 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.464339018 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.464374065 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.464903116 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.464920044 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.464972973 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.464977980 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.465157032 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.465991974 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.466007948 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.466088057 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.466094017 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.466139078 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.466986895 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.467003107 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.467051029 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.467056036 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.467087984 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.468182087 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.468197107 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.468240976 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.468245983 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.468282938 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.469347954 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.469382048 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.469429016 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.469433069 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.469444990 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.469482899 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.469501972 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.501811981 CEST	49722	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.501837015 CEST	443	49722	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.593446970 CEST	49729	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.593481064 CEST	443	49729	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.593846083 CEST	49729	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.594630957 CEST	49729	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.594645023 CEST	443	49729	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.597582102 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.597605944 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.597711086 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.599138975 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.599153042 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.600112915 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.600131989 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.600188971 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.600807905 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.600821018 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.741758108 CEST	443	49725	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.742053986 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:13.742080927 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:13.742254972 CEST	49725	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.742280006 CEST	443	49725	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.742292881 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:13.742898941 CEST	443	49725	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.743787050 CEST	49725	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.743864059 CEST	443	49725	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.744250059 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:13.744262934 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:13.744383097 CEST	49725	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.746207952 CEST	49733	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.746227980 CEST	443	49733	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.746283054 CEST	49733	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.746450901 CEST	49733	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.746464014 CEST	443	49733	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.792241096 CEST	443	49725	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.938729048 CEST	443	49726	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.938956022 CEST	49726	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.938966036 CEST	443	49726	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.939469099 CEST	443	49726	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.939750910 CEST	49726	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.939805031 CEST	443	49726	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.939901114 CEST	49726	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.980153084 CEST	49726	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.980159044 CEST	443	49726	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.983803034 CEST	443	49728	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.983992100 CEST	49728	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.984004021 CEST	443	49728	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.984929085 CEST	443	49728	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.984996080 CEST	49728	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.985323906 CEST	49728	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.985367060 CEST	443	49728	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.985511065 CEST	49728	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.985516071 CEST	443	49728	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.986308098 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.986498117 CEST	49727	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.986517906 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.987401009 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.987467051 CEST	49727	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.987751961 CEST	49727	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.987811089 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:13.987900019 CEST	49727	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:13.987907887 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.026809931 CEST	49728	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.042768955 CEST	49727	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.148663998 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.148925066 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.148945093 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.150021076 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.150079966 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.150257111 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.150383949 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.150454998 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.150583982 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.150595903 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.150718927 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.150727034 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.151596069 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.151647091 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.152026892 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.152091026 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.152138948 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.153439045 CEST	443	49729	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.153774977 CEST	49729	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.153790951 CEST	443	49729	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.154679060 CEST	443	49729	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.154747009 CEST	49729	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.155145884 CEST	49729	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.155210972 CEST	443	49729	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.155442953 CEST	49729	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.155447960 CEST	443	49729	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.191823006 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.191824913 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.191831112 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.206831932 CEST	49729	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.238045931 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.289482117 CEST	443	49725	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.289500952 CEST	443	49725	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.289566040 CEST	443	49725	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.289563894 CEST	49725	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.289721012 CEST	49725	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.290257931 CEST	49725	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.290277958 CEST	443	49725	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.294469118 CEST	49735	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.294502020 CEST	443	49735	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.294590950 CEST	49735	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.295013905 CEST	49735	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.295027018 CEST	443	49735	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.303824902 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:14.304023981 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:14.304030895 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:14.304913044 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:14.304976940 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:14.305870056 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:14.305932999 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:14.306160927 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:14.306165934 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:14.311275959 CEST	443	49733	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.311861992 CEST	49733	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.311877966 CEST	443	49733	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.312232018 CEST	443	49733	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.312576056 CEST	49733	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.312644005 CEST	443	49733	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.312743902 CEST	49733	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.347851038 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:14.360239029 CEST	443	49733	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.489707947 CEST	443	49726	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.489757061 CEST	443	49726	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.489797115 CEST	49726	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.489805937 CEST	443	49726	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.489835024 CEST	443	49726	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.489847898 CEST	49726	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.489875078 CEST	49726	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.491810083 CEST	49726	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.491820097 CEST	443	49726	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.510071993 CEST	49736	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.510122061 CEST	443	49736	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.510188103 CEST	49736	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.510704994 CEST	49736	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.510716915 CEST	443	49736	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.544732094 CEST	443	49728	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.544749022 CEST	443	49728	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.544794083 CEST	49728	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.544800997 CEST	443	49728	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.544825077 CEST	443	49728	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.544868946 CEST	49728	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.545670033 CEST	49728	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.545680046 CEST	443	49728	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.707335949 CEST	443	49729	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.707403898 CEST	443	49729	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.707464933 CEST	49729	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.827140093 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.827167034 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.827172995 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.827203035 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.827215910 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.827225924 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.827256918 CEST	49727	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.827275991 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.827290058 CEST	49727	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.827292919 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.827327967 CEST	49727	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.827342033 CEST	49727	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.849217892 CEST	443	49735	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.865422010 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:14.865539074 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:14.865575075 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:14.865616083 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:14.865628004 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:14.865675926 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:14.870827913 CEST	443	49733	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.870893002 CEST	443	49733	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.870970964 CEST	49733	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.900425911 CEST	49735	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.961347103 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.961370945 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.961384058 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.961435080 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.961453915 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.961467028 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.961472034 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.961500883 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.961529970 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.962219954 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.962235928 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.962310076 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.962320089 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.962366104 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.968210936 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.968264103 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.968271971 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.968302011 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.968311071 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.968312025 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.968323946 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.968337059 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.968360901 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.968364954 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.968374014 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.968444109 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.969132900 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.969166994 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.969202042 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.969207048 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.969223022 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:14.969232082 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.969248056 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:14.969275951 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.007065058 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.047555923 CEST	443	49736	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.094722033 CEST	49736	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.141377926 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.141390085 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.141444921 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.141482115 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.141503096 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.141516924 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.141576052 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.141582966 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.141621113 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.141870975 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.141927958 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.141935110 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.189694881 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.232752085 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.232779026 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.232896090 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.232918024 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.232978106 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.233138084 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.233153105 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.233196020 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.233212948 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.233223915 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.233248949 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.233278990 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.233323097 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.255947113 CEST	49735	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.255971909 CEST	443	49735	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.256711006 CEST	49736	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.256728888 CEST	443	49736	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.256804943 CEST	443	49735	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.257529020 CEST	443	49736	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.257531881 CEST	49735	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.257621050 CEST	443	49735	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.258315086 CEST	49736	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.258388996 CEST	443	49736	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.258477926 CEST	49735	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.258692980 CEST	49736	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.300232887 CEST	443	49735	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.300246000 CEST	443	49736	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.417085886 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.417094946 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.417200089 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.417211056 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.417536020 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.417572021 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.417603970 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.417612076 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.417620897 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.418158054 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.418215990 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.418221951 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.418596029 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.418658972 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.418664932 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.418872118 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.418924093 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.418929100 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.421703100 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.445070982 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.445178032 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.445183992 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.445825100 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.445883036 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.445885897 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.445897102 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.445934057 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.533798933 CEST	443	49735	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.533822060 CEST	443	49735	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.533906937 CEST	443	49735	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.533936024 CEST	49735	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.534017086 CEST	49735	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.578365088 CEST	443	49736	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.578389883 CEST	443	49736	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.578469992 CEST	49736	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.578480959 CEST	443	49736	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.578512907 CEST	443	49736	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:15.578547001 CEST	49736	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.578594923 CEST	49736	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:15.693686962 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.693813086 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.695825100 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.695831060 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.695899010 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.695905924 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.695955992 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.696007013 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.696012020 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.696055889 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.696682930 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.696746111 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.697905064 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.697969913 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.697977066 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.698132038 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.698184013 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.698189020 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.698225975 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.698438883 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.698493958 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.699256897 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.699318886 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.699326038 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.699367046 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.700053930 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.700113058 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.700119019 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.700972080 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.701030016 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.701035976 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.701550007 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.701612949 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.701620102 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.721079111 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.721160889 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.721168041 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.721296072 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.721365929 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.721373081 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.721698046 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.721767902 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.721777916 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.722071886 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.722140074 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.722146988 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.766578913 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.969158888 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.969167948 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.969259977 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.969268084 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.970585108 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.970627069 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.970655918 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.970664024 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.970686913 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.971376896 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.971430063 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:15.971436977 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:15.971478939 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:17.131843090 CEST	49729	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.131861925 CEST	443	49729	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.133280039 CEST	49733	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.133316040 CEST	443	49733	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.133981943 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:17.461864948 CEST	49727	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.461896896 CEST	443	49727	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.463844061 CEST	49730	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.463860035 CEST	443	49730	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.471771955 CEST	49737	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.471791029 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.471847057 CEST	49737	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.472887039 CEST	49737	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.472899914 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.478566885 CEST	49738	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.478584051 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.478636026 CEST	49738	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.478842020 CEST	49738	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.478856087 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.479290962 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.479315996 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.479367971 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.479559898 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.479604006 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.479655027 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.479729891 CEST	49731	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.479737043 CEST	443	49731	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.480843067 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.480851889 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.481062889 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.481076956 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.481528044 CEST	49736	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.481544018 CEST	443	49736	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.484627008 CEST	49732	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:17.484632969 CEST	443	49732	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:17.485028982 CEST	49735	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.485040903 CEST	443	49735	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.675028086 CEST	49741	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:17.675044060 CEST	443	49741	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:17.675107956 CEST	49741	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:17.675232887 CEST	49742	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:17.675252914 CEST	443	49742	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:17.675306082 CEST	49742	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:17.675618887 CEST	49741	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:17.675627947 CEST	443	49741	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:17.675777912 CEST	49742	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:17.675790071 CEST	443	49742	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:17.768819094 CEST	49743	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.768858910 CEST	443	49743	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.768924952 CEST	49743	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.769593954 CEST	49743	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.769606113 CEST	443	49743	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.774755001 CEST	49744	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.774771929 CEST	443	49744	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.774840117 CEST	49744	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.775665045 CEST	49744	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.775674105 CEST	443	49744	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.779565096 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.779575109 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.779630899 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.779978037 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.779989958 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.784984112 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.785002947 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:17.785053015 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.786673069 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:17.786684990 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.017756939 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.020664930 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.021436930 CEST	49737	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.021445990 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.021586895 CEST	49738	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.021603107 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.021878004 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.022173882 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.022485971 CEST	49738	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.022556067 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.031215906 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.043495893 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.053719997 CEST	49737	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.053781033 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.053926945 CEST	49738	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.070101976 CEST	49737	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.070307970 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.070336103 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.071249962 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.071336985 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.093332052 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.093394041 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.100241899 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.106309891 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.106332064 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.106688023 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.106699944 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.107462883 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.107496023 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.107522964 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.108244896 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.108302116 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.108359098 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.112236023 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.156234026 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.189807892 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.189809084 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.189817905 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.273156881 CEST	443	49742	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.277121067 CEST	49742	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.277137995 CEST	443	49742	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.278623104 CEST	443	49742	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.278707027 CEST	49742	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.280145884 CEST	49742	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.280154943 CEST	443	49741	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.280215025 CEST	443	49742	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.280544043 CEST	49742	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.280550957 CEST	443	49742	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.280879974 CEST	49741	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.280891895 CEST	443	49741	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.281769037 CEST	443	49741	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.281825066 CEST	49741	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.282633066 CEST	49741	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.282680988 CEST	443	49741	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.283098936 CEST	49741	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.283104897 CEST	443	49741	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.325615883 CEST	443	49743	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.327182055 CEST	443	49744	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.328953981 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.332364082 CEST	49743	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.332381964 CEST	443	49743	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.332711935 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.332756042 CEST	49741	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.332756042 CEST	49744	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.332770109 CEST	443	49744	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.332859039 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.332871914 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.332892895 CEST	443	49743	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.333079100 CEST	443	49744	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.333910942 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.333972931 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.334337950 CEST	49743	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.334417105 CEST	443	49743	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.334877014 CEST	49744	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.334923983 CEST	443	49744	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.335449934 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.335494041 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.336039066 CEST	49743	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.336334944 CEST	49744	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.336431026 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.336435080 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.346803904 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.348782063 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.348793983 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.349695921 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.349751949 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.351681948 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.351733923 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.351903915 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.351910114 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.380235910 CEST	443	49743	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.384237051 CEST	443	49744	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.458199024 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.458199978 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.458203077 CEST	49742	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.496198893 CEST	443	49713	142.250.64.228	192.168.2.5
Apr 6, 2024 01:17:18.496248960 CEST	443	49713	142.250.64.228	192.168.2.5
Apr 6, 2024 01:17:18.496417046 CEST	49713	443	192.168.2.5	142.250.64.228
Apr 6, 2024 01:17:18.701174021 CEST	49713	443	192.168.2.5	142.250.64.228
Apr 6, 2024 01:17:18.701189995 CEST	443	49713	142.250.64.228	192.168.2.5
Apr 6, 2024 01:17:18.821016073 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.821141005 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.821177959 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.821194887 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.821216106 CEST	49738	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.821228981 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.821271896 CEST	49738	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.821283102 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.821285009 CEST	49738	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.821362019 CEST	49738	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.825459957 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.825479984 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.825486898 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.825500965 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.825540066 CEST	49737	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.825544119 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.825557947 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.825567961 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.825572014 CEST	49737	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.825591087 CEST	49737	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.825613976 CEST	49737	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.825619936 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.825628996 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.825661898 CEST	49737	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.830645084 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.830663919 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.830671072 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.830699921 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.830715895 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.830719948 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.830728054 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.830744028 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.830756903 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.830770969 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.830777884 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.830784082 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.830807924 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.830812931 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.830859900 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.830923080 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.832107067 CEST	49749	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.832123995 CEST	443	49749	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.832240105 CEST	49749	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.847040892 CEST	443	49742	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.847141981 CEST	443	49742	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.847331047 CEST	49742	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.859061956 CEST	443	49741	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.859147072 CEST	443	49741	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.859350920 CEST	49741	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.859690905 CEST	49749	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.859703064 CEST	443	49749	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.862652063 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.862677097 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.862689972 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.862704992 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.862710953 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.862714052 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.862735033 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.862766981 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.862781048 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.862783909 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.862795115 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.862809896 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.862838984 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.862845898 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.862863064 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.862890959 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.862919092 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.872703075 CEST	443	49744	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.872750044 CEST	443	49744	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.872888088 CEST	49744	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.874588966 CEST	443	49743	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.874656916 CEST	443	49743	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.874732971 CEST	49743	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.896733999 CEST	49742	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.896744967 CEST	443	49742	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.921755075 CEST	49738	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.921766996 CEST	443	49738	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.929157972 CEST	49737	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.929173946 CEST	443	49737	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.935631037 CEST	49741	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.935642004 CEST	443	49741	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.947535038 CEST	49750	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.947552919 CEST	443	49750	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.947673082 CEST	49750	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.960639000 CEST	49739	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.960645914 CEST	443	49739	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.965284109 CEST	49744	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.965292931 CEST	443	49744	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.967098951 CEST	49743	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.967123985 CEST	443	49743	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:18.967873096 CEST	49750	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:18.967886925 CEST	443	49750	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:18.970340014 CEST	49740	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:18.970365047 CEST	443	49740	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.142882109 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.142906904 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.142915010 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.142936945 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.142947912 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.142959118 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.142985106 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.142996073 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.143024921 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.143037081 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.143389940 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.143398046 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.143421888 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.143440962 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.143445015 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.143467903 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.143474102 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.143486977 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.143517017 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.153629065 CEST	49745	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.153640985 CEST	443	49745	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179312944 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179368019 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179375887 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179397106 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179409981 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179418087 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179446936 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.179461002 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179488897 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.179495096 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179519892 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.179898024 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179928064 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179934978 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179948092 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179966927 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.179972887 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.179995060 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.179995060 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.256483078 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.427714109 CEST	443	49749	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:19.428172112 CEST	49749	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:19.428184032 CEST	443	49749	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:19.429070950 CEST	443	49749	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:19.429131031 CEST	49749	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:19.429842949 CEST	49749	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:19.429894924 CEST	443	49749	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:19.430035114 CEST	49749	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:19.430043936 CEST	443	49749	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:19.457030058 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.457039118 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.457067013 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.457075119 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.457139969 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.457139969 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.457154989 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.457240105 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.457662106 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.457670927 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.457694054 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.457720041 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.457727909 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.457736969 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.457741976 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.457775116 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.457775116 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.457787991 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.457839966 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.457894087 CEST	49746	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:19.457906008 CEST	443	49746	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:19.553056002 CEST	443	49750	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:19.567261934 CEST	49749	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:19.600759029 CEST	49750	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:19.600783110 CEST	443	49750	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:19.601151943 CEST	443	49750	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:19.613121986 CEST	49750	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:19.613192081 CEST	443	49750	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:19.614571095 CEST	49750	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:19.649211884 CEST	49751	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:19.649244070 CEST	443	49751	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:19.649408102 CEST	49751	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:19.649786949 CEST	49751	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:19.649808884 CEST	443	49751	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:19.660237074 CEST	443	49750	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.003148079 CEST	443	49749	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.003207922 CEST	443	49749	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.003254890 CEST	49749	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.003269911 CEST	443	49749	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.003289938 CEST	443	49749	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.003345966 CEST	49749	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.091677904 CEST	49749	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.091702938 CEST	443	49749	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.121495962 CEST	49752	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.121536970 CEST	443	49752	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.121666908 CEST	49752	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.122241020 CEST	49752	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.122256994 CEST	443	49752	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.138319969 CEST	443	49750	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.138421059 CEST	443	49750	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.138588905 CEST	49750	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.146162987 CEST	49750	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.146181107 CEST	443	49750	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.146189928 CEST	49750	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.146239996 CEST	49750	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.149738073 CEST	49753	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.149777889 CEST	443	49753	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.149943113 CEST	49753	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.150557041 CEST	49753	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.150569916 CEST	443	49753	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.220824957 CEST	443	49751	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.235908985 CEST	49751	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.235919952 CEST	443	49751	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.236865997 CEST	443	49751	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.237231016 CEST	49751	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.237341881 CEST	443	49751	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.237461090 CEST	49751	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.237530947 CEST	443	49751	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.697339058 CEST	443	49753	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.700702906 CEST	443	49752	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.701896906 CEST	49753	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.701917887 CEST	443	49753	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.702007055 CEST	49752	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.702023029 CEST	443	49752	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.702259064 CEST	443	49753	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.703016996 CEST	443	49752	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.703082085 CEST	49752	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.703150988 CEST	49753	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.703207970 CEST	443	49753	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.703488111 CEST	49752	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.703551054 CEST	443	49752	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.703674078 CEST	49753	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.703752041 CEST	49752	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.703761101 CEST	443	49752	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.744235992 CEST	443	49753	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.754209995 CEST	49752	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.792265892 CEST	443	49751	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.792335033 CEST	49751	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:20.792342901 CEST	443	49751	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.792407036 CEST	443	49751	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:20.792464972 CEST	49751	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.011591911 CEST	49751	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.011591911 CEST	49751	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.011611938 CEST	443	49751	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.011693001 CEST	49751	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.012494087 CEST	49756	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.012522936 CEST	443	49756	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.012665033 CEST	49756	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.012955904 CEST	49756	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.012970924 CEST	443	49756	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.241997957 CEST	443	49753	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.242108107 CEST	443	49753	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.242170095 CEST	49753	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.276206970 CEST	443	49752	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.276339054 CEST	443	49752	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.276406050 CEST	49752	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.459475994 CEST	49753	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.459506989 CEST	443	49753	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.477844000 CEST	49752	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.477878094 CEST	443	49752	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.488121986 CEST	49757	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:21.488147974 CEST	443	49757	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:21.488221884 CEST	49757	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:21.488821030 CEST	49757	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:21.488836050 CEST	443	49757	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:21.496833086 CEST	49758	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.496870995 CEST	443	49758	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.496937037 CEST	49758	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.497165918 CEST	49758	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.497180939 CEST	443	49758	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.590497017 CEST	443	49756	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.590791941 CEST	49756	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.590806961 CEST	443	49756	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.591128111 CEST	443	49756	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.592632055 CEST	49756	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.592703104 CEST	443	49756	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:21.592921019 CEST	49756	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:21.592941999 CEST	443	49756	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.058203936 CEST	443	49757	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:22.062129974 CEST	49757	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:22.062155008 CEST	443	49757	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:22.062764883 CEST	443	49757	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:22.063266039 CEST	49757	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:22.063374043 CEST	443	49757	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:22.063755035 CEST	49757	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:22.065095901 CEST	443	49758	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.065479040 CEST	49758	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:22.065496922 CEST	443	49758	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.065823078 CEST	443	49758	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.066209078 CEST	49758	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:22.066272020 CEST	443	49758	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.067080021 CEST	49758	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:22.108237028 CEST	443	49757	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:22.108247995 CEST	443	49758	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.166619062 CEST	443	49756	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.166728020 CEST	443	49756	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.166774988 CEST	49756	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:22.167443991 CEST	49756	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:22.167458057 CEST	443	49756	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.225505114 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:22.225598097 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:22.226121902 CEST	49763	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:22.226149082 CEST	443	49763	23.1.237.91	192.168.2.5
Apr 6, 2024 01:17:22.226483107 CEST	49763	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:22.226948023 CEST	49763	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:22.226963043 CEST	443	49763	23.1.237.91	192.168.2.5
Apr 6, 2024 01:17:22.411590099 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 6, 2024 01:17:22.411603928 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 6, 2024 01:17:22.551480055 CEST	49765	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:22.551516056 CEST	443	49765	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.551574945 CEST	49765	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:22.552335978 CEST	49765	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:22.552349091 CEST	443	49765	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.609052896 CEST	443	49763	23.1.237.91	192.168.2.5
Apr 6, 2024 01:17:22.609121084 CEST	49763	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:22.618426085 CEST	443	49757	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:22.618448019 CEST	443	49757	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:22.618508101 CEST	443	49757	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:22.618513107 CEST	49757	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:22.618674040 CEST	49757	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:22.621128082 CEST	49757	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:22.621144056 CEST	443	49757	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:22.627206087 CEST	443	49758	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.627306938 CEST	443	49758	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.627362013 CEST	49758	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:22.632858992 CEST	49758	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:22.632869959 CEST	443	49758	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:22.665065050 CEST	49766	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:22.665091038 CEST	443	49766	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:22.665144920 CEST	49766	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:22.665364027 CEST	49766	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:22.665380955 CEST	443	49766	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:22.814503908 CEST	49763	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:22.814531088 CEST	443	49763	23.1.237.91	192.168.2.5
Apr 6, 2024 01:17:22.814862013 CEST	443	49763	23.1.237.91	192.168.2.5
Apr 6, 2024 01:17:22.814934015 CEST	49763	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:22.815623045 CEST	49763	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:22.815645933 CEST	443	49763	23.1.237.91	192.168.2.5
Apr 6, 2024 01:17:22.816051006 CEST	49763	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:22.816056967 CEST	443	49763	23.1.237.91	192.168.2.5
Apr 6, 2024 01:17:23.108450890 CEST	443	49765	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:23.117614031 CEST	49765	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:23.117635965 CEST	443	49765	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:23.117943048 CEST	443	49765	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:23.118556976 CEST	49765	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:23.118613005 CEST	443	49765	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:23.118921995 CEST	49765	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:23.118944883 CEST	443	49765	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:23.226286888 CEST	443	49766	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:23.226655960 CEST	49766	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:23.226671934 CEST	443	49766	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:23.227049112 CEST	443	49766	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:23.227384090 CEST	49766	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:23.227436066 CEST	443	49766	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:23.227650881 CEST	49766	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:23.237920046 CEST	443	49763	23.1.237.91	192.168.2.5
Apr 6, 2024 01:17:23.237988949 CEST	49763	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:23.238755941 CEST	443	49763	23.1.237.91	192.168.2.5
Apr 6, 2024 01:17:23.238802910 CEST	443	49763	23.1.237.91	192.168.2.5
Apr 6, 2024 01:17:23.238816977 CEST	49763	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:23.238850117 CEST	49763	443	192.168.2.5	23.1.237.91
Apr 6, 2024 01:17:23.268234968 CEST	443	49766	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:23.660043955 CEST	443	49765	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:23.660171032 CEST	443	49765	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:23.660264015 CEST	49765	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:23.703618050 CEST	49765	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:23.703639030 CEST	443	49765	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:23.780682087 CEST	443	49766	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:23.780706882 CEST	443	49766	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:23.780765057 CEST	49766	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:23.780781031 CEST	443	49766	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:23.780791998 CEST	443	49766	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:23.780831099 CEST	49766	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:23.781495094 CEST	49766	443	192.168.2.5	85.193.90.99
Apr 6, 2024 01:17:23.781507969 CEST	443	49766	85.193.90.99	192.168.2.5
Apr 6, 2024 01:17:25.352168083 CEST	49767	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.352200985 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.352313042 CEST	49767	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.352672100 CEST	49767	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.352688074 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.867949963 CEST	49768	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.867989063 CEST	443	49768	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.868235111 CEST	49768	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.868432045 CEST	49768	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.868446112 CEST	443	49768	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.915646076 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.915920973 CEST	49767	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.915936947 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.916285992 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.916821957 CEST	49767	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.916821957 CEST	49767	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.916851997 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.916897058 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.916903973 CEST	49767	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.916934967 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.916970968 CEST	49767	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.916985035 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.917260885 CEST	49767	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.917299032 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.917474985 CEST	49767	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.917511940 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.917665005 CEST	49767	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.917680025 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.917701960 CEST	49767	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.917718887 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:25.917728901 CEST	49767	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:25.917743921 CEST	443	49767	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:26.397202969 CEST	49769	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:26.397253990 CEST	443	49769	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:26.397315979 CEST	49769	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:26.397749901 CEST	49769	443	192.168.2.5	93.158.134.119
Apr 6, 2024 01:17:26.397763014 CEST	443	49769	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:26.430406094 CEST	443	49768	93.158.134.119	192.168.2.5
Apr 6, 2024 01:17:26.430646896 CEST	49768	443	192.168.2.5	93.158.134.119

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 6, 2024 01:17:07.251142979 CEST	192.168.2.5	1.1.1.1	0x7454	Standard query (0)	steamfiller.ru	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:07.251322031 CEST	192.168.2.5	1.1.1.1	0x2a53	Standard query (0)	steamfiller.ru	65	IN (0x0001)	false
Apr 6, 2024 01:17:07.973656893 CEST	192.168.2.5	1.1.1.1	0x4f51	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:07.973866940 CEST	192.168.2.5	1.1.1.1	0x348f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 6, 2024 01:17:13.185188055 CEST	192.168.2.5	1.1.1.1	0xb46b	Standard query (0)	steamfiller.ru	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:13.185827017 CEST	192.168.2.5	1.1.1.1	0xf2d5	Standard query (0)	steamfiller.ru	65	IN (0x0001)	false
Apr 6, 2024 01:17:13.595222950 CEST	192.168.2.5	1.1.1.1	0x8d12	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:13.595448017 CEST	192.168.2.5	1.1.1.1	0x74b9	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Apr 6, 2024 01:17:17.549199104 CEST	192.168.2.5	1.1.1.1	0xf79	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:17.549422979 CEST	192.168.2.5	1.1.1.1	0x7a86	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Apr 6, 2024 01:17:18.702647924 CEST	192.168.2.5	1.1.1.1	0x7bab	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:18.703072071 CEST	192.168.2.5	1.1.1.1	0x19c	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Apr 6, 2024 01:17:19.994105101 CEST	192.168.2.5	1.1.1.1	0xb303	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:19.994648933 CEST	192.168.2.5	1.1.1.1	0x9ef	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Apr 6, 2024 01:17:43.806767941 CEST	192.168.2.5	1.1.1.1	0x4eee	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:43.811826944 CEST	192.168.2.5	1.1.1.1	0xbca5	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Apr 6, 2024 01:17:44.937072039 CEST	192.168.2.5	1.1.1.1	0x7133	Standard query (0)	store.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:44.937341928 CEST	192.168.2.5	1.1.1.1	0x8bf3	Standard query (0)	store.cloudflare.steamstatic.com	65	IN (0x0001)	false
Apr 6, 2024 01:17:47.564121962 CEST	192.168.2.5	1.1.1.1	0xdea4	Standard query (0)	store.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:47.564680099 CEST	192.168.2.5	1.1.1.1	0xf718	Standard query (0)	store.cloudflare.steamstatic.com	65	IN (0x0001)	false
Apr 6, 2024 01:17:53.797029018 CEST	192.168.2.5	1.1.1.1	0x3b26	Standard query (0)	login.steampowered.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:53.797566891 CEST	192.168.2.5	1.1.1.1	0x632f	Standard query (0)	login.steampowered.com	65	IN (0x0001)	false
Apr 6, 2024 01:17:54.574704885 CEST	192.168.2.5	1.1.1.1	0x3459	Standard query (0)	login.steampowered.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:54.576236010 CEST	192.168.2.5	1.1.1.1	0x7b5c	Standard query (0)	login.steampowered.com	65	IN (0x0001)	false
Apr 6, 2024 01:17:54.584084034 CEST	192.168.2.5	1.1.1.1	0x8c72	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:54.584084034 CEST	192.168.2.5	1.1.1.1	0xaffa	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Apr 6, 2024 01:17:54.607399940 CEST	192.168.2.5	1.1.1.1	0xcdb6	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:54.607637882 CEST	192.168.2.5	1.1.1.1	0x813	Standard query (0)	api.steampowered.com	65	IN (0x0001)	false
Apr 6, 2024 01:17:55.455076933 CEST	192.168.2.5	1.1.1.1	0x6029	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:55.455240965 CEST	192.168.2.5	1.1.1.1	0xd2ce	Standard query (0)	api.steampowered.com	65	IN (0x0001)	false
Apr 6, 2024 01:18:17.848531961 CEST	192.168.2.5	1.1.1.1	0x11bd	Standard query (0)	s.team	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:18:17.848838091 CEST	192.168.2.5	1.1.1.1	0x3621	Standard query (0)	s.team	65	IN (0x0001)	false
Apr 6, 2024 01:18:20.321135044 CEST	192.168.2.5	1.1.1.1	0xd3c7	Standard query (0)	cdn.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:18:20.321553946 CEST	192.168.2.5	1.1.1.1	0x7a05	Standard query (0)	cdn.cloudflare.steamstatic.com	65	IN (0x0001)	false
Apr 6, 2024 01:18:21.142713070 CEST	192.168.2.5	1.1.1.1	0x1479	Standard query (0)	cdn.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:18:21.142934084 CEST	192.168.2.5	1.1.1.1	0xd9b5	Standard query (0)	cdn.cloudflare.steamstatic.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 6, 2024 01:17:07.957725048 CEST	1.1.1.1	192.168.2.5	0x7454	No error (0)	steamfiller.ru		85.193.90.99	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:08.098500013 CEST	1.1.1.1	192.168.2.5	0x348f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 6, 2024 01:17:08.098556995 CEST	1.1.1.1	192.168.2.5	0x4f51	No error (0)	www.google.com		142.250.64.228	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:13.310813904 CEST	1.1.1.1	192.168.2.5	0xb46b	No error (0)	steamfiller.ru		85.193.90.99	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:13.719466925 CEST	1.1.1.1	192.168.2.5	0x8d12	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:13.719466925 CEST	1.1.1.1	192.168.2.5	0x8d12	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:13.719466925 CEST	1.1.1.1	192.168.2.5	0x8d12	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:13.719466925 CEST	1.1.1.1	192.168.2.5	0x8d12	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:17.674005985 CEST	1.1.1.1	192.168.2.5	0x7a86	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Apr 6, 2024 01:17:17.674477100 CEST	1.1.1.1	192.168.2.5	0xf79	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Apr 6, 2024 01:17:17.674477100 CEST	1.1.1.1	192.168.2.5	0xf79	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:17.674477100 CEST	1.1.1.1	192.168.2.5	0xf79	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:17.674477100 CEST	1.1.1.1	192.168.2.5	0xf79	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:17.674477100 CEST	1.1.1.1	192.168.2.5	0xf79	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:18.828259945 CEST	1.1.1.1	192.168.2.5	0x19c	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Apr 6, 2024 01:17:18.829344988 CEST	1.1.1.1	192.168.2.5	0x7bab	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Apr 6, 2024 01:17:18.829344988 CEST	1.1.1.1	192.168.2.5	0x7bab	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:18.829344988 CEST	1.1.1.1	192.168.2.5	0x7bab	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:18.829344988 CEST	1.1.1.1	192.168.2.5	0x7bab	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:18.829344988 CEST	1.1.1.1	192.168.2.5	0x7bab	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:20.119929075 CEST	1.1.1.1	192.168.2.5	0x9ef	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Apr 6, 2024 01:17:20.119954109 CEST	1.1.1.1	192.168.2.5	0xb303	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Apr 6, 2024 01:17:20.119954109 CEST	1.1.1.1	192.168.2.5	0xb303	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:20.119954109 CEST	1.1.1.1	192.168.2.5	0xb303	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:20.119954109 CEST	1.1.1.1	192.168.2.5	0xb303	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:20.119954109 CEST	1.1.1.1	192.168.2.5	0xb303	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:20.834609985 CEST	1.1.1.1	192.168.2.5	0x8e9c	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:20.834609985 CEST	1.1.1.1	192.168.2.5	0x8e9c	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:21.723232031 CEST	1.1.1.1	192.168.2.5	0x8cd3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 6, 2024 01:17:21.723232031 CEST	1.1.1.1	192.168.2.5	0x8cd3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:34.913454056 CEST	1.1.1.1	192.168.2.5	0xd290	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 6, 2024 01:17:34.913454056 CEST	1.1.1.1	192.168.2.5	0xd290	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:43.931637049 CEST	1.1.1.1	192.168.2.5	0x4eee	No error (0)	store.steampowered.com		23.46.213.117	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:45.061788082 CEST	1.1.1.1	192.168.2.5	0x8bf3	No error (0)	store.cloudflare.steamstatic.com			65	IN (0x0001)	false
Apr 6, 2024 01:17:45.062648058 CEST	1.1.1.1	192.168.2.5	0x7133	No error (0)	store.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:45.062648058 CEST	1.1.1.1	192.168.2.5	0x7133	No error (0)	store.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:47.689543009 CEST	1.1.1.1	192.168.2.5	0xdea4	No error (0)	store.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:47.689543009 CEST	1.1.1.1	192.168.2.5	0xdea4	No error (0)	store.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:47.690166950 CEST	1.1.1.1	192.168.2.5	0xf718	No error (0)	store.cloudflare.steamstatic.com			65	IN (0x0001)	false
Apr 6, 2024 01:17:53.936863899 CEST	1.1.1.1	192.168.2.5	0x3b26	No error (0)	login.steampowered.com		23.61.62.148	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:54.709942102 CEST	1.1.1.1	192.168.2.5	0x8c72	No error (0)	store.steampowered.com		96.17.60.195	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:54.722404957 CEST	1.1.1.1	192.168.2.5	0x3459	No error (0)	login.steampowered.com		23.47.27.74	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:54.732870102 CEST	1.1.1.1	192.168.2.5	0xcdb6	No error (0)	api.steampowered.com		23.61.62.148	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:55.579538107 CEST	1.1.1.1	192.168.2.5	0x6029	No error (0)	api.steampowered.com		23.47.27.74	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:17:58.155195951 CEST	1.1.1.1	192.168.2.5	0x6d5d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 6, 2024 01:17:58.155195951 CEST	1.1.1.1	192.168.2.5	0x6d5d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:18:17.996156931 CEST	1.1.1.1	192.168.2.5	0x11bd	No error (0)	s.team		23.45.135.116	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:18:18.996829987 CEST	1.1.1.1	192.168.2.5	0x5c07	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 6, 2024 01:18:18.996829987 CEST	1.1.1.1	192.168.2.5	0x5c07	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:18:20.446247101 CEST	1.1.1.1	192.168.2.5	0xd3c7	No error (0)	cdn.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:18:20.446247101 CEST	1.1.1.1	192.168.2.5	0xd3c7	No error (0)	cdn.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:18:20.446563005 CEST	1.1.1.1	192.168.2.5	0x7a05	No error (0)	cdn.cloudflare.steamstatic.com			65	IN (0x0001)	false
Apr 6, 2024 01:18:21.267209053 CEST	1.1.1.1	192.168.2.5	0xd9b5	No error (0)	cdn.cloudflare.steamstatic.com			65	IN (0x0001)	false
Apr 6, 2024 01:18:21.268750906 CEST	1.1.1.1	192.168.2.5	0x1479	No error (0)	cdn.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
Apr 6, 2024 01:18:21.268750906 CEST	1.1.1.1	192.168.2.5	0x1479	No error (0)	cdn.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:08 UTC	657	OUT	GET / HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:09 UTC	356	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:09 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding
2024-04-05 23:17:09 UTC	16028	IN	Data Raw: 31 65 61 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c Data Ascii: 1eae<!DOCTYPE html><html> <head itemscope="" itemtype="http://schema.org/"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width,initial
2024-04-05 23:17:09 UTC	16384	IN	Data Raw: 64 74 68 3d 22 31 36 22 3e 0a 09 09 3c 70 61 74 68 20 64 3d 22 4d 30 20 38 30 56 32 32 39 2e 35 63 30 20 31 37 20 36 2e 37 20 33 33 2e 33 20 31 38 2e 37 20 34 35 2e 33 6c 31 37 36 20 31 37 36 63 32 35 20 32 35 20 36 35 2e 35 20 32 35 20 39 30 2e 35 20 30 4c 34 31 38 2e 37 20 33 31 37 2e 33 63 32 35 2d 32 35 20 32 35 2d 36 35 2e 35 20 30 2d 39 30 2e 35 6c 2d 31 37 36 2d 31 37 36 63 2d 31 32 2d 31 32 2d 32 38 2e 33 2d 31 38 2e 37 2d 34 35 2e 33 2d 31 38 2e 37 48 34 38 43 32 31 2e 35 20 33 32 20 30 20 35 33 2e 35 20 30 20 38 30 7a 6d 31 31 32 20 33 32 61 33 32 20 33 32 20 30 20 31 20 31 20 30 20 36 34 20 33 32 20 33 32 20 30 20 31 20 31 20 30 2d 36 34 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 2f 73 70 61 6e 3e 20 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: dth="16"><path d="M0 80V229.5c0 17 6.7 33.3 18.7 45.3l176 176c25 25 65.5 25 90.5 0L418.7 317.3c25-25 25-65.5 0-90.5l-176-176c-12-12-28.3-18.7-45.3-18.7H48C21.5 32 0 53.5 0 80zm112 32a32 32 0 1 1 0 64 32 32 0 1 1 0-64z"></path></svg></span>
2024-04-05 23:17:10 UTC	16384	IN	Data Raw: 4d 34 33 30 2e 37 20 31 39 31 2e 35 6c 2d 31 20 34 34 2e 33 2d 34 31 2e 33 20 31 31 2e 32 20 34 30 2e 38 20 31 34 2e 35 2d 31 20 34 30 2e 37 20 32 36 2e 35 2d 33 31 2e 0d 0a 32 30 30 30 0d 0a 38 20 34 30 2e 32 20 31 34 2d 32 33 2e 32 2d 33 34 2e 31 20 32 38 2e 33 2d 33 33 2e 39 2d 34 33 2e 35 20 31 32 2d 32 35 2e 38 2d 33 37 7a 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: M430.7 191.5l-1 44.3-41.3 11.2 40.8 14.5-1 40.7 26.5-31.20008 40.2 14-23.2-34.1 28.3-33.9-43.5 12-25.8-37z"></path> </g> </svg>
2024-04-05 23:17:10 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 77 69 64 74 68 3d 22 33 35 22 20 68 65 69 67 68 74 3d 22 33 35 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 20 33 35 22 20 66 69 6c 6c 3d 22 0d 0a 38 30 30 30 0d 0a 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 6f 70 61 63 69 74 79 3d 22 30 2e 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 33 39 37 20 30 2e 32 33 33 37 30 34 43 38 2e 32 35 38 34 31 20 30 2e 32 33 33 37 30 34 20 Data Ascii: <svg width="35" height="35" viewBox="0 0 35 35" fill="8000none" xmlns="http://www.w3.org/2000/svg"> <g opacity="0.2"> <path d="M17.397 0.233704C8.25841 0.233704
2024-04-05 23:17:10 UTC	16384	IN	Data Raw: 5d 2f 67 2c 20 22 22 29 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 2e 70 61 79 6d 65 6e 74 5f 5f 62 6c 6f 63 6b 20 62 75 74 74 6f 6e 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 20 73 70 61 6e 22 29 2e 74 65 78 74 28 70 61 79 53 75 6d 20 2b 20 22 20 50 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 23 70 61 79 22 29 2e 74 65 78 74 28 28 70 61 79 53 75 6d 29 20 2b 20 22 20 50 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 24 28 22 23 70 61 79 4f 6c 64 22 29 2e 74 65 78 74 28 28 70 61 79 53 75 6d 29 20 2b 20 22 Data Ascii: ]/g, ""))); $(".payment__block button[type=submit] span").text(paySum + " P") $("#pay").text((paySum) + " P") //$("#payOld").text((paySum) + "
2024-04-05 23:17:10 UTC	16384	IN	Data Raw: b8 d0 bb d0 b8 20 d0 bf d1 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d1 83 20 d0 bf d1 80 d0 b5 d0 b4 d0 be d1 81 d1 82 d0 b0 d0 b2 d0 bb d0 b5 d0 bd d0 bd d0 be d0 b9 20 d0 b2 d0 b0 d0 bc d0 b8 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 0d 0a 32 30 30 30 0d 0a b8 d0 b8 20 d0 bf d0 be 20 d0 b1 d0 b0 d0 b7 d0 b0 d0 bc 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 20 d1 82 d1 80 d0 b5 d1 82 d1 8c d0 b8 d1 85 20 d0 bb d0 b8 d1 86 2e 20 d0 9b d0 b8 d1 87 d0 bd d0 b0 d1 8f 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d1 8f 20 d1 82 d0 b0 d0 ba d0 b6 d0 b5 20 d0 bc d0 be d0 b6 d0 b5 d1 82 20 d0 b1 d1 8b d1 82 d1 8c 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd d0 b0 20 d0 b8 d0 b7 20 d0 b7 d0 b0 d0 ba d0 be d0 bd d0 bd d0 be 20 d0 bf d1 80 d0 b8 d0 be d0 Data Ascii: 2000 .
2024-04-05 23:17:10 UTC	16384	IN	Data Raw: d1 8c d1 81 d0 ba d0 be d0 b5 20 d1 81 d0 be d0 b3 d0 bb d0 b0 d1 88 d0 b5 d0 bd d0 b8 d0 b5 20 d0 be 20 d1 81 d0 bb d0 b5 d0 b4 d1 83 d1 8e d1 89 d0 b5 d0 bc 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 72 6f 77 72 22 3e 3c 73 70 61 6e 3e 31 20 d0 a2 d0 b5 d1 80 d0 bc d0 b8 d0 bd d1 8b 20 d0 b8 20 d0 be d0 bf d1 80 d0 b5 d0 b4 d0 b5 d0 bb d0 b5 d0 bd d0 b8 d1 8f 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 72 6f Data Ascii: . </p> </div> <div class="modal-rowr"><span>1 </span> <div class="modal-ro
2024-04-05 23:17:10 UTC	5666	IN	Data Raw: 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 72 6f 77 72 22 3e 3c 73 70 61 6e 3e 31 30 20 d0 9f d0 be d0 bb d0 b8 d1 82 d0 b8 d0 ba d0 b0 20 d0 be d0 bf d0 bb d0 b0 d1 82 d1 8b 20 d0 b8 20 d0 b2 d0 be d0 b7 d0 b2 d1 80 d0 b0 d1 82 d0 b0 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 72 6f 77 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e d0 9f d0 be d0 ba d1 83 d0 bf d0 ba d0 b8 20 d0 bd d0 b0 20 d1 81 d0 b0 d0 b9 d1 82 d0 b5 3a 20 3c 62 72 3e 20 3c 62 72 3e 0a 20 20 Data Ascii: </div> <div class="modal-rowr"><span>10 </span> <div class="modal-rowr"> <p> : <br> <br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49711	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:09 UTC	612	OUT	GET /templ/steamrepl/css/bootstrap.min-1.css HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:10 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:10 GMT Content-Type: text/css Content-Length: 146363 Last-Modified: Wed, 22 Nov 2023 08:48:42 GMT Connection: close ETag: "655dc06a-23bbb" Accept-Ranges: bytes
2024-04-05 23:17:10 UTC	16147	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 20 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 68 74 6d 6c 20 7b 0a Data Ascii: /! Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) / /! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html {
2024-04-05 23:17:10 UTC	16384	IN	Data Raw: 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 32 37 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 74 63 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 32 37 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 78 62 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 32 37 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 79 65 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 30 30 61 35 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 6a 70 79 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 30 30 61 35 22 3b 0a 7d 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 75 62 6c 65 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 32 30 62 64 Data Ascii: ore { content: "\e227";}.glyphicon-btc:before { content: "\e227";}.glyphicon-xbt:before { content: "\e227";}.glyphicon-yen:before { content: "\00a5";}.glyphicon-jpy:before { content: "\00a5";}.glyphicon-ruble:before { content: "\20bd
2024-04-05 23:17:10 UTC	16384	IN	Data Raw: 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 32 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 31 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 39 31 2e 36 36 36 36 36 36 36 37 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 30 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 38 33 2e 33 33 33 33 33 33 33 33 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 39 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 37 35 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 38 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 36 36 2e 36 36 36 36 36 36 36 37 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 37 20 7b 0a 20 20 20 20 72 69 Data Ascii: } .col-md-pull-12 { right: 100%; } .col-md-pull-11 { right: 91.66666667%; } .col-md-pull-10 { right: 83.33333333%; } .col-md-pull-9 { right: 75%; } .col-md-pull-8 { right: 66.66666667%; } .col-md-pull-7 { ri
2024-04-05 23:17:10 UTC	16384	IN	Data Raw: 6c 69 6e 65 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 0a 7d 0a 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 20 2b 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 2c 0a 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 20 2b 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 7d 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 73 74 61 74 69 63 20 7b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 34 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 37 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 37 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 7d 0a 2e 66 6f 72 6d 2d Data Ascii: line { cursor: not-allowed;}.checkbox-inline + .checkbox-inline,.radio-inline + .radio-inline { margin-top: 0; margin-left: 10px;}.form-control-static { min-height: 34px; padding-top: 7px; padding-bottom: 7px; margin-bottom: 0;}.form-
2024-04-05 23:17:10 UTC	16384	IN	Data Raw: 20 31 2e 33 33 33 33 33 33 33 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0a 7d 0a 2e 62 74 6e 2d 67 72 6f 75 70 2d 73 6d 20 3e 20 2e 62 74 6e 2c 0a 2e 62 74 6e 2d 73 6d 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 7d 0a 2e 62 74 6e 2d 67 72 6f 75 70 2d 78 73 20 3e 20 2e 62 74 6e 2c 0a 2e 62 74 6e 2d 78 73 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 70 78 20 35 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 Data Ascii: 1.3333333; border-radius: 6px;}.btn-group-sm > .btn,.btn-sm { padding: 5px 10px; font-size: 12px; line-height: 1.5; border-radius: 3px;}.btn-group-xs > .btn,.btn-xs { padding: 1px 5px; font-size: 12px; line-height: 1.5; border-rad
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 2e 6e 61 76 62 61 72 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 2e 6e 61 76 62 61 72 2d 68 65 61 64 65 72 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 7d 0a 7d 0a 2e 6e 61 76 62 61 72 2d 63 6f 6c 6c 61 70 73 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 78 3a 20 76 69 73 69 62 Data Ascii: order: 1px solid transparent;}@media (min-width: 768px) { .navbar { border-radius: 4px; }}@media (min-width: 768px) { .navbar-header { float: left; }}.navbar-collapse { padding-right: 15px; padding-left: 15px; overflow-x: visib
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 6c 2d 73 75 63 63 65 73 73 5b 68 72 65 66 5d 3a 68 6f 76 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 34 39 64 34 34 3b 0a 7d 0a 2e 6c 61 62 65 6c 2d 69 6e 66 6f 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 35 62 63 30 64 65 3b 0a 7d 0a 2e 6c 61 62 65 6c 2d 69 6e 66 6f 5b 68 72 65 66 5d 3a 66 6f 63 75 73 2c 0a 2e 6c 61 62 65 6c 2d 69 6e 66 6f 5b 68 72 65 66 5d 3a 68 6f 76 65 72 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 31 62 30 64 35 3b 0a 7d 0a 2e 6c 61 62 65 6c 2d 77 61 72 6e 69 6e 67 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 30 61 64 34 65 3b 0a 7d 0a 2e 6c 61 62 65 6c 2d 77 61 72 6e 69 6e 67 5b 68 72 65 66 5d 3a 66 6f 63 75 Data Ascii: l-success[href]:hover { background-color: #449d44;}.label-info { background-color: #5bc0de;}.label-info[href]:focus,.label-info[href]:hover { background-color: #31b0d5;}.label-warning { background-color: #f0ad4e;}.label-warning[href]:focu
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 75 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 0a 2e 70 61 6e 65 6c 0a 20 20 3e 20 2e 70 61 6e 65 6c 2d 63 6f 6c 6c 61 70 73 65 0a 20 20 3e 20 2e 6c 69 73 74 2d 67 72 6f 75 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 0a 20 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 7d 0a 2e 70 61 6e 65 6c 20 3e 20 2e 6c 69 73 74 2d 67 72 6f 75 70 3a 6c 61 73 74 2d 63 68 69 6c 64 20 2e 6c 69 73 74 2d 67 72 Data Ascii: up:first-child .list-group-item:first-child,.panel > .panel-collapse > .list-group:first-child .list-group-item:first-child { border-top: 0; border-top-left-radius: 3px; border-top-right-radius: 3px;}.panel > .list-group:last-child .list-gr
2024-04-05 23:17:11 UTC	15528	IN	Data Raw: 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 33 70 78 3b 0a 7d 0a 2e 74 6f 6f 6c 74 69 70 2e 74 6f 70 20 2e 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 35 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 35 70 78 20 35 70 78 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 7d 0a 2e 74 6f 6f 6c 74 69 70 2e 74 6f 70 2d 6c 65 66 74 20 2e 74 6f 6f 6c 74 69 70 2d 61 72 72 6f 77 20 7b 0a 20 20 72 69 67 68 74 3a 20 35 70 78 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 35 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 35 Data Ascii: margin-left: -3px;}.tooltip.top .tooltip-arrow { bottom: 0; left: 50%; margin-left: -5px; border-width: 5px 5px 0; border-top-color: #000;}.tooltip.top-left .tooltip-arrow { right: 5px; bottom: 0; margin-bottom: -5px; border-width: 5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49717	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:10 UTC	610	OUT	GET /templ/steamrepl/css/bootstrap.min.css HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:11 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:10 GMT Content-Type: text/css Content-Length: 152535 Last-Modified: Wed, 22 Nov 2023 08:48:40 GMT Connection: close ETag: "655dc068-253d7" Accept-Ranges: bytes
2024-04-05 23:17:11 UTC	16147	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 68 74 6d 6c 20 7b 0a 20 Data Ascii: /! Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html {
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 7d 0a 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 69 73 68 6f 70 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 31 34 22 0a 7d 0a 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 6b 6e 69 67 68 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 31 35 22 0a 7d 0a 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 61 62 79 2d 66 6f 72 6d 75 6c 61 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 65 32 31 36 22 0a 7d 0a 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 6e 74 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 5c 32 36 66 61 22 0a 7d 0a 0a 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6c 61 63 6b 62 6f 61 72 64 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 Data Ascii: }.glyphicon-bishop:before { content: "\e214"}.glyphicon-knight:before { content: "\e215"}.glyphicon-baby-formula:before { content: "\e216"}.glyphicon-tent:before { content: "\26fa"}.glyphicon-blackboard:before { content:
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 20 20 6c 65 66 74 3a 20 34 31 2e 36 36 36 36 36 36 36 37 25 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 34 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 33 33 2e 33 33 33 33 33 33 33 33 25 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 33 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 32 35 25 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 32 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 31 36 2e 36 36 36 36 36 36 36 37 25 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 38 2e 33 33 33 33 33 33 33 33 25 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 63 6f 6c 2d 73 6d 2d 70 75 73 68 2d Data Ascii: left: 41.66666667% } .col-sm-push-4 { left: 33.33333333% } .col-sm-push-3 { left: 25% } .col-sm-push-2 { left: 16.66666667% } .col-sm-push-1 { left: 8.33333333% } .col-sm-push-
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 6f 6c 6f 72 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 2e 31 35 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 2e 31 35 73 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 2e 31 35 73 2c 20 62 6f 78 2d 73 68 61 64 6f 77 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 2e 31 35 73 2c 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 2e 31 35 73 0a 7d 0a 0a 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 61 66 65 39 3b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a Data Ascii: olor ease-in-out .15s, box-shadow ease-in-out .15s; transition: border-color ease-in-out .15s, box-shadow ease-in-out .15s, -webkit-box-shadow ease-in-out .15s}.form-control:focus { border-color: #66afe9; outline: 0; -webkit-box-shadow:
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 66 6f 63 75 73 2c 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 69 6e 66 6f 3a 66 6f 63 75 73 2c 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 62 74 6e 2d 69 6e 66 6f 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 35 62 63 30 64 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 34 36 62 38 64 61 0a 7d 0a 0a 2e 62 74 6e 2d 69 6e 66 6f 20 2e 62 61 64 67 65 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 35 62 63 30 64 65 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 0a 7d 0a 0a 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: focus, fieldset[disabled] .btn-info:focus, fieldset[disabled] .btn-info:hover { background-color: #5bc0de; border-color: #46b8da}.btn-info .badge { color: #5bc0de; background-color: #fff}.btn-warning { color: #fff; background
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 20 2e 62 74 6e 2d 67 72 6f 75 70 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 31 70 78 0a 7d 0a 0a 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 20 3e 20 2e 62 74 6e 2c 20 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 62 74 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 20 3e 20 2e 62 74 6e 2d 67 72 6f 75 70 20 7b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 70 78 0a 7d 0a 0a 2e 6e 61 76 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 0a 7d 0a 0a 2e 6e 61 76 20 3e 20 6c 69 20 7b 0a 20 20 20 20 70 6f 73 69 74 Data Ascii: .btn-group { margin-right: -1px}.input-group-btn:last-child > .btn, .input-group-btn:last-child > .btn-group { z-index: 2; margin-left: -1px}.nav { padding-left: 0; margin-bottom: 0; list-style: none}.nav > li { posit
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 2d 6e 61 76 20 2e 6f 70 65 6e 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 3e 20 2e 64 69 73 61 62 6c 65 64 20 3e 20 61 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 0a 20 20 20 20 7d 0a 7d 0a 0a 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 33 33 0a 7d 0a 0a 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 2c 20 2e 6e 61 76 62 61 72 2d 69 6e 76 65 72 73 65 20 2e 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 3a 68 6f 76 65 72 20 7b 0a 20 Data Ascii: -nav .open .dropdown-menu > .disabled > a:hover { color: #444; background-color: transparent }}.navbar-inverse .navbar-toggle { border-color: #333}.navbar-inverse .navbar-toggle:focus, .navbar-inverse .navbar-toggle:hover {
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 6c 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 0a 7d 0a 0a 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 61 63 74 69 76 65 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 74 65 78 74 2c 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 74 65 78 74 2c 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 20 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 74 65 78 74 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 37 64 64 65 66 0a 7d 0a 0a 61 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2c 20 62 75 74 74 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 Data Ascii: l { color: inherit}.list-group-item.active .list-group-item-text, .list-group-item.active:focus .list-group-item-text, .list-group-item.active:hover .list-group-item-text { color: #c7ddef}a.list-group-item, button.list-group-item { color
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 72 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 65 62 63 63 64 31 0a 7d 0a 0a 2e 70 61 6e 65 6c 2d 64 61 6e 67 65 72 20 3e 20 2e 70 61 6e 65 6c 2d 68 65 61 64 69 6e 67 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 61 39 34 34 34 32 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 32 64 65 64 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 65 62 63 63 64 31 0a 7d 0a 0a 2e 70 61 6e 65 6c 2d 64 61 6e 67 65 72 20 3e 20 2e 70 61 6e 65 6c 2d 68 65 61 64 69 6e 67 20 2b 20 2e 70 61 6e 65 6c 2d 63 6f 6c 6c 61 70 73 65 20 3e 20 2e 70 61 6e 65 6c 2d 62 6f 64 79 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 20 23 65 62 63 63 64 31 0a 7d 0a 0a 2e 70 61 6e 65 6c 2d 64 61 6e 67 Data Ascii: r { border-color: #ebccd1}.panel-danger > .panel-heading { color: #a94442; background-color: #f2dede; border-color: #ebccd1}.panel-danger > .panel-heading + .panel-collapse > .panel-body { border-top-color: #ebccd1}.panel-dang
2024-04-05 23:17:11 UTC	5316	IN	Data Raw: 20 2e 70 61 67 65 72 3a 61 66 74 65 72 2c 20 2e 70 61 67 65 72 3a 62 65 66 6f 72 65 2c 20 2e 70 61 6e 65 6c 2d 62 6f 64 79 3a 61 66 74 65 72 2c 20 2e 70 61 6e 65 6c 2d 62 6f 64 79 3a 62 65 66 6f 72 65 2c 20 2e 72 6f 77 3a 61 66 74 65 72 2c 20 2e 72 6f 77 3a 62 65 66 6f 72 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 0a 7d 0a 0a 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 3e 20 2e 62 74 6e 2d 67 72 6f 75 70 3a 61 66 74 65 72 2c 20 2e 62 74 6e 2d 74 6f 6f 6c 62 61 72 3a 61 66 74 65 72 2c 20 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 61 66 74 65 72 2c 20 2e 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 2c 20 2e Data Ascii: .pager:after, .pager:before, .panel-body:after, .panel-body:before, .row:after, .row:before { display: table; content: " "}.btn-group-vertical > .btn-group:after, .btn-toolbar:after, .clearfix:after, .container-fluid:after, .container:after, .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49714	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:10 UTC	605	OUT	GET /templ/steamrepl/css/main.min.css HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:11 UTC	235	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:11 GMT Content-Type: text/css Content-Length: 42455 Last-Modified: Thu, 23 Nov 2023 16:39:50 GMT Connection: close ETag: "655f8056-a5d7" Accept-Ranges: bytes
2024-04-05 23:17:11 UTC	16149	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 75 62 69 6b 3b 0a 20 20 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 52 75 62 69 6b 20 4c 69 67 68 74 27 29 2c 20 6c 6f 63 61 6c 28 27 52 75 62 69 6b 2d 4c 69 67 68 74 27 29 2c 20 75 72 6c 28 22 52 75 62 69 6b 6c 69 67 68 74 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 75 62 69 6b 3b 0a 20 20 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 52 75 62 69 6b 27 29 2c 20 6c 6f 63 61 6c 28 27 52 75 62 69 6b 2d 52 Data Ascii: @font-face { font-family: Rubik; src: local('Rubik Light'), local('Rubik-Light'), url("Rubiklight.woff2") format('woff2'); font-weight: 300; font-style: normal}@font-face { font-family: Rubik; src: local('Rubik'), local('Rubik-R
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 6f 73 69 74 69 6f 6e 3a 20 6c 65 66 74 20 63 65 6e 74 65 72 0a 7d 0a 0a 2e 68 6f 77 5f 5f 62 6c 6f 63 6b 20 73 76 67 20 70 61 74 68 20 7b 0a 20 20 20 20 66 69 6c 6c 3a 20 23 35 38 35 32 66 37 3b 0a 7d 0a 0a 2e 68 6f 77 5f 5f 62 6c 6f 63 6b 20 73 76 67 20 67 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 0a 7d 0a 0a 2e 68 6f 77 5f 5f 62 6c 6f 63 6b 20 70 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 0a 7d 0a 0a 2e 68 6f 77 5f 5f 62 6c 6f 63 6b 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 30 70 78 0a 7d 0a 0a 2e 61 63 63 6f 72 64 69 6f 6e 20 7b 0a Data Ascii: osition: left center}.how__block svg path { fill: #5852f7;}.how__block svg g { opacity: 1}.how__block p { font-size: 18px; font-weight: 500; color: #fff}.how__block:not(:last-child) { margin-right: 30px}.accordion {
2024-04-05 23:17:11 UTC	9922	IN	Data Raw: 6d 2e 61 63 74 69 76 65 20 73 76 67 20 70 61 74 68 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 65 63 39 38 35 62 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 68 61 6d 62 75 72 67 65 72 20 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 30 20 30 3b 0a 20 20 20 20 20 20 20 20 2d Data Ascii: m.active svg path { fill: #ec985b } .hamburger { display: -webkit-box; display: -ms-flexbox; display: flex; color: #fff; font-size: 16px; font-weight: 500; background: 0 0; -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49715	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:10 UTC	610	OUT	GET /templ/steamrepl/css/main.aa7e6b15.css HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:11 UTC	235	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:11 GMT Content-Type: text/css Content-Length: 60389 Last-Modified: Wed, 22 Nov 2023 20:21:33 GMT Connection: close ETag: "655e62cd-ebe5" Accept-Ranges: bytes
2024-04-05 23:17:11 UTC	16149	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 65 70 69 63 73 74 65 61 6d 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 22 29 3b 0d 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 22 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 20 75 72 6c 28 22 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 2c 20 75 72 6c 28 22 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 22 22 29 20 66 6f 72 6d 61 74 28 22 73 76 67 22 29 Data Ascii: @font-face { font-display: block; font-family: epicsteam; font-style: normal; font-weight: 400; src: url(""); src: url("") format("embedded-opentype"), url("") format("truetype"), url("") format("woff"), url("") format("svg")
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 0d 0a 7d 0d 0a 0d 0a 2e 66 6f 72 6d 2d 66 69 6c 6c 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 34 37 25 0d 0a 7d 0d 0a 0d 0a 2e 66 6f 72 6d 2d 6d 65 74 68 6f 64 73 20 7b 0d 0a 20 20 20 20 67 72 69 64 2d 67 61 70 3a 20 38 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 62 31 62 32 34 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 32 70 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 67 72 69 64 3b 0d 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 61 75 74 6f 2d 66 69 74 2c 20 63 61 6c 63 28 32 35 25 20 2d 20 36 70 78 29 29 3b 0d 0a 20 20 20 20 67 Data Ascii: tent: space-between; width: 100%}.form-fill { width: 47%}.form-methods { grid-gap: 8px; background: #1b1b24; border-radius: 12px; display: grid; grid-template-columns:repeat(auto-fit, calc(25% - 6px)); g
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 7b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 64 61 6c 2d 70 61 79 6d 65 6e 74 20 2e 6d 6f 64 61 6c 2d 69 6e 66 6f 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 36 70 78 20 30 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 64 61 6c 2d 69 6d 67 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 35 70 78 20 61 75 74 6f 20 32 30 70 78 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 64 61 6c 2d 69 6e 66 6f 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 25 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 64 61 6c 2d 69 6e 66 6f 20 Data Ascii: { text-align: center}.modal-payment .modal-info { margin: 16px 0}.modal-img { margin: 25px auto 20px}.modal-info { color: #fff; font-weight: 500; line-height: 150%; text-align: center}.modal-info
2024-04-05 23:17:11 UTC	11472	IN	Data Raw: 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 2d 31 36 70 78 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 0d 0a 7d 0d 0a 0d 0a 2e 72 65 70 6c 61 63 65 2d 69 6d 61 67 65 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 0d 0a 7d 0d 0a 0d 0a 2e 72 65 70 6c 61 63 65 2d 69 6d 61 67 65 2c 20 2e 72 65 70 6c 61 63 65 2d 69 6d 61 67 65 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0d 0a Data Ascii: ; top: -16px; z-index: 10}.replace-image { position: absolute !important; z-index: 1}.replace-image, .replace-image:before { height: 100%; left: 50%; top: 50%; -webkit-transform: translate(-50%, -50%);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49716	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:10 UTC	597	OUT	GET /templ/steamrepl/js/jquery-3.6.0.min.js HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:11 UTC	250	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:11 GMT Content-Type: application/javascript Content-Length: 89501 Last-Modified: Tue, 27 Feb 2024 12:32:45 GMT Connection: close ETag: "65ddd66d-15d9d" Accept-Ranges: bytes
2024-04-05 23:17:11 UTC	16134	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 66 28 75 3d 5b 6d 3f 63 2e 66 69 72 73 74 43 68 69 6c 64 3a 63 2e 6c 61 73 74 43 68 69 6c 64 5d 2c 6d 26 26 70 29 7b 64 3d 28 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 63 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 26 26 72 5b 32 5d 2c 61 3d 73 26 26 63 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 73 5d 3b 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 64 26 26 61 3d 3d 3d 65 29 7b 69 5b 68 5d 3d 5b 6b 2c 73 2c 64 5d 3b 62 Data Ascii: ing"}return!0}if(u=[m?c.firstChild:c.lastChild],m&&p){d=(s=(r=(i=(o=(a=c)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1])&&r[2],a=s&&c.childNodes[s];while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if(1===a.nodeType&&++d&&a===e){i[h]=[k,s,d];b
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 53 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 5f 3d 2f 5e 2d 6d 73 2d 2f 2c 7a 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 5f 2c 22 6d 73 2d 22 Data Ascii: e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){return t.toUpperCase()}function X(e){return e.replace(_,"ms-"
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 3d 76 65 28 65 29 29 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 73 3d 6f 5b 72 5d 2c 75 3d 61 5b 72 5d 2c 76 6f 69 64 20 30 2c 22 69 6e 70 75 74 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4c 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 Data Ascii: =ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Le(o[r],a[r]);e
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 74 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 79 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 74 74 2e 76 61 6c 75 65 3b 76 61 72 20 63 74 2c 66 74 3d 53 2e 65 78 70 72 2e 61 74 74 72 48 61 6e 64 6c 65 3b 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 24 28 74 68 69 73 2c 53 2e 61 74 74 72 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 72 65 6d 6f 76 65 41 74 74 72 28 74 68 69 73 2c 65 29 7d 29 7d 7d 29 2c 53 2e 65 78 74 Data Ascii: nt("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;var ct,ft=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $(this,S.attr,e,t,1<arguments.length)},removeAttr:function(e){return this.each(function(){S.removeAttr(this,e)})}}),S.ext
2024-04-05 23:17:11 UTC	7831	IN	Data Raw: 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 3b 76 61 72 20 42 74 3d 7b 30 3a 32 30 30 2c 31 32 32 33 3a 32 30 34 7d 2c 24 74 3d 53 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 78 68 72 28 29 3b 79 2e 63 6f 72 73 3d 21 21 24 74 26 26 22 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 20 24 74 2c 79 2e 61 6a 61 78 3d 24 74 3d 21 21 24 74 2c 53 2e 61 6a 61 78 54 72 61 6e 73 70 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 6f 2c 61 3b 69 66 28 79 2e 63 6f 72 73 7c 7c 24 74 26 26 21 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 29 72 65 74 75 72 6e 7b 73 65 6e 64 3a 66 75 6e 63 Data Ascii: S.ajaxSettings.xhr=function(){try{return new C.XMLHttpRequest}catch(e){}};var Bt={0:200,1223:204},$t=S.ajaxSettings.xhr();y.cors=!!$t&&"withCredentials"in $t,y.ajax=$t=!!$t,S.ajaxTransport(function(i){var o,a;if(y.cors\|\|$t&&!i.crossDomain)return{send:func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49718	23.202.106.101	443

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:10 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-05 23:17:10 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=28021 Date: Fri, 05 Apr 2024 23:17:10 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49719	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:11 UTC	594	OUT	GET /templ/steamrepl/js/bootstrap.min.js HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:11 UTC	249	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:11 GMT Content-Type: application/javascript Content-Length: 39680 Last-Modified: Tue, 27 Feb 2024 12:32:45 GMT Connection: close ETag: "65ddd66d-9b00" Accept-Ranges: bytes
2024-04-05 23:17:11 UTC	16135	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 6a 51 75 65 72 79 2e 66 Data Ascii: /! Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");!function(t){"use strict";var e=jQuery.f
2024-04-05 23:17:11 UTC	16384	IN	Data Raw: 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2e 6f 66 66 28 22 6d 6f 75 73 65 75 70 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 74 68 69 73 2e 24 64 69 61 6c 6f 67 2e 6f 66 66 28 22 6d 6f 75 73 65 64 6f 77 6e 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 3f 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 65 28 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 68 69 64 65 4d 6f 64 61 6c 2c 74 68 69 73 29 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 73 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 Data Ascii: smiss.bs.modal").off("mouseup.dismiss.bs.modal"),this.$dialog.off("mousedown.dismiss.bs.modal"),a.support.transition&&this.$element.hasClass("fade")?this.$element.one("bsTransitionEnd",a.proxy(this.hideModal,this)).emulateTransitionEnd(s.TRANSITION_DURATI
2024-04-05 23:17:11 UTC	7161	IN	Data Raw: 2e 61 72 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 61 72 72 6f 77 3d 74 68 69 73 2e 24 61 72 72 6f 77 7c 7c 74 68 69 73 2e 74 69 70 28 29 2e 66 69 6e 64 28 22 2e 61 72 72 6f 77 22 29 7d 3b 76 61 72 20 74 3d 6e 2e 66 6e 2e 70 6f 70 6f 76 65 72 3b 6e 2e 66 6e 2e 70 6f 70 6f 76 65 72 3d 66 75 6e 63 74 69 6f 6e 20 65 28 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 28 74 68 69 73 29 2c 65 3d 74 2e 64 61 74 61 28 22 62 73 2e 70 6f 70 6f 76 65 72 22 29 2c 69 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6f 26 26 6f 3b 21 65 26 26 2f 64 65 73 74 72 6f 79 7c 68 69 64 65 2f 2e 74 65 73 74 28 6f 29 7c 7c 28 65 7c 7c 74 2e 64 61 74 61 28 22 62 73 2e Data Ascii: .arrow=function(){return this.$arrow=this.$arrow\|\|this.tip().find(".arrow")};var t=n.fn.popover;n.fn.popover=function e(o){return this.each(function(){var t=n(this),e=t.data("bs.popover"),i="object"==typeof o&&o;!e&&/destroy\|hide/.test(o)\|\|(e\|\|t.data("bs.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49720	23.202.106.101	443

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:11 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-05 23:17:11 UTC	486	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (dce/26AC) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=28022 Date: Fri, 05 Apr 2024 23:17:11 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-05 23:17:11 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49721	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:11 UTC	596	OUT	GET /templ/steamrepl/js/bootstrap.min-1.js HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:12 UTC	249	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:12 GMT Content-Type: application/javascript Content-Length: 39680 Last-Modified: Tue, 27 Feb 2024 12:32:45 GMT Connection: close ETag: "65ddd66d-9b00" Accept-Ranges: bytes
2024-04-05 23:17:12 UTC	16135	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 6f 6f 74 73 74 72 61 70 27 73 20 4a 61 76 61 53 63 72 69 70 74 20 72 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 6a 51 75 65 72 79 2e 66 Data Ascii: /! Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under the MIT license */if("undefined"==typeof jQuery)throw new Error("Bootstrap's JavaScript requires jQuery");!function(t){"use strict";var e=jQuery.f
2024-04-05 23:17:12 UTC	16384	IN	Data Raw: 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2e 6f 66 66 28 22 6d 6f 75 73 65 75 70 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 74 68 69 73 2e 24 64 69 61 6c 6f 67 2e 6f 66 66 28 22 6d 6f 75 73 65 64 6f 77 6e 2e 64 69 73 6d 69 73 73 2e 62 73 2e 6d 6f 64 61 6c 22 29 2c 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 68 61 73 43 6c 61 73 73 28 22 66 61 64 65 22 29 3f 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 6f 6e 65 28 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 68 69 64 65 4d 6f 64 61 6c 2c 74 68 69 73 29 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 73 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 44 55 52 41 54 49 Data Ascii: smiss.bs.modal").off("mouseup.dismiss.bs.modal"),this.$dialog.off("mousedown.dismiss.bs.modal"),a.support.transition&&this.$element.hasClass("fade")?this.$element.one("bsTransitionEnd",a.proxy(this.hideModal,this)).emulateTransitionEnd(s.TRANSITION_DURATI
2024-04-05 23:17:12 UTC	7161	IN	Data Raw: 2e 61 72 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 61 72 72 6f 77 3d 74 68 69 73 2e 24 61 72 72 6f 77 7c 7c 74 68 69 73 2e 74 69 70 28 29 2e 66 69 6e 64 28 22 2e 61 72 72 6f 77 22 29 7d 3b 76 61 72 20 74 3d 6e 2e 66 6e 2e 70 6f 70 6f 76 65 72 3b 6e 2e 66 6e 2e 70 6f 70 6f 76 65 72 3d 66 75 6e 63 74 69 6f 6e 20 65 28 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 28 74 68 69 73 29 2c 65 3d 74 2e 64 61 74 61 28 22 62 73 2e 70 6f 70 6f 76 65 72 22 29 2c 69 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6f 26 26 6f 3b 21 65 26 26 2f 64 65 73 74 72 6f 79 7c 68 69 64 65 2f 2e 74 65 73 74 28 6f 29 7c 7c 28 65 7c 7c 74 2e 64 61 74 61 28 22 62 73 2e Data Ascii: .arrow=function(){return this.$arrow=this.$arrow\|\|this.tip().find(".arrow")};var t=n.fn.popover;n.fn.popover=function e(o){return this.each(function(){var t=n(this),e=t.data("bs.popover"),i="object"==typeof o&&o;!e&&/destroy\|hide/.test(o)\|\|(e\|\|t.data("bs.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49722	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:12 UTC	592	OUT	GET /templ/steamrepl/js/scripts.min.js HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:12 UTC	251	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:12 GMT Content-Type: application/javascript Content-Length: 179572 Last-Modified: Tue, 27 Feb 2024 12:32:45 GMT Connection: close ETag: "65ddd66d-2bd74" Accept-Ranges: bytes
2024-04-05 23:17:12 UTC	16133	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 28 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 20 20 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 26 26 20 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 0a 20 20 20 20 3f 20 28 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 65 2e 64 6f 63 75 6d 65 6e 74 0a 20 20 20 20 20 20 20 20 3f 20 74 28 65 2c 20 21 30 29 0a 20 20 20 20 20 20 20 20 3a 20 66 75 6e 63 74 Data Ascii: /! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!(function (e, t) { "use strict"; "object" == typeof module && "object" == typeof module.exports ? (module.exports = e.document ? t(e, !0) : funct
2024-04-05 23:17:12 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 20 3f 20 5b 6e 5d 20 3a 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3a 20 28 28 62 2e 66 69 6c 74 65 72 2e 49 44 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 20 6e 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 Data Ascii: var n = t.getElementById(e); return n ? [n] : []; } })) : ((b.filter.ID = function (e) { var n = e.replace(te, ne); return function (
2024-04-05 23:17:13 UTC	16384	IN	Data Raw: 20 6f 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 72 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 69 2d 2d 29 20 65 5b 28 6e 20 3d 20 50 28 65 2c 20 72 5b 69 5d 29 29 5d 20 3d 20 21 28 74 5b 6e 5d 20 3d 20 72 5b 69 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 28 65 2c 20 30 2c 20 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3a 20 61 3b Data Ascii: o), i = r.length; while (i--) e[(n = P(e, r[i]))] = !(t[n] = r[i]); }) : function (e) { return a(e, 0, t); }) : a;
2024-04-05 23:17:13 UTC	16384	IN	Data Raw: 29 22 29 2c 0a 20 20 20 20 20 20 31 20 3d 3d 3d 20 74 2e 6c 65 6e 67 74 68 20 26 26 20 31 20 3d 3d 3d 20 72 2e 6e 6f 64 65 54 79 70 65 0a 20 20 20 20 20 20 20 20 3f 20 6b 2e 66 69 6e 64 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 28 72 2c 20 65 29 0a 20 20 20 20 20 20 20 20 20 20 3f 20 5b 72 5d 0a 20 20 20 20 20 20 20 20 20 20 3a 20 5b 5d 0a 20 20 20 20 20 20 20 20 3a 20 6b 2e 66 69 6e 64 2e 6d 61 74 63 68 65 73 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6b 2e 67 72 65 70 28 74 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 31 20 3d 3d 3d 20 65 2e 6e 6f 64 65 54 79 70 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0a 20 20 20 20 20 20 20 Data Ascii: )"), 1 === t.length && 1 === r.nodeType ? k.find.matchesSelector(r, e) ? [r] : [] : k.find.matches( e, k.grep(t, function (e) { return 1 === e.nodeType; })
2024-04-05 23:17:13 UTC	16384	IN	Data Raw: 67 65 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 6f 69 64 20 30 20 3d 3d 3d 20 74 0a 20 20 20 20 20 20 20 20 20 20 3f 20 74 68 69 73 2e 63 61 63 68 65 28 65 29 0a 20 20 20 20 20 20 20 20 20 20 3a 20 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 20 26 26 20 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 5b 56 28 74 29 5d 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 61 63 63 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 6f 69 64 20 30 20 3d 3d 3d 20 74 20 7c 7c 20 28 74 20 26 26 20 22 73 74 72 69 6e 67 22 20 3d 3d 20 74 79 70 65 6f 66 20 74 20 26 26 20 76 6f 69 64 20 30 20 3d 3d 3d 20 6e 29 0a 20 20 20 20 20 Data Ascii: get: function (e, t) { return void 0 === t ? this.cache(e) : e[this.expando] && e[this.expando][V(t)]; }, access: function (e, t, n) { return void 0 === t \|\| (t && "string" == typeof t && void 0 === n)
2024-04-05 23:17:13 UTC	16384	IN	Data Raw: 67 75 69 64 20 21 3d 3d 20 63 2e 67 75 69 64 29 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 73 20 26 26 20 21 73 2e 74 65 73 74 28 63 2e 6e 61 6d 65 73 70 61 63 65 29 29 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 72 20 26 26 20 72 20 21 3d 3d 20 63 2e 73 65 6c 65 63 74 6f 72 20 26 26 20 28 22 2a 2a 22 20 21 3d 3d 20 72 20 7c 7c 20 21 63 2e 73 65 6c 65 63 74 6f 72 29 29 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 70 2e 73 70 6c 69 63 65 28 6f 2c 20 31 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 2e 73 65 6c 65 63 74 6f 72 20 26 26 20 70 2e 64 65 6c 65 67 61 74 65 43 6f 75 6e 74 2d 2d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 2e 72 65 6d 6f Data Ascii: guid !== c.guid) \|\| (s && !s.test(c.namespace)) \|\| (r && r !== c.selector && ("**" !== r \|\| !c.selector)) \|\| (p.splice(o, 1), c.selector && p.delegateCount--, f.remo
2024-04-05 23:17:13 UTC	16384	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 2c 20 6e 20 3d 20 5b 5d 2c 20 72 20 3d 20 6b 28 65 29 2c 20 69 20 3d 20 72 2e 6c 65 6e 67 74 68 20 2d 20 31 2c 20 6f 20 3d 20 30 3b 20 6f 20 3c 3d 20 69 3b 20 6f 2b 2b 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 6f 20 3d 3d 3d 20 69 20 3f 20 74 68 69 73 20 3a 20 74 68 69 73 2e 63 6c 6f 6e 65 28 21 30 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6b 28 72 5b 6f 5d 29 5b 61 5d 28 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 2e 61 70 70 6c 79 28 6e 2c 20 74 2e 67 65 74 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 6e 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 Data Ascii: { for (var t, n = [], r = k(e), i = r.length - 1, o = 0; o <= i; o++) (t = o === i ? this : this.clone(!0)), k(r[o])[a](t), u.apply(n, t.get()); return this.pushStack(n); }; }
2024-04-05 23:17:13 UTC	16384	IN	Data Raw: 20 28 6e 75 6c 6c 20 3d 3d 20 28 61 20 3d 20 6b 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 65 2c 20 22 66 78 22 29 29 2e 75 6e 71 75 65 75 65 64 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 28 61 2e 75 6e 71 75 65 75 65 64 20 3d 20 30 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 73 20 3d 20 61 2e 65 6d 70 74 79 2e 66 69 72 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 61 2e 65 6d 70 74 79 2e 66 69 72 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 2e 75 6e 71 75 65 75 65 64 20 7c 7c 20 73 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 29 2c 0a 20 20 20 20 20 20 20 20 20 20 61 2e 75 6e 71 75 65 75 65 64 2b 2b 2c 0a 20 20 20 20 20 20 20 20 20 20 70 2e 61 6c 77 61 79 73 28 66 75 6e 63 74 69 Data Ascii: (null == (a = k._queueHooks(e, "fx")).unqueued && ((a.unqueued = 0), (s = a.empty.fire), (a.empty.fire = function () { a.unqueued \|\| s(); })), a.unqueued++, p.always(functi
2024-04-05 23:17:13 UTC	16384	IN	Data Raw: 69 6c 65 20 28 61 2d 2d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 28 72 20 3d 20 69 5b 61 5d 29 2e 73 65 6c 65 63 74 65 64 20 3d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2d 31 20 3c 20 6b 2e 69 6e 41 72 72 61 79 28 6b 2e 76 61 6c 48 6f 6f 6b 73 2e 6f 70 74 69 6f 6e 2e 67 65 74 28 72 29 2c 20 6f 29 29 20 26 26 20 28 6e 20 3d 20 21 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 20 7c 7c 20 28 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 20 3d 20 2d 31 29 2c 20 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 7d 29 2c 0a 20 20 20 20 6b 2e 65 61 63 68 28 5b 22 72 61 64 69 6f 22 2c 20 22 63 68 65 63 6b 62 6f 78 22 5d 2c 20 66 75 6e 63 74 69 6f 6e Data Ascii: ile (a--) ((r = i[a]).selected = -1 < k.inArray(k.valHooks.option.get(r), o)) && (n = !0); return n \|\| (e.selectedIndex = -1), o; }, }, }, }), k.each(["radio", "checkbox"], function
2024-04-05 23:17:13 UTC	16384	IN	Data Raw: 20 69 66 20 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 73 20 3d 20 69 2e 73 70 6c 69 74 28 22 20 22 29 29 5b 31 5d 20 3d 3d 3d 20 6f 20 26 26 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 61 20 3d 20 6c 5b 75 20 2b 20 22 20 22 20 2b 20 73 5b 30 5d 5d 20 7c 7c 20 6c 5b 22 2a 20 22 20 2b 20 73 5b 30 5d 5d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 21 30 20 3d 3d 3d 20 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 28 61 20 3d 20 6c 5b 69 5d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: if ( (s = i.split(" "))[1] === o && (a = l[u + " " + s[0]] \|\| l["* " + s[0]]) ) { !0 === a ? (a = l[i])

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49723	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:12 UTC	647	OUT	GET /templ/steamrepl/img/mira.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:13 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:12 GMT Content-Type: image/svg+xml Content-Length: 3692 Last-Modified: Wed, 22 Nov 2023 08:48:53 GMT Connection: close ETag: "655dc075-e6c" Accept-Ranges: bytes
2024-04-05 23:17:13 UTC	3692	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 22 20 68 65 69 67 68 74 3d 22 34 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 34 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 37 2e 30 33 30 32 20 32 35 2e 34 35 37 32 43 31 37 2e 35 33 33 38 20 32 35 2e 34 35 34 31 20 31 39 2e 30 33 30 33 20 32 35 2e 33 31 39 34 20 31 39 2e 36 36 34 32 20 32 37 2e 34 35 38 37 43 32 30 2e 30 39 31 32 20 32 38 2e 38 39 39 39 20 32 30 2e 37 37 31 34 20 33 31 2e 32 36 30 35 20 32 31 2e 37 30 34 37 20 33 34 2e 35 34 Data Ascii: <svg width="80" height="41" viewBox="0 0 80 41" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M17.0302 25.4572C17.5338 25.4541 19.0303 25.3194 19.6642 27.4587C20.0912 28.8999 20.7714 31.2605 21.7047 34.54

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49724	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:12 UTC	646	OUT	GET /templ/steamrepl/img/sbp.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:13 UTC	240	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:12 GMT Content-Type: image/svg+xml Content-Length: 17579 Last-Modified: Wed, 22 Nov 2023 08:48:50 GMT Connection: close ETag: "655dc072-44ab" Accept-Ranges: bytes
2024-04-05 23:17:13 UTC	16144	IN	Data Raw: 3c 73 76 67 0a 20 20 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 0a 20 20 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 0a 20 20 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 0a 20 20 20 78 6d 6c 6e 73 3a 73 76 67 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 20 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 20 20 20 78 6d 6c 6e 73 3a 73 6f 64 69 70 6f 64 69 3d 22 Data Ascii: <svg xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://creativecommons.org/ns#" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" xmlns:sodipodi="
2024-04-05 23:17:13 UTC	1435	IN	Data Raw: 30 34 2c 2d 31 2e 30 33 32 20 63 20 2d 30 2e 32 34 34 2c 30 2e 32 31 37 20 2d 30 2e 35 37 32 2c 30 2e 34 20 2d 30 2e 39 36 37 2c 30 2e 35 35 20 2d 30 2e 33 39 36 2c 30 2e 31 35 20 2d 30 2e 38 34 32 2c 30 2e 32 32 34 20 2d 31 2e 33 33 2c 30 2e 32 32 34 20 2d 30 2e 37 33 32 2c 30 20 2d 31 2e 33 33 38 2c 2d 30 2e 31 39 31 20 2d 31 2e 38 31 38 2c 2d 30 2e 35 38 32 20 2d 30 2e 34 37 39 2c 2d 30 2e 33 39 31 20 2d 30 2e 37 34 2c 2d 30 2e 39 34 20 2d 30 2e 37 39 39 2c 2d 31 2e 36 34 20 68 20 35 2e 37 35 36 20 63 20 30 2e 30 35 39 2c 2d 30 2e 32 35 37 20 30 2e 30 38 34 2c 2d 30 2e 35 34 39 20 30 2e 30 38 34 2c 2d 30 2e 38 39 20 30 2c 2d 30 2e 35 30 37 20 2d 30 2e 30 39 32 2c 2d 30 2e 39 36 35 20 2d 30 2e 32 37 38 2c 2d 31 2e 33 38 31 20 61 20 33 2e 32 37 36 2c 33 Data Ascii: 04,-1.032 c -0.244,0.217 -0.572,0.4 -0.967,0.55 -0.396,0.15 -0.842,0.224 -1.33,0.224 -0.732,0 -1.338,-0.191 -1.818,-0.582 -0.479,-0.391 -0.74,-0.94 -0.799,-1.64 h 5.756 c 0.059,-0.257 0.084,-0.549 0.084,-0.89 0,-0.507 -0.092,-0.965 -0.278,-1.381 a 3.276,3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49725	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:13 UTC	652	OUT	GET /templ/steamrepl/img/payment_2.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:14 UTC	239	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:14 GMT Content-Type: image/svg+xml Content-Length: 4759 Last-Modified: Wed, 22 Nov 2023 08:48:51 GMT Connection: close ETag: "655dc073-1297" Accept-Ranges: bytes
2024-04-05 23:17:14 UTC	4759	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 31 22 20 68 65 69 67 68 74 3d 22 34 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 31 20 34 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 35 37 2e 32 34 30 38 20 31 33 2e 34 39 34 38 56 32 35 2e 33 39 30 36 43 35 37 2e 32 34 31 38 20 32 35 2e 34 33 34 31 20 35 37 2e 32 33 34 20 32 35 2e 34 37 37 34 20 35 37 2e 32 31 37 38 20 32 35 2e 35 31 37 39 43 35 37 2e 32 30 31 37 20 32 35 2e 35 35 38 33 20 35 37 2e 31 37 37 35 20 32 35 2e 35 39 35 20 35 37 2e 31 34 36 39 20 32 35 2e 36 32 35 38 43 35 37 2e 31 31 36 31 20 32 35 2e 36 35 36 36 20 35 37 2e 30 37 39 36 20 32 35 2e 36 38 30 38 Data Ascii: <svg width="81" height="41" viewBox="0 0 81 41" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M57.2408 13.4948V25.3906C57.2418 25.4341 57.234 25.4774 57.2178 25.5179C57.2017 25.5583 57.1775 25.595 57.1469 25.6258C57.1161 25.6566 57.0796 25.6808

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49726	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:13 UTC	653	OUT	GET /templ/steamrepl/img/logo_steam.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:14 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:14 GMT Content-Type: image/svg+xml Content-Length: 3684 Last-Modified: Wed, 22 Nov 2023 08:48:53 GMT Connection: close ETag: "655dc075-e64" Accept-Ranges: bytes
2024-04-05 23:17:14 UTC	3684	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49728	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:13 UTC	412	OUT	GET /templ/steamrepl/img/mira.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:14 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:14 GMT Content-Type: image/svg+xml Content-Length: 3692 Last-Modified: Wed, 22 Nov 2023 08:48:53 GMT Connection: close ETag: "655dc075-e6c" Accept-Ranges: bytes
2024-04-05 23:17:14 UTC	3692	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 22 20 68 65 69 67 68 74 3d 22 34 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 34 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 37 2e 30 33 30 32 20 32 35 2e 34 35 37 32 43 31 37 2e 35 33 33 38 20 32 35 2e 34 35 34 31 20 31 39 2e 30 33 30 33 20 32 35 2e 33 31 39 34 20 31 39 2e 36 36 34 32 20 32 37 2e 34 35 38 37 43 32 30 2e 30 39 31 32 20 32 38 2e 38 39 39 39 20 32 30 2e 37 37 31 34 20 33 31 2e 32 36 30 35 20 32 31 2e 37 30 34 37 20 33 34 2e 35 34 Data Ascii: <svg width="80" height="41" viewBox="0 0 80 41" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M17.0302 25.4572C17.5338 25.4541 19.0303 25.3194 19.6642 27.4587C20.0912 28.8999 20.7714 31.2605 21.7047 34.54

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49727	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:13 UTC	411	OUT	GET /templ/steamrepl/img/sbp.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:14 UTC	240	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:14 GMT Content-Type: image/svg+xml Content-Length: 17579 Last-Modified: Wed, 22 Nov 2023 08:48:50 GMT Connection: close ETag: "655dc072-44ab" Accept-Ranges: bytes
2024-04-05 23:17:14 UTC	16144	IN	Data Raw: 3c 73 76 67 0a 20 20 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 0a 20 20 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 0a 20 20 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 0a 20 20 20 78 6d 6c 6e 73 3a 73 76 67 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 20 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 0a 20 20 20 78 6d 6c 6e 73 3a 73 6f 64 69 70 6f 64 69 3d 22 Data Ascii: <svg xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://creativecommons.org/ns#" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" xmlns:sodipodi="
2024-04-05 23:17:14 UTC	1435	IN	Data Raw: 30 34 2c 2d 31 2e 30 33 32 20 63 20 2d 30 2e 32 34 34 2c 30 2e 32 31 37 20 2d 30 2e 35 37 32 2c 30 2e 34 20 2d 30 2e 39 36 37 2c 30 2e 35 35 20 2d 30 2e 33 39 36 2c 30 2e 31 35 20 2d 30 2e 38 34 32 2c 30 2e 32 32 34 20 2d 31 2e 33 33 2c 30 2e 32 32 34 20 2d 30 2e 37 33 32 2c 30 20 2d 31 2e 33 33 38 2c 2d 30 2e 31 39 31 20 2d 31 2e 38 31 38 2c 2d 30 2e 35 38 32 20 2d 30 2e 34 37 39 2c 2d 30 2e 33 39 31 20 2d 30 2e 37 34 2c 2d 30 2e 39 34 20 2d 30 2e 37 39 39 2c 2d 31 2e 36 34 20 68 20 35 2e 37 35 36 20 63 20 30 2e 30 35 39 2c 2d 30 2e 32 35 37 20 30 2e 30 38 34 2c 2d 30 2e 35 34 39 20 30 2e 30 38 34 2c 2d 30 2e 38 39 20 30 2c 2d 30 2e 35 30 37 20 2d 30 2e 30 39 32 2c 2d 30 2e 39 36 35 20 2d 30 2e 32 37 38 2c 2d 31 2e 33 38 31 20 61 20 33 2e 32 37 36 2c 33 Data Ascii: 04,-1.032 c -0.244,0.217 -0.572,0.4 -0.967,0.55 -0.396,0.15 -0.842,0.224 -1.33,0.224 -0.732,0 -1.338,-0.191 -1.818,-0.582 -0.479,-0.391 -0.74,-0.94 -0.799,-1.64 h 5.756 c 0.059,-0.257 0.084,-0.549 0.084,-0.89 0,-0.507 -0.092,-0.965 -0.278,-1.381 a 3.276,3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49731	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:14 UTC	657	OUT	GET /templ/steamrepl/img/tetherusdtlogo.png HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:14 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:14 GMT Content-Type: image/png Content-Length: 69679 Last-Modified: Wed, 22 Nov 2023 08:48:52 GMT Connection: close ETag: "655dc074-1102f" Accept-Ranges: bytes
2024-04-05 23:17:14 UTC	16147	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 07 d0 08 06 00 00 00 9a 38 c4 79 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 da ec dd 79 98 5d 77 5d c7 f1 26 69 ba 97 56 5a 5a a0 50 10 a8 b2 29 22 a2 80 0a 05 b1 1a e9 cc b9 67 e2 55 11 97 88 12 05 17 50 11 77 b8 2a a8 50 48 eb cc 39 67 72 b1 35 50 41 e0 9a 39 f7 dc 0e 06 42 c5 aa 20 22 62 01 59 c4 5a 94 82 ec 2d b4 34 dd d2 64 c6 df 20 fa b4 25 4d 67 26 77 39 cb eb fd 3c af 87 ff fb cf 7c ef ef f3 9c 70 d4 f2 f2 f2 51 00 00 00 00 00 00 00 d0 74 fe 23 00 00 00 00 00 00 00 80 01 1d 00 00 00 00 00 00 00 0c e8 00 00 00 00 00 00 00 60 40 07 00 00 00 00 00 00 00 03 3a 00 00 00 00 00 00 00 18 d0 01 00 00 00 00 00 00 c0 80 0e 00 00 00 00 00 00 00 06 Data Ascii: PNGIHDR8ypHYs IDATxy]w]&iVZZP)"gUPw*PH9gr5PA9B "bYZ-4d %Mg&w9<\|pQt#`@:
2024-04-05 23:17:14 UTC	16384	IN	Data Raw: 03 00 00 55 61 63 4b e9 92 57 59 32 a5 e1 79 fa fc 2b 0e 21 00 00 30 a0 4b 32 a0 03 00 00 d5 23 5f 2e 5e 60 c9 94 86 b8 33 27 b5 bd 22 5f 4e d6 3a 84 00 00 c0 80 2e c9 80 0e 00 00 54 95 c7 5a 4a a5 97 5b 34 a5 21 2c 57 49 ce 77 f8 00 00 80 01 5d 92 01 1d 00 00 a8 ca a7 d0 3f 6e d1 94 86 a8 96 52 e9 94 f4 c2 5b e6 f0 01 00 00 03 ba 24 03 3a 00 00 50 7d 72 95 64 49 6b 6b eb c9 96 4d 69 08 ca 97 93 8f 3a 78 00 00 c0 80 2e c9 80 0e 00 00 54 f3 53 e8 c9 48 cb a6 34 d8 85 70 52 7a c1 2d 74 e8 00 00 80 01 5d 92 01 1d 00 00 a8 6a 0b e2 b6 67 e0 94 06 b1 a6 ee 62 93 c3 06 00 00 0c e8 92 0c e8 00 00 40 4d 78 9f 85 53 1a c4 d2 8b 6c b6 83 06 00 00 0c e8 92 0c e8 00 00 40 2d 28 ce b0 70 4a 83 f6 dd e7 ed 7f e9 90 01 00 00 03 ba 24 03 3a 00 00 50 3b 46 76 8e fe 5f 96 Data Ascii: UacKWY2y+!0K2#_.^`3'"_N:.TZJ[4!,WIw]?nR[$:P}rdIkkMi:x.TSH4pRz-t]jgb@MxSl@-(pJ$:P;Fv_
2024-04-05 23:17:15 UTC	16384	IN	Data Raw: 03 00 4c b4 da fc a3 ea 3c a9 67 b5 f9 92 e4 d2 d0 55 79 26 67 17 63 11 00 70 b3 83 9f bb 6d fb 6d 23 f2 85 88 14 d7 c7 bc 88 00 80 99 d4 19 dd 4d fd 57 98 85 2d d5 aa f4 91 4f 57 a5 af 62 55 3a 00 50 a0 13 42 28 d0 01 00 21 e9 f9 e9 d5 e6 2c 42 58 b2 54 76 b5 ca 8a f4 ad 8c 47 00 c0 4d 1c 7b ef 2f 5c ff e5 b0 7b 4d b8 db f1 2e 2f 26 00 e0 e6 5f 50 17 5c 6a 64 36 16 02 ab d2 df ab 48 97 68 77 2c e3 12 00 28 d0 09 21 14 e8 00 80 25 f4 58 7a bc 38 4f 16 ea d5 e6 41 6e 71 4b 96 40 30 a8 17 1e b0 83 1f 00 e0 66 91 c9 ce cd 6a 17 f6 b0 f9 4a b8 db f5 1a 2f 2c 00 e0 66 71 a7 8b 64 2a 10 60 76 b6 c4 19 9c 18 97 b4 e6 d3 9c e9 05 00 14 e8 84 10 0a 74 00 c0 22 8a f6 c4 ea cf f2 b2 8e 66 f1 f9 fd dc d8 96 38 6a c5 ff ba b2 54 c6 26 00 e0 33 c2 dd 0e 87 da 7d 3d 6c Data Ascii: L<gUy&gcpmm#MW-OWbU:PB(!,BXTvGM{/\{M./&_P\jd6Hhw,(!%Xz8OAnqK@0fjJ/,fqd*`vt"f8jT&3}=l
2024-04-05 23:17:15 UTC	16384	IN	Data Raw: ba 24 03 3a 00 40 eb 8d e7 c5 7a 7c 9f 9b 6c 49 92 a4 49 ac 58 2f 2f 0a 07 b1 a3 0e a3 00 80 01 5d 92 01 1d 00 a0 55 c4 27 0b 79 1c b9 c1 96 24 49 9a 82 0a 79 7a 67 38 94 1d 71 28 05 00 0c e8 92 0c e8 00 00 53 ee 78 b0 d8 cd b5 24 49 d2 14 56 ac a7 b7 87 43 d9 21 87 53 00 c0 80 2e c9 80 0e 00 30 65 8e 45 59 e5 2e 37 d6 92 24 49 2d 31 a2 27 b7 05 6f 39 a4 02 00 06 74 49 06 74 00 80 49 77 38 ca e2 3b dc 54 4b 92 24 b5 50 fd 9b ca 0b a3 2c 39 e8 b0 0a 00 18 d0 25 19 d0 01 00 26 4d f3 87 4d b7 b9 a1 96 24 49 6a c1 8a f5 ca 82 70 58 db e7 d0 0a 00 18 d0 25 19 d0 01 00 26 56 21 4f de 28 e4 e5 5b dd 4c 4b 92 24 b5 70 3d a3 d5 f9 e1 f0 b6 d7 01 16 00 30 a0 4b 32 a0 03 00 4c 94 f8 40 ef 48 72 b3 1b 69 49 92 a4 36 a8 77 64 dd bc 70 88 db e3 10 0b 00 18 d0 25 19 d0 Data Ascii: $:@z\|lIIX//]U'y$Iyzg8q(Sx$IVC!S.0eEY.7$I-1'o9tItIw8;TK$P,9%&MM$IjpX%&V!O([LK$p=0K2L@HriI6wdp%
2024-04-05 23:17:15 UTC	4380	IN	Data Raw: 60 89 34 a6 ff 7f 7b f7 13 aa 55 99 c0 71 7c 4c 6b 4a 45 04 07 51 10 21 a4 c0 c5 04 41 b4 08 26 5c 84 28 74 df f3 9c 2b 2f d3 22 28 68 88 60 36 ce a6 76 f2 6e 66 26 30 92 ee 3d cf b9 bd 8b 26 28 5a 74 e8 9e e7 bc de 12 ee 42 ee 0c 2e dc 08 2e 44 10 04 85 18 41 84 22 9a b0 7f ea 3b dd 26 86 71 e8 8f 7f ee 9f f7 cf e7 0b 1f 70 21 82 ef 79 9e b3 f9 bd dc db dd 19 52 3c 6f bc 84 55 75 31 a4 a9 5d de 48 92 24 49 92 24 49 92 24 49 d2 2a d7 ae e2 b6 90 e2 19 23 26 ac 8a 73 93 b3 53 3b bc 89 24 49 92 24 49 92 24 49 92 a4 01 29 af 67 b6 86 14 4f 1b 33 61 25 15 67 27 67 bb db bd 81 24 49 92 24 49 92 24 49 92 a4 01 2b a4 23 9b b3 26 9e 34 6a c2 8a 38 35 31 d7 fd 8d 37 8f 24 49 92 24 49 92 24 49 92 34 a0 ed 9d 3f bc 21 a4 e2 b8 71 13 96 d5 89 fd c7 a6 36 79 e3 48 92 Data Ascii: `4{Uq\|LkJEQ!A&\(t+/"(h`6vnf&0=&(ZtB..DA";&qp!yR<oUu1]H$I$I$I*#&sS;$I$I$I)gO3a%g'g$I$I$I+#&4j8517$I$I$I4?!q6yH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49730	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:14 UTC	652	OUT	GET /templ/steamrepl/img/popup_img.png HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:14 UTC	236	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:14 GMT Content-Type: image/png Content-Length: 28903 Last-Modified: Wed, 22 Nov 2023 08:48:52 GMT Connection: close ETag: "655dc074-70e7" Accept-Ranges: bytes
2024-04-05 23:17:14 UTC	16148	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 08 00 00 00 48 08 06 00 00 00 93 3b 0d 26 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 70 7c 49 44 41 54 78 5e ed 7d 07 a0 1d 45 d5 ff 79 c9 4b ef 95 96 10 42 12 48 42 97 2a 4a ef 1d 51 9a 80 88 85 66 c1 02 62 45 14 c5 82 8a 9f 82 5d be cf fe 29 d2 41 7a ef 45 7a ef a4 90 04 d2 7b 7f ff f3 3b 67 ce ec 99 d9 bd f7 dd fb 5e 10 fc fe fe de 9b 9d d3 e7 cc ec de 9d d9 bd 7b ef 6d 19 33 66 9b 36 02 b0 6d 11 4a a1 52 96 b5 14 64 a8 2b c1 76 09 d8 a9 64 9f 08 1c 63 a4 e5 d0 c6 1b a9 03 1f a0 2c 74 9a 91 d0 1e 89 7d a6 63 14 6a c4 30 da a4 ca 25 10 51 2e 0f 7c ac 40 68 3e 02 c9 3d f0 a2 02 af ac 23 Data Ascii: PNGIHDRH;&sRGBgAMAapHYs+p\|IDATx^}EyKBHB*JQfbE])AzEz{;g^{m3f6mJRd+vdc,t}cj0%Q.\|@h>=#
2024-04-05 23:17:14 UTC	12755	IN	Data Raw: a6 42 23 8c e8 05 11 97 fe fd fa d0 e1 ef db 8f ba 72 1f 5e 9f 32 95 7e f1 9b df cb db 2d 5d e5 ae 8a c2 dd 38 cf 00 79 b8 ea 8e 1d f5 b6 c1 93 0d 34 03 dd 16 75 61 5b 96 30 c0 98 c2 90 18 30 82 5e 2a 99 f0 d8 40 6c 82 61 b4 07 61 8c d6 76 fc c2 bb 68 3f 6f 30 c0 5c 6b 01 6e c1 75 c8 a0 01 b4 eb ce db f1 44 d8 42 2b 96 2d a3 8b fe fb 4f f2 29 1b 4c bc 5d 5b 7b a8 11 c6 8b ed 63 58 a6 c5 3d c8 e6 f0 31 fa 8d ef fc 2c 7e cc 72 fb ed df 45 23 d6 c2 f1 11 1a 09 c0 a4 39 9c 17 10 3b 6c b7 a5 f0 ab 79 71 fd c3 f3 7f 26 1f a9 ed d5 6f 08 af 2d c3 dd 17 b4 e7 fb e0 69 c9 a5 0b 75 eb d6 9b 7a f6 1b 46 5d 5a f5 63 9e 8a 2a ca a0 12 d9 06 65 9a 9d e6 f3 9d ef ff 17 cd 9a 39 5b f8 5d 77 7f 2f 1d 7f c4 01 d4 95 c7 a6 16 f2 18 26 29 cb ab 61 76 d2 02 18 2b 80 af 5d 89 Data Ascii: B#r^2~-]8y4ua[00^@laavh?o0\knuDB+-O)L][{cX=1,~rE#9;lyq&o-iuzF]Zce9[]w/&)av+]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49729	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:14 UTC	681	OUT	GET /templ/steamrepl/css/icon_9.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steamfiller.ru/templ/steamrepl/css/main.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:14 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:14 GMT Content-Type: image/svg+xml Content-Length: 541 Last-Modified: Wed, 22 Nov 2023 08:48:42 GMT Connection: close ETag: "655dc06a-21d" Accept-Ranges: bytes
2024-04-05 23:17:14 UTC	541	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 22 20 68 65 69 67 68 74 3d 22 31 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 31 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 35 2e 33 36 30 38 35 20 31 30 2e 36 38 38 36 43 35 2e 32 32 37 32 31 20 31 30 2e 38 32 33 20 35 2e 30 34 34 38 39 20 31 30 2e 38 39 38 20 34 2e 38 35 35 34 39 20 31 30 2e 38 39 38 43 34 2e 36 36 36 30 39 20 31 30 2e 38 39 38 20 34 2e 34 38 33 37 36 20 31 30 2e 38 32 33 20 34 2e 33 35 30 31 32 20 31 30 2e 36 38 38 36 4c 30 2e 33 31 34 31 33 36 20 36 2e 36 35 31 39 35 43 2d 30 2e 31 30 34 37 31 32 20 36 2e 32 33 33 31 20 2d 30 2e 31 30 34 37 31 Data Ascii: <svg width="14" height="11" viewBox="0 0 14 11" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M5.36085 10.6886C5.22721 10.823 5.04489 10.898 4.85549 10.898C4.66609 10.898 4.48376 10.823 4.35012 10.6886L0.314136 6.65195C-0.104712 6.2331 -0.10471

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49732	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:14 UTC	524	OUT	GET /metrika/tag.js HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:14 UTC	1328	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 214711 Content-Type: application/javascript Date: Fri, 05 Apr 2024 23:17:14 GMT ETag: "660fb0d0-346b7" Expires: Sat, 06 Apr 2024 00:17:14 GMT Last-Modified: Fri, 05 Apr 2024 08:05:36 GMT Set-Cookie: _yasc=F7bV1nfU6IPCbIwK8dwhxae6nsF+J6p6dthLsjYFHh3XF4mid4ko6zqem4zXm4pcUg==; domain=.yandex.ru; path=/; expires=Mon, 03 Apr 2034 23:17:14 GMT; secure Set-Cookie: i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; Expires=Sun, 05-Apr-2026 23:17:14 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=2756805351712359034; Expires=Sun, 05-Apr-2026 23:17:14 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None Set-Cookie: yashr=4434275431712359034; Path=/; Domain=.yandex.ru; Expires=Sat, 05 Apr 2025 23:17:14 GMT; SameSite=None; Secure; HttpOnly Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2024-04-05 23:17:14 UTC	6608	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 66 28 61 2c 63 2c 62 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 41 28 77 69 6e 64 6f 77 2c 22 63 2e 69 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 45 29 7b 28 45 3d 64 66 28 6c 2c 6d 2c 22 22 2c 45 29 28 6c 2c 6d 29 29 26 26 28 56 28 45 2e 74 68 65 6e 29 3f 45 2e 74 68 65 6e 28 67 29 3a 67 28 45 29 29 3b 72 65 74 75 72 6e 20 45 7d 66 75 6e 63 74 69 6f 6e 20 67 28 45 29 7b 45 26 26 28 56 28 45 29 3f 70 2e 70 75 73 68 28 45 29 3a 6f 61 28 45 29 26 26 78 28 66 75 6e 63 74 69 6f 6e 28 4e 29 7b 76 61 72 20 4b 3d 4e 5b 30 5d 3b 4e 3d 4e 5b 31 5d 3b 56 28 4e 29 26 26 28 22 75 22 3d 3d 3d 4b Data Ascii: (function(){try{(function(){function cf(a,c,b,d){var e=this;return A(window,"c.i",function(){function f(E){(E=df(l,m,"",E)(l,m))&&(V(E.then)?E.then(g):g(E));return E}function g(E){E&&(V(E)?p.push(E):oa(E)&&x(function(N){var K=N[0];N=N[1];V(N)&&("u"===K
2024-04-05 23:17:15 UTC	8168	IN	Data Raw: 6d 28 61 2c 63 2c 62 29 7b 76 61 72 20 64 3d 6c 65 28 61 2c 62 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 4a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 66 3b 0a 69 66 28 64 29 7b 76 61 72 20 67 3d 64 2e 59 2c 68 3d 77 28 76 28 22 34 22 2c 63 29 2c 76 28 6e 75 6c 6c 2c 65 29 29 2c 6b 3d 52 28 61 2c 68 2c 32 45 33 2c 22 67 64 70 2e 66 2e 74 22 29 3b 64 2e 51 66 28 28 66 3d 7b 7d 2c 66 2e 74 79 70 65 3d 22 69 73 59 61 6e 64 65 78 22 2c 66 29 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 6c 2e 69 73 59 61 6e 64 65 78 3f 28 63 28 22 35 22 29 2c 67 2e 46 28 74 68 2c 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 65 28 7b 76 61 6c 75 65 3a 75 68 28 6d 5b 31 5d 2e 74 79 70 65 29 7d 29 7d 29 29 3a 28 63 28 22 36 22 29 2c 65 28 6e 75 6c 6c 29 29 7d 29 5b 22 63 Data Ascii: m(a,c,b){var d=le(a,b);return new J(function(e){var f;if(d){var g=d.Y,h=w(v("4",c),v(null,e)),k=R(a,h,2E3,"gdp.f.t");d.Qf((f={},f.type="isYandex",f)).then(function(l){l.isYandex?(c("5"),g.F(th,function(m){e({value:uh(m[1].type)})})):(c("6"),e(null))})["c
2024-04-05 23:17:15 UTC	2498	IN	Data Raw: 64 67 3a 68 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 44 6e 28 29 7b 76 61 72 20 61 3d 0a 4f 28 66 75 6e 63 74 69 6f 6e 28 63 2c 62 29 7b 63 5b 62 5b 30 5d 5d 3d 7b 65 64 3a 30 2c 42 67 3a 31 2f 62 5b 31 5d 7d 3b 72 65 74 75 72 6e 20 63 7d 2c 7b 7d 2c 5b 5b 22 62 6c 75 72 22 2c 2e 30 30 33 34 5d 2c 5b 22 63 68 61 6e 67 65 22 2c 2e 30 31 35 35 5d 2c 5b 22 63 6c 69 63 6b 22 2c 2e 30 31 30 39 35 5d 2c 5b 22 64 65 76 69 63 65 52 6f 74 61 74 69 6f 6e 22 2c 32 45 2d 34 5d 2c 5b 22 66 6f 63 75 73 22 2c 2e 30 30 36 31 5d 2c 5b 22 6d 6f 75 73 65 6d 6f 76 65 22 2c 2e 35 31 33 32 5d 2c 5b 22 73 63 72 6f 6c 6c 22 2c 2e 34 37 39 35 5d 2c 5b 22 73 65 6c 65 63 74 69 6f 6e 22 2c 2e 30 31 30 39 5d 2c 5b 22 74 6f 75 63 68 63 61 6e 63 65 6c 22 2c 32 45 2d 34 5d 2c 5b 22 74 6f 75 Data Ascii: dg:h})}function Dn(){var a=O(function(c,b){c[b[0]]={ed:0,Bg:1/b[1]};return c},{},[["blur",.0034],["change",.0155],["click",.01095],["deviceRotation",2E-4],["focus",.0061],["mousemove",.5132],["scroll",.4795],["selection",.0109],["touchcancel",2E-4],["tou
2024-04-05 23:17:15 UTC	5670	IN	Data Raw: 3d 4a 61 28 63 29 29 3b 76 61 72 20 66 3d 7a 28 4f 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 68 5b 6b 2e 6e 61 6d 65 5d 3d 6b 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 68 7d 2c 7b 7d 2c 47 61 28 63 2e 61 74 74 72 69 62 75 74 65 73 29 29 2c 64 29 3b 7a 28 66 2c 4a 6e 28 63 2c 0a 65 2c 66 29 29 3b 76 61 72 20 67 3d 28 64 3d 7a 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 6b 5b 30 5d 2c 6d 3d 71 65 28 61 2c 63 2c 6c 2c 6b 5b 31 5d 2c 62 2c 65 29 2c 70 3d 6d 2e 76 61 6c 75 65 3b 66 61 28 70 29 3f 64 65 6c 65 74 65 20 66 5b 6c 5d 3a 66 5b 6c 5d 3d 70 3b 72 65 74 75 72 6e 20 68 7c 7c 6d 2e 6d 62 7d 2c 21 31 2c 4d 61 28 66 29 29 29 26 26 6e 64 28 63 29 3b 67 26 26 28 66 2e 77 69 64 74 68 3d 67 2e 77 69 64 74 68 2c 66 2e 68 65 69 67 68 74 Data Ascii: =Ja(c));var f=z(O(function(h,k){h[k.name]=k.value;return h},{},Ga(c.attributes)),d);z(f,Jn(c,e,f));var g=(d=zb(function(h,k){var l=k[0],m=qe(a,c,l,k[1],b,e),p=m.value;fa(p)?delete f[l]:f[l]=p;return h\|\|m.mb},!1,Ma(f)))&&nd(c);g&&(f.width=g.width,f.height
2024-04-05 23:17:15 UTC	8168	IN	Data Raw: 68 29 2c 6c 26 32 26 26 78 63 28 64 2c 0a 59 28 68 5b 31 5d 29 29 2c 78 63 28 64 2c 68 29 3b 65 6c 73 65 20 69 66 28 67 26 34 29 66 6f 72 28 67 3d 68 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 67 3b 29 7b 76 61 72 20 6d 3d 6b 28 68 5b 67 5d 29 3b 6d 2e 70 75 73 68 28 5b 30 2c 30 2c 49 66 5d 29 3b 6d 2e 70 75 73 68 28 5b 30 2c 59 28 6c 29 2c 78 63 5d 29 3b 6d 2e 75 6e 73 68 69 66 74 28 5b 30 2c 30 2c 4a 66 5d 29 3b 73 61 28 66 2c 6d 29 3b 2d 2d 67 7d 65 6c 73 65 20 69 66 28 67 26 32 29 7b 6b 3d 65 5b 32 5d 3b 76 61 72 20 70 3d 65 5b 33 5d 2c 71 3d 65 5b 34 5d 2c 72 3d 65 5b 35 5d 2c 74 3d 63 61 28 68 29 3b 66 6f 72 28 67 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 67 3b 29 6d 3d 74 5b 67 5d 2c 6d 3d 5b 5b 30 2c 30 2c 4a 66 5d 2c 5b 71 2c 68 5b 6d 5d 2c 72 5d Data Ascii: h),l&2&&xc(d,Y(h[1])),xc(d,h);else if(g&4)for(g=h.length-1;0<=g;){var m=k(h[g]);m.push([0,0,If]);m.push([0,Y(l),xc]);m.unshift([0,0,Jf]);sa(f,m);--g}else if(g&2){k=e[2];var p=e[3],q=e[4],r=e[5],t=ca(h);for(g=t.length-1;0<=g;)m=t[g],m=[[0,0,Jf],[q,h[m],r]
2024-04-05 23:17:15 UTC	8168	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 69 70 28 61 2c 63 29 7b 69 66 28 6e 28 61 2c 22 64 69 73 61 62 6c 65 59 61 43 6f 75 6e 74 65 72 22 2b 63 2e 69 64 29 7c 7c 6e 28 61 2c 22 59 61 2e 64 69 73 61 62 6c 65 4d 65 74 72 69 63 61 22 29 29 7b 76 61 72 20 62 3d 4d 28 63 29 3b 64 65 6c 65 74 65 20 48 28 61 29 2e 43 28 22 63 6f 75 6e 74 65 72 73 22 2c 7b 7d 29 5b 62 5d 3b 59 61 28 51 61 28 22 6f 6f 2e 65 22 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6a 70 28 61 29 7b 69 66 28 75 65 28 61 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 63 3d 6b 70 28 61 29 2c 62 3d 63 2e 78 66 3b 58 28 62 29 26 26 28 63 2e 78 66 3d 6e 75 6c 6c 2c 6c 70 28 61 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 63 2e 78 66 3d 64 7d 29 29 3b 72 65 74 75 72 6e 20 62 3f 31 3a 6e 75 6c 6c Data Ascii: function ip(a,c){if(n(a,"disableYaCounter"+c.id)\|\|n(a,"Ya.disableMetrica")){var b=M(c);delete H(a).C("counters",{})[b];Ya(Qa("oo.e"))}}function jp(a){if(ue(a))return null;var c=kp(a),b=c.xf;X(b)&&(c.xf=null,lp(a).then(function(d){c.xf=d}));return b?1:null
2024-04-05 23:17:15 UTC	8168	IN	Data Raw: 65 49 66 72 61 6d 65 43 6f 6e 74 61 69 6e 65 72 3d 66 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 43 70 28 61 29 7b 76 61 72 20 63 2c 62 3d 45 69 28 61 29 3b 61 3d 48 28 61 29 2e 43 28 22 67 65 74 43 6f 75 6e 74 65 72 73 22 2c 41 64 29 28 29 3b 61 3d 43 28 51 28 22 69 64 22 29 2c 61 29 3b 72 65 74 75 72 6e 20 63 3d 7b 69 64 3a 62 7d 2c 63 2e 63 6f 75 6e 74 65 72 46 6f 75 6e 64 3d 21 21 62 26 26 47 28 62 2c 61 29 2c 63 7d 66 75 6e 63 74 69 6f 6e 20 42 69 28 61 2c 0a 63 2c 62 29 7b 76 61 72 20 64 3b 63 3d 46 69 28 61 2c 63 2c 7b 62 67 3a 46 70 2c 57 68 3a 28 64 3d 7b 7d 2c 64 2e 68 72 65 66 3d 21 30 2c 64 29 7d 29 3b 62 3d 42 61 28 43 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 22 2a 22 3d 3d 3d 66 3f 66 3a 53 62 28 66 29 7d 2c 62 29 29 3b 76 61 72 Data Ascii: eIframeContainer=f)}}}function Cp(a){var c,b=Ei(a);a=H(a).C("getCounters",Ad)();a=C(Q("id"),a);return c={id:b},c.counterFound=!!b&&G(b,a),c}function Bi(a,c,b){var d;c=Fi(a,c,{bg:Fp,Wh:(d={},d.href=!0,d)});b=Ba(C(function(f){return"*"===f?f:Sb(f)},b));var
2024-04-05 23:17:15 UTC	8168	IN	Data Raw: 55 28 61 29 2e 68 72 65 66 2c 64 29 7d 3b 64 3d 22 4c 69 6e 6b 22 3b 62 2e 43 63 3f 64 3d 62 2e 6c 62 3f 22 45 78 74 20 6c 69 6e 6b 20 2d 20 46 69 6c 65 22 3a 22 46 69 6c 65 22 3a 62 2e 6c 62 26 26 28 64 3d 22 45 78 74 20 6c 69 6e 6b 22 29 3b 73 62 28 61 2c 28 65 3d 7b 7d 2c 65 2e 63 6f 75 6e 74 65 72 4b 65 79 3d 4d 28 63 29 2c 0a 65 2e 6e 61 6d 65 3d 22 65 76 65 6e 74 22 2c 65 2e 64 61 74 61 3d 28 66 3d 7b 7d 2c 66 2e 73 63 68 65 6d 61 3d 22 4c 69 6e 6b 20 63 6c 69 63 6b 22 2c 66 2e 6e 61 6d 65 3d 28 62 2e 6c 62 3f 22 65 78 74 65 72 6e 61 6c 22 3a 22 69 6e 74 65 72 6e 61 6c 22 29 2b 22 20 75 72 6c 3a 20 22 2b 62 2e 75 72 6c 2c 66 29 2c 65 29 29 3b 63 3d 62 2e 73 65 6e 64 65 72 28 68 2c 63 29 2e 74 68 65 6e 28 68 63 28 61 2c 63 2c 22 6c 63 6c 22 2c 28 67 Data Ascii: U(a).href,d)};d="Link";b.Cc?d=b.lb?"Ext link - File":"File":b.lb&&(d="Ext link");sb(a,(e={},e.counterKey=M(c),e.name="event",e.data=(f={},f.schema="Link click",f.name=(b.lb?"external":"internal")+" url: "+b.url,f),e));c=b.sender(h,c).then(hc(a,c,"lcl",(g
2024-04-05 23:17:15 UTC	8168	IN	Data Raw: 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 77 71 28 61 2c 63 2c 62 29 7b 76 61 72 20 64 2c 65 3d 6e 65 77 20 61 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 66 3d 62 2e 62 61 2c 67 3d 7a 28 62 2e 79 62 3f 28 64 3d 7b 7d 2c 64 2e 77 6d 6f 64 65 3d 22 37 22 2c 64 29 3a 7b 7d 2c 0a 62 2e 58 61 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 4a 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 65 2e 6f 70 65 6e 28 62 2e 59 63 7c 7c 22 47 45 54 22 2c 63 2b 22 3f 22 2b 43 63 28 67 29 2c 21 30 29 3b 65 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 21 31 21 3d 3d 62 2e 45 65 3b 62 2e 4f 61 26 26 28 65 2e 74 69 6d 65 6f 75 74 3d 62 2e 4f 61 29 3b 78 71 28 4d 61 2c 55 63 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 65 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6d 5b 30 Data Ascii: :!1}function wq(a,c,b){var d,e=new a.XMLHttpRequest,f=b.ba,g=z(b.yb?(d={},d.wmode="7",d):{},b.Xa);return new J(function(h,k){e.open(b.Yc\|\|"GET",c+"?"+Cc(g),!0);e.withCredentials=!1!==b.Ee;b.Oa&&(e.timeout=b.Oa);xq(Ma,Uc(function(m){e.setRequestHeader(m[0
2024-04-05 23:17:15 UTC	6518	IN	Data Raw: 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 71 28 61 2c 63 2c 62 29 7b 62 3d 44 63 28 22 64 69 73 70 61 74 63 68 45 76 65 6e 74 22 2c 0a 62 7c 7c 61 2e 64 6f 63 75 6d 65 6e 74 29 3b 76 61 72 20 64 3d 6e 75 6c 6c 2c 65 3d 6e 28 61 2c 22 45 76 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 69 66 28 65 26 26 28 4e 61 28 22 28 45 76 65 6e 74 7c 4f 62 6a 65 63 74 7c 63 6f 6e 73 74 72 75 63 74 6f 72 29 22 2c 65 29 7c 7c 66 67 28 61 29 26 26 22 5b 6f 62 6a 65 63 74 20 45 76 65 6e 74 5d 22 3d 3d 3d 22 22 2b 65 29 29 74 72 79 7b 64 3d 6e 65 77 20 61 2e 45 76 65 6e 74 28 63 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 28 61 3d 44 63 28 22 63 72 65 61 74 65 45 76 65 6e 74 22 2c 6e 28 61 2c 22 64 6f 63 75 6d 65 6e 74 22 29 29 29 26 26 56 Data Ascii: ))}function Oq(a,c,b){b=Dc("dispatchEvent",b\|\|a.document);var d=null,e=n(a,"Event.prototype.constructor");if(e&&(Na("(Event\|Object\|constructor)",e)\|\|fg(a)&&"[object Event]"===""+e))try{d=new a.Event(c)}catch(f){if((a=Dc("createEvent",n(a,"document")))&&V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49733	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:14 UTC	685	OUT	GET /templ/steamrepl/css/icon_close.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steamfiller.ru/templ/steamrepl/css/main.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:14 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:14 GMT Content-Type: image/svg+xml Content-Length: 869 Last-Modified: Wed, 22 Nov 2023 08:48:39 GMT Connection: close ETag: "655dc067-365" Accept-Ranges: bytes
2024-04-05 23:17:14 UTC	869	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 30 39 31 31 20 30 2e 36 33 36 30 33 39 4c 37 2e 32 32 37 33 20 34 2e 34 39 39 38 37 43 37 2e 31 30 31 37 38 20 34 2e 36 32 35 33 39 20 36 2e 38 39 38 32 35 20 34 2e 36 32 35 33 39 20 36 2e 37 37 32 37 33 20 34 2e 34 39 39 38 37 4c 32 2e 39 30 38 39 20 30 2e 36 33 36 30 33 39 43 32 2e 32 38 31 33 31 20 30 2e 30 30 38 34 35 34 39 38 20 31 2e 32 36 33 36 34 20 30 2e 30 30 38 34 35 34 39 38 20 30 2e 36 33 36 30 35 36 20 30 2e 36 33 36 30 Data Ascii: <svg width="14" height="14" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M11.0911 0.636039L7.2273 4.49987C7.10178 4.62539 6.89825 4.62539 6.77273 4.49987L2.9089 0.636039C2.28131 0.00845498 1.26364 0.00845498 0.636056 0.6360

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49735	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:15 UTC	417	OUT	GET /templ/steamrepl/img/payment_2.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:15 UTC	239	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:15 GMT Content-Type: image/svg+xml Content-Length: 4759 Last-Modified: Wed, 22 Nov 2023 08:48:51 GMT Connection: close ETag: "655dc073-1297" Accept-Ranges: bytes
2024-04-05 23:17:15 UTC	4759	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 38 31 22 20 68 65 69 67 68 74 3d 22 34 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 31 20 34 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 35 37 2e 32 34 30 38 20 31 33 2e 34 39 34 38 56 32 35 2e 33 39 30 36 43 35 37 2e 32 34 31 38 20 32 35 2e 34 33 34 31 20 35 37 2e 32 33 34 20 32 35 2e 34 37 37 34 20 35 37 2e 32 31 37 38 20 32 35 2e 35 31 37 39 43 35 37 2e 32 30 31 37 20 32 35 2e 35 35 38 33 20 35 37 2e 31 37 37 35 20 32 35 2e 35 39 35 20 35 37 2e 31 34 36 39 20 32 35 2e 36 32 35 38 43 35 37 2e 31 31 36 31 20 32 35 2e 36 35 36 36 20 35 37 2e 30 37 39 36 20 32 35 2e 36 38 30 38 Data Ascii: <svg width="81" height="41" viewBox="0 0 81 41" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M57.2408 13.4948V25.3906C57.2418 25.4341 57.234 25.4774 57.2178 25.5179C57.2017 25.5583 57.1775 25.595 57.1469 25.6258C57.1161 25.6566 57.0796 25.6808

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49736	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:15 UTC	418	OUT	GET /templ/steamrepl/img/logo_steam.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:15 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:15 GMT Content-Type: image/svg+xml Content-Length: 3684 Last-Modified: Wed, 22 Nov 2023 08:48:53 GMT Connection: close ETag: "655dc075-e64" Accept-Ranges: bytes
2024-04-05 23:17:15 UTC	3684	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49738	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:18 UTC	653	OUT	GET /templ/steamrepl/css/Rubikbold.woff2 HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://steamfiller.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://steamfiller.ru/templ/steamrepl/css/main.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:18 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:18 GMT Content-Type: font/woff2 Content-Length: 19668 Last-Modified: Wed, 22 Nov 2023 08:48:45 GMT Connection: close ETag: "655dc06d-4cd4" Accept-Ranges: bytes
2024-04-05 23:17:18 UTC	16147	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4c d4 00 10 00 00 00 00 d9 18 00 00 4c 72 00 01 00 83 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 87 04 1c 74 06 60 00 82 40 08 81 4e 09 97 62 11 08 0a 81 ec 30 81 c9 5a 01 36 02 24 03 86 44 0b 83 24 00 04 20 05 87 20 07 8b 3b 0c 81 47 1b 09 c5 27 d0 db f6 a0 c2 ed f0 80 74 7f 4f 54 20 37 8f 96 bb 95 44 80 85 fd 4c 44 1e 07 40 db e1 d9 ff ff 9f 97 74 8c e1 40 1b 80 56 65 f9 ff ef 82 46 d2 dd 35 06 b2 75 0a 47 e4 0a 87 73 eb 29 32 d0 e1 2b 7c a7 38 b0 db d9 34 77 53 49 74 e2 f0 44 ba a4 61 68 34 f5 52 a9 67 ae b2 8b a6 dc 6d 01 bd 42 ea 63 1b b8 a5 51 70 e2 0c 69 92 7a de ed d6 4c bc ea 5c 01 fa 5b b0 c5 a7 c9 6f 6e da 61 16 87 bc f1 eb 4a ab f0 56 2f 9c 68 e8 e6 20 38 61 63 25 f6 89 2d 10 62 3a 9e 57 48 Data Ascii: wOF2LLrt`@Nb0Z6$D$ ;G'tOT 7DLD@t@VeF5uGs)2+\|84wSItDah4RgmBcQpizL\[onaJV/h 8ac%-b:WH
2024-04-05 23:17:18 UTC	3521	IN	Data Raw: d8 3f b8 b7 bf 76 b8 36 9b 24 47 31 00 7b c2 83 2f 37 94 ce fd 2b 48 4f ed 6b 49 1e 42 f8 86 69 c3 fa 3c 3f 4e 82 76 05 f0 73 10 f6 e7 e3 6c 2a 89 74 08 77 93 5d b0 ad 8c 52 88 10 1b dc 50 21 c3 0b 84 a3 70 5d 43 32 8e 1c d0 3c a2 01 25 0e bb c0 9f 39 64 17 8d 37 81 2c 13 02 cf 38 6f 58 82 ff 21 47 e7 b5 d3 69 cc bb 05 e1 56 f6 7b ef b9 45 d4 0c be 5b df e4 b0 38 e7 3a 83 46 42 4e 6d 42 e8 ba ba d3 49 9c 44 09 c7 94 42 91 8a cf ef 40 67 64 76 ee 97 d5 b7 69 07 cd c4 16 bb 30 11 ea c4 b4 65 84 00 78 31 6d 60 9e 61 7b 50 44 6d 53 a9 a8 87 f9 85 be ea 84 80 ab 2b eb b6 6f f7 05 87 ba e2 0d 91 bf f9 f5 2f 7f f1 73 9f c9 d7 b3 22 69 f3 14 f3 fc 55 9f 0e 22 b1 8d c0 1a c0 57 4b 56 44 05 6d 67 d5 01 80 db 40 d4 88 28 a4 f2 4a 32 aa c1 01 db 62 8b 2b 73 8e 48 2b Data Ascii: ?v6$G1{/7+HOkIBi<?Nvsl*tw]RP!p]C2<%9d7,8oX!GiV{E[8:FBNmBIDB@gdvi0ex1m`a{PDmS+o/s"iU"WKVDmg@(J2b+sH+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49737	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:18 UTC	655	OUT	GET /templ/steamrepl/css/Rubikmedium.woff2 HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://steamfiller.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://steamfiller.ru/templ/steamrepl/css/main.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:18 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:18 GMT Content-Type: font/woff2 Content-Length: 19968 Last-Modified: Wed, 22 Nov 2023 08:48:43 GMT Connection: close ETag: "655dc06b-4e00" Accept-Ranges: bytes
2024-04-05 23:17:18 UTC	16147	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4e 00 00 10 00 00 00 00 da 6c 00 00 4d a0 00 01 00 83 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 85 70 1c 74 06 60 00 82 40 08 81 52 09 97 62 11 08 0a 81 ef 5c 81 cd 49 01 36 02 24 03 86 44 0b 83 24 00 04 20 05 87 56 07 8b 3b 0c 81 47 1b 9e c6 27 d0 dd 76 72 2a b7 03 93 cf fb ef 4c a3 11 b1 db 01 59 f7 fd d3 66 22 72 3b 00 15 95 9e 98 fd ff ff 59 49 65 8c ed 13 37 0e a1 49 58 15 97 60 08 52 85 ac 6c 48 d4 a8 26 38 74 b4 8a fa 18 07 ce da 9e 57 87 e7 68 92 30 73 be 68 83 d9 59 13 0a 5a 10 13 92 a8 c0 c1 d7 1d cf d0 f7 ab 73 21 e3 f1 36 f4 08 19 1d c5 27 12 8b dc 21 cb 38 ae d2 da c3 45 45 2e 24 93 c3 88 86 d9 28 77 09 79 85 67 9a 48 12 91 98 a2 88 06 cc 0e 54 43 78 86 8f 4d be 9b 15 7e df ba cd 5b a4 ff Data Ascii: wOF2NlMpt`@Rb\I6$D$ V;G'vr*LYf"r;YIe7IX`RlH&8tWh0shYZs!6'!8EE.$(wygHTCxM~[
2024-04-05 23:17:18 UTC	3821	IN	Data Raw: 38 d3 a0 64 41 19 42 6f fc f8 15 10 e3 29 61 0f ae 29 b9 55 8c 46 d8 78 d8 9c fe 1f 09 22 b8 24 62 bd 7e 42 b8 3a e4 fa fc cf f5 dd 7e 55 24 a1 bf e2 46 2f d4 fe fa 8a 2a e5 ea 20 d0 60 e1 cd 0f 74 da a0 64 96 df 14 90 f8 7d 76 92 5f 5a ba 11 ce 61 6e a1 88 ec da 41 99 47 45 4f e7 7e 8e 88 89 d8 55 4e 9b 89 e3 55 93 41 e6 78 a0 0b dc 0c 7a c6 2f 7d 82 a4 cf bf fa 9c dd e0 b7 db f9 79 dc 21 43 b0 6f bf 5f b9 0c ff f9 f7 fe d4 c9 e3 87 07 9b 4a 2d 02 27 f0 8b 7e 56 a5 c6 69 e0 16 da eb 6a f2 79 41 24 a8 27 19 61 90 87 38 79 4f 99 c3 12 4d ee 38 44 c7 40 24 17 2d 0e af f2 46 38 d6 10 37 13 e3 70 64 ad fb 38 83 c1 c3 e3 33 67 d9 50 cf 62 74 db d3 d1 28 c2 bc 02 ed 3f 6f 0f 0f c6 49 b0 b7 80 ce 35 fc b5 5a 46 dd 4e e2 38 ff dc bd 7c fb 0f c0 16 0a a5 df 00 7f Data Ascii: 8dABo)a)UFx"$b~B:~U$F/* `td}v_ZanAGEO~UNUAxz/}y!Co_J-'~VijyA$'a8yOM8D@$-F87pd83gPbt(?oI5ZFN8\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49740	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:18 UTC	649	OUT	GET /templ/steamrepl/css/Rubik.woff2 HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://steamfiller.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://steamfiller.ru/templ/steamrepl/css/main.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:18 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:18 GMT Content-Type: font/woff2 Content-Length: 19748 Last-Modified: Wed, 22 Nov 2023 08:48:46 GMT Connection: close ETag: "655dc06e-4d24" Accept-Ranges: bytes
2024-04-05 23:17:18 UTC	16147	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4d 24 00 10 00 00 00 00 da 70 00 00 4c c3 00 01 00 83 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 88 02 1c 74 06 60 00 82 40 08 81 56 09 97 62 11 08 0a 81 ee 00 81 cb 37 01 36 02 24 03 86 44 0b 83 24 00 04 20 05 87 1e 07 8b 3b 0c 81 47 1b 6a c6 17 d0 db 76 45 70 3b c0 1b a9 eb 61 46 62 74 3b 04 51 e9 79 a3 c9 38 36 01 1b 07 23 cc f3 50 f6 ff ff 69 49 65 8c 6d a7 f6 a3 1c 11 cc aa 6c 89 5d 14 10 ea b6 a3 52 25 a1 29 11 9d 14 a4 63 44 e8 ec 0d 1e 95 86 54 eb 3c cd c5 9d cf 96 b8 28 17 64 09 bb e1 ae f2 c3 6c 78 e9 86 97 d4 87 6d 32 55 b0 d9 89 b7 8c fa bc 6b c6 18 83 e2 34 42 92 e1 92 ac 4f 8b b0 d2 9d 13 77 20 d0 44 df 78 8b f5 e9 f0 0e f7 49 4a 9a ec 2c d6 4d 42 5a 6d d0 2c 5c e6 cf 31 bd 38 f4 25 91 c4 Data Ascii: wOF2M$pLt`@Vb76$D$ ;GjvEp;aFbt;Qy86#PiIeml]R%)cDT<(dlxm2Uk4BOw DxIJ,MBZm,\18%
2024-04-05 23:17:18 UTC	3601	IN	Data Raw: 7a dc d6 38 6a a4 06 fb d8 e3 16 83 a1 20 d3 84 bc 86 3a 05 c6 4b 34 ad 88 d2 50 ce 9b 4a 7e 19 6f d8 06 8e 2f c1 51 49 77 03 06 f1 ee ea da 65 4e 8e 15 e9 66 da e6 60 03 c5 38 b6 d5 a3 9c ea e4 c4 91 43 55 03 40 cb 81 4f 68 2e 32 71 a4 dc d1 f0 e2 d9 70 fd e8 7a 99 e3 93 7a 66 76 33 f8 ff 4d 7d 62 b2 81 af c3 f7 cd e2 eb 3f 10 10 53 ae fd 05 c1 5f e3 ef 51 0b 9a 9f 1f 1c 4c b0 59 a6 52 88 10 db 25 7a 5b c3 19 c0 3e 7b 1e c9 dd cc c2 2c 59 b2 cc ea 96 15 69 54 5e 4b 16 c9 ae 4b f3 46 ed 34 f8 ba dc ae ea eb bb 13 c6 fb 05 e1 56 b7 f7 be 0f f2 c8 1e cc 2c 6a 52 74 f7 3f 93 06 32 12 72 5a 52 22 54 46 97 2a f4 5d fd ae d1 49 64 47 47 2a 8a 34 23 a5 62 41 91 8a b3 0e 0e f0 18 32 13 eb b1 eb e4 6b d1 d1 03 73 8f b5 1f 47 4a c1 d4 97 f5 97 8f 9d 41 7c 48 f1 0d Data Ascii: z8j :K4PJ~o/QIweNf`8CU@Oh.2qpzzfv3M}b?S_QLYR%z[>{,YiT^KKF4V,jRt?2rZR"TF]IdGG4#bA2ksGJA\|H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49739	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:18 UTC	654	OUT	GET /templ/steamrepl/css/Rubikblack.woff2 HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://steamfiller.ru sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://steamfiller.ru/templ/steamrepl/css/main.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l
2024-04-05 23:17:18 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:18 GMT Content-Type: font/woff2 Content-Length: 20768 Last-Modified: Wed, 22 Nov 2023 08:48:41 GMT Connection: close ETag: "655dc069-5120" Accept-Ranges: bytes
2024-04-05 23:17:18 UTC	16147	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 51 20 00 10 00 00 00 00 dc f8 00 00 50 c0 00 01 00 83 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 86 42 1c 74 06 60 00 82 40 08 81 54 09 97 62 11 08 0a 81 f4 1c 81 d2 5e 01 36 02 24 03 86 44 0b 83 24 00 04 20 05 87 4e 07 8b 3b 0c 81 47 1b 7f c9 37 d0 dd 76 0f 2a a8 9d 20 92 72 aa 6f ab 50 a0 dc 76 c4 ed a0 46 e2 d3 e2 02 b9 f9 4c dc 0e e5 9f 77 dc eb 64 ff ff ff 89 09 fe 45 0e fb 09 5e 5a da 1a a3 8c 3b 1f 14 d8 64 f2 bc 94 da 16 15 cb 8a da 27 10 66 d6 ba 29 15 ea 6a a3 2a 2f c0 8c 2a 4e f8 bb cf 14 b2 d7 be 2a d8 c3 9d 39 43 dd 56 85 87 8a c3 08 d5 6f 57 57 d8 95 4d f9 d6 77 b1 c9 62 c1 b4 b3 fc 2e 27 99 63 9c c3 b6 b1 7f d3 6b 43 36 2f 8f dd d4 f6 38 f5 89 4b 30 08 3c ca 9d 6c 42 0b 81 e8 26 27 83 7d Data Ascii: wOF2Q PBt`@Tb^6$D$ N;G7v* roPvFLwdE^Z;d'f)j/N*9CVoWWMwb.'ckC6/8K0<lB&'}
2024-04-05 23:17:18 UTC	4621	IN	Data Raw: 63 b2 e3 1e ab 8c 7c 31 e2 a9 83 08 27 78 c5 9f cb 01 18 af 4d 89 93 7a 57 88 3f 49 ed 49 77 64 a4 fc 1f bb 94 38 3d 03 45 c4 46 54 fc 51 c6 c1 8f e4 e4 3e ae 6d a3 4a f8 d9 ef 65 a5 de 3e ed 76 6d 81 90 77 ab 26 60 1f 00 4e bd 20 2a 92 9b 3c a5 46 78 a0 b2 99 b2 08 dc e5 2e ed 33 ce 16 c2 c8 c5 5b 10 80 b4 26 60 36 78 30 20 f0 5d d0 3e 22 db 27 db e9 57 58 95 78 52 86 9a f4 8d 4c ac 90 16 48 3f db ca a7 c8 f1 a5 c0 75 3c f6 73 ff d5 7d f5 7a 58 19 11 c2 23 e1 0a c9 bb 54 a8 98 79 e6 05 ee b8 c9 72 f2 89 31 74 7f 21 12 e5 e3 ae 11 7b 80 13 4c 57 55 a3 93 31 e9 5e d4 f0 72 fc 68 2d 1c 8f 23 8e bf 4d 50 10 24 82 4e 61 76 4a 30 98 39 c8 ea 2f 63 3f f1 e4 e2 24 2c 24 24 91 38 2f a2 88 3d 80 c1 74 1a 4d f4 dd 48 fd 04 b1 81 6c 78 3d 12 8d 17 52 66 59 e5 20 a7 Data Ascii: c\|1'xMzW?IIwd8=EFTQ>mJe>vmw&`N *<Fx.3[&`6x0 ]>"'WXxRLH?u<s}zX#Tyr1t!{LWU1^rh-#MP$NavJ09/c?$,$$8/=tMHlx=RfY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49742	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:18 UTC	594	OUT	GET /sync_cookie_image_check HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:18 UTC	528	IN	HTTP/1.1 302 Moved temporarily Connection: Close Date: Fri, 05 Apr 2024 23:17:18 GMT Location: https://mc.yandex.ru/sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10330.zWvyBesHHsFVsmMi3eIC8_h8n3XFR_ymk68uII-f6Myu1ZsL9JEJCSGoF8rRXxLU.LYAIfYldOJuYfDLvlEPHE68-ggg%2C Set-Cookie: sync_cookie_csrf=1334679616fake; Expires=Fri, 05-Apr-2024 23:27:18 GMT; Domain=.mc.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2024-04-05 23:17:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49741	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:18 UTC	589	OUT	GET /metrika/advert.gif HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:18 UTC	1312	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:18 GMT ETag: "660fb0d0-2b" Expires: Sat, 06 Apr 2024 00:17:18 GMT Last-Modified: Fri, 05 Apr 2024 08:05:36 GMT Set-Cookie: _yasc=U2j7xPz3BVIeYxDDuXPlhXk19xnemQl5nJxswUitRbEZH/G50FVw3QXkcG83JhdHOA==; domain=.yandex.com; path=/; expires=Mon, 03 Apr 2034 23:17:18 GMT; secure Set-Cookie: i=qvv92BE7I9QbBa+1PMf9GMyBEEMlW2WLOd5y0u4kEGaQuiQmDjNBLbLAXkkDQjgCtA4lrXInJRJiL+OHDJsm11YGwNA=; Expires=Sun, 05-Apr-2026 23:17:18 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=3334042821712359038; Expires=Sun, 05-Apr-2026 23:17:18 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None Set-Cookie: yashr=2699580691712359038; Path=/; Domain=.yandex.com; Expires=Sat, 05 Apr 2025 23:17:18 GMT; SameSite=None; Secure; HttpOnly Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2024-04-05 23:17:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49743	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:18 UTC	461	OUT	GET /templ/steamrepl/css/icon_9.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037
2024-04-05 23:17:18 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:18 GMT Content-Type: image/svg+xml Content-Length: 541 Last-Modified: Wed, 22 Nov 2023 08:48:42 GMT Connection: close ETag: "655dc06a-21d" Accept-Ranges: bytes
2024-04-05 23:17:18 UTC	541	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 22 20 68 65 69 67 68 74 3d 22 31 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 31 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 35 2e 33 36 30 38 35 20 31 30 2e 36 38 38 36 43 35 2e 32 32 37 32 31 20 31 30 2e 38 32 33 20 35 2e 30 34 34 38 39 20 31 30 2e 38 39 38 20 34 2e 38 35 35 34 39 20 31 30 2e 38 39 38 43 34 2e 36 36 36 30 39 20 31 30 2e 38 39 38 20 34 2e 34 38 33 37 36 20 31 30 2e 38 32 33 20 34 2e 33 35 30 31 32 20 31 30 2e 36 38 38 36 4c 30 2e 33 31 34 31 33 36 20 36 2e 36 35 31 39 35 43 2d 30 2e 31 30 34 37 31 32 20 36 2e 32 33 33 31 20 2d 30 2e 31 30 34 37 31 Data Ascii: <svg width="14" height="11" viewBox="0 0 14 11" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M5.36085 10.6886C5.22721 10.823 5.04489 10.898 4.85549 10.898C4.66609 10.898 4.48376 10.823 4.35012 10.6886L0.314136 6.65195C-0.104712 6.2331 -0.10471

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49744	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:18 UTC	465	OUT	GET /templ/steamrepl/css/icon_close.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037
2024-04-05 23:17:18 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:18 GMT Content-Type: image/svg+xml Content-Length: 869 Last-Modified: Wed, 22 Nov 2023 08:48:39 GMT Connection: close ETag: "655dc067-365" Accept-Ranges: bytes
2024-04-05 23:17:18 UTC	869	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 20 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 30 39 31 31 20 30 2e 36 33 36 30 33 39 4c 37 2e 32 32 37 33 20 34 2e 34 39 39 38 37 43 37 2e 31 30 31 37 38 20 34 2e 36 32 35 33 39 20 36 2e 38 39 38 32 35 20 34 2e 36 32 35 33 39 20 36 2e 37 37 32 37 33 20 34 2e 34 39 39 38 37 4c 32 2e 39 30 38 39 20 30 2e 36 33 36 30 33 39 43 32 2e 32 38 31 33 31 20 30 2e 30 30 38 34 35 34 39 38 20 31 2e 32 36 33 36 34 20 30 2e 30 30 38 34 35 34 39 38 20 30 2e 36 33 36 30 35 36 20 30 2e 36 33 36 30 Data Ascii: <svg width="14" height="14" viewBox="0 0 14 14" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M11.0911 0.636039L7.2273 4.49987C7.10178 4.62539 6.89825 4.62539 6.77273 4.49987L2.9089 0.636039C2.28131 0.00845498 1.26364 0.00845498 0.636056 0.6360

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49745	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:18 UTC	464	OUT	GET /templ/steamrepl/img/popup_img.png HTTP/1.1 Host: steamfiller.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037
2024-04-05 23:17:19 UTC	236	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:18 GMT Content-Type: image/png Content-Length: 28903 Last-Modified: Wed, 22 Nov 2023 08:48:52 GMT Connection: close ETag: "655dc074-70e7" Accept-Ranges: bytes
2024-04-05 23:17:19 UTC	16148	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 08 00 00 00 48 08 06 00 00 00 93 3b 0d 26 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 70 7c 49 44 41 54 78 5e ed 7d 07 a0 1d 45 d5 ff 79 c9 4b ef 95 96 10 42 12 48 42 97 2a 4a ef 1d 51 9a 80 88 85 66 c1 02 62 45 14 c5 82 8a 9f 82 5d be cf fe 29 d2 41 7a ef 45 7a ef a4 90 04 d2 7b 7f ff f3 3b 67 ce ec 99 d9 bd f7 dd fb 5e 10 fc fe fe de 9b 9d d3 e7 cc ec de 9d d9 bd 7b ef 6d 19 33 66 9b 36 02 b0 6d 11 4a a1 52 96 b5 14 64 a8 2b c1 76 09 d8 a9 64 9f 08 1c 63 a4 e5 d0 c6 1b a9 03 1f a0 2c 74 9a 91 d0 1e 89 7d a6 63 14 6a c4 30 da a4 ca 25 10 51 2e 0f 7c ac 40 68 3e 02 c9 3d f0 a2 02 af ac 23 Data Ascii: PNGIHDRH;&sRGBgAMAapHYs+p\|IDATx^}EyKBHB*JQfbE])AzEz{;g^{m3f6mJRd+vdc,t}cj0%Q.\|@h>=#
2024-04-05 23:17:19 UTC	12755	IN	Data Raw: a6 42 23 8c e8 05 11 97 fe fd fa d0 e1 ef db 8f ba 72 1f 5e 9f 32 95 7e f1 9b df cb db 2d 5d e5 ae 8a c2 dd 38 cf 00 79 b8 ea 8e 1d f5 b6 c1 93 0d 34 03 dd 16 75 61 5b 96 30 c0 98 c2 90 18 30 82 5e 2a 99 f0 d8 40 6c 82 61 b4 07 61 8c d6 76 fc c2 bb 68 3f 6f 30 c0 5c 6b 01 6e c1 75 c8 a0 01 b4 eb ce db f1 44 d8 42 2b 96 2d a3 8b fe fb 4f f2 29 1b 4c bc 5d 5b 7b a8 11 c6 8b ed 63 58 a6 c5 3d c8 e6 f0 31 fa 8d ef fc 2c 7e cc 72 fb ed df 45 23 d6 c2 f1 11 1a 09 c0 a4 39 9c 17 10 3b 6c b7 a5 f0 ab 79 71 fd c3 f3 7f 26 1f a9 ed d5 6f 08 af 2d c3 dd 17 b4 e7 fb e0 69 c9 a5 0b 75 eb d6 9b 7a f6 1b 46 5d 5a f5 63 9e 8a 2a ca a0 12 d9 06 65 9a 9d e6 f3 9d ef ff 17 cd 9a 39 5b f8 5d 77 7f 2f 1d 7f c4 01 d4 95 c7 a6 16 f2 18 26 29 cb ab 61 76 d2 02 18 2b 80 af 5d 89 Data Ascii: B#r^2~-]8y4ua[00^@laavh?o0\knuDB+-O)L][{cX=1,~rE#9;lyq&o-iuzF]Zce9[]w/&)av+]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49746	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:18 UTC	469	OUT	GET /templ/steamrepl/img/tetherusdtlogo.png HTTP/1.1 Host: steamfiller.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037
2024-04-05 23:17:19 UTC	237	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:18 GMT Content-Type: image/png Content-Length: 69679 Last-Modified: Wed, 22 Nov 2023 08:48:52 GMT Connection: close ETag: "655dc074-1102f" Accept-Ranges: bytes
2024-04-05 23:17:19 UTC	16147	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 d0 00 00 07 d0 08 06 00 00 00 9a 38 c4 79 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 da ec dd 79 98 5d 77 5d c7 f1 26 69 ba 97 56 5a 5a a0 50 10 a8 b2 29 22 a2 80 0a 05 b1 1a e9 cc b9 67 e2 55 11 97 88 12 05 17 50 11 77 b8 2a a8 50 48 eb cc 39 67 72 b1 35 50 41 e0 9a 39 f7 dc 0e 06 42 c5 aa 20 22 62 01 59 c4 5a 94 82 ec 2d b4 34 dd d2 64 c6 df 20 fa b4 25 4d 67 26 77 39 cb eb fd 3c af 87 ff fb cf 7c ef ef f3 9c 70 d4 f2 f2 f2 51 00 00 00 00 00 00 00 d0 74 fe 23 00 00 00 00 00 00 00 80 01 1d 00 00 00 00 00 00 00 0c e8 00 00 00 00 00 00 00 60 40 07 00 00 00 00 00 00 00 03 3a 00 00 00 00 00 00 00 18 d0 01 00 00 00 00 00 00 c0 80 0e 00 00 00 00 00 00 00 06 Data Ascii: PNGIHDR8ypHYs IDATxy]w]&iVZZP)"gUPw*PH9gr5PA9B "bYZ-4d %Mg&w9<\|pQt#`@:
2024-04-05 23:17:19 UTC	16384	IN	Data Raw: 03 00 00 55 61 63 4b e9 92 57 59 32 a5 e1 79 fa fc 2b 0e 21 00 00 30 a0 4b 32 a0 03 00 00 d5 23 5f 2e 5e 60 c9 94 86 b8 33 27 b5 bd 22 5f 4e d6 3a 84 00 00 c0 80 2e c9 80 0e 00 00 54 95 c7 5a 4a a5 97 5b 34 a5 21 2c 57 49 ce 77 f8 00 00 80 01 5d 92 01 1d 00 00 a8 ca a7 d0 3f 6e d1 94 86 a8 96 52 e9 94 f4 c2 5b e6 f0 01 00 00 03 ba 24 03 3a 00 00 50 7d 72 95 64 49 6b 6b eb c9 96 4d 69 08 ca 97 93 8f 3a 78 00 00 c0 80 2e c9 80 0e 00 00 54 f3 53 e8 c9 48 cb a6 34 d8 85 70 52 7a c1 2d 74 e8 00 00 80 01 5d 92 01 1d 00 00 a8 6a 0b e2 b6 67 e0 94 06 b1 a6 ee 62 93 c3 06 00 00 0c e8 92 0c e8 00 00 40 4d 78 9f 85 53 1a c4 d2 8b 6c b6 83 06 00 00 0c e8 92 0c e8 00 00 40 2d 28 ce b0 70 4a 83 f6 dd e7 ed 7f e9 90 01 00 00 03 ba 24 03 3a 00 00 50 3b 46 76 8e fe 5f 96 Data Ascii: UacKWY2y+!0K2#_.^`3'"_N:.TZJ[4!,WIw]?nR[$:P}rdIkkMi:x.TSH4pRz-t]jgb@MxSl@-(pJ$:P;Fv_
2024-04-05 23:17:19 UTC	16384	IN	Data Raw: 03 00 4c b4 da fc a3 ea 3c a9 67 b5 f9 92 e4 d2 d0 55 79 26 67 17 63 11 00 70 b3 83 9f bb 6d fb 6d 23 f2 85 88 14 d7 c7 bc 88 00 80 99 d4 19 dd 4d fd 57 98 85 2d d5 aa f4 91 4f 57 a5 af 62 55 3a 00 50 a0 13 42 28 d0 01 00 21 e9 f9 e9 d5 e6 2c 42 58 b2 54 76 b5 ca 8a f4 ad 8c 47 00 c0 4d 1c 7b ef 2f 5c ff e5 b0 7b 4d b8 db f1 2e 2f 26 00 e0 e6 5f 50 17 5c 6a 64 36 16 02 ab d2 df ab 48 97 68 77 2c e3 12 00 28 d0 09 21 14 e8 00 80 25 f4 58 7a bc 38 4f 16 ea d5 e6 41 6e 71 4b 96 40 30 a8 17 1e b0 83 1f 00 e0 66 91 c9 ce cd 6a 17 f6 b0 f9 4a b8 db f5 1a 2f 2c 00 e0 66 71 a7 8b 64 2a 10 60 76 b6 c4 19 9c 18 97 b4 e6 d3 9c e9 05 00 14 e8 84 10 0a 74 00 c0 22 8a f6 c4 ea cf f2 b2 8e 66 f1 f9 fd dc d8 96 38 6a c5 ff ba b2 54 c6 26 00 e0 33 c2 dd 0e 87 da 7d 3d 6c Data Ascii: L<gUy&gcpmm#MW-OWbU:PB(!,BXTvGM{/\{M./&_P\jd6Hhw,(!%Xz8OAnqK@0fjJ/,fqd*`vt"f8jT&3}=l
2024-04-05 23:17:19 UTC	16384	IN	Data Raw: ba 24 03 3a 00 40 eb 8d e7 c5 7a 7c 9f 9b 6c 49 92 a4 49 ac 58 2f 2f 0a 07 b1 a3 0e a3 00 80 01 5d 92 01 1d 00 a0 55 c4 27 0b 79 1c b9 c1 96 24 49 9a 82 0a 79 7a 67 38 94 1d 71 28 05 00 0c e8 92 0c e8 00 00 53 ee 78 b0 d8 cd b5 24 49 d2 14 56 ac a7 b7 87 43 d9 21 87 53 00 c0 80 2e c9 80 0e 00 30 65 8e 45 59 e5 2e 37 d6 92 24 49 2d 31 a2 27 b7 05 6f 39 a4 02 00 06 74 49 06 74 00 80 49 77 38 ca e2 3b dc 54 4b 92 24 b5 50 fd 9b ca 0b a3 2c 39 e8 b0 0a 00 18 d0 25 19 d0 01 00 26 4d f3 87 4d b7 b9 a1 96 24 49 6a c1 8a f5 ca 82 70 58 db e7 d0 0a 00 18 d0 25 19 d0 01 00 26 56 21 4f de 28 e4 e5 5b dd 4c 4b 92 24 b5 70 3d a3 d5 f9 e1 f0 b6 d7 01 16 00 30 a0 4b 32 a0 03 00 4c 94 f8 40 ef 48 72 b3 1b 69 49 92 a4 36 a8 77 64 dd bc 70 88 db e3 10 0b 00 18 d0 25 19 d0 Data Ascii: $:@z\|lIIX//]U'y$Iyzg8q(Sx$IVC!S.0eEY.7$I-1'o9tItIw8;TK$P,9%&MM$IjpX%&V!O([LK$p=0K2L@HriI6wdp%
2024-04-05 23:17:19 UTC	4380	IN	Data Raw: 60 89 34 a6 ff 7f 7b f7 13 aa 55 99 c0 71 7c 4c 6b 4a 45 04 07 51 10 21 a4 c0 c5 04 41 b4 08 26 5c 84 28 74 df f3 9c 2b 2f d3 22 28 68 88 60 36 ce a6 76 f2 6e 66 26 30 92 ee 3d cf b9 bd 8b 26 28 5a 74 e8 9e e7 bc de 12 ee 42 ee 0c 2e dc 08 2e 44 10 04 85 18 41 84 22 9a b0 7f ea 3b dd 26 86 71 e8 8f 7f ee 9f f7 cf e7 0b 1f 70 21 82 ef 79 9e b3 f9 bd dc db dd 19 52 3c 6f bc 84 55 75 31 a4 a9 5d de 48 92 24 49 92 24 49 92 24 49 d2 2a d7 ae e2 b6 90 e2 19 23 26 ac 8a 73 93 b3 53 3b bc 89 24 49 92 24 49 92 24 49 92 a4 01 29 af 67 b6 86 14 4f 1b 33 61 25 15 67 27 67 bb db bd 81 24 49 92 24 49 92 24 49 92 a4 01 2b a4 23 9b b3 26 9e 34 6a c2 8a 38 35 31 d7 fd 8d 37 8f 24 49 92 24 49 92 24 49 92 34 a0 ed 9d 3f bc 21 a4 e2 b8 71 13 96 d5 89 fd c7 a6 36 79 e3 48 92 Data Ascii: `4{Uq\|LkJEQ!A&\(t+/"(h`6vnf&0=&(ZtB..DA";&qp!yR<oUu1]H$I$I$I*#&sS;$I$I$I)gO3a%g'g$I$I$I+#&4j8517$I$I$I4?!q6yH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49749	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:19 UTC	700	OUT	GET /metrika/metrika_match.html HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:19 UTC	1311	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 2120 Content-Type: text/html Date: Fri, 05 Apr 2024 23:17:19 GMT ETag: "660fb0d0-848" Expires: Sat, 06 Apr 2024 00:17:19 GMT Last-Modified: Fri, 05 Apr 2024 08:05:36 GMT Set-Cookie: _yasc=ovHOPGEqixqmqvtVZTr9P8a/+yhbzxg6lCS4J+byIwMw+g3J7b7+S2pZkNGpv3Nv; domain=.yandex.com; path=/; expires=Mon, 03 Apr 2034 23:17:19 GMT; secure Set-Cookie: i=hfvmf7TJUmAApOnyuiVMuJNBbNnDtDgZ919RHntomfEQx/r+7SRpbNeKirXEpddTEdX3vLS+mIqQdD4CXzBYgal2Adk=; Expires=Sun, 05-Apr-2026 23:17:19 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=5417444001712359039; Expires=Sun, 05-Apr-2026 23:17:19 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None Set-Cookie: yashr=4645585121712359039; Path=/; Domain=.yandex.com; Expires=Sat, 05 Apr 2025 23:17:19 GMT; SameSite=None; Secure; HttpOnly Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2024-04-05 23:17:19 UTC	2120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html;charset=UTF-8"></head><body><scrip

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49750	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:19 UTC	893	OUT	GET /sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10330.zWvyBesHHsFVsmMi3eIC8_h8n3XFR_ymk68uII-f6Myu1ZsL9JEJCSGoF8rRXxLU.LYAIfYldOJuYfDLvlEPHE68-ggg%2C HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; yandexuid=2756805351712359034; yashr=4434275431712359034
2024-04-05 23:17:20 UTC	673	IN	HTTP/1.1 302 Moved temporarily Connection: Close Date: Fri, 05 Apr 2024 23:17:19 GMT Location: https://mc.yandex.com/sync_cookie_image_decide?token=10330.woy656fu46y5_DcDSjB97Mazs-_kGfS4OruiYv9WFn18Zj-naQjLwkR83mSWLa7t4r2cr6wOmU1IvltOHb6NnQBh-5H0NNHsDMCmgustlQLblfYsCzbtHSgj_ONY8OAVCU8DTc10K_4TmEg-34RNn9f3BJ0D81_oqttTrzU1TxAkXGiffY-DWdjIjOsXOoFn907mt5c-7wPwj2qhORpKDT8V4Nj1QK2qOPGXiPKnfnk%2C.21dgMVT84n2ZnBqRNXF8v61X_z4%2C Set-Cookie: sync_cookie_csrf=1007243929fake; Expires=Fri, 05-Apr-2024 23:27:19 GMT; Domain=.mc.yandex.ru; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2024-04-05 23:17:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49751	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:20 UTC	1889	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A900713691%3Az%3A120%3Ai%3A20240406011716%3Aet%3A1712359037%3Ac%3A1%3Arn%3A720576105%3Arqn%3A1%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A6509%3Awv%3A2%3Ads%3A0%2C554%2C1440%2C540%2C4%2C0%2C%2C3061%2C1%2C%2C%2C%2C6321%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359026612%3Arqnl%3A1%3Ast%3A1712359038%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(1)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; i=qvv92BE7I9QbBa+1PMf9GMyBEEMlW2WLOd5y0u4kEGaQuiQmDjNBLbLAXkkDQjgCtA4lrXInJRJiL+OHDJsm11YGwNA=; yandexuid=3334042821712359038; yashr=2699580691712359038
2024-04-05 23:17:20 UTC	2973	IN	HTTP/1.1 302 Moved temporarily Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Date: Fri, 05 Apr 2024 23:17:20 GMT Expires: Fri, 05-Apr-2024 23:17:20 GMT Last-Modified: Fri, 05-Apr-2024 23:17:20 GMT Location: /watch/95654225/1?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A900713691%3Az%3A120%3Ai%3A20240406011716%3Aet%3A1712359037%3Ac%3A1%3Arn%3A720576105%3Arqn%3A1%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A6509%3Awv%3A2%3Ads%3A0%2C554%2C1440%2C540%2C4%2C0%2C%2C3061%2C1%2C%2C%2C%2C6321%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359026612%3Arqnl%3A1%3Ast%3A1712359038%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29eco%2821037572%29aw%281%29rcm%281%29cdl%28na%29ti%281%29 Pragma: no-cache Set-Cookie: yabs-sid=610093571712359040; Path=/; SameSite=None; Secure Set-Cookie: yandexuid=3334042821712359038; Expires=Sat, 05-Apr-2025 23:17:20 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yuidss=3334042821712359038; Expires=Sat, 05-Apr-2025 23:17:20 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1743895040.yrts.1712359040; Expires=Sat, 05-Apr-2025 23:17:20 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:17:20 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Sat, 05-Apr-2025 23:17:20 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2024-04-05 23:17:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49753	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:20 UTC	1072	OUT	GET /sync_cookie_image_decide?token=10330.woy656fu46y5_DcDSjB97Mazs-_kGfS4OruiYv9WFn18Zj-naQjLwkR83mSWLa7t4r2cr6wOmU1IvltOHb6NnQBh-5H0NNHsDMCmgustlQLblfYsCzbtHSgj_ONY8OAVCU8DTc10K_4TmEg-34RNn9f3BJ0D81_oqttTrzU1TxAkXGiffY-DWdjIjOsXOoFn907mt5c-7wPwj2qhORpKDT8V4Nj1QK2qOPGXiPKnfnk%2C.21dgMVT84n2ZnBqRNXF8v61X_z4%2C HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; i=hfvmf7TJUmAApOnyuiVMuJNBbNnDtDgZ919RHntomfEQx/r+7SRpbNeKirXEpddTEdX3vLS+mIqQdD4CXzBYgal2Adk=; yandexuid=5417444001712359039; yashr=4645585121712359039
2024-04-05 23:17:21 UTC	1070	IN	HTTP/1.1 200 Ok Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:21 GMT Set-Cookie: yandexuid=2756805351712359034; Expires=Mon, 03-Apr-2034 23:17:21 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yuidss=2756805351712359034; Expires=Mon, 03-Apr-2034 23:17:21 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; Expires=Mon, 03-Apr-2034 23:17:21 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yp=1712445441.yu.5417444001712359039; Expires=Mon, 03-Apr-2034 23:17:21 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1714951041.oyu.5417444001712359039; Expires=Sat, 05-Apr-2025 23:17:21 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: sync_cookie_ok=synced; Expires=Sat, 06-Apr-2024 23:17:21 GMT; Domain=.mc.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49752	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:20 UTC	550	OUT	GET /metrika/advert.gif HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; i=qvv92BE7I9QbBa+1PMf9GMyBEEMlW2WLOd5y0u4kEGaQuiQmDjNBLbLAXkkDQjgCtA4lrXInJRJiL+OHDJsm11YGwNA=; yandexuid=3334042821712359038; yashr=2699580691712359038
2024-04-05 23:17:21 UTC	832	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:21 GMT ETag: "660fb0d0-2b" Expires: Sat, 06 Apr 2024 00:17:21 GMT Last-Modified: Fri, 05 Apr 2024 08:05:36 GMT Set-Cookie: _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; domain=.yandex.com; path=/; expires=Mon, 03 Apr 2034 23:17:21 GMT; secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2024-04-05 23:17:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49756	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:21 UTC	2332	OUT	GET /watch/95654225/1?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A900713691%3Az%3A120%3Ai%3A20240406011716%3Aet%3A1712359037%3Ac%3A1%3Arn%3A720576105%3Arqn%3A1%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A6509%3Awv%3A2%3Ads%3A0%2C554%2C1440%2C540%2C4%2C0%2C%2C3061%2C1%2C%2C%2C%2C6321%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359026612%3Arqnl%3A1%3Ast%3A1712359038%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29eco%2821037572%29aw%281%29rcm%281%29cdl%28na%29ti%281%29 HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; i=hfvmf7TJUmAApOnyuiVMuJNBbNnDtDgZ919RHntomfEQx/r+7SRpbNeKirXEpddTEdX3vLS+mIqQdD4CXzBYgal2Adk=; yashr=4645585121712359039; yabs-sid=610093571712359040; yandexuid=3334042821712359038; yuidss=3334042821712359038; ymex=1743895040.yrts.1712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi
2024-04-05 23:17:22 UTC	813	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:17:22 GMT Expires: Fri, 05-Apr-2024 23:17:22 GMT Last-Modified: Fri, 05-Apr-2024 23:17:22 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:17:22 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 39 4c 52 57 42 61 34 42 37 35 49 59 66 31 32 33 62 36 2f 78 34 4c 58 44 32 7a 36 2b 4a 51 64 6d 34 46 45 2f 50 46 4a 4d 66 4a 31 78 46 37 6c 4b 4a 65 31 73 32 34 4a 41 5a 37 55 65 41 77 63 4d 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"9LRWBa4B75IYf123b6/x4LXD2z6+JQdm4FE/PFJMfJ1xF7lKJe1s24JAZ7UeAwcM"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49757	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:22 UTC	689	OUT	GET /favicon.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2
2024-04-05 23:17:22 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:22 GMT Content-Type: image/svg+xml Content-Length: 1589 Last-Modified: Wed, 22 Nov 2023 08:45:57 GMT Connection: close ETag: "655dbfc5-635" Accept-Ranges: bytes
2024-04-05 23:17:22 UTC	1589	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 35 20 36 35 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 42 22 20 78 3d 22 2e 35 22 20 79 3d 22 2e 35 22 2f 3e 3c 64 65 66 73 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 78 32 3d 22 35 30 25 22 20 78 31 3d 22 35 30 25 22 20 79 32 3d 22 31 30 30 25 22 20 79 31 3d 22 30 25 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 31 31 64 32 65 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 65 65" fill="#fff"><use xlink:href="#B" x=".5" y=".5"/><defs><linearGradient id="A" x2="50%" x1="50%" y2="100%" y1="0%"><stop stop-color="#111d2e" offset="0%"/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49758	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:22 UTC	1362	OUT	GET /sync_cookie_image_decide?token=10330.woy656fu46y5_DcDSjB97Mazs-_kGfS4OruiYv9WFn18Zj-naQjLwkR83mSWLa7t4r2cr6wOmU1IvltOHb6NnQBh-5H0NNHsDMCmgustlQLblfYsCzbtHSgj_ONY8OAVCU8DTc10K_4TmEg-34RNn9f3BJ0D81_oqttTrzU1TxAkXGiffY-DWdjIjOsXOoFn907mt5c-7wPwj2qhORpKDT8V4Nj1QK2qOPGXiPKnfnk%2C.21dgMVT84n2ZnBqRNXF8v61X_z4%2C HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; yp=1712445441.yu.5417444001712359039; ymex=1714951041.oyu.5417444001712359039; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==
2024-04-05 23:17:22 UTC	1070	IN	HTTP/1.1 200 Ok Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:22 GMT Set-Cookie: yandexuid=2756805351712359034; Expires=Mon, 03-Apr-2034 23:17:22 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yuidss=2756805351712359034; Expires=Mon, 03-Apr-2034 23:17:22 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; Expires=Mon, 03-Apr-2034 23:17:22 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yp=1712445442.yu.2756805351712359034; Expires=Mon, 03-Apr-2034 23:17:22 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1714951042.oyu.2756805351712359034; Expires=Sat, 05-Apr-2025 23:17:22 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: sync_cookie_ok=synced; Expires=Sat, 06-Apr-2024 23:17:22 GMT; Domain=.mc.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49763	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:22 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1712359010054&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-05 23:17:22 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-05 23:17:22 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-05 23:17:23 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 4DB6C5041D6C46FBA03E780AD0FFAB5B Ref B: LAX311000111023 Ref C: 2024-04-05T23:17:23Z Date: Fri, 05 Apr 2024 23:17:23 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1712359042.21aa8712

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49765	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:23 UTC	2245	OUT	GET /watch/95654225/1?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A900713691%3Az%3A120%3Ai%3A20240406011716%3Aet%3A1712359037%3Ac%3A1%3Arn%3A720576105%3Arqn%3A1%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A6509%3Awv%3A2%3Ads%3A0%2C554%2C1440%2C540%2C4%2C0%2C%2C3061%2C1%2C%2C%2C%2C6321%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359026612%3Arqnl%3A1%3Ast%3A1712359038%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29eco%2821037572%29aw%281%29rcm%281%29cdl%28na%29ti%281%29 HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; yp=1712445441.yu.5417444001712359039; ymex=1714951041.oyu.5417444001712359039; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==
2024-04-05 23:17:23 UTC	720	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:17:23 GMT Expires: Fri, 05-Apr-2024 23:17:23 GMT Last-Modified: Fri, 05-Apr-2024 23:17:23 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:17:23 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 55 70 79 45 58 49 64 61 52 7a 75 63 71 6d 79 42 41 4d 33 30 4a 4e 50 41 46 79 32 4d 45 49 46 67 71 70 7a 4b 66 4b 58 31 65 30 6d 72 65 33 41 66 4f 54 39 65 41 48 70 57 49 75 79 59 37 59 70 4a 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"UpyEXIdaRzucqmyBAM30JNPAFy2MEIFgqpzKfKX1e0mre3AfOT9eAHpWIuyY7YpJ"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49766	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:23 UTC	468	OUT	GET /favicon.svg HTTP/1.1 Host: steamfiller.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
2024-04-05 23:17:23 UTC	238	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:23 GMT Content-Type: image/svg+xml Content-Length: 1589 Last-Modified: Wed, 22 Nov 2023 08:45:57 GMT Connection: close ETag: "655dbfc5-635" Accept-Ranges: bytes
2024-04-05 23:17:23 UTC	1589	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 35 20 36 35 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 3e 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 42 22 20 78 3d 22 2e 35 22 20 79 3d 22 2e 35 22 2f 3e 3c 64 65 66 73 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 41 22 20 78 32 3d 22 35 30 25 22 20 78 31 3d 22 35 30 25 22 20 79 32 3d 22 31 30 30 25 22 20 79 31 3d 22 30 25 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 31 31 31 64 32 65 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 65 65" fill="#fff"><use xlink:href="#B" x=".5" y=".5"/><defs><linearGradient id="A" x2="50%" x1="50%" y2="100%" y1="0%"><stop stop-color="#111d2e" offset="0%"/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49767	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:25 UTC	1576	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=600848379&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359045%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011724%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359045&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 139127 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:25 UTC	16384	OUT	Data Raw: 0a f3 be 08 08 00 10 00 18 1b 20 00 4a e7 be 08 0a 0f 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 12 42 d0 9c d0 be d0 bc d0 b5 d0 bd d1 82 d0 b0 d0 bb d1 8c d0 bd d0 be d0 b5 20 d0 bf d0 be d0 bf d0 be d0 bb d0 bd d0 b5 d0 bd d0 b8 d0 b5 20 d0 b1 d0 b0 d0 bb d0 b0 d0 bd d1 81 d0 b0 20 53 74 65 61 6d 1a 17 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 22 6f 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 2a 00 32 00 38 00 42 06 08 80 0a 10 80 08 4a 06 Data Ascii: J<!DOCTYPE html>B Steamhttps://steamfiller.ru/"oMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36*28BJ
2024-04-05 23:17:25 UTC	16384	OUT	Data Raw: 43 31 31 2e 38 30 34 20 36 2e 34 39 37 38 34 20 31 31 2e 36 37 38 36 20 36 2e 36 32 38 31 38 20 31 31 2e 35 39 31 35 20 36 2e 37 38 33 34 33 43 31 31 2e 35 30 34 34 20 36 2e 39 33 38 36 37 20 31 31 2e 34 35 38 36 20 37 2e 31 31 33 36 33 20 31 31 2e 34 35 38 34 20 37 2e 32 39 31 36 33 43 31 31 2e 34 35 38 34 20 37 2e 35 36 37 38 39 20 31 31 2e 33 34 38 36 20 37 2e 38 33 32 38 35 20 31 31 2e 31 35 33 33 20 38 2e 30 32 38 32 43 31 30 2e 39 35 37 39 20 38 2e 32 32 33 35 35 20 31 30 2e 36 39 33 20 38 2e 33 33 33 32 39 20 31 30 2e 34 31 36 37 20 38 2e 33 33 33 32 39 43 31 30 2e 31 34 30 34 20 38 2e 33 33 33 32 39 20 39 2e 38 37 35 34 37 20 38 2e 32 32 33 35 35 20 39 2e 36 38 30 31 32 20 38 2e 30 32 38 32 43 39 2e 34 38 34 37 37 20 37 2e 38 33 32 38 35 20 39 2e Data Ascii: C11.804 6.49784 11.6786 6.62818 11.5915 6.78343C11.5044 6.93867 11.4586 7.11363 11.4584 7.29163C11.4584 7.56789 11.3486 7.83285 11.1533 8.0282C10.9579 8.22355 10.693 8.33329 10.4167 8.33329C10.1404 8.33329 9.87547 8.22355 9.68012 8.0282C9.48477 7.83285 9.
2024-04-05 23:17:25 UTC	16384	OUT	Data Raw: 2e 34 2e 37 2d 31 39 2e 33 20 36 2e 33 2d 31 39 2e 31 20 36 2e 36 2e 31 2e 34 20 31 35 2e 38 2d 33 2e 34 20 31 35 2e 35 2d 32 2e 38 2d 2e 34 2e 37 2d 32 36 2e 34 20 38 2d 32 36 2e 36 20 38 2e 35 2d 2e 32 2e 34 20 32 33 2d 35 2e 32 20 32 32 2e 38 2d 34 2e 37 73 2d 31 32 20 33 2e 34 2d 31 32 20 33 2e 37 63 30 20 2e 33 20 39 2e 35 2d 31 2e 35 20 39 2e 33 2d 31 2d 2e 31 2e 34 2d 32 34 20 36 2e 35 2d 32 34 2e 35 20 37 2e 34 2d 2e 35 20 31 20 31 32 2e 34 2d 32 2e 35 20 31 32 2e 32 2d 2e 37 73 2d 32 37 2e 37 20 31 31 2d 32 37 2e 38 20 39 2e 33 63 2d 2e 32 2d 31 2e 37 20 31 36 2e 37 2d 36 20 31 36 2e 36 2d 36 2e 35 2d 2e 32 2d 2e 35 2d 39 2e 37 20 31 2d 39 2e 39 2e 31 2d 2e 31 2d 31 20 36 2e 33 2d 33 20 35 2e 38 2d 33 2e 34 2d 2e 35 2d 2e 35 2d 35 2e 33 20 31 2e Data Ascii: .4.7-19.3 6.3-19.1 6.6.1.4 15.8-3.4 15.5-2.8-.4.7-26.4 8-26.6 8.5-.2.4 23-5.2 22.8-4.7s-12 3.4-12 3.7c0 .3 9.5-1.5 9.3-1-.1.4-24 6.5-24.5 7.4-.5 1 12.4-2.5 12.2-.7s-27.7 11-27.8 9.3c-.2-1.7 16.7-6 16.6-6.5-.2-.5-9.7 1-9.9.1-.1-1 6.3-3 5.8-3.4-.5-.5-5.3 1.
2024-04-05 23:17:25 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 38 ea 02 6a 8b 01 08 ec 02 12 05 23 74 65 78 74 20 e6 02 2a 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 92 d1 8b d0 b1 d0 b5 d1 80 d0 b8 d1 82 d0 b5 20 d1 81 d0 bf d0 be d1 81 d0 be d0 b1 20 d0 be d0 bf d0 bb d0 b0 d1 82 d1 8b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 e8 02 6a 3a 08 ed 02 12 05 23 74 65 78 74 20 e4 02 2a 25 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 ee 02 38 e6 02 6a 2b 08 ee 02 12 03 64 69 76 1a 18 0a 05 63 6c 61 73 73 12 0f 70 61 79 6d 65 6e 74 5f 5f 6d 65 74 68 6f 64 20 e4 02 30 8a 03 38 Data Ascii: 8j#text y 8j:#text % 08j+divclasspayment__method 08
2024-04-05 23:17:25 UTC	16384	OUT	Data Raw: 20 20 20 20 20 69 66 20 28 63 6f 6d 6d 69 74 73 2e 53 74 61 74 65 20 21 3d 20 74 72 75 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 72 72 6f 72 20 2b 3d 20 27 3c 6c 69 20 73 74 79 6c 65 3d 22 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 22 3e d0 92 d1 8b 20 d1 83 d0 ba d0 b0 d0 b7 d0 b0 d0 bb d0 b8 20 d0 bd d0 b5 d0 ba d0 be d1 80 d1 80 d0 b5 d0 ba d1 82 d0 bd d1 8b d0 b9 20 53 74 65 61 6d 20 6c 6f 67 69 6e 3c 2f 6c 69 3e 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 20 61 77 61 69 74 20 61 6c 65 72 74 28 63 6f 6d 6d 69 74 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 65 6e 50 6f 70 75 70 28 27 65 72 72 6f 72 2d 70 6f 70 75 70 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: if (commits.State != true) { error += '<li style="list-style-type:none"> Steam login</li>'; // await alert(commits); openPopup('error-popup');
2024-04-05 23:17:25 UTC	16384	OUT	Data Raw: 74 65 78 74 20 d1 04 2a 19 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 d3 04 6a 10 08 d3 04 12 02 75 6c 20 d1 04 30 ed 04 38 d2 04 6a 2f 08 d4 04 12 05 23 74 65 78 74 20 d3 04 2a 1d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 d5 04 6a 2b 08 d5 04 12 02 6c 69 1a 19 0a 05 73 74 79 6c 65 12 10 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 20 d3 04 30 da 04 38 d4 04 6a 26 08 d6 04 12 01 61 1a 09 0a 04 68 72 65 66 12 01 23 1a 10 0a 05 63 6c 61 73 73 12 07 72 65 77 5f 62 74 6e 20 d5 04 6a 1e 08 d7 04 12 05 23 74 65 78 74 20 d6 04 2a 0c d0 9e d1 82 d0 b7 d1 8b d0 b2 d1 8b 30 d8 04 6a 0f 08 d8 04 12 04 73 70 61 6e 20 d6 04 38 d7 04 6a 15 08 d9 04 12 05 23 74 65 78 74 20 d8 04 2a 06 Data Ascii: text * 0jul 08j/#text * 0j+listylefont-size: 18px; 08j&ahref#classrew_btn j#text 0jspan 8j#text
2024-04-05 23:17:25 UTC	16384	OUT	Data Raw: 20 d0 b2 d0 b0 d1 81 20 d0 b2 d0 be d0 b7 d0 bd d0 b8 d0 ba d0 bb d0 b8 20 d0 b2 d0 be d0 bf d1 80 d0 be d1 81 d1 8b 20 d0 ba d0 b0 d1 81 d0 b0 d1 82 d0 b5 d0 bb d1 8c d0 bd d0 be 20 d0 bd d0 b0 d1 88 d0 b8 d1 85 20 d0 b7 d0 b0 d0 ba d0 be d0 bd d0 bd d1 8b d1 85 20 d0 b8 d0 bd d1 82 d0 b5 d1 80 d0 b5 d1 81 d0 be d0 b2 20 d0 b2 20 d0 be d0 b1 d1 80 d0 b0 d0 b1 d0 be d1 82 d0 ba d0 b5 20 d0 b2 d0 b0 d1 88 d0 b5 d0 b9 20 d0 bb d0 b8 d1 87 d0 bd d0 be d0 b9 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d0 b8 2c 20 d0 bf d0 be d0 b6 d0 b0 d0 bb d1 83 d0 b9 d1 81 d1 82 d0 b0 2c 20 d1 81 d0 b2 d1 8f d0 b6 d0 b8 d1 82 d0 b5 d1 81 d1 8c 20 d1 81 20 d0 bd d0 b0 d0 bc d0 b8 20 d0 b4 d0 bb d1 8f 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd d0 b8 d1 8f 20 Data Ascii: , ,
2024-04-05 23:17:25 UTC	16384	OUT	Data Raw: a1 d0 be d1 87 d0 b5 d1 82 d0 b0 d0 bd d0 b8 d0 b5 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d0 b8 2c 20 d1 82 d0 b5 d0 ba d1 81 d1 82 d0 be d0 b2 2c 20 d0 b3 d1 80 d0 b0 d1 84 d0 b8 d0 ba d0 b8 2c 20 d0 b4 d0 b8 d0 b7 d0 b0 d0 b9 d0 bd d0 b0 2c 20 d0 b8 d0 b7 d0 be d0 b1 d1 80 d0 b0 d0 b6 d0 b5 d0 bd d0 b8 d0 b9 2c 20 d1 84 d0 be d1 82 d0 be 20 d0 b8 20 d0 b2 d0 b8 d0 b4 d0 b5 d0 be 2c 20 d0 bf d1 80 d0 be d0 b3 d1 80 d0 b0 d0 bc d0 bc d0 bd d0 be d0 b3 d0 be 20 d0 be d0 b1 d0 b5 d1 81 d0 bf d0 b5 d1 87 d0 b5 d0 bd d0 b8 d1 8f 20 d0 b8 20 d0 b4 d1 80 d1 83 d0 b3 d0 b8 d1 85 20 d1 80 d0 b5 d0 b7 d1 83 d0 bb d1 8c d1 82 d0 b0 d1 82 d0 be d0 b2 20 d0 b8 d0 bd d1 82 d0 b5 d0 bb d0 bb d0 b5 d0 ba d1 82 d1 83 d0 b0 d0 bb d1 8c d0 bd d0 be d0 b9 Data Ascii: , , , , , ,
2024-04-05 23:17:25 UTC	8055	OUT	Data Raw: 05 23 74 65 78 74 20 b2 08 2a 19 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 b6 08 6a 2e 08 c7 08 12 05 23 74 65 78 74 20 9e 07 2a 19 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 c8 08 38 b2 08 6a 26 08 c8 08 12 03 64 69 76 1a 13 0a 05 63 6c 61 73 73 12 0a 6d 6f 64 61 6c 2d 72 6f 77 72 20 9e 07 30 d8 08 38 c7 08 6a 0f 08 c9 08 12 04 73 70 61 6e 20 c8 08 30 cb 08 6a 47 08 ca 08 12 05 23 74 65 78 74 20 c9 08 2a 38 39 20 d0 98 d0 b7 d0 bc d0 b5 d0 bd d0 b5 d0 bd d0 b8 d0 b5 20 d1 83 d1 81 d0 bb d0 be d0 b2 d0 b8 d0 b9 20 d0 a1 d0 be d0 b3 d0 bb d0 b0 d1 88 d0 b5 d0 bd d0 b8 d1 8f 6a 32 08 cb 08 12 05 23 74 65 78 74 20 c8 08 2a 1d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: #text * 8j.#text * 08j&divclassmodal-rowr 08jspan 0jG#text 89 j2#text
2024-04-05 23:17:27 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:26 GMT Expires: Fri, 05-Apr-2024 23:17:26 GMT Last-Modified: Fri, 05-Apr-2024 23:17:26 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49768	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:26 UTC	1563	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=410881914&browser-info=we%3A1%3Aet%3A1712359045%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011725%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359045&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 61 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:26 UTC	61	OUT	Data Raw: 0a 17 08 00 10 01 18 13 20 00 8a 01 0c 08 f6 09 10 8b 07 18 f6 09 20 dd 0a 0a 1b 08 00 10 01 18 04 20 00 62 11 08 00 10 00 18 01 20 ff ff ff ff ff ff ff ff ff 01 0a 05 10 04 e0 01 02 Data Ascii: b
2024-04-05 23:17:26 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:26 GMT Expires: Fri, 05-Apr-2024 23:17:26 GMT Last-Modified: Fri, 05-Apr-2024 23:17:26 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49769	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:26 UTC	1563	OUT	POST /webvisor/95654225?wv-part=2&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=282114613&browser-info=we%3A1%3Aet%3A1712359046%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011725%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359046&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 95 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:26 UTC	95	OUT	Data Raw: 0a 14 08 99 1c 10 01 18 00 20 00 5a 09 08 8f 05 10 ba 03 18 f2 02 0a 14 08 86 1d 10 01 18 00 20 00 5a 09 08 a3 05 10 b0 03 18 f2 02 0a 14 08 f3 1d 10 01 18 00 20 00 5a 09 08 a5 05 10 ac 03 18 f2 02 0a 14 08 e0 1e 10 01 18 00 20 00 5a 09 08 8c 05 10 b2 03 18 f2 02 0a 05 10 04 e0 01 0a Data Ascii: Z Z Z Z
2024-04-05 23:17:27 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:27 GMT Expires: Fri, 05-Apr-2024 23:17:27 GMT Last-Modified: Fri, 05-Apr-2024 23:17:27 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49770	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:27 UTC	1360	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=410881914&browser-info=we%3A1%3Aet%3A1712359045%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011725%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359045&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:28 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:28 GMT Expires: Fri, 05-Apr-2024 23:17:28 GMT Last-Modified: Fri, 05-Apr-2024 23:17:28 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49771	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:27 UTC	1369	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=600848379&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359045%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011724%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359045&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:28 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:28 GMT Expires: Fri, 05-Apr-2024 23:17:28 GMT Last-Modified: Fri, 05-Apr-2024 23:17:28 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49772	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:27 UTC	817	OUT	GET / HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
2024-04-05 23:17:28 UTC	298	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding
2024-04-05 23:17:28 UTC	16086	IN	Data Raw: 31 65 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c Data Ascii: 1ee8<!DOCTYPE html><html> <head itemscope="" itemtype="http://schema.org/"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width,initial
2024-04-05 23:17:28 UTC	16384	IN	Data Raw: 37 36 20 31 37 36 63 32 35 20 32 35 20 36 35 2e 35 20 32 35 20 39 30 2e 35 20 30 4c 34 31 38 2e 37 20 33 31 37 2e 33 63 32 35 2d 32 35 20 32 35 2d 36 35 2e 35 20 30 2d 39 30 2e 35 6c 2d 31 37 36 2d 31 37 36 63 2d 31 32 2d 31 32 2d 32 38 2e 33 2d 31 38 2e 37 2d 34 35 2e 33 2d 31 38 2e 37 48 34 38 43 32 31 2e 35 20 33 32 20 30 20 35 33 2e 35 20 30 20 38 30 7a 6d 31 31 32 20 33 32 61 33 32 20 33 32 20 30 20 31 20 31 20 30 20 36 34 20 33 32 20 33 32 20 30 20 31 20 31 20 30 2d 36 34 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 2f 73 70 61 6e 3e 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 32 30 2e 31 31 2e 32 30 32 33 20 53 74 65 61 6d 20 d0 b8 d0 b7 d0 bc d0 b5 d0 bd d0 b8 d0 bb 20 d0 b2 d0 b0 d0 bb d1 8e d1 82 d1 83 20 d0 b2 20 d0 Data Ascii: 76 176c25 25 65.5 25 90.5 0L418.7 317.3c25-25 25-65.5 0-90.5l-176-176c-12-12-28.3-18.7-45.3-18.7H48C21.5 32 0 53.5 0 80zm112 32a32 32 0 1 1 0 64 32 32 0 1 1 0-64z"></path></svg></span> 20.11.2023 Steam
2024-04-05 23:17:29 UTC	16384	IN	Data Raw: 34 30 2e 32 20 31 34 2d 32 33 2e 32 2d 33 34 2e 31 20 32 38 2e 33 2d 33 33 2e 39 2d 34 33 2e 35 20 31 32 2d 32 35 2e 38 2d 33 37 7a 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 0d 0a 32 30 30 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 55 53 44 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 40.2 14-23.2-34.1 28.3-33.9-43.5 12-25.8-37z"></path> 2000 </g> </svg> USD</a>
2024-04-05 23:17:29 UTC	16384	IN	Data Raw: 20 33 35 20 33 35 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 38 30 30 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 20 6f 70 61 63 69 74 79 3d 22 30 2e 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 37 2e 33 39 37 20 30 2e 32 33 33 37 30 34 43 38 2e 32 35 38 34 31 20 30 2e 32 33 33 37 30 34 20 30 2e 37 37 31 39 35 31 20 37 2e 32 30 31 38 31 20 30 2e 30 36 30 35 34 36 39 20 31 36 2e 30 35 37 32 4c 39 2e 33 38 34 37 31 20 31 39 2e 38 36 39 35 43 31 30 2e 31 37 34 38 Data Ascii: 35 35" fill="none" xmlns="http://www.w3.org/2000/svg"> 8000 <g opacity="0.2"> <path d="M17.397 0.233704C8.25841 0.233704 0.771951 7.20181 0.0605469 16.0572L9.38471 19.8695C10.1748
2024-04-05 23:17:29 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 24 28 22 2e 70 61 79 6d 65 6e 74 5f 5f 62 6c 6f 63 6b 20 62 75 74 74 6f 6e 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 20 73 70 61 6e 22 29 2e 74 65 78 74 28 70 61 79 53 75 6d 20 2b 20 22 20 50 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 23 70 61 79 22 29 2e 74 65 78 74 28 28 70 61 79 53 75 6d 29 20 2b 20 22 20 50 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 24 28 22 23 70 61 79 4f 6c 64 22 29 2e 74 65 78 74 28 28 70 61 79 53 75 6d 29 20 2b 20 22 20 e2 82 bd 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 23 72 65 63 65 69 76 65 22 29 2e 74 65 78 74 28 28 72 65 63 Data Ascii: $(".payment__block button[type=submit] span").text(paySum + " P") $("#pay").text((paySum) + " P") //$("#payOld").text((paySum) + " ") $("#receive").text((rec
2024-04-05 23:17:29 UTC	16384	IN	Data Raw: d0 bc d0 b8 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d0 b8 20 d0 bf d0 be 20 d0 b1 d0 b0 d0 b7 d0 b0 d0 bc 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 20 d1 82 d1 80 d0 b5 d1 82 d1 8c d0 b8 d1 85 20 d0 bb d0 b8 d1 86 2e 20 d0 9b 0d 0a 32 30 30 30 0d 0a d0 b8 d1 87 d0 bd d0 b0 d1 8f 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d1 8f 20 d1 82 d0 b0 d0 ba d0 b6 d0 b5 20 d0 bc d0 be d0 b6 d0 b5 d1 82 20 d0 b1 d1 8b d1 82 d1 8c 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd d0 b0 20 d0 b8 d0 b7 20 d0 b7 d0 b0 d0 ba d0 be d0 bd d0 bd d0 be 20 d0 bf d1 80 d0 b8 d0 be d0 b1 d1 80 d0 b5 d1 82 d1 91 d0 bd d0 bd d1 8b d1 85 20 d1 83 20 d1 82 d1 80 d0 b5 d1 82 d1 8c d0 b8 d1 85 20 d0 bb d0 b8 d1 86 20 d1 81 d0 bf d0 b8 d1 81 d0 ba d0 be d0 b2 20 Data Ascii: . 2000
2024-04-05 23:17:29 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 72 6f 77 72 22 3e 3c 73 70 61 6e 3e 31 20 d0 a2 d0 b5 d1 80 d0 bc d0 b8 d0 bd d1 8b 20 d0 b8 20 d0 be d0 bf d1 80 d0 b5 d0 b4 d0 b5 d0 bb d0 b5 d0 bd d0 b8 d1 8f 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 72 6f 77 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e d0 92 20 d1 8d d1 82 d0 be d0 bc 20 d0 bf d0 be d0 bb d1 8c d0 b7 d0 be d0 b2 Data Ascii: </p> </div> <div class="modal-rowr"><span>1 </span> <div class="modal-rowr"> <p>
2024-04-05 23:17:29 UTC	5608	IN	Data Raw: 73 70 61 6e 3e 31 30 20 d0 9f d0 be d0 bb d0 b8 d1 82 d0 b8 d0 ba d0 b0 20 d0 be d0 bf d0 bb d0 b0 d1 82 d1 8b 20 d0 b8 20 d0 b2 d0 be d0 b7 d0 b2 d1 80 d0 b0 d1 82 d0 b0 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 72 6f 77 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e d0 9f d0 be d0 ba d1 83 d0 bf d0 ba d0 b8 20 d0 bd d0 b0 20 d1 81 d0 b0 d0 b9 d1 82 d0 b5 3a 20 3c 62 72 3e 20 3c 62 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 9f d0 be d0 bb d1 8c d0 b7 d0 be d0 b2 d0 b0 d1 82 d0 b5 d0 bb d1 8c Data Ascii: span>10 </span> <div class="modal-rowr"> <p> : <br> <br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49777	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:27 UTC	771	OUT	GET /pages/feedback/ HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
2024-04-05 23:17:29 UTC	298	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding
2024-04-05 23:17:29 UTC	16086	IN	Data Raw: 31 65 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c Data Ascii: 1ee8<!DOCTYPE html><html> <head itemscope="" itemtype="http://schema.org/"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width,initial
2024-04-05 23:17:29 UTC	16384	IN	Data Raw: 74 5f 5f 69 74 65 6d 22 20 73 74 79 6c 65 3d 22 6f 70 61 63 69 74 79 3a 20 31 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 31 30 30 30 6d 73 20 65 61 73 65 20 30 73 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 65 65 64 62 61 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 66 65 65 64 62 61 63 6b 5f 5f 6c 69 73 74 22 20 69 64 3d 22 66 65 65 64 62 61 63 6b 5f 6c 69 73 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: t__item" style="opacity: 1; display: block; transition: opacity 1000ms ease 0s;"> <div class="feedback"> <ul class="feedback__list" id="feedback_list">
2024-04-05 23:17:29 UTC	16384	IN	Data Raw: d0 b5 d1 80 d0 ba d0 b8 20 d0 b1 d0 b5 d0 b7 d0 be d0 bf d0 b0 d1 81 d0 bd d0 be d1 81 d1 82 d0 b8 20 d0 b4 d0 bb d1 8f 20 d0 bf d0 be d0 b4 d1 82 d0 b2 d0 b5 d1 80 d0 b6 d0 b4 d0 b5 d0 bd d0 b8 d1 8f 20 d0 b2 d0 b0 d1 88 d0 b5 d0 b9 20 d0 bb d0 b8 d1 87 d0 bd d0 be d1 81 d1 82 d0 b8 20 d0 b8 20 d0 b2 d0 be d0 b7 d1 80 d0 b0 d1 81 d1 82 d0 b0 2c 20 d0 bf d1 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d0 b8 20 d0 bf d1 80 d0 b5 d0 b4 d0 be d1 81 d1 82 d0 b0 d0 b2 d0 bb d0 b5 d0 bd d0 bd d1 8b d1 85 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 2c 20 d0 b8 d1 81 d0 bf d0 be d0 bb d1 8c d0 b7 d0 be d0 b2 d0 b0 d0 bd d0 b8 d1 8f 20 d0 92 d0 b5 d0 b1 2d d1 81 d0 b0 d0 b9 d1 82 d0 b0 20 d0 b8 20 d1 84 d0 b8 d0 bd d0 b0 d0 bd d1 81 d0 be d0 b2 d1 8b d1 85 20 d1 82 d1 80 d0 b0 d0 Data Ascii: , , -
2024-04-05 23:17:29 UTC	16384	IN	Data Raw: d0 b7 d0 be d0 b2 d0 b0 d1 82 d0 b5 d0 bb d1 8c 2e 20 3c 62 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 9f d1 80 d0 be d1 87 d0 b8 d0 b5 20 d1 82 d0 b5 d1 80 d0 bc d0 b8 d0 bd d1 8b 20 d0 b8 20 d0 be d0 bf d1 80 d0 b5 d0 b4 d0 b5 d0 bb d0 b5 d0 bd d0 b8 d1 8f 2c 20 d0 b2 d1 81 d1 82 d1 80 d0 b5 d1 87 d0 b0 d1 8e d1 89 d0 b8 d0 b5 d1 81 d1 8f 20 d0 b2 20 d1 82 d0 b5 d0 ba d1 81 d1 82 d0 b5 20 d0 a1 d0 be d0 b3 d0 bb d0 b0 d1 88 d0 b5 d0 bd d0 b8 d1 8f 2c 20 d0 b8 d0 bd d1 82 d0 b5 d1 80 d0 bf d1 80 d0 b5 d1 82 d0 b8 d1 80 d1 83 d1 8e d1 82 d1 81 d1 8f 20 d0 a1 d1 82 d0 be d1 80 d0 be d0 bd d0 b0 d0 bc d0 b8 20 d0 b2 20 d1 81 d0 be d0 be d1 82 d0 b2 d0 b5 d1 82 d1 81 d1 82 d0 b2 d0 b8 d0 b8 20 d1 81 20 d0 Data Ascii: . <br> , ,
2024-04-05 23:17:29 UTC	3638	IN	Data Raw: d0 b9 20 d0 bf d0 bb d0 b0 d1 82 d0 b5 d0 b6 d0 bd d1 8b d1 85 20 d1 81 d0 b8 d1 81 d1 82 d0 b5 d0 bc 2e 20 d0 92 20 d1 81 d0 bb d1 83 d1 87 d0 b0 d0 b5 20 d0 b2 d0 be d0 b7 d0 bd d0 b8 d0 ba d0 bd d0 be d0 b2 d0 b5 d0 bd d0 b8 d1 8f 20 d0 bf d1 80 d0 be d0 b1 d0 bb d0 b5 d0 bc 2c 20 d1 80 d0 b5 d0 ba d0 be d0 bc d0 b5 d0 bd d0 b4 d1 83 d0 b5 d1 82 d1 81 d1 8f 20 d0 be d0 b1 d1 80 d0 b0 d1 82 d0 b8 d1 82 d1 8c d1 81 d1 8f 20 d0 b2 20 d0 a1 d0 bb d1 83 d0 b6 d0 b1 d1 83 20 d0 9f d0 be d0 b4 d0 b4 d0 b5 d1 80 d0 b6 d0 ba d0 b8 20 d1 81 d0 b0 d0 b9 d1 82 d0 b0 2e 3c 62 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: . , .<br> </p>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49774	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:28 UTC	1501	OUT	GET /clmap/95654225?page-url=https%3A%2F%2Fsteamfiller.ru%2F&pointer-click=rn%3A759265095%3Ax%3A41582%3Ay%3A30110%3At%3A98%3Ap%3A%3BWAA1AA%C2%84AAAA%3AX%3A938%3AY%3A309&browser-info=u%3A1712359037123674141%3Av%3A1290%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Arqnl%3A1%3Ast%3A1712359047&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:28 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:28 GMT Expires: Fri, 05-Apr-2024 23:17:28 GMT Last-Modified: Fri, 05-Apr-2024 23:17:28 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49773	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:28 UTC	1578	OUT	POST /webvisor/95654225?wv-part=1&wv-check=32641&wv-type=0&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=16435977&browser-info=we%3A1%3Aet%3A1712359047%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011726%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359047&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 312 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:28 UTC	312	OUT	Data Raw: 77 76 2d 64 61 74 61 3d 41 51 46 45 41 43 73 41 41 50 59 4a 33 51 6f 41 41 51 4a 4d 41 51 30 41 41 51 4e 6b 41 68 6f 41 41 50 59 4a 33 41 6f 45 41 48 49 41 62 77 42 76 41 48 51 41 41 51 52 4d 41 78 6f 41 41 51 56 45 42 42 6f 6a 41 4c 41 4a 33 41 6f 41 41 51 5a 45 42 52 6f 79 41 4a 49 4a 6d 67 6f 41 41 51 64 47 42 67 63 41 55 77 42 46 41 45 4d 41 56 41 42 4a 41 45 38 41 54 6a 4b 66 41 70 49 4a 34 51 55 41 41 51 68 45 42 78 70 66 6e 77 4b 34 43 4f 45 46 41 41 45 4a 52 41 67 61 61 5a 38 43 6d 67 67 65 41 41 45 4b 51 41 6b 61 41 59 49 46 6e 77 4b 41 42 43 67 41 41 51 74 6b 43 68 72 78 42 71 51 43 6b 51 49 69 47 67 42 7a 41 48 51 41 5a 51 42 68 41 47 30 41 56 77 42 68 41 47 77 41 62 41 42 6c 41 48 51 41 4c 51 42 6a 41 48 55 41 63 67 42 79 41 47 55 41 62 67 42 Data Ascii: wv-data=AQFEACsAAPYJ3QoAAQJMAQ0AAQNkAhoAAPYJ3AoEAHIAbwBvAHQAAQRMAxoAAQVEBBojALAJ3AoAAQZEBRoyAJIJmgoAAQdGBgcAUwBFAEMAVABJAE8ATjKfApIJ4QUAAQhEBxpfnwK4COEFAAEJRAgaaZ8CmggeAAEKQAkaAYIFnwKABCgAAQtkChrxBqQCkQIiGgBzAHQAZQBhAG0AVwBhAGwAbABlAHQALQBjAHUAcgByAGUAbgB
2024-04-05 23:17:28 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:28 GMT Expires: Fri, 05-Apr-2024 23:17:28 GMT Last-Modified: Fri, 05-Apr-2024 23:17:28 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49776	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:28 UTC	1564	OUT	POST /webvisor/95654225?wv-part=3&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=914984155&browser-info=we%3A1%3Aet%3A1712359047%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011726%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359047&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 344 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:28 UTC	344	OUT	Data Raw: 0a 14 08 ce 1f 10 01 18 00 20 00 5a 09 08 84 05 10 b3 03 18 f2 02 0a 14 08 cc 20 10 01 18 00 20 00 5a 09 08 f1 05 10 8c 03 18 e4 02 0a 14 08 b7 21 10 01 18 00 20 00 5a 09 08 88 06 10 81 03 18 e6 02 0a 14 08 a7 22 10 01 18 00 20 00 5a 09 08 9c 06 10 f7 02 18 e6 02 0a 14 08 93 23 10 01 18 00 20 00 5a 09 08 ab 06 10 f0 02 18 e6 02 0a 14 08 a0 24 10 01 18 00 20 00 5a 09 08 c5 06 10 e4 02 18 e6 02 0a 14 08 8d 25 10 01 18 00 20 00 5a 09 08 d6 06 10 dc 02 18 e4 02 0a 14 08 9b 26 10 01 18 00 20 00 5a 09 08 f3 06 10 ce 02 18 f4 01 0a 14 08 88 27 10 01 18 00 20 00 5a 09 08 84 07 10 c6 02 18 a4 01 0a 14 08 f5 27 10 01 18 00 20 00 5a 09 08 98 07 10 bd 02 18 a4 01 0a 14 08 e3 28 10 01 18 02 20 00 5a 09 08 aa 07 10 b5 02 18 a4 01 0a 0f 08 e7 28 10 01 18 07 20 00 aa 01 Data Ascii: Z Z! Z" Z# Z$ Z% Z& Z' Z' Z( Z(
2024-04-05 23:17:28 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:28 GMT Expires: Fri, 05-Apr-2024 23:17:28 GMT Last-Modified: Fri, 05-Apr-2024 23:17:28 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49775	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:28 UTC	1573	OUT	POST /webvisor/95654225?wv-part=2&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=881030426&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359047%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011726%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359047&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 712 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:28 UTC	712	OUT	Data Raw: 0a aa 02 08 eb 28 10 02 18 1c 20 00 ca 01 9d 02 0a 73 08 86 09 12 03 64 69 76 1a 65 0a 05 73 74 79 6c 65 12 5c 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6c 65 66 74 3a 20 2d 31 31 31 31 31 70 78 3b 20 77 69 64 74 68 3a 20 36 30 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 62 6f 72 64 65 72 3a 20 30 70 78 3b 20 01 38 35 0a a3 01 08 85 09 12 03 64 69 76 1a 95 01 0a 05 73 74 79 6c 65 12 8b 01 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 73 63 72 6f 6c 6c 3b 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 20 62 6f 72 64 65 72 Data Ascii: ( sdivestyle\position: absolute; left: -11111px; width: 60px; margin-top: 1px; padding: 0px; border: 0px; 85divstyleposition: relative; display: block; box-sizing: border-box; overflow: scroll; margin: auto; border
2024-04-05 23:17:28 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:28 GMT Expires: Fri, 05-Apr-2024 23:17:28 GMT Last-Modified: Fri, 05-Apr-2024 23:17:28 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49778	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:28 UTC	1360	OUT	GET /webvisor/95654225?wv-part=2&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=282114613&browser-info=we%3A1%3Aet%3A1712359046%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011725%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359046&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:28 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:28 GMT Expires: Fri, 05-Apr-2024 23:17:28 GMT Last-Modified: Fri, 05-Apr-2024 23:17:28 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49779	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:29 UTC	1345	OUT	GET /clmap/95654225?page-url=https%3A%2F%2Fsteamfiller.ru%2F&pointer-click=rn%3A759265095%3Ax%3A41582%3Ay%3A30110%3At%3A98%3Ap%3A%3BWAA1AA%C2%84AAAA%3AX%3A938%3AY%3A309&browser-info=u%3A1712359037123674141%3Av%3A1290%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Arqnl%3A1%3Ast%3A1712359047&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:29 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:29 GMT Expires: Fri, 05-Apr-2024 23:17:29 GMT Last-Modified: Fri, 05-Apr-2024 23:17:29 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49781	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:29 UTC	1374	OUT	GET /webvisor/95654225?wv-part=1&wv-check=32641&wv-type=0&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=16435977&browser-info=we%3A1%3Aet%3A1712359047%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011726%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359047&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:29 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:29 GMT Expires: Fri, 05-Apr-2024 23:17:29 GMT Last-Modified: Fri, 05-Apr-2024 23:17:29 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49780	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:29 UTC	1360	OUT	GET /webvisor/95654225?wv-part=3&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=914984155&browser-info=we%3A1%3Aet%3A1712359047%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011726%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359047&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:29 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:29 GMT Expires: Fri, 05-Apr-2024 23:17:29 GMT Last-Modified: Fri, 05-Apr-2024 23:17:29 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49782	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:29 UTC	1369	OUT	GET /webvisor/95654225?wv-part=2&wv-type=7&wmode=0&wv-hit=900713691&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=881030426&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359047%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011726%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359047&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:29 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:29 GMT Expires: Fri, 05-Apr-2024 23:17:29 GMT Last-Modified: Fri, 05-Apr-2024 23:17:29 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49784	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:29 UTC	2351	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A131641893%3Az%3A120%3Ai%3A20240406011728%3Aet%3A1712359048%3Ac%3A1%3Arn%3A41568339%3Arqn%3A2%3Au%3A1712359037123674141%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C553%2C968%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359046794%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359048%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(0)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:30 UTC	1792	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:17:29 GMT Expires: Fri, 05-Apr-2024 23:17:29 GMT Last-Modified: Fri, 05-Apr-2024 23:17:29 GMT Pragma: no-cache Set-Cookie: yandexuid=2756805351712359034; Expires=Sat, 05-Apr-2025 23:17:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yuidss=2756805351712359034; Expires=Sat, 05-Apr-2025 23:17:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; Expires=Sat, 05-Apr-2025 23:17:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:17:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Sat, 05-Apr-2025 23:17:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:17:30 UTC	319	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 46 43 57 39 51 62 2b 57 70 6a 4f 50 30 5a 65 6e 39 41 5a 6c 74 58 77 76 41 58 68 70 70 47 75 6b 37 59 7a 4e 6f 72 7a 53 4f 70 76 37 78 32 6d 69 31 59 64 65 59 63 77 59 59 63 5a 63 73 67 4a 38 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"FCW9Qb+WpjOP0Zen9AZltXwvAXhppGuk7YzNorzSOpv7x2mi1YdeYcwYYcZcsgJ8"
2024-04-05 23:17:30 UTC	128	IN	Data Raw: 30 33 5a 58 36 33 41 22 7d 2c 22 65 75 22 3a 32 2c 22 68 69 74 74 6f 6b 65 6e 22 3a 22 31 37 31 32 33 35 39 30 34 39 5f 65 31 33 36 36 35 37 65 66 37 37 34 39 33 30 34 32 31 62 35 65 39 35 39 62 34 34 38 37 35 35 34 33 37 66 31 36 38 62 38 34 64 35 38 65 31 65 63 65 33 32 33 37 37 66 31 65 65 61 34 63 37 66 36 22 2c 22 63 66 22 3a 31 7d 2c 22 75 73 65 72 44 61 74 61 22 3a 7b 7d 7d Data Ascii: 03ZX63A"},"eu":2,"hittoken":"1712359049_e136657ef774930421b5e959b448755437f168b84d58e1ece32377f1eea4c7f6","cf":1},"userData":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49783	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:29 UTC	2385	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A1056222005%3Az%3A120%3Ai%3A20240406011728%3Aet%3A1712359049%3Ac%3A1%3Arn%3A109557605%3Arqn%3A3%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1626%3Awv%3A2%3Ads%3A0%2C374%2C1100%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359046978%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359049%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034
2024-04-05 23:17:30 UTC	1792	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:17:29 GMT Expires: Fri, 05-Apr-2024 23:17:29 GMT Last-Modified: Fri, 05-Apr-2024 23:17:29 GMT Pragma: no-cache Set-Cookie: yandexuid=2756805351712359034; Expires=Sat, 05-Apr-2025 23:17:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yuidss=2756805351712359034; Expires=Sat, 05-Apr-2025 23:17:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; Expires=Sat, 05-Apr-2025 23:17:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:17:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Sat, 05-Apr-2025 23:17:29 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:17:30 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 77 61 4c 6b 6a 35 4c 75 44 63 50 70 62 41 78 4c 72 37 62 65 38 58 50 42 52 47 6a 34 6b 2f 2b 4d 33 57 51 5a 51 67 62 6a 70 43 33 38 69 6b 71 73 55 35 4c 32 66 62 30 49 6c 4c 46 79 6c 36 62 77 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"waLkj5LuDcPpbAxLr7be8XPBRGj4k/+M3WQZQgbjpC38ikqsU5L2fb0IlLFyl6bw"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49788	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:30 UTC	2222	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A131641893%3Az%3A120%3Ai%3A20240406011728%3Aet%3A1712359048%3Ac%3A1%3Arn%3A41568339%3Arqn%3A2%3Au%3A1712359037123674141%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C553%2C968%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359046794%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359048%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(0)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:31 UTC	875	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:17:31 GMT Expires: Fri, 05-Apr-2024 23:17:31 GMT Last-Modified: Fri, 05-Apr-2024 23:17:31 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:17:31 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:17:31 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 7a 38 5a 62 6b 59 39 77 34 68 5a 4c 4a 37 6f 65 6f 63 76 71 39 58 51 50 63 58 54 67 4b 44 6e 4e 33 7a 77 6a 61 4e 71 2b 63 58 58 59 33 65 5a 44 5a 45 32 67 56 35 72 76 32 65 79 75 45 30 48 2b 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"z8ZbkY9w4hZLJ7oeocvq9XQPcXTgKDnN3zwjaNq+cXXY3eZDZE2gV5rv2eyuE0H+"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49789	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:30 UTC	2256	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A1056222005%3Az%3A120%3Ai%3A20240406011728%3Aet%3A1712359049%3Ac%3A1%3Arn%3A109557605%3Arqn%3A3%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1626%3Awv%3A2%3Ads%3A0%2C374%2C1100%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359046978%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359049%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:31 UTC	875	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:17:31 GMT Expires: Fri, 05-Apr-2024 23:17:31 GMT Last-Modified: Fri, 05-Apr-2024 23:17:31 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:17:31 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:17:31 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 54 33 47 43 43 51 7a 66 6f 49 4f 49 32 6d 53 4e 4f 79 58 44 51 44 43 4a 4d 70 42 5a 59 6f 38 68 47 77 73 2b 75 68 34 37 6d 46 77 2b 45 75 6d 4c 48 76 32 55 79 61 73 32 68 76 67 56 64 4b 63 77 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"T3GCCQzfoIOI2mSNOyXDQDCJMpBZYo8hGws+uh47mFw+EumLHv2Uyas2hvgVdKcw"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49791	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:32 UTC	767	OUT	GET //pages/faq/ HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
2024-04-05 23:17:32 UTC	216	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:32 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Location: https://steamfiller.ru/pages/faq/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49790	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:32 UTC	766	OUT	GET /pages/faq/ HTTP/1.1 Host: steamfiller.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
2024-04-05 23:17:33 UTC	298	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding
2024-04-05 23:17:33 UTC	16086	IN	Data Raw: 31 65 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c Data Ascii: 1ee8<!DOCTYPE html><html> <head itemscope="" itemtype="http://schema.org/"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width,initial
2024-04-05 23:17:33 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 d0 ad d1 82 d0 b0 20 d1 83 d1 81 d0 bb d1 83 d0 b3 d0 b0 20 d0 bf d1 80 d0 b5 d0 b4 d0 bd d0 b0 d0 b7 d0 bd d0 b0 d1 87 d0 b5 d0 bd d0 b0 20 d0 b4 d0 bb d1 8f 20 d0 b0 d0 ba d0 ba d0 b0 d1 83 d0 bd d1 82 d0 be d0 b2 20 53 74 65 61 6d 2c 20 d0 b7 d0 b0 d1 80 d0 b5 d0 b3 d0 b8 d1 81 d1 82 d1 80 d0 b8 d1 80 d0 be d0 b2 d0 b0 d0 bd d0 bd d1 8b d1 85 20 d0 b2 20 d0 a0 d0 be d1 81 d1 81 d0 b8 d0 b8 2c 20 d0 a2 d1 83 d1 80 d1 86 d0 b8 d0 b8 2c 20 d0 9a d0 b0 d0 b7 d0 b0 d1 85 d1 81 d1 82 d0 b0 d0 bd d0 b5 2c 20 d0 90 d1 80 d0 b3 d0 b5 d0 bd d1 82 d0 b8 d0 bd d0 b5 20 d0 b8 20 d0 bb d1 8e d0 b1 d0 be d0 b9 20 d0 b4 d0 be d0 bb d0 bb d0 b0 d1 80 d0 be d0 b2 d1 8b d0 b9 20 d0 b0 d0 ba d0 ba d0 b0 d1 83 d0 bd d1 82 2c 20 d0 b8 20 Data Ascii: Steam, , , , ,
2024-04-05 23:17:33 UTC	16384	IN	Data Raw: 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d0 b8 20 d0 bf d1 80 d0 b5 d0 b4 d0 be d1 81 d1 82 d0 b0 d0 b2 d0 bb d0 b5 d0 bd d0 bd d1 8b d1 85 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 2e 20 d0 ad d1 82 d0 be 20 d0 bc d0 be d0 b6 d0 b5 d1 82 20 d0 b2 d0 ba d0 bb d1 8e d1 87 d0 b0 d1 82 d1 8c 20 d0 bc d0 b5 d0 b6 d0 b4 d1 83 d0 bd d0 b0 d1 80 d0 be d0 b4 d0 bd d1 8b d0 b9 20 d0 be d0 b1 d0 bc d0 b5 d0 bd 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d0 b5 d0 b9 2e 20 d0 a1 d0 b2 d0 be d0 b4 d0 bd d1 8b d0 b5 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d0 b5 2c 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd d0 bd d1 8b d0 b5 20 d0 b2 20 d1 85 d0 be d0 b4 d0 b5 20 d0 bf d1 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d0 b8 20 d0 b1 d0 b5 d0 b7 d0 be d0 bf d0 b0 d1 81 d0 bd d0 be d1 81 Data Ascii: . . ,
2024-04-05 23:17:33 UTC	16384	IN	Data Raw: d0 bf d0 be d1 81 d0 bb d0 b5 d0 b4 d0 bd d0 b5 d0 b3 d0 be 20 d0 be d0 b1 d0 bd d0 be d0 b2 d0 bb d0 b5 d0 bd d0 b8 d1 8f 3a 20 37 2e 30 36 2e 32 30 32 32 20 3c 62 72 3e 3c 62 72 3e 0a 20 20 20 20 20 20 20 20 20 20 0d 0a 35 37 32 36 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 20 d0 b8 20 d0 bb d0 b8 d1 86 d0 be 2c 20 d0 bf d1 80 d0 b8 d0 bd d1 8f d0 b2 d1 88 d0 b5 d0 b5 20 d0 be d1 84 d0 b5 d1 80 d1 82 d1 83 2c 20 d0 be d0 bf d1 83 d0 b1 d0 bb d0 b8 d0 ba d0 be d0 b2 d0 b0 d0 bd d0 bd d1 83 d1 8e 20 d0 bd d0 b0 20 d0 bf d0 be d1 81 d1 82 d0 be d1 8f d0 bd d0 bd d0 be d0 bc 20 d0 b0 d0 b4 d1 80 d0 b5 d1 81 d0 b5 20 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 Data Ascii: : 7.06.2022 <br><br> 5726 https://steamfiller.ru/ , , https://steamfiller
2024-04-05 23:17:33 UTC	6013	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 92 d0 be 20 d0 b2 d1 81 d1 91 d0 bc 2c 20 d1 87 d1 82 d0 be 20 d0 bd d0 b5 20 d0 be d1 85 d0 b2 d0 b0 d1 87 d0 b5 d0 bd d0 be 20 d0 a1 d0 be d0 b3 d0 bb d0 b0 d1 88 d0 b5 d0 bd d0 b8 d0 b5 d0 bc 2c 20 d0 a1 d1 82 d0 be d1 80 d0 be d0 bd d1 8b 20 d1 80 d1 83 d0 ba d0 be d0 b2 d0 be d0 b4 d1 81 d1 82 d0 b2 d1 83 d1 8e d1 82 d1 81 d1 8f 20 d0 b7 d0 b0 d0 ba d0 be d0 bd d0 be d0 b4 d0 b0 d1 82 d0 b5 d0 bb d1 8c d1 81 d1 82 d0 b2 d0 be d0 bc 20 d0 ad d1 81 d1 82 d0 be d0 bd d0 b8 d0 b8 2c 20 d0 bd d0 b5 20 d0 bf d1 80 d0 b8 d0 bc d0 b5 d0 bd d1 8f d1 8f 20 d0 ba d0 be d0 bb d0 bb d0 b8 d0 b7 d0 b8 d0 be d0 bd d0 bd d1 8b d0 b5 20 d0 bd d0 be d1 80 d0 bc d1 8b 2e 20 3c 62 72 3e 0a 20 20 Data Ascii: , , , . <br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49785	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:33 UTC	2410	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A310184681%3Az%3A120%3Ai%3A20240406011732%3Aet%3A1712359053%3Ac%3A1%3Arn%3A113059509%3Arqn%3A4%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1989%3Awv%3A2%3Ads%3A0%2C0%2C717%2C%2C1123%2C1121%2C1%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359050977%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359053%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:33 UTC	1359	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:17:33 GMT Expires: Fri, 05-Apr-2024 23:17:33 GMT Last-Modified: Fri, 05-Apr-2024 23:17:33 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:17:33 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Sat, 05-Apr-2025 23:17:33 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:17:33 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 6e 54 61 37 53 30 32 56 53 70 6a 41 57 42 73 6a 4d 56 30 71 6f 54 52 69 43 63 66 75 4e 50 66 48 35 44 64 65 33 77 54 65 31 57 77 34 48 50 67 67 65 4f 38 4d 4e 4f 4a 55 53 6f 72 63 37 75 2b 68 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"nTa7S02VSpjAWBsjMV0qoTRiCcfuNPfH5Dde3wTe1Ww4HPggeO8MNOJUSorc7u+h"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49792	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:34 UTC	2284	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A310184681%3Az%3A120%3Ai%3A20240406011732%3Aet%3A1712359053%3Ac%3A1%3Arn%3A113059509%3Arqn%3A4%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1989%3Awv%3A2%3Ads%3A0%2C0%2C717%2C%2C1123%2C1121%2C1%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359050977%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359053%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:17:35 UTC	875	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:17:34 GMT Expires: Fri, 05-Apr-2024 23:17:34 GMT Last-Modified: Fri, 05-Apr-2024 23:17:34 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:17:34 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:17:35 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 75 49 67 64 53 67 77 74 34 51 43 48 67 64 58 7a 74 55 75 6f 37 50 55 75 54 78 2f 71 65 5a 63 79 2f 55 50 74 38 79 61 44 4a 6a 2b 58 48 43 79 56 37 66 7a 49 75 63 54 4b 4d 78 34 6e 74 6f 37 32 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"uIgdSgwt4QCHgdXztUuo7PUuTx/qeZcy/UPt8yaDJj+XHCyV7fzIucTKMx4nto72"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49793	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:36 UTC	760	OUT	GET /kzt/ HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
2024-04-05 23:17:37 UTC	298	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:37 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding
2024-04-05 23:17:37 UTC	16086	IN	Data Raw: 31 65 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c Data Ascii: 1ee8<!DOCTYPE html><html> <head itemscope="" itemtype="http://schema.org/"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width,initial
2024-04-05 23:17:37 UTC	16384	IN	Data Raw: 39 2e 35 63 30 20 31 37 20 36 2e 37 20 33 33 2e 33 20 31 38 2e 37 20 34 35 2e 33 6c 31 37 36 20 0d 0a 32 30 30 30 0d 0a 31 37 36 63 32 35 20 32 35 20 36 35 2e 35 20 32 35 20 39 30 2e 35 20 30 4c 34 31 38 2e 37 20 33 31 37 2e 33 63 32 35 2d 32 35 20 32 35 2d 36 35 2e 35 20 30 2d 39 30 2e 35 6c 2d 31 37 36 2d 31 37 36 63 2d 31 32 2d 31 32 2d 32 38 2e 33 2d 31 38 2e 37 2d 34 35 2e 33 2d 31 38 2e 37 48 34 38 43 32 31 2e 35 20 33 32 20 30 20 35 33 2e 35 20 30 20 38 30 7a 6d 31 31 32 20 33 32 61 33 32 20 33 32 20 30 20 31 20 31 20 30 20 36 34 20 33 32 20 33 32 20 30 20 31 20 31 20 30 2d 36 34 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 2f 73 70 61 6e 3e 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 32 30 2e 31 31 2e 32 30 32 33 20 53 Data Ascii: 9.5c0 17 6.7 33.3 18.7 45.3l176 2000176c25 25 65.5 25 90.5 0L418.7 317.3c25-25 25-65.5 0-90.5l-176-176c-12-12-28.3-18.7-45.3-18.7H48C21.5 32 0 53.5 0 80zm112 32a32 32 0 1 1 0 64 32 32 0 1 1 0-64z"></path></svg></span> 20.11.2023 S
2024-04-05 23:17:37 UTC	16384	IN	Data Raw: 73 2d 31 2d 35 2e 32 2d 33 2e 31 2d 36 2e 36 63 2d 33 2e 38 2d 33 2e 34 2d 31 32 2e 32 2d 33 2e 36 2d 31 37 2e 32 2d 31 2e 34 2d 37 2e 32 20 33 0d 0a 32 30 30 30 0d 0a 2e 33 2d 37 2e 36 20 31 32 2e 38 2d 35 2e 37 20 31 36 4c 38 37 20 33 31 36 63 31 2e 35 20 32 2e 34 2d 32 2e 33 20 31 30 2e 34 2d 31 30 2e 39 20 31 30 2e 37 2d 39 20 2e 37 2d 31 32 2e 31 2d 38 2e 38 2d 31 33 2e 37 2d 31 32 2e 39 6c 31 32 2e 33 20 31 73 2e 35 2d 32 20 30 2d 33 2e 32 61 31 31 30 20 31 31 30 20 30 20 30 31 2d 31 32 2e 33 2d 31 2e 36 6c 2d 2e 35 2d 36 2e 32 68 36 6c 2d 2e 34 2d 32 2e 38 73 2d 35 2e 31 2e 34 2d 35 2e 36 20 30 63 2d 2e 35 2d 2e 33 2d 31 2d 36 2e 32 2d 31 2d 36 2e 32 73 2d 31 2d 2e 34 2d 32 2d 2e 34 2d 32 20 2e 34 2d 32 20 2e 34 2d 2e 34 20 35 2e 39 2d 2e 39 20 36 Data Ascii: s-1-5.2-3.1-6.6c-3.8-3.4-12.2-3.6-17.2-1.4-7.2 32000.3-7.6 12.8-5.7 16L87 316c1.5 2.4-2.3 10.4-10.9 10.7-9 .7-12.1-8.8-13.7-12.9l12.3 1s.5-2 0-3.2a110 110 0 01-12.3-1.6l-.5-6.2h6l-.4-2.8s-5.1.4-5.6 0c-.5-.3-1-6.2-1-6.2s-1-.4-2-.4-2 .4-2 .4-.4 5.9-.9 6
2024-04-05 23:17:37 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 69 6e 66 6f 2d 63 0d 0a 38 30 30 30 0d 0a 6f 6e 74 61 69 6e 65 72 22 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 20 2d 31 30 70 78 20 31 30 70 78 20 31 30 70 78 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 33 34 2c 20 31 34 35 2c 20 31 35 35 29 20 22 3e d0 a1 d1 83 d0 bc d0 bc d0 b0 20 d0 b1 d1 8b d0 bb d0 b0 20 d0 be d0 ba d1 80 d1 83 d0 b3 d0 bb d0 b5 d0 bd d0 b0 20 d0 b4 d0 be 20 d0 ba d1 80 d0 b0 d1 82 Data Ascii: </div> <div id="info-c8000ontainer" class="hidden"> <div style="margin: -10px 10px 10px; color: rgb(134, 145, 155) ">
2024-04-05 23:17:37 UTC	16384	IN	Data Raw: 2e 35 38 33 43 33 34 2e 36 36 36 35 20 33 37 2e 36 37 37 20 33 36 2e 37 34 31 20 33 39 20 33 39 2e 30 31 30 35 20 33 39 43 34 32 2e 33 31 38 20 33 39 20 34 35 20 33 36 2e 32 33 32 35 20 34 35 20 33 32 2e 38 32 43 34 35 20 33 32 2e 30 36 34 20 34 33 2e 34 35 38 20 32 31 2e 31 39 36 35 20 34 33 2e 33 35 34 35 20 32 30 2e 34 34 38 5a 4d 33 33 20 31 33 2e 35 43 33 34 2e 31 30 34 20 31 33 2e 35 20 33 34 2e 39 39 39 35 20 31 34 2e 33 39 35 35 20 33 34 2e 39 39 39 35 20 31 35 2e 34 39 39 35 43 33 34 2e 39 39 39 35 20 31 36 2e 36 30 33 35 20 33 34 2e 31 30 34 20 31 37 2e 34 39 39 20 33 33 20 31 37 2e 34 39 39 43 33 31 2e 38 39 36 20 31 37 2e 34 39 39 20 33 31 2e 30 30 30 35 20 31 36 2e 36 30 33 35 20 33 31 2e 30 30 30 35 20 31 35 2e 34 39 39 35 43 33 31 2e 30 30 Data Ascii: .583C34.6665 37.677 36.741 39 39.0105 39C42.318 39 45 36.2325 45 32.82C45 32.064 43.458 21.1965 43.3545 20.448ZM33 13.5C34.104 13.5 34.9995 14.3955 34.9995 15.4995C34.9995 16.6035 34.104 17.499 33 17.499C31.896 17.499 31.0005 16.6035 31.0005 15.4995C31.00
2024-04-05 23:17:38 UTC	16384	IN	Data Raw: d0 be d0 bd d1 8f d1 82 d0 bd d0 be 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 5f 63 6c 6f 73 0d 0a 36 30 30 30 0d 0a 65 22 3e 3c 2f 62 75 74 74 6f 6e 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 5f 63 6c 6f 73 65 22 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 22 20 69 64 3d 22 65 72 72 6f 72 2d 70 6f 70 75 70 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 5f 69 6e 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 Data Ascii: </button> <button class="popup__clos6000e"></button> <button class="popup__close"></button></div></div> <div class="popup" id="error-popup"><div class="popup__inner">
2024-04-05 23:17:38 UTC	16384	IN	Data Raw: 8c d0 b1 d1 83 20 d1 81 20 d0 bc d0 be d1 88 d0 b5 d0 bd d0 bd d0 b8 d1 87 d0 b5 d1 81 d1 82 d0 b2 d0 be d0 bc 2c 20 d0 be d1 82 d0 bc d1 8b d0 b2 d0 b0 d0 bd d0 b8 d0 b5 d0 bc 20 d0 b4 d0 b5 d0 bd d0 b5 d0 b3 20 d0 b8 20 d0 bd d0 b0 d0 bb d0 be d0 b3 d0 be d0 b2 d1 8b d0 bc d0 b8 20 d0 b2 d0 be d0 bf d1 80 d0 be d1 81 d0 b0 d0 bc d0 b8 2e 20 d0 9c d1 8b 20 d0 b3 d0 b0 d1 80 d0 b0 d0 bd d1 82 d0 b8 d1 80 d1 83 d0 b5 d0 bc 2c 20 d1 87 d1 82 d0 be 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d1 8f 20 d1 85 d1 80 d0 b0 d0 bd d0 b8 d1 82 d1 81 d1 8f 20 d0 bd d0 b0 d0 b4 d1 91 d0 b6 d0 bd d0 be 20 d0 b4 d0 be 20 d0 b8 d1 81 d1 82 d0 b5 d1 87 d0 b5 d0 bd d0 b8 d1 8f 20 d1 81 d1 80 d0 be d0 ba d0 b0 20 d0 b5 d1 91 20 d1 85 d1 80 d0 b0 d0 bd d0 b5 d0 Data Ascii: , . ,
2024-04-05 23:17:38 UTC	16384	IN	Data Raw: d0 bb d0 b5 d0 bd d0 bd d1 8b d0 b5 20 d0 bd d0 b0 20 d0 b8 d0 b7 d0 bc d0 b5 d0 bd d0 b5 d0 bd d0 b8 d0 b5 20 d1 80 d0 b0 d0 b1 d0 be d1 82 d1 8b 20 d0 b8 d0 bb d0 b8 20 d1 84 d1 83 d0 bd d0 ba d1 86 d0 b8 d0 be d0 bd d0 b0 d0 bb d1 8c d0 bd d0 be d1 81 d1 82 d0 b8 20 d0 a1 d0 b0 d0 b9 d1 82 d0 b0 3b 3c 62 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 9f d1 80 d0 b8 d0 bc d0 b5 d0 bd d1 8f d1 82 d1 8c 20 d0 b2 d1 8b d1 88 d0 b5 d1 83 d0 ba d0 b0 d0 b7 d0 b0 d0 bd d0 bd d1 8b d0 b5 20 d0 b4 d0 b5 d0 b9 d1 81 d1 82 d0 b2 d0 b8 d1 8f 20 d0 ba 20 d0 bb d1 8e d0 b1 d0 be d0 b9 20 d1 87 d0 b0 d1 81 d1 82 d0 b8 20 d0 a1 d0 b0 d0 b9 d1 82 d0 b0 2e 3c 62 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ;<br> .<br>
2024-04-05 23:17:38 UTC	297	IN	Data Raw: 65 28 2d 32 29 20 2b 20 22 2d 22 20 2b 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 22 30 30 22 20 2b 20 28 64 61 74 65 2e 67 65 74 4d 6f 6e 74 68 28 29 20 2b 20 31 29 29 2e 73 6c 69 63 65 28 2d 32 29 20 2b 20 22 2d 22 20 2b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 65 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 55 54 43 54 6f 4c 6f 63 61 6c 44 61 74 65 22 29 2e 66 6f 72 45 61 63 68 28 28 64 61 74 65 29 20 3d 3e 20 64 61 74 65 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 66 6f 72 6d 61 74 44 61 74 65 28 6e 65 77 20 44 61 74 65 28 64 61 74 65 2e 69 6e 6e 65 72 48 54 4d 4c 20 2b 20 22 2e 30 30 30 5a 22 29 29 29 3b 0a 20 20 20 20 3c 2f 73 63 Data Ascii: e(-2) + "-" + ("00" + (date.getMonth() + 1)).slice(-2) + "-" + date.getFullYear(); } document.querySelectorAll(".UTCToLocalDate").forEach((date) => date.innerHTML = formatDate(new Date(date.innerHTML + ".000Z"))); </sc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49786	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:38 UTC	2489	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A853926178%3Az%3A120%3Ai%3A20240406011737%3Aet%3A1712359058%3Ac%3A1%3Arn%3A731497905%3Arqn%3A5%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A2301%3Awv%3A2%3Ads%3A0%2C572%2C1466%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359055011%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359058%3At%3A%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam%20%D0%9A%D0%B0%D0%B7%D0%B0%D1%85%D1%81%D1%82%D0%B0%D0%BD%20%D0%BE%D1%82%207000%20%E2%82%B8%20-%20%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:38 UTC	1359	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:17:38 GMT Expires: Fri, 05-Apr-2024 23:17:38 GMT Last-Modified: Fri, 05-Apr-2024 23:17:38 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:17:38 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Sat, 05-Apr-2025 23:17:38 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:17:38 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 78 54 73 4a 64 65 6d 6b 31 43 66 37 46 51 4e 33 4d 30 33 53 78 31 51 39 77 61 75 7a 33 56 48 64 4e 4b 42 45 30 36 51 35 76 62 33 52 72 37 77 65 43 65 43 79 2f 77 4b 44 30 43 70 53 50 77 7a 45 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"xTsJdemk1Cf7FQN3M03Sx1Q9wauz3VHdNKBE06Q5vb3Rr7weCeCy/wKD0CpSPwzE"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49795	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:39 UTC	1622	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=1056222005&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&rn=586329562&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359058%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011737%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359058&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 81729 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:39 UTC	16384	OUT	Data Raw: 0a bd fe 04 08 00 10 00 18 1b 20 00 4a b1 fe 04 0a 0f 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 12 42 d0 9c d0 be d0 bc d0 b5 d0 bd d1 82 d0 b0 d0 bb d1 8c d0 bd d0 be d0 b5 20 d0 bf d0 be d0 bf d0 be d0 bb d0 bd d0 b5 d0 bd d0 b8 d0 b5 20 d0 b1 d0 b0 d0 bb d0 b0 d0 bd d1 81 d0 b0 20 53 74 65 61 6d 1a 26 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 70 61 67 65 73 2f 66 65 65 64 62 61 63 6b 2f 22 6f 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 2a Data Ascii: J<!DOCTYPE html>B Steam&https://steamfiller.ru/pages/feedback/"oMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36*
2024-04-05 23:17:39 UTC	16384	OUT	Data Raw: 32 2e 31 30 37 35 20 36 2e 33 31 31 38 34 20 31 31 2e 39 35 35 38 20 36 2e 34 30 34 38 34 43 31 31 2e 38 30 34 20 36 2e 34 39 37 38 34 20 31 31 2e 36 37 38 36 20 36 2e 36 32 38 31 38 20 31 31 2e 35 39 31 35 20 36 2e 37 38 33 34 33 43 31 31 2e 35 30 34 34 20 36 2e 39 33 38 36 37 20 31 31 2e 34 35 38 36 20 37 2e 31 31 33 36 33 20 31 31 2e 34 35 38 34 20 37 2e 32 39 31 36 33 43 31 31 2e 34 35 38 34 20 37 2e 35 36 37 38 39 20 31 31 2e 33 34 38 36 20 37 2e 38 33 32 38 35 20 31 31 2e 31 35 33 33 20 38 2e 30 32 38 32 43 31 30 2e 39 35 37 39 20 38 2e 32 32 33 35 35 20 31 30 2e 36 39 33 20 38 2e 33 33 33 32 39 20 31 30 2e 34 31 36 37 20 38 2e 33 33 33 32 39 43 31 30 2e 31 34 30 34 20 38 2e 33 33 33 32 39 20 39 2e 38 37 35 34 37 20 38 2e 32 32 33 35 35 20 39 2e 36 Data Ascii: 2.1075 6.31184 11.9558 6.40484C11.804 6.49784 11.6786 6.62818 11.5915 6.78343C11.5044 6.93867 11.4586 7.11363 11.4584 7.29163C11.4584 7.56789 11.3486 7.83285 11.1533 8.0282C10.9579 8.22355 10.693 8.33329 10.4167 8.33329C10.1404 8.33329 9.87547 8.22355 9.6
2024-04-05 23:17:39 UTC	16384	OUT	Data Raw: be d0 b6 d0 b5 d1 82 20 d0 bf d0 be d1 82 d1 80 d0 b5 d0 b1 d0 be d0 b2 d0 b0 d1 82 d1 8c d1 81 d1 8f 20 d0 bf d1 80 d0 b5 d0 b4 d0 be d1 81 d1 82 d0 b0 d0 b2 d0 b8 d1 82 d1 8c 20 d0 bd d0 b0 d0 bc 20 d0 b2 d0 b0 d1 88 d1 83 20 d0 bb d0 b8 d1 87 d0 bd d1 83 d1 8e 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d1 8e 2e 20 d0 98 d0 bd d0 be d0 b3 d0 b4 d0 b0 20 d0 bc d1 8b 20 d0 bf d1 80 d0 be d1 81 d0 b8 d0 bc 20 d0 bf d1 80 d0 b5 d0 b4 d0 be d1 81 d1 82 d0 b0 d0 b2 d0 b8 d1 82 d1 8c 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d1 8e 20 d1 87 d0 b5 d1 80 d0 b5 d0 b7 20 d0 be d0 bf d1 80 d0 be d1 81 d1 8b 20 d0 b8 d0 bb d0 b8 20 d0 ba d0 be d0 bd d0 ba d1 83 d1 80 d1 81 d1 8b 2e 20 d0 a3 d1 87 d0 b0 d1 81 d1 82 d0 b8 d0 b5 20 d0 b2 20 Data Ascii: . .
2024-04-05 23:17:39 UTC	16384	OUT	Data Raw: d1 82 d1 80 d0 b0 d0 bd d0 b7 d0 b0 d0 ba d1 86 d0 b8 d0 b8 20 d0 bf d0 b5 d1 80 d0 b5 d0 b4 d0 b0 d1 8e d1 82 d1 81 d1 8f 20 d0 b2 20 d1 81 d0 be d0 be d1 82 d0 b2 d0 b5 d1 82 d1 81 d1 82 d0 b2 d1 83 d1 8e d1 89 d0 b8 d0 b5 20 d1 80 d0 b5 d0 b3 d1 83 d0 bb d0 b8 d1 80 d1 83 d1 8e d1 89 d0 b8 d0 b5 20 d0 b8 20 d0 bf d1 80 d0 b0 d0 b2 d0 be d0 be d1 85 d1 80 d0 b0 d0 bd d0 b8 d1 82 d0 b5 d0 bb d1 8c d0 bd d1 8b d0 b5 20 d0 be d1 80 d0 b3 d0 b0 d0 bd d1 8b 2e 20 d0 a3 d1 87 d1 91 d1 82 d0 bd d1 8b d0 b5 20 d0 b7 d0 b0 d0 bf d0 b8 d1 81 d0 b8 20 d1 81 20 d0 bf d0 be d0 b4 d0 be d0 b7 d1 80 d0 b8 d1 82 d0 b5 d0 bb d1 8c d0 bd d0 be d0 b9 20 d0 b0 d0 ba d1 82 d0 b8 d0 b2 d0 bd d0 be d1 81 d1 82 d1 8c d1 8e 20 d0 bc d0 be d0 b3 d1 83 d1 82 20 d0 b1 d1 8b d1 82 Data Ascii: .
2024-04-05 23:17:39 UTC	16193	OUT	Data Raw: 20 d0 a1 d0 b0 d0 b9 d1 82 d0 b5 2e 20 d0 92 20 d1 81 d0 bb d1 83 d1 87 d0 b0 d0 b5 20 d0 bf d1 80 d0 be d1 82 d0 b8 d0 b2 d0 be d1 80 d0 b5 d1 87 d0 b8 d0 b9 20 d0 bf d1 80 d0 b8 d0 bc d0 b5 d0 bd d1 8f d1 8e d1 82 d1 81 d1 8f 20 d0 bf d0 be d0 bb d0 be d0 b6 d0 b5 d0 bd d0 b8 d1 8f 20 d1 8d d1 82 d0 be d0 b3 d0 be 20 d0 b4 d0 be d0 ba d1 83 d0 bc d0 b5 d0 bd d1 82 d0 b0 2e 30 a0 05 38 9e 05 6a 10 08 a0 05 12 02 62 72 20 96 05 30 a1 05 38 9f 05 6a 9d 03 08 a1 05 12 05 23 74 65 78 74 20 96 05 2a 87 03 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 9f d0 be d0 bb d1 8c d0 b7 d0 be d0 b2 d0 b0 d1 82 d0 b5 d0 bb d1 8c 20 d1 81 d0 be d0 b3 d0 bb d0 b0 d1 88 d0 b0 d0 b5 d1 82 d1 81 d1 8f 20 d0 Data Ascii: . .08jbr 08j#text *
2024-04-05 23:17:40 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:40 GMT Expires: Fri, 05-Apr-2024 23:17:40 GMT Last-Modified: Fri, 05-Apr-2024 23:17:40 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49796	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:39 UTC	2363	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A853926178%3Az%3A120%3Ai%3A20240406011737%3Aet%3A1712359058%3Ac%3A1%3Arn%3A731497905%3Arqn%3A5%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A2301%3Awv%3A2%3Ads%3A0%2C572%2C1466%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359055011%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359058%3At%3A%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam%20%D0%9A%D0%B0%D0%B7%D0%B0%D1%85%D1%81%D1%82%D0%B0%D0%BD%20%D0%BE%D1%82%207000%20%E2%82%B8%20-%20%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:17:40 UTC	875	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:17:40 GMT Expires: Fri, 05-Apr-2024 23:17:40 GMT Last-Modified: Fri, 05-Apr-2024 23:17:40 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:17:40 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:17:40 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 62 56 6e 74 73 44 51 4d 49 31 53 4e 2b 46 48 37 50 6b 68 37 66 6a 47 53 63 51 46 7a 45 31 4e 62 6d 32 6c 58 46 77 62 48 65 44 77 4c 69 76 35 66 6b 68 58 57 4f 69 6a 73 70 6f 39 77 57 59 69 56 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"bVntsDQMI1SN+FH7Pkh7fjGScQFzE1Nbm2lXFwbHeDwLiv5fkhXWOijspo9wWYiV"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49797	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:40 UTC	1603	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=131641893&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=826086009&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359059%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011739%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359059&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 139969 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:40 UTC	16384	OUT	Data Raw: 0a a9 02 08 1a 10 02 18 1c 20 00 ca 01 9d 02 0a 73 08 85 09 12 03 64 69 76 1a 65 0a 05 73 74 79 6c 65 12 5c 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6c 65 66 74 3a 20 2d 31 31 31 31 31 70 78 3b 20 77 69 64 74 68 3a 20 36 30 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 20 62 6f 72 64 65 72 3a 20 30 70 78 3b 20 01 38 35 0a a3 01 08 84 09 12 03 64 69 76 1a 95 01 0a 05 73 74 79 6c 65 12 8b 01 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 73 63 72 6f 6c 6c 3b 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 20 62 6f 72 64 65 72 3a Data Ascii: sdivestyle\position: absolute; left: -11111px; width: 60px; margin-top: 1px; padding: 0px; border: 0px; 85divstyleposition: relative; display: block; box-sizing: border-box; overflow: scroll; margin: auto; border:
2024-04-05 23:17:40 UTC	16384	OUT	Data Raw: 31 32 2e 37 37 36 33 20 31 36 2e 36 36 36 36 20 31 32 2e 35 20 31 36 2e 36 36 36 36 5a 4d 31 34 2e 33 34 36 39 20 39 2e 38 31 32 34 36 43 31 34 2e 31 31 35 38 20 39 2e 39 36 33 33 33 20 31 33 2e 39 32 32 38 20 31 30 2e 31 36 35 37 20 31 33 2e 37 38 33 31 20 31 30 2e 34 30 33 38 43 31 33 2e 36 34 33 34 20 31 30 2e 36 34 31 38 20 31 33 2e 35 36 30 37 20 31 30 2e 39 30 39 20 31 33 2e 35 34 31 37 20 31 31 2e 31 38 34 33 56 31 32 2e 35 43 31 33 2e 35 34 31 37 20 31 32 2e 37 37 36 32 20 31 33 2e 34 33 31 39 20 31 33 2e 30 34 31 32 20 31 33 2e 32 33 36 36 20 31 33 2e 32 33 36 35 43 31 33 2e 30 34 31 32 20 31 33 2e 34 33 31 39 20 31 32 2e 37 37 36 33 20 31 33 2e 35 34 31 36 20 31 32 2e 35 20 31 33 2e 35 34 31 36 43 31 32 2e 32 32 33 38 20 31 33 2e 35 34 31 36 20 Data Ascii: 12.7763 16.6666 12.5 16.6666ZM14.3469 9.81246C14.1158 9.96333 13.9228 10.1657 13.7831 10.4038C13.6434 10.6418 13.5607 10.909 13.5417 11.1843V12.5C13.5417 12.7762 13.4319 13.0412 13.2366 13.2365C13.0412 13.4319 12.7763 13.5416 12.5 13.5416C12.2238 13.5416
2024-04-05 23:17:40 UTC	16384	OUT	Data Raw: 2e 33 2d 32 2e 38 2d 2e 34 2d 31 2e 37 2d 32 20 31 2e 35 20 30 20 35 2e 35 2d 31 2e 33 20 36 2e 39 2d 31 2e 39 73 32 2e 39 2d 31 2e 34 20 34 2e 31 2d 32 2e 35 63 31 2e 32 2d 31 2e 33 20 32 20 2e 37 20 31 2e 33 20 31 2e 38 2d 2e 35 2e 37 2d 32 2e 38 20 32 2d 34 2e 35 20 32 2e 37 2d 32 2e 35 2e 38 2d 34 2e 37 20 32 2d 36 2e 31 20 31 2e 39 7a 6d 31 32 2e 35 2d 35 2e 31 63 2d 31 2e 33 2d 31 2e 34 2d 2e 32 2d 32 2e 34 20 31 2e 37 2d 33 2e 35 20 32 2e 38 2d 31 2e 35 20 32 2d 33 2e 36 20 35 2e 36 2d 35 2e 33 20 31 2e 36 2d 31 20 32 34 2d 31 30 20 33 31 2e 33 2d 31 34 2e 38 73 32 37 2e 38 2d 32 30 2e 33 20 33 33 2e 33 2d 33 31 63 35 2e 34 2d 31 30 2e 36 20 32 2e 38 2d 31 31 2e 34 20 33 2e 36 2d 31 31 2e 38 2e 37 2d 2e 35 20 31 2e 35 20 31 2e 35 20 31 2e 34 20 33 Data Ascii: .3-2.8-.4-1.7-2 1.5 0 5.5-1.3 6.9-1.9s2.9-1.4 4.1-2.5c1.2-1.3 2 .7 1.3 1.8-.5.7-2.8 2-4.5 2.7-2.5.8-4.7 2-6.1 1.9zm12.5-5.1c-1.3-1.4-.2-2.4 1.7-3.5 2.8-1.5 2-3.6 5.6-5.3 1.6-1 24-10 31.3-14.8s27.8-20.3 33.3-31c5.4-10.6 2.8-11.4 3.6-11.8.7-.5 1.5 1.5 1.4 3
2024-04-05 23:17:40 UTC	16384	OUT	Data Raw: 20 32 33 2e 36 32 35 20 32 2e 32 35 20 32 33 2e 31 32 30 35 20 32 2e 32 35 20 32 32 2e 35 56 37 2e 36 38 32 31 39 43 32 2e 36 30 32 31 31 20 37 2e 38 30 36 38 38 20 32 2e 39 38 30 35 39 20 37 2e 38 37 35 20 33 2e 33 37 35 20 37 2e 38 37 35 48 32 33 2e 36 32 35 43 32 34 2e 32 34 35 35 20 37 2e 38 37 35 20 32 34 2e 37 35 20 38 2e 33 37 39 35 35 20 32 34 2e 37 35 20 39 56 31 31 2e 38 31 32 35 48 31 38 2e 35 36 32 35 43 31 36 2e 33 39 31 33 20 31 31 2e 38 31 32 35 20 31 34 2e 36 32 35 20 31 33 2e 35 37 39 34 20 31 34 2e 36 32 35 20 31 35 2e 37 35 43 31 34 2e 36 32 35 20 31 37 2e 39 32 30 36 20 31 36 2e 33 39 31 33 20 31 39 2e 36 38 37 35 20 31 38 2e 35 36 32 35 20 31 39 2e 36 38 37 35 48 32 34 2e 37 35 56 32 32 2e 35 43 32 34 2e 37 35 20 32 33 2e 31 32 30 35 Data Ascii: 23.625 2.25 23.1205 2.25 22.5V7.68219C2.60211 7.80688 2.98059 7.875 3.375 7.875H23.625C24.2455 7.875 24.75 8.37955 24.75 9V11.8125H18.5625C16.3913 11.8125 14.625 13.5794 14.625 15.75C14.625 17.9206 16.3913 19.6875 18.5625 19.6875H24.75V22.5C24.75 23.1205
2024-04-05 23:17:40 UTC	16384	OUT	Data Raw: 20 20 20 20 20 6c 65 74 20 75 72 6c 20 3d 20 60 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 61 70 69 2f 63 68 65 63 6b 6c 6f 67 69 6e 2e 70 68 70 3f 6c 6f 67 69 6e 3d 24 7b 6c 6f 67 69 6e 7d 26 61 6d 6f 75 6e 74 3d 24 7b 61 6d 6f 75 6e 74 7d 26 6d 69 63 72 6f 74 69 6d 65 3d 24 7b 6d 69 63 72 6f 74 69 6d 65 7d 60 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 75 62 6d 69 74 6d 61 69 6e 22 29 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 27 d0 9f d1 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d0 b0 20 d0 bb d0 be d0 b3 d0 b8 d0 bd d0 b0 20 2e 2e 2e 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 75 Data Ascii: let url = `https://steamfiller.ru/api/checklogin.php?login=${login}&amount=${amount}&microtime=${microtime}`; document.getElementById("submitmain").textContent = ' ...'; document.getElementById("su
2024-04-05 23:17:40 UTC	16384	OUT	Data Raw: 1a 10 0a 06 74 61 72 67 65 74 12 06 5f 62 6c 61 6e 6b 1a 09 0a 04 68 72 65 66 12 01 23 20 b6 04 38 c0 04 6a 19 08 c2 04 12 05 23 74 65 78 74 20 c1 04 2a 0a d0 b7 d0 b4 d0 b5 d1 81 d1 8c 6a 2e 08 c3 04 12 05 23 74 65 78 74 20 ab 04 2a 19 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 c4 04 38 b6 04 6a 14 08 c4 04 12 06 62 75 74 74 6f 6e 20 ab 04 30 c6 04 38 c3 04 6a 1d 08 c5 04 12 05 23 74 65 78 74 20 c4 04 2a 0e d0 9f d0 be d0 bd d1 8f d1 82 d0 bd d0 be 6a 2e 08 c6 04 12 05 23 74 65 78 74 20 ab 04 2a 19 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 c7 04 38 c4 04 6a 2b 08 c7 04 12 06 62 75 74 74 6f 6e 1a 15 0a 05 63 6c 61 73 73 12 0c 70 6f 70 75 70 5f 5f 63 6c 6f 73 65 20 ab 04 30 c8 04 38 c6 Data Ascii: target_blankhref# 8j#text j.#text 08jbutton 08j#text j.#text 08j+buttonclasspopup__close 08
2024-04-05 23:17:40 UTC	16384	OUT	Data Raw: bf d0 be d0 b4 d0 b4 d0 b5 d1 80 d0 b6 d0 ba d0 b8 3b 20 30 f1 05 38 ef 05 6a 10 08 f1 05 12 02 62 72 20 e9 05 30 f2 05 38 f0 05 6a 87 01 08 f2 05 12 05 23 74 65 78 74 20 e9 05 2a 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 b2 d1 8b d0 bf d0 be d0 bb d0 bd d0 b5 d0 bd d0 b8 d0 b5 20 d0 be d0 bf d1 80 d0 b5 d0 b4 d0 b5 d0 bb d1 91 d0 bd d0 bd d1 8b d1 85 20 d0 b1 d0 b8 d0 b7 d0 bd d0 b5 d1 81 2d d1 82 d1 80 d0 b5 d0 b1 d0 be d0 b2 d0 b0 d0 bd d0 b8 d0 b9 3b 20 30 f3 05 38 f1 05 6a 10 08 f3 05 12 02 62 72 20 e9 05 30 f4 05 38 f2 05 6a 61 08 f4 05 12 05 23 74 65 78 74 20 e9 05 2a 4c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d1 80 d0 b0 d0 b1 Data Ascii: ; 08jbr 08j#text r -; 08jbr 08ja#text L
2024-04-05 23:17:40 UTC	16384	OUT	Data Raw: d0 bc d0 bf d0 b0 d0 bd d0 b8 d0 b5 d0 b9 20 56 61 6c 76 65 2c 20 d0 b2 d0 bb d0 b0 d0 b4 d0 b5 d1 8e d1 89 d0 b5 d0 b9 20 d0 bf d1 80 d0 b0 d0 b2 d0 b0 d0 bc d0 b8 20 d0 bd d0 b0 20 d1 80 d0 b0 d0 b7 d0 bb d0 b8 d1 87 d0 bd d1 8b d0 b5 20 d0 be d0 b1 d1 8a d0 b5 d0 ba d1 82 d1 8b 20 d0 98 d0 bd d0 b2 d0 b5 d0 bd d1 82 d0 b0 d1 80 d1 8f 2e 20 30 aa 07 38 a8 07 6a 10 08 aa 07 12 02 62 72 20 a4 07 30 ab 07 38 a9 07 6a db 01 08 ab 07 12 05 23 74 65 78 74 20 a4 07 2a c5 01 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 c2 ab d0 92 d0 bb d0 b0 d0 b4 d0 b5 d0 bb d0 b5 d1 86 c2 bb 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 45 50 49 43 4d 49 44 20 4f 55 cc 88 2c 20 52 65 67 2e 20 Data Ascii: Valve, . 08jbr 08j#text * EPICMID OU, Reg.
2024-04-05 23:17:40 UTC	8897	OUT	Data Raw: d0 bb d1 8c d0 bd d0 be 2e 30 c0 08 38 be 08 6a 10 08 c0 08 12 02 62 72 20 b8 08 30 c1 08 38 bf 08 6a 9c 04 08 c1 08 12 05 23 74 65 78 74 20 b8 08 2a 86 04 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 94 d0 be 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd d0 b8 d1 8f 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d0 b8 20 d0 be 20 d0 bd d0 b0 d1 80 d1 83 d1 88 d0 b5 d0 bd d0 b8 d0 b8 20 d0 ba d0 be d0 bd d1 84 d0 b8 d0 b4 d0 b5 d0 bd d1 86 d0 b8 d0 b0 d0 bb d1 8c d0 bd d0 be d1 81 d1 82 d0 b8 20 d1 83 d0 bf d0 be d0 bb d0 bd d0 be d0 bc d0 be d1 87 d0 b5 d0 bd d0 bd d1 8b d1 85 20 d0 b0 d0 b4 d1 80 d0 b5 d1 81 d0 be d0 b2 20 d1 8d d0 bb d0 b5 d0 ba d1 82 d1 80 d0 be d0 bd d0 bd Data Ascii: .08jbr 08j#text *
2024-04-05 23:17:41 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:41 GMT Expires: Fri, 05-Apr-2024 23:17:41 GMT Last-Modified: Fri, 05-Apr-2024 23:17:41 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49798	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:41 UTC	1446	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=1056222005&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&rn=586329562&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359058%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011737%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359058&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:17:41 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:41 GMT Expires: Fri, 05-Apr-2024 23:17:41 GMT Last-Modified: Fri, 05-Apr-2024 23:17:41 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49794	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:41 UTC	760	OUT	GET /try/ HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
2024-04-05 23:17:42 UTC	298	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding
2024-04-05 23:17:42 UTC	16086	IN	Data Raw: 31 65 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c Data Ascii: 1ee8<!DOCTYPE html><html> <head itemscope="" itemtype="http://schema.org/"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width,initial
2024-04-05 23:17:42 UTC	16384	IN	Data Raw: 3d 22 4d 30 20 38 30 56 32 32 39 2e 35 63 30 20 31 37 20 36 2e 37 20 33 33 2e 33 20 31 38 2e 37 20 34 35 2e 33 6c 31 37 36 20 31 37 36 63 32 35 20 32 35 20 36 35 2e 35 20 32 35 20 39 30 2e 35 20 30 4c 34 31 38 2e 37 20 33 31 37 2e 33 63 32 35 2d 32 35 20 32 35 2d 36 35 2e 35 20 30 2d 39 30 2e 35 6c 2d 31 37 36 2d 31 37 36 63 2d 31 32 2d 31 32 2d 32 38 2e 33 2d 31 38 2e 37 2d 34 35 2e 33 2d 31 38 2e 37 48 34 38 43 32 31 2e 35 20 33 32 20 30 20 35 33 2e 35 20 30 20 38 30 7a 6d 31 31 32 20 33 32 61 33 32 20 33 32 20 30 20 31 20 31 20 30 20 36 34 20 33 32 20 33 32 20 30 20 31 20 31 20 30 2d 36 34 7a 22 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 3c 2f 73 70 61 6e 3e 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 32 30 2e 31 31 2e 32 30 32 33 Data Ascii: ="M0 80V229.5c0 17 6.7 33.3 18.7 45.3l176 176c25 25 65.5 25 90.5 0L418.7 317.3c25-25 25-65.5 0-90.5l-176-176c-12-12-28.3-18.7-45.3-18.7H48C21.5 32 0 53.5 0 80zm112 32a32 32 0 1 1 0 64 32 32 0 1 1 0-64z"></path></svg></span> 20.11.2023
2024-04-05 23:17:42 UTC	16384	IN	Data Raw: 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 32 30 30 30 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 65 33 30 61 31 37 22 20 64 3d 22 4d 34 31 33 20 32 34 37 2e 35 63 30 20 35 33 2d 34 33 2e 36 20 39 35 2e 39 2d 39 37 2e 35 20 39 35 2e 39 73 2d 39 37 2e 36 2d 34 33 2d 39 37 2e 36 2d 39 36 20 34 33 2e 37 2d 39 35 2e 38 20 39 37 2e 36 2d 39 35 2e 38 20 39 37 2e 36 20 34 32 2e 39 20 39 37 2e 36 20 39 35 2e 39 7a 22 3e 3c 2f 70 61 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: "></path> 2000 <path fill="#e30a17" d="M413 247.5c0 53-43.6 95.9-97.5 95.9s-97.6-43-97.6-96 43.7-95.8 97.6-95.8 97.6 42.9 97.6 95.9z"></path>
2024-04-05 23:17:42 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 73 65 63 74 0d 0a 38 30 30 30 0d 0a 69 6f 6e 2d 63 61 70 74 69 6f 6e 22 3e d0 9a d0 b0 d0 ba 20 d1 8d d1 82 d0 be 20 d1 80 d0 b0 d0 b1 d0 be d1 82 d0 b0 d0 b5 d1 82 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 77 5f 5f 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 77 5f 5f 62 6c 6f 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="content"> <p class="sect8000ion-caption"> </p> <div class="how__container"> <div class="how__block">
2024-04-05 23:17:42 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 22 23 4f 75 72 46 65 65 22 29 2e 68 74 6d 6c 28 22 30 20 50 20 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 74 78 2e 76 61 6c 28 6e 65 77 20 4e 75 6d 62 65 72 28 63 74 78 2e 76 61 6c 28 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 30 2d 39 5d 2f 67 2c 20 22 22 29 29 29 3b 0a 20 20 20 Data Ascii: } else { $("#OurFee").html("0 P ") } ctx.val(new Number(ctx.val().replace(/[^0-9]/g, "")));
2024-04-05 23:17:42 UTC	16384	IN	Data Raw: b6 d0 b4 d1 83 d0 bd d0 b0 d1 80 d0 be d0 b4 d0 bd d1 8b d0 b9 20 d0 be d0 b1 d0 bc d0 b5 d0 bd 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d0 b5 d0 b9 2e 20 d0 a1 d0 b2 d0 be d0 b4 d0 bd d1 8b d0 b5 20 d0 b4 d0 b0 d0 bd d0 bd 0d 0a 32 30 30 30 0d 0a d1 8b d0 b5 2c 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd d0 bd d1 8b d0 b5 20 d0 b2 20 d1 85 d0 be d0 b4 d0 b5 20 d0 bf d1 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d0 b8 20 d0 b1 d0 b5 d0 b7 d0 be d0 bf d0 b0 d1 81 d0 bd d0 be d1 81 d1 82 d0 b8 2c 20 d0 bc d0 be d0 b3 d1 83 d1 82 20 d0 b2 d0 ba d0 bb d1 8e d1 87 d0 b0 d1 82 d1 8c 20 d0 b7 d0 b0 d0 bf d1 80 d0 be d1 81 d1 8b 20 d0 ba d1 80 d0 b5 d0 b4 d0 b8 d1 82 d0 bd d1 8b d1 85 20 d0 be d1 82 d1 87 d1 91 d1 82 d0 be d0 b2 20 d0 b8 d0 bb d0 b8 20 d0 Data Ascii: . 2000, ,
2024-04-05 23:17:42 UTC	16384	IN	Data Raw: 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 20 d0 b8 20 d0 bb d0 b8 d1 86 d0 be 2c 20 d0 bf d1 80 d0 b8 d0 bd d1 8f d0 b2 d1 88 d0 b5 d0 b5 20 d0 be d1 84 d0 b5 d1 80 d1 82 d1 83 2c 20 d0 be d0 bf d1 83 d0 b1 d0 bb d0 b8 d0 ba d0 be d0 b2 d0 b0 d0 bd d0 bd d1 83 d1 8e 20 d0 bd d0 b0 20 d0 bf d0 be d1 81 d1 82 d0 be d1 8f d0 bd d0 bd d0 be d0 bc 20 d0 b0 d0 b4 d1 80 d0 b5 d1 81 d0 b5 20 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 2c 20 d1 81 20 d0 b4 d1 80 d1 83 d0 b3 d0 be d0 b9 20 d1 81 d1 82 d0 be d1 80 d0 be d0 bd d1 8b 2c 20 d0 b7 d0 b0 d0 ba d0 bb d1 8e d1 87 d0 b8 d0 bb d0 b8 20 d0 b4 d0 b0 d0 bd d0 bd d0 be d0 b5 20 d0 bf d0 be d0 bb d1 8c d0 b7 d0 be d0 b2 d0 b0 d1 82 d0 b5 d0 bb d1 8c d1 81 d0 ba d0 be d0 b5 20 d1 81 d0 be Data Ascii: teamfiller.ru/ , , https://steamfiller.ru/, ,
2024-04-05 23:17:42 UTC	5906	IN	Data Raw: d1 80 d1 83 d0 ba d0 be d0 b2 d0 be d0 b4 d1 81 d1 82 d0 b2 d1 83 d1 8e d1 82 d1 81 d1 8f 20 d0 b7 d0 b0 d0 ba d0 be d0 bd d0 be d0 b4 d0 b0 d1 82 d0 b5 d0 bb d1 8c d1 81 d1 82 d0 b2 d0 be d0 bc 20 d0 ad d1 81 d1 82 d0 be d0 bd d0 b8 d0 b8 2c 20 d0 bd d0 b5 20 d0 bf d1 80 d0 b8 d0 bc d0 b5 d0 bd d1 8f d1 8f 20 d0 ba d0 be d0 bb d0 bb d0 b8 d0 b7 d0 b8 d0 be d0 bd d0 bd d1 8b d0 b5 20 d0 bd d0 be d1 80 d0 bc d1 8b 2e 20 3c 62 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 Data Ascii: , . <br> </p> </div> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49799	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:42 UTC	1609	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=853926178&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&rn=661638731&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359061%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011740%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359061&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 151585 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:42 UTC	16384	OUT	Data Raw: 0a cd 9a 09 08 00 10 00 18 1b 20 00 4a c1 9a 09 0a 0f 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 12 67 d0 9f d0 be d0 bf d0 be d0 bb d0 bd d0 b5 d0 bd d0 b8 d0 b5 20 d0 b1 d0 b0 d0 bb d0 b0 d0 bd d1 81 d0 b0 20 53 74 65 61 6d 20 d0 9a d0 b0 d0 b7 d0 b0 d1 85 d1 81 d1 82 d0 b0 d0 bd 20 d0 be d1 82 20 37 30 30 30 20 e2 82 b8 20 2d 20 d0 9f d0 be d0 bf d0 be d0 bb d0 bd d0 b5 d0 bd d0 b8 d0 b5 20 53 74 65 61 6d 1a 1b 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 6b 7a 74 2f 22 6f 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d Data Ascii: J<!DOCTYPE html>g Steam 7000 - Steamhttps://steamfiller.ru/kzt/"oMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrom
2024-04-05 23:17:42 UTC	16384	OUT	Data Raw: 32 38 33 36 36 20 31 32 2e 36 33 36 33 20 36 2e 32 34 35 30 37 20 31 32 2e 34 35 38 34 20 36 2e 32 35 32 31 37 43 31 32 2e 32 38 30 36 20 36 2e 32 35 39 32 38 20 31 32 2e 31 30 37 35 20 36 2e 33 31 31 38 34 20 31 31 2e 39 35 35 38 20 36 2e 34 30 34 38 34 43 31 31 2e 38 30 34 20 36 2e 34 39 37 38 34 20 31 31 2e 36 37 38 36 20 36 2e 36 32 38 31 38 20 31 31 2e 35 39 31 35 20 36 2e 37 38 33 34 33 43 31 31 2e 35 30 34 34 20 36 2e 39 33 38 36 37 20 31 31 2e 34 35 38 36 20 37 2e 31 31 33 36 33 20 31 31 2e 34 35 38 34 20 37 2e 32 39 31 36 33 43 31 31 2e 34 35 38 34 20 37 2e 35 36 37 38 39 20 31 31 2e 33 34 38 36 20 37 2e 38 33 32 38 35 20 31 31 2e 31 35 33 33 20 38 2e 30 32 38 32 43 31 30 2e 39 35 37 39 20 38 2e 32 32 33 35 35 20 31 30 2e 36 39 33 20 38 2e 33 33 Data Ascii: 28366 12.6363 6.24507 12.4584 6.25217C12.2806 6.25928 12.1075 6.31184 11.9558 6.40484C11.804 6.49784 11.6786 6.62818 11.5915 6.78343C11.5044 6.93867 11.4586 7.11363 11.4584 7.29163C11.4584 7.56789 11.3486 7.83285 11.1533 8.0282C10.9579 8.22355 10.693 8.33
2024-04-05 23:17:42 UTC	16384	OUT	Data Raw: cc 01 12 05 23 74 65 78 74 20 c5 01 2a 35 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 cb 01 6a 43 08 cd 01 12 05 23 74 65 78 74 20 c3 01 2a 31 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 c5 01 6a 46 08 ce 01 12 05 23 74 65 78 74 20 c1 01 2a 34 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 55 42 38 c3 01 6a 44 08 cf 01 12 05 23 74 65 78 74 20 bf 01 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: #text 5 8jC#text 1 8jF#text 4 RUB8jD#text /
2024-04-05 23:17:42 UTC	16384	OUT	Data Raw: 32 43 31 39 2e 37 34 39 33 20 2d 31 2e 34 36 34 33 39 20 31 30 2e 32 35 31 35 20 2d 31 2e 34 36 35 30 34 20 34 2e 33 39 32 39 31 20 34 2e 33 39 32 39 32 43 2d 31 2e 34 36 35 30 35 20 31 30 2e 32 35 30 39 20 2d 31 2e 34 36 34 33 39 20 31 39 2e 37 34 38 37 20 34 2e 33 39 32 39 31 20 32 35 2e 36 30 37 33 43 31 30 2e 32 35 30 39 20 33 31 2e 34 36 33 39 20 31 39 2e 37 34 38 37 20 33 31 2e 34 36 34 36 20 32 35 2e 36 30 37 33 20 32 35 2e 36 30 37 33 43 33 31 2e 34 36 34 36 20 31 39 2e 37 34 38 37 20 33 31 2e 34 36 33 39 20 31 30 2e 32 35 31 35 20 32 35 2e 36 30 37 33 20 34 2e 33 39 32 39 32 5a 4d 31 36 2e 39 35 36 20 32 31 2e 35 32 32 43 31 36 2e 39 35 36 20 32 32 2e 36 30 32 37 20 31 36 2e 30 38 30 31 20 32 33 2e 34 37 38 36 20 31 34 2e 39 39 39 34 20 32 33 2e Data Ascii: 2C19.7493 -1.46439 10.2515 -1.46504 4.39291 4.39292C-1.46505 10.2509 -1.46439 19.7487 4.39291 25.6073C10.2509 31.4639 19.7487 31.4646 25.6073 25.6073C31.4646 19.7487 31.4639 10.2515 25.6073 4.39292ZM16.956 21.522C16.956 22.6027 16.0801 23.4786 14.9994 23.
2024-04-05 23:17:42 UTC	16384	OUT	Data Raw: 1e 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 1a 0d 0a 02 69 64 12 07 74 6c 70 72 69 63 65 20 b3 03 30 ba 03 38 b7 03 6a 1a 08 b9 03 12 05 23 74 65 78 74 20 b8 03 2a 0b d0 be d1 82 20 30 2e 31 39 20 50 6a 3b 08 ba 03 12 05 23 74 65 78 74 20 b3 03 2a 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 b8 03 6a 66 08 bb 03 12 05 23 74 65 78 74 20 a8 03 2a 51 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 bc 03 38 b3 03 6a 11 08 bc 03 12 03 Data Ascii: float: right; font-weight: 500idtlprice 08j#text * 0.19 Pj;#text ) 8jf#text Q 08j
2024-04-05 23:17:42 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 4d 61 74 68 2e 63 65 69 6c 28 6e 75 6d 62 65 72 20 2f 20 31 30 30 29 20 2a 20 31 30 30 3b 0a 2f 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 63 75 72 72 65 6e 63 79 43 6f 75 6e 74 72 79 20 3d 20 27 e2 82 b8 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 75 72 72 65 6e 63 79 43 6f 75 6e 74 72 79 20 3d 3d 20 27 e2 82 b8 27 20 7c 7c 20 63 75 72 72 65 6e 63 79 43 6f 75 6e 74 72 79 20 3d 3d 20 27 55 53 44 27 20 7c 7c 20 63 75 72 72 65 6e 63 79 43 6f 75 Data Ascii: return Math.ceil(number / 100) * 100;// } } let currencyCountry = ''; if (currencyCountry == '' \|\| currencyCountry == 'USD' \|\| currencyCou
2024-04-05 23:17:42 UTC	16384	OUT	Data Raw: bd d0 b8 d1 8f 20 d0 bf d0 bb d0 b0 d1 82 d0 b5 d0 b6 d0 bd d1 8b d1 85 20 d1 83 d1 81 d0 bb d1 83 d0 b3 20 d0 b2 d0 b0 d1 88 d0 b0 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d1 8f 2c 20 d0 b2 d0 ba d0 bb d1 8e d1 87 d0 b0 d1 8f 20 d0 bf d0 b5 d1 80 d1 81 d0 be d0 bd d0 b0 d0 bb d1 8c d0 bd d1 8b d0 b5 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d0 b5 2c 20 d0 bf d1 80 d0 b5 d0 b4 d0 be d1 81 d1 82 d0 b0 d0 b2 d0 bb d1 8f d0 b5 d1 82 d1 81 d1 8f 20 45 50 49 43 4d 49 44 20 4f 55 cc 88 2c 20 52 65 67 2e 20 6e 75 6d 62 65 72 20 31 36 35 30 31 36 34 39 2c 20 d0 b7 d0 b0 d1 80 d0 b5 d0 b3 d0 b8 d1 81 d1 82 d1 80 d0 b8 d1 80 d0 be d0 b2 d0 b0 d0 bd d0 bd d0 be d0 b9 20 d0 bf d0 be 20 d0 b0 d0 b4 d1 80 d0 b5 d1 81 d1 83 3a 20 48 61 72 6a 75 20 6d 61 61 6b 6f Data Ascii: , , EPICMID OU, Reg. number 16501649, : Harju maako
2024-04-05 23:17:42 UTC	16384	OUT	Data Raw: 65 78 74 20 a1 06 2a 19 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 a3 06 6a 27 08 ba 06 12 05 23 74 65 78 74 20 9d 06 2a 15 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 a1 06 6a 2a 08 bb 06 12 05 23 74 65 78 74 20 bd 05 2a 15 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 bc 06 38 9d 06 6a 26 08 bc 06 12 03 64 69 76 1a 13 0a 05 63 6c 61 73 73 12 0a 6d 6f 64 61 6c 2d 72 6f 77 72 20 bd 05 30 cc 06 38 bb 06 6a 0f 08 bd 06 12 04 73 70 61 6e 20 bc 06 30 bf 06 6a 74 08 be 06 12 05 23 74 65 78 74 20 bd 06 2a 65 35 20 d0 a1 d0 9e d0 93 d0 9b d0 90 d0 a1 d0 98 d0 95 20 d0 9d d0 90 20 d0 9e d0 91 d0 a0 d0 90 d0 91 d0 9e d0 a2 d0 9a d0 a3 20 d0 94 d0 90 d0 9d d0 9d d0 ab d0 a5 20 d0 98 20 d0 Data Ascii: ext * 8j'#text * 8j#text 08j&divclassmodal-rowr 08jspan 0jt#text *e5
2024-04-05 23:17:42 UTC	16384	OUT	Data Raw: fb 07 38 f9 07 6a 10 08 fb 07 12 02 62 72 20 f1 07 30 fc 07 38 fa 07 6a 80 01 08 fc 07 12 05 23 74 65 78 74 20 f1 07 2a 6b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 92 d0 bd d0 be d1 81 d0 b8 d1 82 d1 8c 20 d0 b8 d0 b7 d0 bc d0 b5 d0 bd d0 b5 d0 bd d0 b8 d1 8f 20 d0 b2 20 d0 a1 d0 b0 d0 b9 d1 82 20 d0 bb d1 8e d0 b1 d1 8b d0 bc 20 d1 81 d0 bf d0 be d1 81 d0 be d0 b1 d0 be d0 bc 3b 30 fd 07 38 fb 07 6a 10 08 fd 07 12 02 62 72 20 f1 07 30 fe 07 38 fc 07 6a cd 01 08 fe 07 12 05 23 74 65 78 74 20 f1 07 2a b7 01 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 92 d1 8b d0 bf d0 be d0 bb d0 bd d1 8f d1 82 d1 8c 20 d0 b4 d0 b5 d0 b9 d1 81 d1 82 d0 b2 Data Ascii: 8jbr 08j#text k ;08jbr 08j#text
2024-04-05 23:17:42 UTC	4129	OUT	Data Raw: 05 0a 20 20 20 20 30 98 09 38 a7 07 6a 12 08 98 09 12 05 73 74 79 6c 65 20 35 30 9a 09 38 97 09 6a a7 0d 08 99 09 12 05 23 74 65 78 74 20 98 09 2a 97 0d 0a 20 20 20 20 20 20 20 20 2e 6f 76 65 72 6c 61 79 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 Data Ascii: 08jstyle 508j#text * .overlayy { position: fixed; width: 100%; height: 100vh; top: 0; left: 0; display: none; background-color: rgba
2024-04-05 23:17:43 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:43 GMT Expires: Fri, 05-Apr-2024 23:17:43 GMT Last-Modified: Fri, 05-Apr-2024 23:17:43 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49800	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:42 UTC	1426	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=131641893&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=826086009&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359059%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011739%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359059&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:17:42 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:42 GMT Expires: Fri, 05-Apr-2024 23:17:42 GMT Last-Modified: Fri, 05-Apr-2024 23:17:42 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49802	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:43 UTC	2466	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A442277962%3Az%3A120%3Ai%3A20240406011741%3Aet%3A1712359062%3Ac%3A1%3Arn%3A385017140%3Arqn%3A6%3Au%3A1712359037123674141%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C704%2C%2C2%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359060975%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359062%3At%3A%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam%20%D0%A2%D1%83%D1%80%D1%86%D0%B8%D1%8F%20%D0%B8%20Global%20%D0%BE%D1%82%2015%20USD%20-%20%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:43 UTC	1359	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:17:43 GMT Expires: Fri, 05-Apr-2024 23:17:43 GMT Last-Modified: Fri, 05-Apr-2024 23:17:43 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:17:43 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Sat, 05-Apr-2025 23:17:43 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:17:43 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 4f 68 4a 55 72 4d 70 32 7a 64 50 46 50 64 35 6a 7a 64 45 77 77 62 6a 43 4c 6b 42 45 4f 52 51 77 4b 4d 50 59 32 53 56 64 4e 79 4d 52 44 69 66 59 7a 42 30 51 39 49 6f 4f 4e 67 47 38 52 52 52 41 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"OhJUrMp2zdPFPd5jzdEwwbjCLkBEORQwKMPY2SVdNyMRDifYzB0Q9IoONgG8RRRA"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49804	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:43 UTC	1611	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=1056222005&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&rn=1027243488&browser-info=we%3A1%3Aet%3A1712359062%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011741%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359062&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 89 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:43 UTC	89	OUT	Data Raw: 0a 17 08 00 10 01 18 13 20 00 8a 01 0c 08 f6 09 10 8b 07 18 f6 09 20 9a 08 0a 1b 08 00 10 01 18 04 20 00 62 11 08 00 10 00 18 01 20 ff ff ff ff ff ff ff ff ff 01 0a 0e 08 cd 0b 10 01 18 08 20 00 aa 01 02 08 01 0a 09 08 d2 0b 10 01 18 05 20 00 0a 06 10 04 e0 01 a8 02 Data Ascii: b
2024-04-05 23:17:43 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:43 GMT Expires: Fri, 05-Apr-2024 23:17:43 GMT Last-Modified: Fri, 05-Apr-2024 23:17:43 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49803	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:43 UTC	1617	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=310184681&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=1011974261&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359062%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011741%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359062&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 85598 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:43 UTC	16384	OUT	Data Raw: 0a a3 96 05 08 00 10 00 18 1b 20 00 4a 97 96 05 0a 0f 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 12 42 d0 9c d0 be d0 bc d0 b5 d0 bd d1 82 d0 b0 d0 bb d1 8c d0 bd d0 be d0 b5 20 d0 bf d0 be d0 bf d0 be d0 bb d0 bd d0 b5 d0 bd d0 b8 d0 b5 20 d0 b1 d0 b0 d0 bb d0 b0 d0 bd d1 81 d0 b0 20 53 74 65 61 6d 1a 21 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 70 61 67 65 73 2f 66 61 71 2f 22 6f 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 2a 00 32 00 38 00 Data Ascii: J<!DOCTYPE html>B Steam!https://steamfiller.ru/pages/faq/"oMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36*28
2024-04-05 23:17:43 UTC	16384	OUT	Data Raw: 31 31 38 34 20 31 31 2e 39 35 35 38 20 36 2e 34 30 34 38 34 43 31 31 2e 38 30 34 20 36 2e 34 39 37 38 34 20 31 31 2e 36 37 38 36 20 36 2e 36 32 38 31 38 20 31 31 2e 35 39 31 35 20 36 2e 37 38 33 34 33 43 31 31 2e 35 30 34 34 20 36 2e 39 33 38 36 37 20 31 31 2e 34 35 38 36 20 37 2e 31 31 33 36 33 20 31 31 2e 34 35 38 34 20 37 2e 32 39 31 36 33 43 31 31 2e 34 35 38 34 20 37 2e 35 36 37 38 39 20 31 31 2e 33 34 38 36 20 37 2e 38 33 32 38 35 20 31 31 2e 31 35 33 33 20 38 2e 30 32 38 32 43 31 30 2e 39 35 37 39 20 38 2e 32 32 33 35 35 20 31 30 2e 36 39 33 20 38 2e 33 33 33 32 39 20 31 30 2e 34 31 36 37 20 38 2e 33 33 33 32 39 43 31 30 2e 31 34 30 34 20 38 2e 33 33 33 32 39 20 39 2e 38 37 35 34 37 20 38 2e 32 32 33 35 35 20 39 2e 36 38 30 31 32 20 38 2e 30 32 38 Data Ascii: 1184 11.9558 6.40484C11.804 6.49784 11.6786 6.62818 11.5915 6.78343C11.5044 6.93867 11.4586 7.11363 11.4584 7.29163C11.4584 7.56789 11.3486 7.83285 11.1533 8.0282C10.9579 8.22355 10.693 8.33329 10.4167 8.33329C10.1404 8.33329 9.87547 8.22355 9.68012 8.028
2024-04-05 23:17:43 UTC	16384	OUT	Data Raw: be d0 b1 d1 85 d0 be d0 b4 d0 b8 d0 bc d1 8b d0 b5 20 d0 b4 d0 bb d1 8f 20 d0 be d1 81 d1 83 d1 89 d0 b5 d1 81 d1 82 d0 b2 d0 bb d0 b5 d0 bd d0 b8 d1 8f 20 d0 bf d0 bb d0 b0 d1 82 d0 b5 d0 b6 d0 b5 d0 b9 2c 20 d0 b8 20 d0 b4 d0 b5 d0 b9 d1 81 d1 82 d0 b2 d1 83 d0 b5 d1 82 20 d0 ba d0 b0 d0 ba 20 d0 ba d0 be d0 bd d1 82 d1 80 d0 be d0 bb d0 bb d0 b5 d1 80 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 20 28 c2 ab d0 9a d0 be d0 bd d1 82 d1 80 d0 be d0 bb d0 bb d0 b5 d1 80 20 d0 bf d0 bb d0 b0 d1 82 d0 b5 d0 b6 d0 bd d1 8b d1 85 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 c2 bb 29 20 d0 b4 d0 bb d1 8f 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d0 b8 2c 20 d0 bd d0 b5 d0 be d0 b1 d1 85 d0 be d0 b4 d0 b8 d0 bc d0 be d0 b9 20 d0 b4 d0 bb d1 8f 20 d0 b0 d0 bd Data Ascii: , ( ) ,
2024-04-05 23:17:43 UTC	16384	OUT	Data Raw: e7 03 d0 a1 d0 be d0 b3 d0 bb d0 b0 d1 81 d0 bd d0 be 20 47 44 50 52 2c 20 d0 b2 d0 b0 d1 88 d0 b5 20 d1 81 d0 be d0 b3 d0 bb d0 b0 d1 81 d0 b8 d0 b5 20 d0 bd d0 b0 20 d0 be d0 b1 d1 80 d0 b0 d0 b1 d0 be d1 82 d0 ba d1 83 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 20 d0 b4 d0 be d0 bb d0 b6 d0 bd d0 be 20 d0 b1 d1 8b d1 82 d1 8c 20 d1 8f d0 b2 d0 bd d1 8b d0 bc 20 d0 b8 20 d0 be d1 81 d0 be d0 b7 d0 bd d0 b0 d0 bd d0 bd d1 8b d0 bc 2e 20 d0 95 d0 b2 d1 80 d0 be d0 bf d0 b5 d0 b9 d1 81 d0 ba d0 b0 d1 8f 20 d0 b4 d0 b8 d1 80 d0 b5 d0 ba d1 82 d0 b8 d0 b2 d0 b0 20 d0 be 20 d0 b7 d0 b0 d1 89 d0 b8 d1 82 d0 b5 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 20 d0 be d0 bf d1 80 d0 b5 d0 b4 d0 b5 d0 bb d1 8f d0 b5 d1 82 20 d1 81 d0 be d0 b3 d0 bb d0 b0 d1 81 d0 b8 d0 b5 20 Data Ascii: GDPR, .
2024-04-05 23:17:43 UTC	16384	OUT	Data Raw: 8c 20 d0 b2 d1 8b d1 88 d0 b5 d1 83 d0 ba d0 b0 d0 b7 d0 b0 d0 bd d0 bd d1 8b d0 b5 20 d0 b4 d0 b5 d0 b9 d1 81 d1 82 d0 b2 d0 b8 d1 8f 20 d0 ba 20 d0 bb d1 8e d0 b1 d0 be d0 b9 20 d1 87 d0 b0 d1 81 d1 82 d0 b8 20 d0 a1 d0 b0 d0 b9 d1 82 d0 b0 2e 30 a8 05 38 a6 05 6a 10 08 a8 05 12 02 62 72 20 98 05 30 a9 05 38 a7 05 6a 2f 08 a9 05 12 05 23 74 65 78 74 20 98 05 2a 1d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 a8 05 6a 2b 08 aa 05 12 05 23 74 65 78 74 20 96 05 2a 19 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 98 05 6a 27 08 ab 05 12 05 23 74 65 78 74 20 92 05 2a 15 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 96 05 6a 2a 08 ac 05 12 05 23 74 65 78 74 20 e2 Data Ascii: .08jbr 08j/#text * 8j+#text * 8j'#text * 8j*#text
2024-04-05 23:17:43 UTC	3678	OUT	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 70 6f 70 75 70 5f 5f 68 32 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 63 6c 6f 73 65 2d 70 6f 70 75 70 20 7b 0a Data Ascii: ; -webkit-transform: translate(-50%, -50%); transform: translate(-50%, -50%); z-index: 999; } .popup__h2 { text-align: center; font-size: 30px; } .close-popup {
2024-04-05 23:17:44 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:44 GMT Expires: Fri, 05-Apr-2024 23:17:44 GMT Last-Modified: Fri, 05-Apr-2024 23:17:44 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49805	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:44 UTC	1432	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=853926178&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&rn=661638731&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359061%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011740%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359061&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:17:44 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:44 GMT Expires: Fri, 05-Apr-2024 23:17:44 GMT Last-Modified: Fri, 05-Apr-2024 23:17:44 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49806	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:44 UTC	1590	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=131641893&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=774375018&browser-info=we%3A1%3Aet%3A1712359063%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011742%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359063&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 61 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:44 UTC	61	OUT	Data Raw: 0a 17 08 00 10 01 18 13 20 00 8a 01 0c 08 f6 09 10 8b 07 18 f6 09 20 dd 0a 0a 1b 08 00 10 01 18 04 20 00 62 11 08 00 10 00 18 01 20 ff ff ff ff ff ff ff ff ff 01 0a 05 10 04 e0 01 02 Data Ascii: b
2024-04-05 23:17:44 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:44 GMT Expires: Fri, 05-Apr-2024 23:17:44 GMT Last-Modified: Fri, 05-Apr-2024 23:17:44 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49810	23.46.213.117	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:44 UTC	653	OUT	GET /account/ HTTP/1.1 Host: store.steampowered.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:44 UTC	1838	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Content-Type: text/html; charset=UTF-8 Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.cloudflare.steamstatic.com/ https://store.cloudflare.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.cloudflare.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.cloudflare.steamstatic.com/ https://checkout.steampowered.com/; frame-src 'self' steam: http://www.youtube.com https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://steamcommunity.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://steamcommunity.com/; frame-ancestors 'none'; Location: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1 Content-Encoding: gzip Vary: Accept-Encoding Strict-Transport-Security: max-age=10368000 Content-Length: 20 Date: Fri, 05 Apr 2024 23:17:44 GMT Connection: close Set-Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: browserid=3555103046475363392; Expires=Sat, 05 Apr 2025 23:17:44 GMT; Path=/; Secure; SameSite=None
2024-04-05 23:17:44 UTC	20	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 03 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49807	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:44 UTC	2340	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A442277962%3Az%3A120%3Ai%3A20240406011741%3Aet%3A1712359062%3Ac%3A1%3Arn%3A385017140%3Arqn%3A6%3Au%3A1712359037123674141%3Aw%3A1280x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C704%2C%2C2%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359060975%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359062%3At%3A%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam%20%D0%A2%D1%83%D1%80%D1%86%D0%B8%D1%8F%20%D0%B8%20Global%20%D0%BE%D1%82%2015%20USD%20-%20%D0%9F%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:17:44 UTC	875	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:17:44 GMT Expires: Fri, 05-Apr-2024 23:17:44 GMT Last-Modified: Fri, 05-Apr-2024 23:17:44 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:17:44 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:17:44 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 43 79 73 4b 31 54 6f 4d 48 2b 75 63 74 36 50 7a 54 6a 33 38 34 6a 52 35 34 76 35 79 48 59 6a 7a 41 50 59 39 71 51 65 46 68 32 79 49 6b 74 33 4b 61 62 32 5a 6c 6e 6b 49 74 51 4f 53 4d 61 31 50 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"CysK1ToMH+uct6PzTj384jR54v5yHYjzAPY9qQeFh2yIkt3Kab2ZlnkItQOSMa1P"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49808	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:44 UTC	1438	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=1056222005&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&rn=1027243488&browser-info=we%3A1%3Aet%3A1712359062%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011741%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359062&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:17:44 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:44 GMT Expires: Fri, 05-Apr-2024 23:17:44 GMT Last-Modified: Fri, 05-Apr-2024 23:17:44 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:44 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49809	23.46.213.117	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:44 UTC	771	OUT	GET /login/?redir=account%2F&redir_ssl=1 HTTP/1.1 Host: store.steampowered.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392
2024-04-05 23:17:44 UTC	1597	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.cloudflare.steamstatic.com/ https://store.cloudflare.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.cloudflare.steamstatic.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.cloudflare.steamstatic.com/ https://checkout.steampowered.com/ https://store.steampowered.com/; frame-src 'self' steam: http://www.youtube.com https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://steamcommunity.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://steamcommunity.com/ https://help.steampowered.com/; frame-ancestors 'none'; Strict-Transport-Security: max-age=10368000 Date: Fri, 05 Apr 2024 23:17:44 GMT Content-Length: 28505 Connection: close Set-Cookie: sessionid=90a967192b0b4c3f64f5d7e0; Path=/; Secure; SameSite=None
2024-04-05 23:17:44 UTC	14787	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-04-05 23:17:45 UTC	9789	IN	Data Raw: 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 63 7a 65 63 68 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e c4 8c 65 c5 a1 74 69 6e 61 20 28 43 7a 65 63 68 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 64 61 6e 69 73 68 26 72 65 64 69 72 3d 61 63 63 6f 75 6e 74 25 32 46 26 72 65 64 69 72 5f 73 73 6c 3d 31 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 64 61 6e 69 73 68 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e 44 61 6e 73 6b 20 28 44 61 6e 69 73 68 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 Data Ascii: ="ChangeLanguage( 'czech' ); return false;">etina (Czech)</a><a class="popup_menu_item tight" href="?l=danish&redir=account%2F&redir_ssl=1" onclick="ChangeLanguage( 'danish' ); return false;">Dansk (Danish)</a>
2024-04-05 23:17:45 UTC	3929	IN	Data Raw: 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 6a 6f 69 6e 2f 3f 72 65 64 69 72 3d 61 63 63 6f 75 6e 74 25 32 46 26 73 6e 72 3d 31 5f 36 30 5f 34 5f 5f 36 32 22 20 63 6c 61 73 73 3d 22 6c 6f 67 69 6e 5f 63 72 65 61 74 65 5f 62 74 6e 20 62 74 6e 5f 62 6c 75 65 5f 73 74 65 61 6d 75 69 20 62 74 6e 5f 6d 65 64 69 75 6d 22 3e 0d 0a 09 09 09 09 09 3c 73 70 61 6e 3e 43 72 65 61 74 65 20 61 6e 20 61 63 63 6f 75 6e 74 3c 2f 73 70 61 6e 3e 0d 0a 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 67 69 6e 5f 62 6f 74 74 6f 6d 5f 72 6f 77 5f 69 74 65 6d 22 3e 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 75 62 74 65 78 74 22 3e 49 74 27 73 20 66 72 65 65 20 Data Ascii: ps://store.steampowered.com/join/?redir=account%2F&snr=1_60_4__62" class="login_create_btn btn_blue_steamui btn_medium"><span>Create an account</span></a></div><div class="login_bottom_row_item"><div class="subtext">It's free

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49811	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:44 UTC	1441	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=310184681&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=1011974261&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359062%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011741%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359062&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:17:45 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:45 GMT Expires: Fri, 05-Apr-2024 23:17:45 GMT Last-Modified: Fri, 05-Apr-2024 23:17:45 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49812	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:45 UTC	1596	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=853926178&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&rn=803033375&browser-info=we%3A1%3Aet%3A1712359064%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011743%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359064&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 61 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:45 UTC	61	OUT	Data Raw: 0a 17 08 00 10 01 18 13 20 00 8a 01 0c 08 f6 09 10 8b 07 18 f6 09 20 dd 0a 0a 1b 08 00 10 01 18 04 20 00 62 11 08 00 10 00 18 01 20 ff ff ff ff ff ff ff ff ff 01 0a 05 10 04 e0 01 02 Data Ascii: b
2024-04-05 23:17:45 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:45 GMT Expires: Fri, 05-Apr-2024 23:17:45 GMT Last-Modified: Fri, 05-Apr-2024 23:17:45 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49814	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:45 UTC	2052	OUT	POST /watch/95654225/1?page-url=https%3A%2F%2Fsteamfiller.ru%2F&charset=utf-8&hittoken=1712359049_e136657ef774930421b5e959b448755437f168b84d58e1ece32377f1eea4c7f6&browser-info=nb%3A1%3Acl%3A1171%3Aar%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A1%3Als%3A1173339980762%3Ahid%3A131641893%3Az%3A120%3Ai%3A20240406011743%3Aet%3A1712359064%3Ac%3A1%3Arn%3A557968663%3Arqn%3A7%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C558%2C%2C%2C%2C3%2C0%2C2100%2C2101%2C1%2C2086%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1712359046794%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359064&t=gdpr(14)clc(0-0-0)rqnt(2)eco(21037572)lt(32900)aw(0)rcm(0)cdl(na)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:45 UTC	757	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:45 GMT Expires: Fri, 05-Apr-2024 23:17:45 GMT Last-Modified: Fri, 05-Apr-2024 23:17:45 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49813	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:45 UTC	2070	OUT	POST /watch/95654225/1?page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&charset=utf-8&hittoken=1712359049_e136657ef774930421b5e959b448755437f168b84d58e1ece32377f1eea4c7f6&browser-info=nb%3A1%3Acl%3A860%3Aar%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A1%3Als%3A1173339980762%3Ahid%3A1056222005%3Az%3A120%3Ai%3A20240406011743%3Aet%3A1712359064%3Ac%3A1%3Arn%3A23900848%3Arqn%3A7%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C279%2C%2C%2C%2C6%2C0%2C1850%2C1850%2C1%2C1778%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1712359046978%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359064&t=gdpr(14)clc(0-0-0)rqnt(2)eco(21037572)lt(29100)aw(0)rcm(0)cdl(na)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:45 UTC	757	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:45 GMT Expires: Fri, 05-Apr-2024 23:17:45 GMT Last-Modified: Fri, 05-Apr-2024 23:17:45 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49815	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:45 UTC	1417	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=131641893&page-url=https%3A%2F%2Fsteamfiller.ru%2F&rn=774375018&browser-info=we%3A1%3Aet%3A1712359063%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011742%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359063&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:17:45 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:45 GMT Expires: Fri, 05-Apr-2024 23:17:45 GMT Last-Modified: Fri, 05-Apr-2024 23:17:45 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49817	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:45 UTC	626	OUT	GET /public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:45 UTC	436	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:45 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Sun, 26 May 2024 08:35:46 GMT ETag: W/"2C1Oh9QFVTyK" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: HIT CF-Cache-Status: HIT Age: 3307265 Server: cloudflare CF-RAY: 86fd40dffb01a548-MIA
2024-04-05 23:17:45 UTC	933	IN	Data Raw: 61 37 61 0d 0a 2f 2a 0d 0a 20 46 6f 6e 74 3a 20 09 09 4d 6f 74 69 76 61 20 53 61 6e 73 0d 0a 20 55 52 4c 3a 20 09 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 2e 70 68 70 3f 73 6b 75 3d 54 32 39 38 32 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 4e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 64 65 73 69 67 6e 65 72 2f 32 39 33 2f 6e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 43 6f 70 79 72 69 67 68 74 3a 09 43 6f 70 79 72 69 67 68 74 20 20 32 30 31 31 20 62 79 20 52 6f 64 72 69 67 6f 20 53 61 69 61 6e 69 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 56 65 72 73 69 6f Data Ascii: a7a/* Font: Motiva Sans URL: http://www.youworkforthem.com/product.php?sku=T2982 Foundry: Niramekko Foundry: http://www.youworkforthem.com/designer/293/niramekko Copyright:Copyright 2011 by Rodrigo Saiani. All rights reserved. Versio
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 73 74 6f 72 65 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 66 6f 6e 74 73 2f 4d 6f 74 69 76 61 53 61 6e 73 2d 4c 69 67 68 74 2e 74 74 66 3f 76 3d 34 2e 30 31 35 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 20 2f 2a 20 4c 69 67 68 74 20 2a 2f 0d 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 7d 0d 0a 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 6f 74 69 76 61 20 53 61 6e 73 27 3b 0d 0a 09 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 Data Ascii: store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015') format('truetype');font-weight: 300; /* Light */font-style: normal;}@font-face {font-family: 'Motiva Sans';src: url('https://store.cloudflare.steamstatic
2024-04-05 23:17:45 UTC	387	IN	Data Raw: 73 74 6f 72 65 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 66 6f 6e 74 73 2f 4d 6f 74 69 76 61 53 61 6e 73 2d 42 6f 6c 64 49 74 61 6c 69 63 2e 74 74 66 3f 76 3d 34 2e 30 31 35 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 69 74 61 6c 69 63 3b 0d 0a 7d 0d 0a 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 6f 74 69 76 61 20 53 61 6e 73 27 3b 0d 0a 09 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 Data Ascii: store.cloudflare.steamstatic.com/public/shared/fonts/MotivaSans-BoldItalic.ttf?v=4.015') format('truetype');font-weight: bold;font-style: italic;}@font-face {font-family: 'Motiva Sans';src: url('https://store.cloudflare.steamstatic.com/p
2024-04-05 23:17:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49819	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:45 UTC	628	OUT	GET /public/shared/css/shared_global.css?v=qUG5Ub5rrq2J&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:45 UTC	437	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:45 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Mon, 26 Aug 2024 02:01:24 GMT ETag: W/"qUG5Ub5rrq2J" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3273381 Server: cloudflare CF-RAY: 86fd40e00be5746b-MIA
2024-04-05 23:17:45 UTC	932	IN	Data Raw: 37 64 65 61 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 09 2f 2a 20 53 79 73 74 65 6d 20 67 72 65 79 73 20 2a 2f 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 73 74 47 72 65 79 3a 20 23 44 43 44 45 44 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 72 47 72 65 79 3a 20 23 42 38 42 43 42 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 47 72 65 79 3a 20 23 38 42 39 32 39 41 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 47 72 65 79 3a 20 23 36 37 37 30 37 42 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 47 72 65 79 3a 20 23 33 44 34 34 35 30 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 72 47 72 65 79 3a 20 23 32 33 32 36 32 45 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 73 74 47 72 65 79 3a 20 23 30 45 Data Ascii: 7dea:root {/* System greys */--gpSystemLightestGrey: #DCDEDF;--gpSystemLighterGrey: #B8BCBF;--gpSystemLightGrey: #8B929A;--gpSystemGrey: #67707B;--gpSystemDarkGrey: #3D4450;--gpSystemDarkerGrey: #23262E;--gpSystemDarkestGrey: #0E
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 0d 0a 09 2d 2d 67 70 43 6f 6c 6f 72 2d 52 65 64 48 69 3a 20 23 45 45 35 36 33 42 3b 0d 0a 09 2d 2d 67 70 43 6f 6c 6f 72 2d 44 75 73 74 79 42 6c 75 65 3a 20 23 34 31 37 61 39 62 3b 0d 0a 09 2d 2d 67 70 43 6f 6c 6f 72 2d 4c 69 67 68 74 42 6c 75 65 3a 20 23 42 33 44 46 46 46 3b 0d 0a 09 2d 2d 67 70 43 6f 6c 6f 72 2d 59 65 6c 6c 6f 77 3a 20 23 46 46 43 38 32 43 3b 0d 0a 09 2d 2d 67 70 43 6f 6c 6f 72 2d 43 68 61 6c 6b 79 42 6c 75 65 3a 20 23 36 36 43 30 46 34 3b 0d 0a 0d 0a 09 2f 2a 20 42 61 63 6b 67 72 6f 75 6e 64 73 20 2a 2f 0d 0a 09 2d 2d 67 70 42 61 63 6b 67 72 6f 75 6e 64 2d 4c 69 67 68 74 53 6f 66 74 65 72 3a 20 23 36 39 39 38 62 62 32 34 3b 0d 0a 09 2d 2d 67 70 42 61 63 6b 67 72 6f 75 6e 64 2d 4c 69 67 68 74 53 6f 66 74 3a 20 23 33 62 35 61 37 32 38 30 Data Ascii: --gpColor-RedHi: #EE563B;--gpColor-DustyBlue: #417a9b;--gpColor-LightBlue: #B3DFFF;--gpColor-Yellow: #FFC82C;--gpColor-ChalkyBlue: #66C0F4;/* Backgrounds */--gpBackground-LightSofter: #6998bb24;--gpBackground-LightSoft: #3b5a7280
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 67 70 56 65 72 74 69 63 61 6c 52 65 73 70 6f 6e 73 69 76 65 50 61 64 64 69 6e 67 2d 4c 61 72 67 65 3a 20 63 61 6c 63 28 20 28 31 30 30 76 77 20 2d 20 38 35 34 70 78 29 20 2f 20 31 32 20 29 3b 0d 0a 0d 0a 09 2f 2a 20 47 61 6d 65 20 63 61 70 73 75 6c 65 20 77 69 64 74 68 73 20 2a 2f 0d 0a 09 2d 2d 73 63 72 65 65 6e 2d 77 69 64 74 68 3a 20 31 30 30 76 77 3b 0d 0a 09 2d 2d 67 70 57 69 64 74 68 2d 36 63 6f 6c 63 61 70 3a 20 63 61 6c 63 28 28 76 61 72 28 2d 2d 73 63 72 65 65 6e 2d 77 69 64 74 68 29 20 2d 20 28 35 20 2a 20 76 61 72 28 2d 2d 67 70 53 70 61 63 65 2d 47 61 70 29 29 20 2d 20 28 32 20 2a 20 76 61 72 28 2d 2d 67 70 53 70 61 63 65 2d 47 75 74 74 65 72 29 29 29 20 2f 20 36 29 3b 0d 0a 09 2d 2d 67 70 57 69 64 74 68 2d 35 63 6f 6c 63 61 70 3a 20 63 61 6c Data Ascii: gpVerticalResponsivePadding-Large: calc( (100vw - 854px) / 12 );/* Game capsule widths /--screen-width: 100vw;--gpWidth-6colcap: calc((var(--screen-width) - (5 var(--gpSpace-Gap)) - (2 * var(--gpSpace-Gutter))) / 6);--gpWidth-5colcap: cal
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 54 65 78 74 2d 42 6f 64 79 4d 65 64 69 75 6d 3a 20 6e 6f 72 6d 61 6c 20 34 30 30 20 31 34 70 78 2f 31 2e 34 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 41 72 69 61 6c 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 2d 2d 67 70 54 65 78 74 2d 42 6f 64 79 53 6d 61 6c 6c 3a 20 6e 6f 72 6d 61 6c 20 34 30 30 20 31 32 70 78 2f 31 2e 34 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 41 72 69 61 6c 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 20 31 32 38 30 70 78 29 20 7b 0d 0a 09 3a 72 6f 6f 74 20 7b 0d 0a 09 09 2d 2d 67 70 53 70 61 63 65 2d 47 75 74 74 65 72 3a 20 63 61 6c 63 28 32 34 70 78 20 2b 20 32 76 77 29 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 0d 0a Data Ascii: Text-BodyMedium: normal 400 14px/1.4 "Motiva Sans", Arial, Sans-serif;--gpText-BodySmall: normal 400 12px/1.4 "Motiva Sans", Arial, Sans-serif;}@media screen and (min-width: 1280px) {:root {--gpSpace-Gutter: calc(24px + 2vw);}}
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 65 72 41 76 61 74 61 72 2e 6f 6e 6c 69 6e 65 2c 0d 0a 2e 66 72 69 65 6e 64 5f 62 6c 6f 63 6b 5f 68 6f 6c 64 65 72 2e 66 72 69 65 6e 64 5f 73 74 61 74 75 73 5f 6f 6e 6c 69 6e 65 20 2e 66 72 69 65 6e 64 5f 62 6c 6f 63 6b 5f 61 76 61 74 61 72 2c 0d 0a 2e 66 72 69 65 6e 64 5f 61 63 74 69 76 69 74 79 2e 66 72 69 65 6e 64 5f 73 74 61 74 75 73 5f 6f 6e 6c 69 6e 65 20 2e 66 72 69 65 6e 64 5f 62 6c 6f 63 6b 5f 61 76 61 74 61 72 2c 0d 0a 2e 61 70 70 48 75 62 49 63 6f 6e 48 6f 6c 64 65 72 2e 6f 6e 6c 69 6e 65 2c 0d 0a 2e 61 76 61 74 61 72 5f 62 6c 6f 63 6b 5f 73 74 61 74 75 73 5f 6f 6e 6c 69 6e 65 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 35 37 63 62 64 65 3b 0d 0a 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c Data Ascii: erAvatar.online,.friend_block_holder.friend_status_online .friend_block_avatar,.friend_activity.friend_status_online .friend_block_avatar,.appHubIconHolder.online,.avatar_block_status_online {background-color: #57cbde;background: -webkit-l
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 6f 20 6e 6f 74 69 63 61 62 6c 65 20 73 6f 20 6a 75 73 74 20 64 69 73 61 62 6c 65 20 74 68 65 20 66 69 6c 74 65 72 20 69 6e 20 49 45 39 20 2a 2f 0d 0a 09 66 69 6c 74 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 2e 70 6c 61 79 65 72 41 76 61 74 61 72 2e 69 6e 2d 67 61 6d 65 20 69 6d 67 2c 0d 0a 2e 66 72 69 65 6e 64 5f 73 74 61 74 75 73 5f 69 6e 2d 67 61 6d 65 20 2e 66 72 69 65 6e 64 5f 62 6c 6f 63 6b 5f 61 76 61 74 61 72 20 69 6d 67 2c 0d 0a 2e 61 70 70 48 75 62 49 63 6f 6e 48 6f 6c 64 65 72 2e 69 6e 2d 67 61 6d 65 20 69 6d 67 2c 0d 0a 2e 61 76 61 74 61 72 5f 62 6c 6f 63 6b 5f 73 74 61 74 75 73 5f 69 6e 2d 67 61 6d 65 20 69 6d 67 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f Data Ascii: o noticable so just disable the filter in IE9 */filter: none;}.playerAvatar.in-game img,.friend_status_in-game .friend_block_avatar img,.appHubIconHolder.in-game img,.avatar_block_status_in-game img {background: -webkit-linear-gradient( to
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 3a 20 33 32 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 33 32 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 6c 61 79 65 72 41 76 61 74 61 72 20 2e 70 72 6f 66 69 6c 65 5f 61 76 61 74 61 72 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 3b 0d 0a 09 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 2e 70 6c 61 79 65 72 41 76 61 74 61 72 20 2e 70 72 6f 66 69 6c 65 5f 61 76 61 74 61 72 5f 66 72 61 6d 65 20 3e 20 69 6d Data Ascii: : 32px;height: 32px;padding: 1px;border-radius: 0;border: none;}.playerAvatar .profile_avatar_frame {position: absolute;width: 100%;height: 100%;z-index: 1;pointer-events: none;}.playerAvatar .profile_avatar_frame > im
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 72 3a 23 35 37 63 62 64 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 65 72 73 6f 6e 61 2e 69 6e 2d 67 61 6d 65 2c 20 61 2e 70 65 72 73 6f 6e 61 2e 69 6e 2d 67 61 6d 65 2c 20 2e 70 65 72 73 6f 6e 61 2e 69 6e 2d 67 61 6d 65 20 61 2c 0d 0a 2e 66 72 69 65 6e 64 5f 73 74 61 74 75 73 5f 69 6e 2d 67 61 6d 65 2c 20 2e 66 72 69 65 6e 64 5f 73 74 61 74 75 73 5f 69 6e 2d 67 61 6d 65 20 64 69 76 2c 20 2e 66 72 69 65 6e 64 5f 73 74 61 74 75 73 5f 69 6e 2d 67 61 6d 65 20 61 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 23 39 30 62 61 33 63 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 65 72 73 6f 6e 61 2e 67 6f 6c 64 65 6e 2c 20 61 2e 70 65 72 73 6f 6e 61 2e 67 6f 6c 64 65 6e 2c 20 2e 70 65 72 73 6f 6e 61 2e 67 6f 6c 64 65 6e 20 61 2c 0d 0a 2e 66 72 69 65 6e 64 5f 73 74 61 74 75 73 5f 67 6f 6c 64 65 6e 2c 20 Data Ascii: r:#57cbde;}.persona.in-game, a.persona.in-game, .persona.in-game a,.friend_status_in-game, .friend_status_in-game div, .friend_status_in-game a {color:#90ba3c;}.persona.golden, a.persona.golden, .persona.golden a,.friend_status_golden,
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 69 6e 69 70 72 6f 66 69 6c 65 5f 70 6c 61 79 65 72 73 65 63 74 69 6f 6e 20 2e 70 6c 61 79 65 72 73 65 63 74 69 6f 6e 5f 61 76 61 74 61 72 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 37 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 37 70 78 3b 0d 0a 09 74 6f 70 3a 20 38 70 78 3b 0d 0a 09 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 09 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 2e 6d 69 6e 69 70 72 6f 66 69 6c 65 5f 70 6c 61 79 65 72 73 65 63 74 69 6f 6e 20 2e 70 6c 61 79 65 72 73 Data Ascii: g: border-box;background: none;}.miniprofile_playersection .playersection_avatar_frame {position: absolute;z-index: 1;width: 107px;height: 107px;top: 8px;left: 8px;pointer-events: none;}.miniprofile_playersection .players
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 61 6d 65 5f 73 74 61 74 65 2c 0d 0a 2e 6d 69 6e 69 70 72 6f 66 69 6c 65 5f 67 61 6d 65 73 65 63 74 69 6f 6e 20 2e 6d 69 6e 69 70 72 6f 66 69 6c 65 5f 67 61 6d 65 5f 64 65 74 61 69 6c 73 20 2e 72 69 63 68 5f 70 72 65 73 65 6e 63 65 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 72 67 62 28 20 39 38 2c 20 31 32 39 2c 20 35 39 20 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 69 6e 69 70 72 6f 66 69 6c 65 5f 67 61 6d 65 73 65 63 74 69 6f 6e 20 2e 6d 69 6e 69 70 72 6f 66 69 6c 65 5f 67 61 6d 65 5f 64 65 74 61 69 6c 73 20 2e 6d 69 6e 69 70 72 6f 66 69 6c 65 5f 67 61 6d 65 5f 6e 61 6d 65 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 39 30 62 61 33 63 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 69 6e 69 70 72 6f 66 69 6c 65 5f 64 65 74 61 69 6c 73 73 Data Ascii: ame_state,.miniprofile_gamesection .miniprofile_game_details .rich_presence {font-size: 12px;color: rgb( 98, 129, 59 );}.miniprofile_gamesection .miniprofile_game_details .miniprofile_game_name {color: #90ba3c;}.miniprofile_detailss

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49820	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:45 UTC	622	OUT	GET /public/shared/css/buttons.css?v=Grv-5yNFuEfg&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:45 UTC	437	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:45 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Sun, 16 Jun 2024 23:54:48 GMT ETag: W/"Grv-5yNFuEfg" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3297900 Server: cloudflare CF-RAY: 86fd40e00a8e5c79-MIA
2024-04-05 23:17:45 UTC	932	IN	Data Raw: 37 64 65 62 0d 0a 2e 62 74 6e 5f 67 72 65 65 6e 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 44 32 45 38 38 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 61 34 64 30 30 37 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 Data Ascii: 7deb.btn_green_white_innerfade {border-radius: 2px;border: none;padding: 1px;display: inline-block;cursor: pointer;text-decoration: none !important;color: #D2E885 !important;background: #a4d007;background: -webkit-linea
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 36 64 39 30 38 20 35 25 2c 20 23 38 30 61 30 30 36 20 39 35 25 29 3b 0a 09 7d 0d 0a 0d 0a 09 2e 62 74 6e 5f 67 72 65 65 6e 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 3a 6e 6f 74 28 2e 62 74 6e 5f 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 62 74 6e 5f 61 63 74 69 76 65 29 3a 6e 6f 74 28 2e 61 63 74 69 76 65 29 3a 68 6f 76 65 72 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 61 31 62 66 30 37 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 70 2c 20 23 61 31 62 66 30 37 20 35 25 2c 20 23 38 30 61 30 30 36 20 39 35 25 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 Data Ascii: 6d908 5%, #80a006 95%);}.btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover > span {background: #a1bf07;background: -webkit-linear-gradient( top, #a1bf07 5%, #80a006 95%);background: linear
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 39 61 62 37 64 65 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 70 2c 20 23 39 61 62 37 64 65 20 35 25 2c 20 23 34 38 37 33 61 37 20 39 35 25 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 39 61 62 37 64 65 20 35 25 2c 20 23 34 38 37 33 61 37 20 39 35 25 29 3b 0a 09 09 09 7d 0d 0a 0d 0a 2e 62 74 6e 5f 64 61 72 6b 62 6c 75 65 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 Data Ascii: background: #9ab7de;background: -webkit-linear-gradient( top, #9ab7de 5%, #4873a7 95%);background: linear-gradient( to bottom, #9ab7de 5%, #4873a7 95%);}.btn_darkblue_white_innerfade {border-radius: 2px;border: none;padding: 1p
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 2e 62 74 6e 5f 61 63 74 69 76 65 29 3a 6e 6f 74 28 2e 61 63 74 69 76 65 29 3a 68 6f 76 65 72 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 09 09 7d 0d 0a 0d 0a 09 2e 62 74 6e 5f 64 61 72 6b 62 6c 75 65 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 2e 62 74 6e 5f 61 63 74 69 76 65 2c 20 62 74 6e 5f 64 61 72 6b 62 6c 75 65 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 2e 61 63 74 69 76 65 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 33 32 33 62 34 39 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b Data Ascii: .btn_active):not(.active):hover > span {background: transparent;}.btn_darkblue_white_innerfade.btn_active, btn_darkblue_white_innerfade.active {text-decoration: none !important;color: #323b49 !important;background: #fff !important;
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 32 34 34 2c 39 32 2c 31 30 32 2c 31 29 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 70 2c 20 72 67 62 61 28 32 34 34 2c 39 32 2c 31 30 32 2c 31 29 20 35 25 2c 20 72 67 62 61 28 31 38 38 2c 36 37 2c 34 37 2c 31 29 20 39 35 25 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 32 34 34 2c 39 32 2c 31 30 32 2c 31 29 20 35 25 2c 20 72 67 62 61 28 31 38 Data Ascii: tion: none !important;color: #ffffff !important;background: rgba(244,92,102,1);background: -webkit-linear-gradient( top, rgba(244,92,102,1) 5%, rgba(188,67,47,1) 95%);background: linear-gradient( to bottom, rgba(244,92,102,1) 5%, rgba(18
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 70 2c 20 23 37 37 38 30 38 38 20 35 25 2c 20 23 34 31 34 61 35 32 20 39 35 25 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 37 37 38 30 38 38 20 35 25 2c 20 23 34 31 34 61 35 32 20 39 35 25 29 3b 0a 09 09 09 7d 0d 0a 0d 0a 2e 62 74 6e 5f 67 72 65 79 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 3a 6e 6f 74 28 2e 62 74 6e 5f 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 62 74 6e 5f 61 63 74 69 76 65 29 3a 6e 6f 74 28 2e 61 63 74 69 76 65 29 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: linear-gradient( top, #778088 5%, #414a52 95%);background: linear-gradient( to bottom, #778088 5%, #414a52 95%);}.btn_grey_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {text-decoration: none !important
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 0d 0a 0d 0a 2e 62 74 6e 5f 67 72 65 79 5f 67 72 65 79 5f 6f 75 74 65 72 5f 62 65 76 65 6c 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 65 62 65 62 65 62 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 30 30 3b 09 7d 0d 0a 0d 0a 09 2e 62 74 6e 5f 67 72 65 79 5f 67 72 65 79 5f 6f 75 74 65 72 5f 62 65 76 65 6c 20 3e 20 73 70 Data Ascii: .btn_grey_grey_outer_bevel {border-radius: 2px;border: none;padding: 1px;display: inline-block;cursor: pointer;text-decoration: none !important;color: #ebebeb !important;background: #000;}.btn_grey_grey_outer_bevel > sp
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 74 3b 0d 0a 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 20 29 3b 09 7d 0d 0a 0d 0a 09 2e 62 74 6e 5f 67 72 65 79 5f 62 6c 61 63 6b 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 0d 0a 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 09 09 7d 0d 0a 0d 0a 2e 62 74 6e 5f 67 72 65 79 5f 62 6c 61 63 6b 3a 6e 6f 74 28 2e 62 74 6e 5f 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 3a 6e 6f 74 28 2e 62 74 6e 5f 61 63 74 69 76 65 29 3a 6e 6f 74 28 2e 61 63 74 69 76 65 29 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 Data Ascii: t;background: rgba(0, 0, 0, 0.5 );}.btn_grey_black > span {border-radius: 2px;display: block;background: transparent;}.btn_grey_black:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {text-decorati
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 65 5f 68 6f 76 65 72 66 61 64 65 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 36 37 63 31 66 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 20 31 30 33 2c 20 31 39 33 2c 20 32 34 35 2c 20 30 2e 32 20 29 3b 09 7d 0d 0a 0d 0a 09 2e 62 74 6e 76 36 5f 62 6c 75 65 5f 68 6f 76 65 72 66 61 64 65 20 3e 20 73 70 61 6e Data Ascii: e_hoverfade {border-radius: 2px;border: none;padding: 1px;display: inline-block;cursor: pointer;text-decoration: none !important;color: #67c1f5 !important;background: rgba( 103, 193, 245, 0.2 );}.btnv6_blue_hoverfade > span
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 2c 20 72 67 62 61 28 31 39 33 2c 32 32 38 2c 32 34 39 2c 31 29 20 35 25 2c 20 72 67 62 61 28 31 34 38 2c 31 38 33 2c 32 30 32 2c 31 29 20 39 35 25 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 31 39 33 2c 32 32 38 2c 32 34 39 2c 31 29 20 35 25 2c 20 72 67 62 61 28 31 34 38 2c 31 38 33 2c 32 30 32 2c 31 29 20 39 35 25 29 3b 0a 09 7d 0d 0a 0d 0a 09 2e 62 74 6e 76 36 5f 6c 69 67 68 74 62 6c 75 65 5f 62 6c 75 65 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 0d 0a 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 Data Ascii: , rgba(193,228,249,1) 5%, rgba(148,183,202,1) 95%);background: linear-gradient( to bottom, rgba(193,228,249,1) 5%, rgba(148,183,202,1) 95%);}.btnv6_lightblue_blue > span {border-radius: 2px;display: block;background: transparent;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49821	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:45 UTC	616	OUT	GET /public/css/v6/store.css?v=fqF6X6wSBa3N&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:45 UTC	436	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:45 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Sun, 22 Sep 2024 22:52:49 GMT ETag: W/"fqF6X6wSBa3N" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 865495 Server: cloudflare CF-RAY: 86fd40e01cd34c2a-MIA
2024-04-05 23:17:45 UTC	933	IN	Data Raw: 37 64 65 62 0d 0a 0d 0a 2a 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 69 6d 67 20 7b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 61 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2e 61 3a 66 6f 63 75 73 20 7b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 70 78 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 61 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 36 63 30 66 34 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 6e 6f 68 6f 76 65 72 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d Data Ascii: 7deb* {padding: 0;margin: 0;}img {border: none;}a {text-decoration: none;color: #ffffff;}.a:focus {outline: 0px none;}a:hover {text-decoration: none; color: #66c0f4;}a.nohover:hover {text-
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 37 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 76 36 20 64 69 76 23 73 74 6f 72 65 5f 68 65 61 64 65 72 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 65 5f 62 61 63 6b 67 72 6f 75 6e 64 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 74 6f 70 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 76 36 20 23 66 6f 6f 74 65 72 20 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d Data Ascii: 70px;}body.v6 div#store_header {background-color: transparent;}.page_background {background-position: center top;background-repeat: no-repeat;}body.v6 #footer {font-family: Arial, Helvetica, sans-serif;position: absolute;
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 66 66 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 62 6f 64 79 2e 76 36 20 23 66 6f 6f 74 65 72 20 2e 72 75 6c 65 7b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 38 70 78 3b 0d 0a 09 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 33 36 33 63 34 34 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 62 6f 64 79 2e 76 36 20 23 66 6f 6f 74 65 72 20 2e 76 61 6c 76 65 5f 6c 69 6e 6b 73 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 70 78 3b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 2f 2a 20 6e 6f 72 6d 61 6c 20 2a 2f 0d 0a 0d 0a 09 09 20 20 20 20 20 Data Ascii: ff; } body.v6 #footer .rule{ height: 8px;border-top: 1px solid #363c44; } body.v6 #footer .valve_links { margin-top: 8px;font-family: "Motiva Sans", Sans-serif;font-weight: normal; /* normal */
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 31 34 70 78 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 35 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 76 36 20 68 32 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 20 2f 2a 20 6c 69 67 68 74 20 2a 2f 0d 0a 0d 0a 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 09 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0d 0a 09 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 30 33 65 6d 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 70 Data Ascii: 14px;z-index: 5;}body.v6 h2 {font-family: "Motiva Sans", Sans-serif;font-weight: 300; /* light */font-size: 14px;text-transform: uppercase;color: #fff;margin: 0 0 10px;letter-spacing: 0.03em;font-weight: normal;p
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 69 67 68 74 20 2a 2f 0d 0a 0d 0a 09 09 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 31 70 78 20 31 70 78 20 30 20 72 67 62 61 28 20 30 2c 20 30 2c 20 30 2c 20 30 2e 34 20 29 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 76 36 20 68 33 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 32 70 78 3b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 2f 2a 20 6e 6f 72 6d 61 6c 20 2a 2f 0d 0a 0d 0a 09 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 76 Data Ascii: ight /text-shadow: 1px 1px 0 rgba( 0, 0, 0, 0.4 );margin-top: -4px;}body.v6 h3 {color: #ffffff;font-size: 22px;font-family: "Motiva Sans", Sans-serif;font-weight: normal; / normal */font-weight: normal;}body.v
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 67 68 74 63 6f 6c 20 7b 0d 0a 09 77 69 64 74 68 3a 20 33 30 38 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 34 70 78 3b 0d 0a 09 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0d 0a 7d 0d 0a 64 69 76 2e 72 69 67 68 74 63 6f 6c 2e 73 6d 61 6c 6c 20 7b 0d 0a 09 77 69 64 74 68 3a 20 32 33 38 70 78 3b 0d 0a 7d 0d 0a 64 69 76 2e 72 69 67 68 74 63 6f 6c 2e 6c 61 72 67 65 20 7b 0d 0a 09 77 69 64 74 68 3a 20 34 36 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 2e 73 74 6f 72 65 5f 74 6f 6f 6c 74 69 70 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 63 32 63 32 63 32 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 33 64 33 64 33 66 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 09 Data Ascii: ghtcol {width: 308px;margin-left: 14px;float: right;}div.rightcol.small {width: 238px;}div.rightcol.large {width: 466px;}.store_tooltip {background: #c2c2c2;color: #3d3d3f;font-size: 11px;border-radius: 3px;
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 7d 0d 0a 0d 0a 61 2e 73 74 6f 72 65 5f 68 65 61 64 65 72 5f 62 74 6e 5f 63 6f 6e 74 65 6e 74 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 74 6f 72 65 5f 68 65 61 64 65 72 5f 62 74 6e 5f 67 72 61 79 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 20 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 34 20 29 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 74 6f 72 65 5f 68 65 61 64 65 72 5f 62 74 6e 5f 67 72 61 79 20 61 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 74 6f 72 65 5f 68 65 61 64 65 72 5f 62 74 6e 5f 67 72 61 79 20 61 3a 68 6f 76 65 Data Ascii: }a.store_header_btn_content:hover {text-decoration: none;}.store_header_btn_gray {background-color: rgba( 255, 255, 255, 0.4 ); border-radius: 1px;}.store_header_btn_gray a {color: #ffffff;}.store_header_btn_gray a:hove
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 30 2e 35 30 20 29 3b 0d 0a 7d 0d 0a 0d 0a 64 69 76 23 73 74 6f 72 65 5f 73 65 61 72 63 68 20 7b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 33 70 78 20 34 70 78 20 32 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 61 23 73 74 6f 72 65 5f 73 65 61 72 63 68 5f 6c 69 6e 6b 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 72 69 67 68 74 3a 20 32 70 78 3b 0d 0a 09 74 6f 70 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 61 23 73 74 6f 72 65 5f 73 65 61 72 63 68 5f 6c 69 6e 6b 20 69 6d 67 20 7b 0d 0a 09 77 69 64 74 68 3a 20 32 34 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 32 37 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 65 61 72 63 68 62 6f 78 20 7b 0d 0a 0d 0a 09 62 61 63 6b Data Ascii: 0.50 );}div#store_search { float: none;padding: 3px 4px 2px;height: 30px;}a#store_search_link {position: absolute;right: 2px;top: 0;}a#store_search_link img {width: 24px;height: 27px;}.searchbox {back
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 30 3b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2e 74 61 62 2e 61 63 74 69 76 65 2e 74 61 62 5f 66 69 6c 6c 65 72 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 32 36 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 31 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 5f 70 61 67 65 5f 6c 69 6e 6b 5f 68 6f 6c 64 65 72 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 Data Ascii: flex-shrink: 0; max-width: 210px;}.tab.active.tab_filler {height: 26px;margin-bottom: -1px;}.tab_page_link_holder { position: relative; text-align: center; height: 24px; line-height: 24px; margin-top:
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 20 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 36 37 63 31 66 35 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 34 31 37 61 39 62 27 2c 47 72 61 64 69 65 6e 74 54 79 70 65 3d 31 20 29 3b 20 2f 2a 20 49 45 36 2d 39 20 66 61 6c 6c 62 61 63 6b 20 6f 6e 20 68 6f 72 69 7a 6f 6e 74 61 6c 20 67 72 61 64 69 65 6e 74 20 2a 2f 0d 0a 7d 0d 0a 2e 74 61 62 5f 70 61 67 65 5f 6c 69 6e 6b 5f 6e 65 78 74 20 61 20 7b 0d 0a 20 20 20 20 72 69 67 68 74 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 2e 74 61 62 5f 70 61 67 65 5f 6c 69 6e 6b 5f 70 72 65 76 20 61 20 7b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 74 6f 72 65 5f 6e Data Ascii: rogid:DXImageTransform.Microsoft.gradient( startColorstr='#67c1f5', endColorstr='#417a9b',GradientType=1 ); /* IE6-9 fallback on horizontal gradient */}.tab_page_link_next a { right: 0px;}.tab_page_link_prev a { left: 0px;}.store_n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49818	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:45 UTC	615	OUT	GET /public/css/v6/cart.css?v=PUI5e8sxLsB9&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:45 UTC	437	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:45 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Sun, 12 May 2024 04:07:44 GMT ETag: W/"PUI5e8sxLsB9" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3292385 Server: cloudflare CF-RAY: 86fd40e01b908dfd-MIA
2024-04-05 23:17:45 UTC	932	IN	Data Raw: 37 64 65 62 0d 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 0d 0a 62 6f 64 79 2e 76 36 20 7b 0d 0a 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 2f 2a 20 6e 6f 72 6d 61 6c 20 2a 2f 0d 0a 0d 0a 09 09 7d 0d 0a 0d 0a 2e 74 6f 6f 6c 74 69 70 5f 71 5f 63 74 6e 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 34 29 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0d 0a 20 20 Data Ascii: 7deb/* CSS Document /body.v6 {font-family: "Motiva Sans", Sans-serif;font-weight: normal; / normal */}.tooltip_q_ctn { background: rgba(255,255,255,0.4); color: white; border-radius: 10px; font-size: 11px;
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 74 65 6e 74 20 2e 70 61 79 6d 65 6e 74 5f 69 6e 66 6f 5f 66 6f 72 6d 5f 61 72 65 61 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 20 30 2c 20 30 2c 20 30 2c 20 30 2e 32 20 29 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 0d 0a 23 73 68 69 70 70 69 6e 67 5f 69 6e 66 6f 5f 74 61 62 20 23 73 68 69 70 70 69 6e 67 5f 69 6e 66 6f 5f 65 6e 74 72 79 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 20 30 2c 20 30 2c 20 30 2c 20 30 2e 32 20 29 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 68 69 70 70 69 6e 67 5f 69 6e 66 6f 5f 61 64 64 72 65 73 73 5f 74 69 74 6c 65 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 38 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 Data Ascii: tent .payment_info_form_area {background: rgba( 0, 0, 0, 0.2 );padding: 16px;}#shipping_info_tab #shipping_info_entry {background: rgba( 0, 0, 0, 0.2 );padding: 16px;}.shipping_info_address_title {padding-top: 8px;font-si
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 6d 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 63 6f 6e 74 65 6e 74 5f 62 6f 78 20 68 33 2e 74 61 62 5f 68 65 61 64 65 72 0d 0a 7b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 20 2f 2a 20 6c 69 67 68 74 20 2a 2f 0d 0a 0d 0a 09 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 09 3a 20 31 37 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 09 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0d 0a 09 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 32 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 3b 0d Data Ascii: m: 5px;}.checkout_content_box h3.tab_header{font-family: "Motiva Sans", Sans-serif;font-weight: 300; /* light */font-weight: normal;: 17px;color: #fff;text-transform: uppercase;letter-spacing: 2px;margin-top: 30px;
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 20 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 2d 36 30 64 65 67 2c 20 20 72 67 62 61 28 39 37 2c 31 30 30 2c 31 30 31 2c 30 2e 33 29 20 30 25 2c 20 72 67 62 61 28 32 32 36 2c 32 34 34 2c 32 35 35 2c 30 2e 33 29 20 31 30 30 25 29 3b 20 2f 2a 20 46 46 33 2e 36 2b 20 2a 2f 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 20 6c 65 66 74 20 74 6f 70 2c 20 72 69 67 68 74 20 62 6f 74 74 6f 6d 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 30 25 2c 72 67 62 61 28 39 37 2c 31 30 30 2c 31 30 31 2c 30 2e 33 29 29 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 30 30 25 2c 72 67 62 61 28 32 32 36 2c 32 34 34 2c 32 35 35 2c 30 2e 33 29 29 29 3b 20 2f 2a 20 43 68 72 6f Data Ascii: ckground: -moz-linear-gradient(-60deg, rgba(97,100,101,0.3) 0%, rgba(226,244,255,0.3) 100%); /* FF3.6+ /background: -webkit-gradient(linear, left top, right bottom, color-stop(0%,rgba(97,100,101,0.3)), color-stop(100%,rgba(226,244,255,0.3))); / Chro
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 7b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 36 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 75 72 63 68 61 73 65 5f 70 65 6e 64 69 6e 67 5f 61 72 65 61 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 2f 2a 20 56 65 72 79 20 4f 6c 64 20 77 65 62 6b 69 74 20 2a 2f 0d 0a 09 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 2f 2a 20 49 45 20 31 30 20 2a 2f 0d 0a 09 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 2f 2a 20 4f 6c 64 20 77 65 62 6b 69 74 20 2a 2f 0d 0a 09 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 09 0d 0a 7d 0d 0a 0d 0a 2e 70 65 6e 64 69 6e 67 5f 70 75 72 63 68 61 73 65 5f 73 75 6d 6d 61 72 79 5f 72 65 74 72 79 5f 6e 6f 74 65 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 36 37 63 Data Ascii: {margin-bottom: 60px;}.purchase_pending_area {display: -webkit-box; /* Very Old webkit /display: -ms-flexbox; / IE 10 /display: -webkit-flex; / Old webkit */display:flex;}.pending_purchase_summary_retry_note {color: #67c
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 20 31 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 72 6f 77 5f 64 65 73 63 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 63 36 64 34 64 66 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 72 6f 77 5f 72 69 67 68 74 20 61 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 35 66 63 62 66 66 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 5f Data Ascii: 16px;}.checkout_subscription_row_desc {color: #c6d4df;font-size: 13px;font-family: "Motiva Sans", Sans-serif;}.checkout_subscription_row_right a {display: block;margin-top: 10px;color: #5fcbff;font-size: 14px;}.btn_
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 65 62 6d 6f 6e 65 79 5f 70 72 6f 6d 70 74 5f 6c 69 6e 6b 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 77 65 62 6d 6f 6e 65 79 5f 70 72 6f 6d 70 74 5f 6c 69 6e 6b 3a 68 6f 76 65 72 20 2e 77 65 62 6d 6f 6e 65 79 5f 70 72 6f 6d 70 74 5f 63 74 6e 20 7b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 36 37 63 31 66 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 2d 36 30 64 65 67 2c 20 Data Ascii: ebmoney_prompt_link {text-decoration: none;}a.webmoney_prompt_link:hover .webmoney_prompt_ctn { text-decoration: none !important; color: #ffffff !important; background: #67c1f5 !important; background: -webkit-linear-gradient( -60deg,
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 20 2e 63 68 65 63 6b 6f 75 74 5f 63 6f 6e 74 65 6e 74 2e 63 61 72 74 20 0d 0a 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 69 6e 75 65 5f 73 68 6f 70 70 69 6e 67 5f 63 74 6e 20 7b 0d 0a 0d 0a 7d 0d 0a 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 73 74 65 61 6d 5f 72 65 77 61 72 64 73 5f 62 61 6e 6e 65 72 0d 0a 7b 0d 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 3b 0d 0a 09 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 30 35 33 38 41 3b 0d 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 36 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 35 38 70 78 3b 0d 0a 09 64 69 73 70 6c Data Ascii: .checkout_content.cart {padding: 0px;}.continue_shopping_ctn {}.checkout_steam_rewards_banner{border: 1px solid;border-color: #30538A;box-sizing: border-box;margin-top: 6px;margin-bottom: 6px;height: 58px;displ
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 65 72 20 64 69 76 20 64 69 76 2e 6c 69 6e 6b 0d 0a 7b 09 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 2f 2a 20 62 6f 6c 64 20 2a 2f 0d 0a 0d 0a 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 73 74 65 61 6d 5f 72 65 77 61 72 64 73 5f 62 61 6e 6e 65 72 20 64 69 76 2e 6c 65 66 74 20 0d 0a 7b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 2f 2a 20 6e 6f 72 6d 61 6c 20 2a 2f 0d 0a 0d 0a 09 Data Ascii: er div div.link{font-family: "Motiva Sans", Sans-serif;font-weight: bold; /* bold /font-size: 13px;}.checkout_steam_rewards_banner div.left {font-family: "Motiva Sans", Sans-serif;font-weight: normal; / normal */
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 32 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 67 69 66 74 5f 72 65 67 69 6f 6e 5f 77 61 72 6e 69 6e 67 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 67 69 66 74 5f 72 65 67 69 6f 6e 5f 77 61 72 6e 69 6e 67 5f 6c 69 6e 6b 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 63 6f 6c 5f 72 69 67 68 74 5f 67 69 66 74 5f 72 65 63 69 70 69 65 6e 74 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 6e 6f 74 65 73 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 30 39 32 61 35 3b 0d 0a 09 6c 69 Data Ascii: 20px;}.checkout_gift_region_warning {margin-top: 30px !important;}.checkout_gift_region_warning_link {display: block;margin-top: 10px;}#col_right_gift_recipient {margin-top: 0px;}.checkout_notes {color: #7092a5;li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49816	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:45 UTC	617	OUT	GET /public/css/v6/browse.css?v=wWw5tW1y7nea&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:45 UTC	437	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:45 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Sun, 28 Apr 2024 03:30:29 GMT ETag: W/"wWw5tW1y7nea" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3307246 Server: cloudflare CF-RAY: 86fd40e02f3a287e-MIA
2024-04-05 23:17:45 UTC	932	IN	Data Raw: 32 63 38 33 0d 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 0d 0a 2e 62 72 6f 77 73 65 5f 68 65 61 64 65 72 20 2e 70 61 67 65 5f 74 69 74 6c 65 20 2e 62 6c 6f 63 6b 62 67 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 39 39 30 30 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 72 6f 77 73 65 5f 66 6c 6f 61 74 69 6e 67 5f 6c 69 6e 6b 20 7b 0d 0a 09 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0d 0a 09 77 69 64 74 68 3a 20 32 38 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 72 6f 77 73 65 5f 6c 69 6e 6b 73 20 61 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 62 30 61 65 61 63 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 72 6f 77 73 65 5f 6c 69 6e 6b 73 20 61 2e 6c 69 6e 6b 62 61 72 20 2e 72 69 67 68 74 62 6c Data Ascii: 2c83/* CSS Document */.browse_header .page_title .blockbg {background-color: #ff9900;color: #000000;}.browse_floating_link {float: right;width: 288px;}.browse_links a {color: #b0aeac;}.browse_links a.linkbar .rightbl
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 34 66 39 34 62 63 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 35 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 2d 32 70 78 20 33 70 78 20 30 20 72 67 62 61 28 20 30 2c 20 30 2c 20 30 2c 20 30 2e 32 35 20 29 3b 0d 0a 7d 0d 0a Data Ascii: p-left-radius: 3px; border-top-right-radius: 3px; font-size: 13px; color: #4f94bc; line-height: 25px; padding: 0 10px; cursor: pointer; vertical-align: top; box-shadow: inset 0 -2px 3px 0 rgba( 0, 0, 0, 0.25 );}
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 61 28 31 30 33 2c 31 39 33 2c 32 34 35 2c 31 29 29 2c 20 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 30 30 25 2c 72 67 62 61 28 31 30 33 2c 31 39 33 2c 32 34 35 2c 30 29 29 29 3b 20 2f 2a 20 43 68 72 6f 6d 65 2c 53 61 66 61 72 69 34 2b 20 2a 2f 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 20 72 67 62 61 28 31 30 33 2c 31 39 33 2c 32 34 35 2c 31 29 20 30 25 2c 72 67 62 61 28 31 30 33 2c 31 39 33 2c 32 34 35 2c 30 29 20 31 30 30 25 29 3b 20 2f 2a 20 43 68 72 6f 6d 65 31 30 2b 2c 53 61 66 61 72 69 35 2e 31 2b 20 2a 2f 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 20 72 67 62 61 28 31 30 33 2c Data Ascii: a(103,193,245,1)), color-stop(100%,rgba(103,193,245,0))); /* Chrome,Safari4+ / background: -webkit-linear-gradient(top, rgba(103,193,245,1) 0%,rgba(103,193,245,0) 100%); / Chrome10+,Safari5.1+ */ background: -o-linear-gradient(top, rgba(103,
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 65 6f 20 2e 74 61 62 5f 6f 76 65 72 6c 61 79 20 69 6d 67 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 31 35 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 5f 76 69 64 65 6f 5f 63 61 70 73 75 6c 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 74 6f 70 3a 20 31 35 70 78 3b 0d 0a 09 6c 65 66 74 3a 20 31 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 5f 76 69 64 65 6f 5f 64 65 73 63 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 31 33 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 34 37 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 36 32 36 33 36 36 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 5f 76 69 64 65 6f 5f 64 65 73 63 20 2e 76 69 65 77 63 6f 75 6e 74 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 0d Data Ascii: eo .tab_overlay img {height: 152px;}.tab_video_capsule {position: absolute;top: 15px;left: 13px;}.tab_video_desc {padding-left: 213px;padding-top: 47px;color: #626366;}.tab_video_desc .viewcount {font-size: 10px;
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 69 6e 65 3b 0d 0a 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 62 61 72 5f 74 6f 70 5f 73 70 61 63 65 72 20 7b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 5f 66 69 6c 74 65 72 5f 63 6f 6e 74 72 6f 6c 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 5f 66 69 6c 74 65 72 5f 63 6f 6e 74 72 6f 6c 2c 0d 0a 2e 72 61 6e 67 65 5f 64 69 73 70 6c 61 79 20 7b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 38 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 38 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 Data Ascii: ine;}.tabbar_top_spacer { height: 38px;}.tab_filter_control { margin-bottom: 2px; cursor: pointer;}.tab_filter_control,.range_display {line-height: 28px;padding: 0 8px;font-size: 13px;font-family: "Motiva
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 2a 2f 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 20 20 23 36 37 63 31 66 35 20 30 25 2c 23 34 31 37 61 39 62 20 31 30 30 25 29 3b 20 2f 2a 20 57 33 43 20 2a 2f 0d 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 20 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 36 37 63 31 66 35 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 34 31 37 61 39 62 27 2c 47 72 61 64 69 65 6e 74 54 79 70 65 3d 31 20 29 3b 20 2f 2a 20 49 45 36 2d 39 20 66 61 6c 6c 62 61 63 6b 20 6f 6e 20 68 6f 72 69 7a 6f 6e 74 61 6c 20 67 72 61 64 69 65 6e 74 20 2a 2f 0d 0a 20 20 20 20 63 6f 6c Data Ascii: / background: linear-gradient(135deg, #67c1f5 0%,#417a9b 100%); / W3C / filter: progid:DXImageTransform.Microsoft.gradient( startColorstr='#67c1f5', endColorstr='#417a9b',GradientType=1 ); / IE6-9 fallback on horizontal gradient */ col
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 6b 65 64 20 2e 74 61 62 5f 66 69 6c 74 65 72 5f 63 6f 6e 74 72 6f 6c 5f 63 6f 75 6e 74 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 5f 66 69 6c 74 65 72 5f 63 6f 6e 74 72 6f 6c 5f 6e 6f 74 20 7b 0d 0a 09 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 36 70 78 3b 0d 0a 09 77 69 64 74 68 3a 20 31 36 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 5f 66 69 6c 74 65 72 5f 63 6f 6e 74 72 6f 6c 5f 6e 6f 74 20 69 6d 67 20 7b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 31 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 5f 66 69 6c 74 65 72 5f 63 6f 6e 74 72 6f 6c 5f 6e 6f 74 2e 63 68 65 63 6b 65 64 20 69 6d 67 20 7b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 31 2e 30 3b 0d Data Ascii: ked .tab_filter_control_count {display: none;}.tab_filter_control_not {float: right;margin: 6px;width: 16px;height: 16px;}.tab_filter_control_not img {opacity: 0.1;}.tab_filter_control_not.checked img {opacity: 1.0;
2024-04-05 23:17:45 UTC	1369	IN	Data Raw: 6d 6d 65 6e 74 74 68 72 65 61 64 5f 70 61 67 65 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 36 37 63 31 66 35 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 65 64 5f 69 74 65 6d 73 5f 70 61 67 69 6e 67 5f 70 61 67 65 6c 69 6e 6b 2e 61 63 74 69 76 65 2c 20 2e 70 61 67 65 64 5f 69 74 65 6d 73 5f 70 61 67 69 6e 67 5f 63 6f 6e 74 72 6f 6c 73 20 2e 63 6f 6d 6d 65 6e 74 74 68 72 65 61 64 5f 70 61 67 65 6c 69 6e 6b 2e 61 63 74 69 76 65 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 65 64 5f 69 74 65 6d 73 5f 70 61 67 69 6e 67 5f 70 61 67 65 6c 69 6e 6b 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f Data Ascii: mmentthread_pagelink:hover {color: #67c1f5;}.paged_items_paging_pagelink.active, .paged_items_paging_controls .commentthread_pagelink.active {color: #ffffff;cursor: default;}.paged_items_paging_pagelink.active:hover {text-decoratio
2024-04-05 23:17:45 UTC	888	IN	Data Raw: 61 63 63 65 73 73 20 68 32 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 20 2f 2a 20 6c 69 67 68 74 20 2a 2f 0d 0a 0d 0a 09 09 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 37 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 43 36 44 34 44 46 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 32 70 78 3b 0d 0a 7d 0d 0a 62 6f 64 79 2e 76 36 20 2e 68 65 61 64 65 72 5f 65 61 72 6c 79 5f 61 63 63 65 73 73 20 68 32 20 61 20 7b 0d 0a 20 20 20 20 Data Ascii: access h2 {font-family: "Motiva Sans", Sans-serif;font-weight: 300; /* light */ font-weight: normal; font-size: 17px; color: #C6D4DF; padding-left: 16px; margin-top: -2px;}body.v6 .header_early_access h2 a {
2024-04-05 23:17:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49822	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:45 UTC	620	OUT	GET /public/shared/css/login.css?v=N_ALu0tisSbF&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:46 UTC	437	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:46 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Mon, 27 May 2024 02:05:26 GMT ETag: W/"N_ALu0tisSbF" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3307247 Server: cloudflare CF-RAY: 86fd40e37adf8dfc-MIA
2024-04-05 23:17:46 UTC	932	IN	Data Raw: 34 36 35 66 0d 0a 0d 0a 2e 6c 6f 67 69 6e 5f 6d 6f 64 61 6c 20 7b 0d 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 32 70 78 3b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 75 74 68 5f 6d 6f 64 61 6c 5f 68 31 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 36 37 63 31 66 35 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 75 74 68 5f 62 75 74 74 6f 6e 5f 68 33 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 Data Ascii: 465f.login_modal {max-width: 502px;font-family: Arial, Helvetica, sans-serif;font-size: 12px;}.auth_modal_h1 {color: #67c1f5;font-size: 24px;font-weight: normal;}.auth_button_h3 {font-family: "Motiva Sans", Sans-seri
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 6e 3a 20 63 65 6e 74 65 72 20 2d 34 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 75 74 68 5f 69 63 6f 6e 2e 61 75 74 68 5f 69 63 6f 6e 5f 6c 6f 63 6b 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 2d 39 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 75 74 68 5f 69 63 6f 6e 2e 61 75 74 68 5f 69 63 6f 6e 5f 75 6e 6c 6f 63 6b 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 2d 31 34 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 75 74 68 5f 69 63 6f 6e 2e 61 75 74 68 5f 69 63 6f 6e 5f 73 74 65 61 6d 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 2d 31 39 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 75 74 68 5f 69 63 6f 6e 2e 61 75 74 Data Ascii: n: center -48px;}.auth_icon.auth_icon_lock {background-position: center -96px;}.auth_icon.auth_icon_unlock {background-position: center -144px;}.auth_icon.auth_icon_steam {background-position: center -192px;}.auth_icon.aut
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 6c 6f 67 69 6e 2f 66 72 69 65 6e 64 6c 79 6e 61 6d 65 5f 62 6f 78 2e 70 6e 67 3f 76 3d 31 27 29 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 20 30 2c 20 30 2c 20 30 2c 20 30 2e 32 20 29 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 0d 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 31 70 78 20 31 70 78 20 30 20 30 20 72 67 62 61 28 20 39 31 2c 20 31 33 32 2c 20 31 38 31 2c 20 30 2e 32 20 29 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 43 36 44 34 Data Ascii: static.com/public/shared/images/login/friendlyname_box.png?v=1');background-repeat: no-repeat;background-color: rgba( 0, 0, 0, 0.2 );border-radius: 3px;border: 1px solid #000;box-shadow: 1px 1px 0 0 rgba( 91, 132, 181, 0.2 );color: #C6D4
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 65 69 67 68 74 3a 20 35 38 70 78 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 75 74 68 5f 62 75 74 74 6f 6e 2e 61 75 74 68 5f 62 75 74 74 6f 6e 5f 73 70 61 63 65 72 2c 20 2e 74 77 6f 66 61 63 74 6f 72 61 75 74 68 5f 62 75 74 74 6f 6e 2e 61 75 74 68 5f 62 75 74 74 6f 6e 5f 73 70 61 63 65 72 20 7b 0d 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 75 74 68 5f 62 75 74 74 6f 6e 2c 20 2e 61 75 74 68 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 20 2e 74 77 6f 66 61 63 74 6f 72 61 75 74 68 5f 62 75 74 74 6f 6e 2c 20 2e 74 77 6f 66 61 63 74 6f 72 61 75 74 68 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 74 65 78 74 2d 64 Data Ascii: eight: 58px;cursor: pointer;}.auth_button.auth_button_spacer, .twofactorauth_button.auth_button_spacer {visibility: hidden;}.auth_button, .auth_button:hover, .twofactorauth_button, .twofactorauth_button:hover {display: block;text-d
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 3a 20 32 70 78 3b 0d 0a 09 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 09 2f 2a 20 73 6f 6d 65 20 75 73 65 72 20 61 67 65 6e 74 73 20 73 74 79 6c 65 20 22 62 75 74 74 6f 6e 22 20 65 6c 65 6d 65 6e 74 73 20 77 69 74 68 20 62 6f 72 64 65 72 2d 62 6f 78 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 64 61 6c 5f 62 75 74 74 6f 6e 73 20 2e 61 75 74 68 5f 62 75 74 74 6f 6e 20 3e 20 2a 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 35 25 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 64 61 6c 5f 62 75 74 74 6f 6e 73 20 2e 61 75 74 68 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 70 2c 20 72 67 62 61 28 31 30 32 2c 31 39 32 2c 32 34 Data Ascii: : 2px;box-sizing: content-box;/* some user agents style "button" elements with border-box /}.modal_buttons .auth_button > {padding: 0 5%;}.modal_buttons .auth_button:hover {background: -webkit-linear-gradient( top, rgba(102,192,24
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 0d 0a 0d 0a 2e 74 65 78 74 5f 69 6e 70 75 74 2c 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 63 6f 6e 74 65 6e 74 5f 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 63 6f 6e 74 65 6e 74 5f 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 0d 0a 2e 70 61 72 65 6e 74 61 6c 5f 63 6f 6e 73 65 6e 74 5f 65 6d 61 69 6c 5f 62 6f 64 79 5f 63 6f 6e 74 61 69 6e 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 20 30 2c 20 30 2c 20 30 2c 20 30 2e 32 20 29 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 Data Ascii: .text_input,.checkout_content_box input[type=text],.checkout_content_box input[type=password],.parental_consent_email_body_container input[type=text] {background-color: rgba( 0, 0, 0, 0.2 );color: #fff;border: 1px solid #000;border-r
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 6f 70 61 63 69 74 79 3b 0d 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 6f 75 74 3b 0d 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 30 2e 33 73 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 73 73 77 6f 72 64 5f 74 61 67 3a 62 65 66 6f 72 65 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 72 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 74 6f 70 3a 20 35 70 78 3b 0d 0a 09 77 69 64 74 68 3a 20 30 70 78 3b 0d 0a 09 Data Ascii: ebkit-transition-property: opacity;-webkit-transition-timing-function: ease-out;-webkit-transition-duration: 0.3s;}.password_tag:before {display: inline-block;content: "";position: absolute;right: 100%;top: 5px;width: 0px;
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 0a 7d 0d 0a 0d 0a 2e 67 61 6d 65 5f 6e 61 6d 65 20 2e 62 6c 6f 63 6b 62 67 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0d 0a 7d 0d 0a 2e 67 61 6d 65 5f 6e 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 64 36 64 37 64 38 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 36 70 78 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 6c 6f 63 6b 20 7b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 63 6f 6e 74 65 6e 74 Data Ascii: }.game_name .blockbg {height: 40px;line-height: 40px;}.game_name {position: relative;font-size: 30px;color: #d6d7d8;margin-bottom: 16px;overflow: hidden;}.block {margin: 0px;background: none;}.checkout_content
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 6a 6f 69 6e 73 74 65 61 6d 2f 6e 65 77 5f 6c 6f 67 69 6e 5f 62 67 5f 73 74 65 61 6d 5f 63 68 69 6e 61 2e 6a 70 67 27 20 29 20 63 65 6e 74 65 72 20 74 6f 70 20 6e 6f 2d 72 65 70 65 61 74 2c 20 23 31 38 31 41 32 31 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6c 6f 67 69 6e 2e 67 6c 6f 62 61 6c 20 2e 70 61 67 65 5f 63 6f 6e 74 65 6e 74 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 72 67 62 61 28 32 34 2c 20 32 36 2c 20 33 33 2c 20 30 29 20 30 25 2c 20 23 31 38 31 41 32 31 20 31 30 30 25 29 20 66 69 78 65 64 20 6e 6f 2d 72 65 70 65 61 74 2c 20 75 72 6c 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 Data Ascii: lic/shared/images/joinsteam/new_login_bg_steam_china.jpg' ) center top no-repeat, #181A21;}body.login.global .page_content {background: radial-gradient(rgba(24, 26, 33, 0) 0%, #181A21 100%) fixed no-repeat, url( 'https://store.cloudflare.steamsta
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 45 39 45 39 45 39 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 38 70 78 20 36 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 6f 72 64 65 72 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 2e 35 73 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 32 36 32 38 32 44 3b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: border-radius: 3px;color: #E9E9E9;padding: 8px 6px;display: block;box-shadow: none;width: 100%;transition: border ease-in-out .5s;border: 1px solid #26282D;outline: none;font-family: "Motiva Sans", Sans-serif;font-weight:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49823	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:45 UTC	632	OUT	GET /public/shared/css/shared_responsive.css?v=CG8Em6e-Ozq3&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:46 UTC	436	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:46 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Mon, 16 Sep 2024 04:44:04 GMT ETag: W/"CG8Em6e-Ozq3" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 166923 Server: cloudflare CF-RAY: 86fd40e3cc0d287a-MIA
2024-04-05 23:17:46 UTC	933	IN	Data Raw: 34 39 66 33 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6d 6f 76 65 73 63 72 6f 6c 6c 74 6f 63 6f 6e 74 65 6e 74 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 09 74 6f 70 3a 20 30 3b 0d 0a 09 72 69 67 68 74 3a 20 30 3b 0d 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 2c 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 20 2e 72 65 73 70 6f 6e 73 69 76 65 Data Ascii: 49f3.responsive_page_frame {position: relative;}body.movescrolltocontent .responsive_page_frame {position: fixed;top: 0;right: 0;bottom: 0;left: 0;overflow: auto;}body.overflow_hidden,body.overflow_hidden .responsive
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 5f 63 74 6e 2e 6d 61 69 6e 6d 65 6e 75 20 7b 0d 0a 09 6c 65 66 74 3a 20 2d 32 38 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 5f 63 74 6e 2e 6c 6f 63 61 6c 6d 65 6e 75 20 7b 0d 0a 09 72 69 67 68 74 3a 20 2d 32 38 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 2e 6d 61 69 6e 6d 65 6e 75 5f 61 63 74 69 76 65 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 5f 63 74 6e 2e 6d 61 69 6e 6d 65 6e 75 2c 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 2e 6c 6f 63 61 6c 6d 65 6e 75 5f 61 63 74 69 76 65 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 5f 63 74 6e 2e 6c Data Ascii: ive_page_menu_ctn.mainmenu {left: -280px;}.responsive_page_menu_ctn.localmenu {right: -280px;}.responsive_page_frame.mainmenu_active .responsive_page_menu_ctn.mainmenu,.responsive_page_frame.localmenu_active .responsive_page_menu_ctn.l
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 20 2f 2a 20 74 68 69 6e 20 2a 2f 0d 0a 0d 0a 09 09 7d 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 5f 63 74 6e 2e 6c 6f 63 61 6c 6d 65 6e 75 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 37 31 61 32 31 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 5f 63 74 6e 2e 6c 6f 63 61 6c 6d 65 6e 75 20 2e 6c 6f 63 61 6c 6d 65 6e 75 5f 73 75 62 61 72 65 61 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 39 32 35 33 33 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 Data Ascii: serif;font-weight: 200; /* thin */}.responsive_page_menu_ctn.localmenu .responsive_page_menu {background: #171a21;}.responsive_page_menu_ctn.localmenu .localmenu_subarea {background: #192533;border-radius: 3px;padding: 10px
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 41 59 41 41 41 43 47 35 66 33 33 41 41 41 41 47 58 52 46 57 48 52 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 42 46 78 4a 52 45 46 55 65 4e 72 6b 6d 67 39 6b 6c 47 45 63 78 35 2f 64 4d 59 34 59 34 34 68 6a 78 49 67 78 52 70 53 79 37 4e 77 73 70 53 6d 4e 57 5a 61 79 47 47 6d 4b 46 4a 47 79 6c 43 4a 53 6d 6c 4a 4d 4b 63 74 69 79 6c 4b 61 35 61 5a 70 53 6d 6d 4d 4d 57 49 63 59 34 78 78 6a 47 50 45 6d 50 58 37 32 66 66 4e 32 33 5a 37 37 33 32 66 33 2f 50 65 2b 39 37 74 78 39 64 74 64 2f 65 38 37 2f 4e 2b 37 6e 31 2b 2f 35 36 33 59 6d 31 74 54 62 6d 78 38 66 48 78 4c 6e 71 35 51 7a 71 59 53 71 58 6d 62 4f 2b 72 4d 72 4d 6f 61 5a 44 55 7a 35 64 58 36 4d 73 52 6c 2f 41 36 36 4f 55 35 Data Ascii: AYAAACG5f33AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABFxJREFUeNrkmg9klGEcx5/dMY4Y44hjxIgxRpSy7NwspSmNWZayGGmKFJGylCJSmlJMKctiylKa5aZpSmmMMWIcY4xxjGPEmPX72ffN23Z7732f3/Pe+97tx9dtd/e87/N+7n1+/563Ym1tTbmx8fHxLnq5QzqYSqXmbO+rMrMoaZDUz5dX6MsRl/A66OU5
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 42 6b 79 77 47 69 71 55 63 2f 4a 70 54 74 65 5a 58 74 41 4a 41 74 43 34 67 5a 34 58 47 34 45 64 71 71 4e 6a 78 79 73 52 30 41 73 76 47 65 61 31 4c 70 50 31 59 33 42 5a 2b 36 48 4e 51 46 42 41 32 51 7a 58 72 32 32 4f 74 44 53 44 4f 41 6c 77 74 79 38 6d 45 41 79 4d 5a 37 73 4d 33 4b 2f 55 4e 49 73 31 6a 2b 32 61 41 6e 48 68 61 41 46 68 51 33 45 43 33 59 69 32 47 59 64 4a 67 41 75 6c 6d 57 43 34 43 33 45 4a 59 4a 68 77 32 67 55 32 43 77 41 73 35 63 6d 43 59 62 52 6f 44 35 55 68 4e 54 4b 63 2b 32 41 57 68 50 6a 72 4f 47 6b 32 36 6a 39 6c 65 41 41 51 44 75 36 46 33 72 44 7a 48 72 36 77 41 41 41 41 42 4a 52 55 35 45 72 6b 4a 67 67 67 3d 3d 27 20 29 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 30 30 25 20 31 30 30 25 3b 0d 0a 09 77 69 64 74 Data Ascii: BkywGiqUc/JpTteZXtAJAtC4gZ4XG4EdqqNjxysR0AsvGea1LpP1Y3BZ+6HNQFBA2QzXr22OtDSDOAlwty8mEAyMZ7sM3K/UNIs1j+2aAnHhaAFhQ3EC3Yi2GYdJgAulmWC4C3EJYJhw2gU2CwAs5cmCYbRoD5UhNTKc+2AWhPjrOGk26j9leAAQDu6F3rDzHr6wAAAABJRU5ErkJggg==' );background-size: 100% 100%;widt
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 44 32 42 42 42 69 38 4d 7a 76 38 34 55 4f 38 2f 58 69 72 58 57 32 6b 6c 50 53 51 54 2f 6d 6d 39 50 53 41 34 56 4d 32 38 75 45 69 2f 38 6d 54 30 73 4d 44 68 67 39 35 56 2f 70 64 41 37 4a 54 75 6c 58 36 5a 38 56 67 76 47 6f 77 6c 46 59 62 49 32 4a 69 70 51 56 66 31 79 4c 61 43 58 34 6f 66 54 4e 44 70 70 46 4b 36 54 4f 6a 74 51 61 70 32 43 76 65 72 6e 4e 49 47 32 4b 37 68 59 4e 78 59 44 44 65 32 31 69 6d 36 36 47 59 4b 56 6b 73 4c 45 52 32 74 36 4a 67 59 32 46 64 44 63 5a 52 61 62 49 51 46 74 6c 79 71 48 54 2b 72 77 36 5a 46 77 75 69 7a 77 75 67 35 6e 50 44 49 6a 66 75 30 52 46 52 6b 76 77 6e 75 66 59 55 69 37 34 6f 72 65 58 39 79 52 37 34 74 37 53 35 6d 59 77 48 54 30 71 46 35 63 46 59 61 58 6b 6e 51 4e 52 73 52 42 73 59 68 66 6b 51 58 62 33 6b 77 6a 39 39 Data Ascii: D2BBBi8Mzv84UO8/XirXW2klPSQT/mm9PSA4VM28uEi/8mT0sMDhg95V/pdA7JTulX6Z8VgvGowlFYbI2JipQVf1yLaCX4ofTNDppFK6TOjtQap2CvernNIG2K7hYNxYDDe21im66GYKVksLER2t6JgY2FdDcZRabIQFtlyqHT+rw6ZFwuizwug5nPDIjfu0RFRkvwnufYUi74oreX9yR74t7S5mYwHT0qF5cFYaXknQNRsRBsYhfkQXb3kwj99
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 74 69 6f 6e 5f 65 6e 76 65 6c 6f 70 65 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 61 69 6e 6d 65 6e 75 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 75 62 6d 65 6e 75 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 69 63 6f 6e 2c 0d 0a 2e 6d 61 69 6e 6d 65 6e 75 20 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 75 62 6d 65 6e 75 20 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 64 72 6f 70 64 6f 77 6e 5f 73 65 70 65 72 61 74 6f 72 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 61 69 6e 6d 65 6e 75 20 2e 6d 69 6e 6f 72 5f 6d 65 6e 75 5f 69 74 65 6d 73 20 2e 6d 65 6e 75 69 74 65 6d 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 38 61 38 61 38 61 3b 0d Data Ascii: tion_envelope {display: inline-block;}.mainmenu .notification_submenu .notification_icon,.mainmenu .notification_submenu .header_notification_dropdown_seperator {display: none;}.mainmenu .minor_menu_items .menuitem {color: #8a8a8a;
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 20 30 20 30 20 33 30 70 78 20 30 20 23 36 37 39 39 65 32 3b 0d 0a 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 2e 77 69 74 68 5f 68 65 61 64 65 72 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 6c 6f 63 61 6c 5f 6d 65 6e 75 5f 74 61 62 20 7b 0d 0a 09 74 6f 70 3a 20 36 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 2e 6d 61 69 6e 6d 65 6e 75 5f 61 63 74 69 76 65 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 6c 6f 63 61 6c 5f 6d 65 6e 75 5f 74 61 62 2c 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 2e 6c 6f 63 61 6c 6d 65 6e 75 5f 61 63 74 69 76 65 20 2e 72 65 73 70 6f 6e 73 69 76 Data Ascii: hadow: 0 0 30px 0 #6799e2;cursor: pointer;}.responsive_page_frame.with_header .responsive_local_menu_tab {top: 68px;}.responsive_page_frame.mainmenu_active .responsive_local_menu_tab,.responsive_page_frame.localmenu_active .responsiv
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 0d 0a 7d 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 68 65 61 64 65 72 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 68 65 61 64 65 72 5f 6c 6f 67 6f 20 61 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 63 61 6c 6d 65 6e 75 5f 63 6f 6e 74 65 6e 74 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 43 68 69 6e 61 20 4d 6f 62 69 6c 65 20 46 6f 6f 74 65 72 20 2a 2f 0d 0a 0d 0a 2e 6d 61 69 6e 6d 65 6e 75 5f 73 6f 63 69 61 6c 73 5f 63 68 69 6e 61 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 09 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 61 69 6e 6d 65 6e 75 5f 73 6f 63 69 61 6c 5f 62 6f 78 20 7b 0d 0a 09 Data Ascii: }.responsive_header .responsive_header_logo a {display: inline-block;}.localmenu_content {padding: 16px;}/* China Mobile Footer */.mainmenu_socials_china {display: flex;align-items: center;}.mainmenu_social_box {
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 64 69 6e 67 20 2a 2f 0d 0a 09 68 74 6d 6c 2e 72 65 73 70 6f 6e 73 69 76 65 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 6c 6f 63 61 6c 5f 6d 65 6e 75 20 7b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 2f 2a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 3a 6e 6f 74 28 2e 69 6e 5f 6d 65 6e 75 5f 64 72 61 67 29 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 68 65 61 64 65 72 5f 63 6f 6e 74 65 6e 74 20 7b 0d 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6c 65 66 74 20 30 2e 35 73 2c 20 72 69 67 68 74 20 30 2e 35 73 3b 0d 0a 0d 0a 7d 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 2e 6d 61 69 6e 6d 65 6e 75 Data Ascii: ding /html.responsive .responsive_page_content .responsive_local_menu {display: none;}}/.responsive_page_frame:not(.in_menu_drag) .responsive_header_content {transition: left 0.5s, right 0.5s;}.responsive_page_frame.mainmenu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49824	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:45 UTC	614	OUT	GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:46 UTC	444	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:46 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Sun, 02 Jun 2024 12:39:12 GMT ETag: W/".TZ2NKhB-nliU" Last-Modified: Wed, 28 Jun 2023 04:07:11 GMT Strict-Transport-Security: max-age=10368000 X-Cache: HIT CF-Cache-Status: HIT Age: 3307267 Server: cloudflare CF-RAY: 86fd40e3de2d8bff-MIA
2024-04-05 23:17:46 UTC	925	IN	Data Raw: 37 64 65 33 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 4d 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 50 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 3d 65 2e 67 65 74 41 74 74 Data Ascii: 7de3/! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAtt
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 7d 29 3b 69 66 28 69 74 2e 74 65 73 74 28 74 29 29 72 65 74 75 72 6e 20 76 2e 66 69 6c 74 65 72 28 74 2c 72 2c 21 6e 29 3b 74 3d 76 2e 66 69 6c 74 65 72 28 74 2c 72 29 7d 72 65 74 75 72 6e 20 76 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 76 2e 69 6e 41 72 72 61 79 28 65 2c 74 29 3e 3d 30 3d 3d 3d 6e 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 28 65 29 7b 76 61 72 20 74 3d 63 74 2e 73 70 6c 69 74 28 22 7c 22 29 2c 6e 3d 65 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 3b 69 66 28 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 77 68 69 6c 65 28 74 2e 6c 65 6e 67 74 68 29 6e 2e 63 72 65 61 74 65 45 6c 65 Data Ascii: ion(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t,r)}return v.grep(e,function(e,r){return v.inArray(e,t)>=0===n})}function lt(e){var t=ct.split("\|"),n=e.createDocumentFragment();if(n.createElement)while(t.length)n.createEle
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 7b 45 74 2e 74 65 73 74 28 65 2e 74 79 70 65 29 26 26 28 65 2e 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3d 65 2e 63 68 65 63 6b 65 64 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 2c 74 29 7b 69 66 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 3d 74 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 74 2e 73 6c 69 63 65 28 31 29 2c 72 3d 74 2c 69 3d 4a 74 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 7b 74 3d 4a 74 5b 69 5d 2b 6e 3b 69 66 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 20 74 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 47 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 74 7c 7c 65 2c 76 2e 63 73 73 28 65 2c 22 64 69 73 70 6c 61 79 22 29 3d 3d 3d 22 6e 6f 6e 65 22 7c 7c 21 76 2e 63 Data Ascii: {Et.test(e.type)&&(e.defaultChecked=e.checked)}function Qt(e,t){if(t in e)return t;var n=t.charAt(0).toUpperCase()+t.slice(1),r=t,i=Jt.length;while(i--){t=Jt[i]+n;if(t in e)return t}return r}function Gt(e,t){return e=t\|\|e,v.css(e,"display")==="none"\|\|!v.c
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 74 79 6c 65 5b 74 5d 3b 69 66 28 55 74 2e 74 65 73 74 28 72 29 29 72 65 74 75 72 6e 20 72 3b 69 3d 73 26 26 28 76 2e 73 75 70 70 6f 72 74 2e 62 6f 78 53 69 7a 69 6e 67 52 65 6c 69 61 62 6c 65 7c 7c 72 3d 3d 3d 65 2e 73 74 79 6c 65 5b 74 5d 29 2c 72 3d 70 61 72 73 65 46 6c 6f 61 74 28 72 29 7c 7c 30 7d 72 65 74 75 72 6e 20 72 2b 65 6e 28 65 2c 74 2c 6e 7c 7c 28 73 3f 22 62 6f 72 64 65 72 22 3a 22 63 6f 6e 74 65 6e 74 22 29 2c 69 29 2b 22 70 78 22 7d 66 75 6e 63 74 69 6f 6e 20 6e 6e 28 65 29 7b 69 66 28 57 74 5b 65 5d 29 72 65 74 75 72 6e 20 57 74 5b 65 5d 3b 76 61 72 20 74 3d 76 28 22 3c 22 2b 65 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 69 2e 62 6f 64 79 29 2c 6e 3d 74 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 74 2e 72 65 6d 6f 76 65 28 29 3b 69 Data Ascii: tyle[t];if(Ut.test(r))return r;i=s&&(v.support.boxSizingReliable\|\|r===e.style[t]),r=parseFloat(r)\|\|0}return r+en(e,t,n\|\|(s?"border":"content"),i)+"px"}function nn(e){if(Wt[e])return Wt[e];var t=v("<"+e+">").appendTo(i.body),n=t.css("display");t.remove();i
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 4f 70 74 69 6f 6e 73 7c 7c 7b 7d 3b 66 6f 72 28 72 20 69 6e 20 6e 29 6e 5b 72 5d 21 3d 3d 74 26 26 28 28 73 5b 72 5d 3f 65 3a 69 7c 7c 28 69 3d 7b 7d 29 29 5b 72 5d 3d 6e 5b 72 5d 29 3b 69 26 26 76 2e 65 78 74 65 6e 64 28 21 30 2c 65 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 41 6e 28 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 73 2c 6f 2c 75 2c 61 3d 65 2e 63 6f 6e 74 65 6e 74 73 2c 66 3d 65 2e 64 61 74 61 54 79 70 65 73 2c 6c 3d 65 2e 72 65 73 70 6f 6e 73 65 46 69 65 6c 64 73 3b 66 6f 72 28 73 20 69 6e 20 6c 29 73 20 69 6e 20 72 26 26 28 6e 5b 6c 5b 73 5d 5d 3d 72 5b 73 5d 29 3b 77 68 69 6c 65 28 66 5b 30 5d 3d 3d 3d 22 2a 22 29 66 2e 73 68 69 66 74 28 29 2c 69 3d 3d 3d 74 26 26 28 69 3d 65 2e 6d 69 6d 65 54 79 70 65 7c 7c 6e 2e 67 65 74 52 65 73 70 6f 6e 73 65 Data Ascii: Options\|\|{};for(r in n)n[r]!==t&&((s[r]?e:i\|\|(i={}))[r]=n[r]);i&&v.extend(!0,e,i)}function An(e,n,r){var i,s,o,u,a=e.contents,f=e.dataTypes,l=e.responseFields;for(s in l)s in r&&(n[l[s]]=r[s]);while(f[0]==="*")f.shift(),i===t&&(i=e.mimeType\|\|n.getResponse
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 30 2c 73 3d 30 2c 6f 3d 58 6e 2e 6c 65 6e 67 74 68 2c 75 3d 76 2e 44 65 66 65 72 72 65 64 28 29 2e 61 6c 77 61 79 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 61 2e 65 6c 65 6d 7d 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 71 6e 7c 7c 24 6e 28 29 2c 6e 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 66 2e 73 74 61 72 74 54 69 6d 65 2b 66 2e 64 75 72 61 74 69 6f 6e 2d 74 29 2c 72 3d 6e 2f 66 2e 64 75 72 61 74 69 6f 6e 7c 7c 30 2c 69 3d 31 2d 72 2c 73 3d 30 2c 6f 3d 66 2e 74 77 65 65 6e 73 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 73 3c 6f 3b 73 2b 2b 29 66 2e 74 77 65 65 6e 73 5b 73 5d 2e 72 75 6e 28 69 29 3b 72 65 74 75 72 6e 20 75 2e 6e 6f 74 69 66 79 57 69 74 68 28 65 2c 5b 66 2c 69 Data Ascii: n(e,t,n){var r,i=0,s=0,o=Xn.length,u=v.Deferred().always(function(){delete a.elem}),a=function(){var t=qn\|\|$n(),n=Math.max(0,f.startTime+f.duration-t),r=n/f.duration\|\|0,i=1-r,s=0,o=f.tweens.length;for(;s<o;s++)f.tweens[s].run(i);return u.notifyWith(e,[f,i
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 6f 64 65 54 79 70 65 26 26 47 74 28 65 29 3b 6e 2e 71 75 65 75 65 7c 7c 28 6c 3d 76 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 65 2c 22 66 78 22 29 2c 6c 2e 75 6e 71 75 65 75 65 64 3d 3d 6e 75 6c 6c 26 26 28 6c 2e 75 6e 71 75 65 75 65 64 3d 30 2c 63 3d 6c 2e 65 6d 70 74 79 2e 66 69 72 65 2c 6c 2e 65 6d 70 74 79 2e 66 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 2e 75 6e 71 75 65 75 65 64 7c 7c 63 28 29 7d 29 2c 6c 2e 75 6e 71 75 65 75 65 64 2b 2b 2c 68 2e 61 6c 77 61 79 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 61 6c 77 61 79 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 2e 75 6e 71 75 65 75 65 64 2d 2d 2c 76 2e 71 75 65 75 65 28 65 2c 22 66 78 22 29 2e 6c 65 6e 67 74 68 7c 7c 6c 2e 65 6d 70 74 79 2e 66 69 72 65 28 29 7d 29 7d 29 29 2c 65 2e 6e 6f 64 65 54 Data Ascii: odeType&&Gt(e);n.queue\|\|(l=v._queueHooks(e,"fx"),l.unqueued==null&&(l.unqueued=0,c=l.empty.fire,l.empty.fire=function(){l.unqueued\|\|c()}),l.unqueued++,h.always(function(){h.always(function(){l.unqueued--,v.queue(e,"fx").length\|\|l.empty.fire()})})),e.nodeT
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 76 2e 69 73 57 69 6e 64 6f 77 28 65 29 3f 65 3a 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 65 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 65 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 76 61 72 20 6e 2c 72 2c 69 3d 65 2e 64 6f 63 75 6d 65 6e 74 2c 73 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2c 6f 3d 65 2e 6e 61 76 69 67 61 74 6f 72 2c 75 3d 65 2e 6a 51 75 65 72 79 2c 61 3d 65 2e 24 2c 66 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 2c 6c 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2c 63 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2c 68 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 70 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: (e){return v.isWindow(e)?e:e.nodeType===9?e.defaultView\|\|e.parentWindow:!1}var n,r,i=e.document,s=e.location,o=e.navigator,u=e.jQuery,a=e.$,f=Array.prototype.push,l=Array.prototype.slice,c=Array.prototype.indexOf,h=Object.prototype.toString,p=Object.proto
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 6f 3d 69 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 73 5b 32 5d 29 3b 69 66 28 6f 26 26 6f 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7b 69 66 28 6f 2e 69 64 21 3d 3d 73 5b 32 5d 29 72 65 74 75 72 6e 20 72 2e 66 69 6e 64 28 65 29 3b 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 2c 74 68 69 73 5b 30 5d 3d 6f 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 69 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 65 2c 74 68 69 73 7d 72 65 74 75 72 6e 21 6e 7c 7c 6e 2e 6a 71 75 65 72 79 3f 28 6e 7c 7c 72 29 2e 66 69 6e 64 28 65 29 3a 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 6e 29 2e 66 69 6e 64 28 65 29 7d 72 65 74 75 72 6e 20 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 65 29 3f 72 2e 72 65 61 64 79 28 65 29 3a 28 65 2e 73 65 6c 65 63 74 6f 72 21 3d 3d 74 Data Ascii: o=i.getElementById(s[2]);if(o&&o.parentNode){if(o.id!==s[2])return r.find(e);this.length=1,this[0]=o}return this.context=i,this.selector=e,this}return!n\|\|n.jquery?(n\|\|r).find(e):this.constructor(n).find(e)}return v.isFunction(e)?r.ready(e):(e.selector!==t
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 74 79 70 65 6f 66 20 75 3d 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 28 6c 3d 75 2c 75 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 7b 7d 2c 61 3d 32 29 2c 74 79 70 65 6f 66 20 75 21 3d 22 6f 62 6a 65 63 74 22 26 26 21 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 75 29 26 26 28 75 3d 7b 7d 29 2c 66 3d 3d 3d 61 26 26 28 75 3d 74 68 69 73 2c 2d 2d 61 29 3b 66 6f 72 28 3b 61 3c 66 3b 61 2b 2b 29 69 66 28 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 29 21 3d 6e 75 6c 6c 29 66 6f 72 28 6e 20 69 6e 20 65 29 7b 72 3d 75 5b 6e 5d 2c 69 3d 65 5b 6e 5d 3b 69 66 28 75 3d 3d 3d 69 29 63 6f 6e 74 69 6e 75 65 3b 6c 26 26 69 26 26 28 76 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 69 29 7c 7c 28 73 3d 76 2e 69 73 41 72 Data Ascii: rguments.length,l=!1;typeof u=="boolean"&&(l=u,u=arguments[1]\|\|{},a=2),typeof u!="object"&&!v.isFunction(u)&&(u={}),f===a&&(u=this,--a);for(;a<f;a++)if((e=arguments[a])!=null)for(n in e){r=u[n],i=e[n];if(u===i)continue;l&&i&&(v.isPlainObject(i)\|\|(s=v.isAr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49826	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:46 UTC	605	OUT	GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:46 UTC	444	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:46 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Mon, 27 May 2024 01:53:37 GMT ETag: W/".zYHOpI1L3Rt0" Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT Strict-Transport-Security: max-age=10368000 X-Cache: HIT CF-Cache-Status: HIT Age: 3292424 Server: cloudflare CF-RAY: 86fd40e48cb84c1a-MIA
2024-04-05 23:17:46 UTC	925	IN	Data Raw: 33 65 64 37 0d 0a 2f 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 0d 0a 20 2a 0d 0a 20 2a 20 54 68 69 73 20 70 6c 75 67 69 6e 20 77 69 6c 6c 20 63 72 65 61 74 65 20 64 69 76 2e 6a 73 54 6f 6f 6c 74 69 70 20 65 6c 65 6d 65 6e 74 73 20 28 6f 72 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6f 77 6e 21 29 20 69 6e 20 62 6f 64 79 20 66 6f 72 20 65 76 65 72 79 20 74 6f 6f 6c 74 69 70 20 6f 6e 20 74 68 65 20 70 61 67 65 2e 20 53 6f 6d 65 0d 0a 20 2a 20 62 61 73 69 63 20 43 53 53 20 69 73 20 61 70 70 6c 69 65 64 20 61 75 74 6f 6d 61 67 69 63 61 6c 6c 79 2c 20 62 75 74 20 79 6f 75 27 6c 6c 20 77 61 6e 74 20 74 6f 20 73 74 79 6c 65 20 69 74 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 66 72 6f 6d 20 74 68 65 72 65 2e 20 54 68 69 73 20 63 6f 64 65 20 77 69 6c 6c Data Ascii: 3ed7/* Requires jQuery * * This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 20 6f 70 65 6e 20 69 66 20 77 65 20 6d 6f 75 73 65 20 64 69 72 65 63 74 6c 79 20 6f 6e 20 74 6f 20 74 68 65 20 74 6f 6f 6c 74 69 70 3f 20 28 59 6f 75 72 20 74 6f 6f 6c 74 69 70 20 77 69 6c 6c 20 6e 65 65 64 20 74 6f 20 73 70 61 77 6e 20 69 6e 73 69 64 65 20 69 74 27 73 20 6f 77 6e 65 72 27 73 20 62 6f 78 20 66 6f 72 20 74 68 69 73 20 74 6f 20 77 6f 72 6b 29 0d 0a 20 2a 20 2d 20 74 6f 6f 6c 74 69 70 50 61 72 65 6e 74 3a 20 4d 6f 72 65 20 67 65 6e 65 72 61 6c 6c 79 20 75 73 65 6c 65 73 73 20 70 72 6f 70 65 72 74 69 65 73 20 66 6f 72 20 73 75 70 65 72 6e 61 76 3a 20 4c 65 74 73 20 75 73 20 73 70 65 63 69 66 79 20 77 68 69 63 68 20 65 6c 65 6d 65 6e 74 20 74 6f 20 70 61 72 65 6e 74 20 74 68 65 20 74 6f 6f 6c 74 69 70 73 20 74 6f 2e 20 59 4f 55 20 50 52 4f 42 Data Ascii: open if we mouse directly on to the tooltip? (Your tooltip will need to spawn inside it's owner's box for this to work) * - tooltipParent: More generally useless properties for supernav: Lets us specify which element to parent the tooltips to. YOU PROB
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 2c 0d 0a 09 09 09 09 27 74 72 61 63 6b 4d 6f 75 73 65 27 09 09 3a 20 66 61 6c 73 65 2c 0d 0a 09 09 09 09 27 74 72 61 63 6b 4d 6f 75 73 65 43 65 6e 74 65 72 65 64 27 3a 20 74 72 75 65 2c 0d 0a 09 09 09 09 27 73 75 70 70 72 65 73 73 4f 6e 43 6c 69 63 6b 27 09 3a 20 74 72 75 65 2c 0d 0a 09 09 09 09 27 73 75 70 70 72 65 73 73 57 68 69 6c 65 54 6f 67 67 6c 65 64 27 3a 20 74 72 75 65 2c 0d 0a 09 09 09 09 27 74 6f 6f 6c 74 69 70 43 6c 61 73 73 27 09 09 3a 20 27 6a 73 54 6f 6f 6c 74 69 70 27 2c 0d 0a 09 09 09 09 27 66 61 64 65 53 70 65 65 64 27 09 09 09 3a 20 31 35 30 2c 0d 0a 09 09 09 09 27 61 6c 6c 6f 77 48 6f 76 65 72 27 09 09 3a 20 74 72 75 65 2c 0d 0a 09 09 09 09 27 74 6f 6f 6c 74 69 70 50 61 72 65 6e 74 27 09 09 3a 20 27 62 6f 64 79 27 2c 0d 0a 09 09 09 09 Data Ascii: ,'trackMouse': false,'trackMouseCentered': true,'suppressOnClick': true,'suppressWhileToggled': true,'tooltipClass': 'jsTooltip','fadeSpeed': 150,'allowHover': true,'tooltipParent': 'body',
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 69 63 6b 2e 74 6f 6f 6c 74 69 70 27 2c 20 6d 65 74 68 6f 64 73 2e 73 68 6f 77 29 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 09 65 6c 73 65 0d 0a 09 09 09 09 7b 0d 0a 09 09 09 09 09 24 74 61 72 67 65 74 2e 62 69 6e 64 28 27 76 67 70 5f 6f 6e 66 6f 63 75 73 2e 74 6f 6f 6c 74 69 70 27 2c 20 6d 65 74 68 6f 64 73 2e 73 68 6f 77 20 29 3b 0d 0a 09 09 09 09 09 24 74 61 72 67 65 74 2e 62 69 6e 64 28 27 76 67 70 5f 6f 6e 62 6c 75 72 2e 74 6f 6f 6c 74 69 70 27 2c 20 6d 65 74 68 6f 64 73 2e 68 69 64 65 20 29 3b 0d 0a 09 09 09 09 7d 0d 0a 0d 0a 09 09 09 09 69 66 28 20 73 65 74 74 69 6e 67 73 2e 75 73 65 43 6f 6e 74 65 78 74 4d 65 6e 75 45 76 65 6e 74 20 29 0d 0a 09 09 09 09 7b 0d 0a 09 09 09 09 09 24 74 61 72 67 65 74 2e 62 69 6e 64 28 27 63 6f 6e 74 65 78 74 6d 65 6e 75 Data Ascii: ick.tooltip', methods.show);}else{$target.bind('vgp_onfocus.tooltip', methods.show );$target.bind('vgp_onblur.tooltip', methods.hide );}if( settings.useContextMenuEvent ){$target.bind('contextmenu
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 6e 74 2e 64 61 74 61 28 22 74 6f 6f 6c 74 69 70 2e 65 6c 65 6d 65 6e 74 22 29 3b 0d 0a 09 09 09 69 66 20 28 20 21 74 6f 6f 6c 44 69 76 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 74 6f 6f 6c 44 69 76 20 3d 20 24 28 27 3c 64 69 76 20 2f 3e 27 29 3b 0d 0a 0d 0a 09 09 09 09 69 66 28 20 73 65 74 74 69 6e 67 73 2e 73 75 70 70 72 65 73 73 4f 6e 43 6c 69 63 6b 20 29 0d 0a 09 09 09 09 7b 0d 0a 09 09 09 09 09 74 6f 6f 6c 44 69 76 2e 62 69 6e 64 28 27 63 6c 69 63 6b 2e 74 6f 6f 6c 74 69 70 27 2c 20 6a 51 75 65 72 79 2e 70 72 6f 78 79 28 6d 65 74 68 6f 64 73 2e 68 69 64 65 2c 20 65 6c 65 6d 65 6e 74 29 29 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 09 74 6f 6f 6c 44 69 76 2e 68 69 64 65 28 29 3b 0d 0a 09 09 09 09 74 6f 6f 6c 44 69 76 2e 61 64 64 43 6c 61 73 73 28 73 65 74 Data Ascii: nt.data("tooltip.element");if ( !toolDiv ){toolDiv = $('<div />');if( settings.suppressOnClick ){toolDiv.bind('click.tooltip', jQuery.proxy(methods.hide, element));}toolDiv.hide();toolDiv.addClass(set
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 6d 65 6e 74 2e 64 61 74 61 28 22 74 6f 6f 6c 74 69 70 2e 65 6c 65 6d 65 6e 74 22 2c 20 74 6f 6f 6c 44 69 76 29 3b 0d 0a 0d 0a 09 09 09 7d 0d 0a 0d 0a 09 09 09 76 61 72 20 66 75 6e 63 4e 61 6d 65 20 3d 20 73 65 74 74 69 6e 67 73 2e 66 75 6e 63 4e 61 6d 65 20 26 26 20 24 28 65 6c 65 6d 65 6e 74 29 2e 64 61 74 61 28 20 73 65 74 74 69 6e 67 73 2e 66 75 6e 63 4e 61 6d 65 20 29 3b 0d 0a 09 09 09 69 66 28 20 66 75 6e 63 4e 61 6d 65 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 69 66 28 20 74 79 70 65 20 3d 3d 20 27 74 65 78 74 27 29 0d 0a 09 09 09 09 09 74 6f 6f 6c 44 69 76 2e 74 65 78 74 28 20 77 69 6e 64 6f 77 5b 66 75 6e 63 4e 61 6d 65 5d 28 65 6c 65 6d 65 6e 74 29 20 29 3b 0d 0a 09 09 09 09 65 6c 73 65 0d 0a 09 09 09 09 09 74 6f 6f 6c 44 69 76 2e 68 74 6d 6c 28 Data Ascii: ment.data("tooltip.element", toolDiv);}var funcName = settings.funcName && $(element).data( settings.funcName );if( funcName ){if( type == 'text')toolDiv.text( window[funcName](element) );elsetoolDiv.html(
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 74 68 28 29 2c 0d 0a 09 09 09 09 09 09 74 6f 70 3a 20 70 61 72 65 6e 74 50 6f 73 69 74 69 6f 6e 2e 74 6f 70 20 2b 20 24 28 74 68 69 73 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 20 2b 20 73 65 74 74 69 6e 67 73 2e 6f 66 66 73 65 74 59 0d 0a 09 09 09 09 09 7d 3b 0d 0a 09 09 09 09 09 62 72 65 61 6b 3b 0d 0a 0d 0a 09 09 09 09 64 65 66 61 75 6c 74 3a 0d 0a 09 09 09 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 49 6e 76 61 6c 69 64 20 6c 6f 63 61 74 69 6f 6e 20 70 61 73 73 65 64 20 74 6f 20 76 5f 74 6f 6f 6c 74 69 70 3a 20 25 73 22 2c 20 73 65 74 74 69 6e 67 73 2e 6c 6f 63 61 74 69 6f 6e 29 3b 0d 0a 09 09 20 20 20 20 7d 0d 0a 09 09 20 20 20 20 2f 2f 20 43 6f 72 72 65 63 74 20 66 6f 72 20 77 69 6e 64 6f 77 20 73 69 7a 65 0d 0a 09 09 20 20 20 20 69 66 28 20 73 Data Ascii: th(),top: parentPosition.top + $(this).outerHeight() + settings.offsetY};break;default:console.log("Invalid location passed to v_tooltip: %s", settings.location); } // Correct for window size if( s
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 74 72 61 63 6b 4d 6f 75 73 65 43 65 6e 74 65 72 65 64 20 29 0d 0a 09 09 09 09 09 6e 65 77 50 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 20 3d 20 65 76 65 6e 74 2e 70 61 67 65 58 20 2d 20 74 6f 6f 6c 44 69 76 2e 6f 75 74 65 72 57 69 64 74 68 28 29 20 2f 20 32 3b 0d 0a 09 09 09 09 65 6c 73 65 0d 0a 09 09 09 09 09 6e 65 77 50 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 20 3d 20 65 76 65 6e 74 2e 70 61 67 65 58 20 2b 20 73 65 74 74 69 6e 67 73 2e 6f 66 66 73 65 74 59 3b 0d 0a 0d 0a 09 09 09 09 69 66 20 28 20 73 65 74 74 69 6e 67 73 2e 6c 6f 63 61 74 69 6f 6e 20 3d 3d 20 27 74 6f 70 27 20 29 0d 0a 09 09 09 09 09 6e 65 77 50 6f 73 69 74 69 6f 6e 2e 74 6f 70 20 3d 20 65 76 65 6e 74 2e 70 61 67 65 59 20 2d 20 74 6f 6f 6c 44 69 76 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 20 2b Data Ascii: trackMouseCentered )newPosition.left = event.pageX - toolDiv.outerWidth() / 2;elsenewPosition.left = event.pageX + settings.offsetY;if ( settings.location == 'top' )newPosition.top = event.pageY - toolDiv.outerHeight() +
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 64 6f 77 20 73 69 7a 65 0d 0a 09 09 09 69 66 28 20 73 65 74 74 69 6e 67 73 2e 63 6f 72 72 65 63 74 46 6f 72 53 63 72 65 65 6e 53 69 7a 65 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 76 61 72 20 72 69 67 68 74 45 64 67 65 20 3d 20 6e 65 77 50 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 20 2b 20 74 6f 6f 6c 44 69 76 2e 77 69 64 74 68 28 29 3b 0d 0a 09 09 09 09 76 61 72 20 77 69 6e 64 6f 77 52 69 67 68 74 45 64 67 65 20 3d 20 24 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 20 2d 20 73 65 74 74 69 6e 67 73 2e 73 69 7a 65 43 6f 72 72 65 63 74 69 6f 6e 58 50 61 64 64 69 6e 67 20 2b 20 24 28 77 69 6e 64 6f 77 29 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 3b 0d 0a 09 09 09 09 76 61 72 20 77 69 6e 64 6f 77 4c 65 66 74 45 64 67 65 20 3d 20 20 24 28 77 69 6e 64 6f 77 29 2e 73 Data Ascii: dow sizeif( settings.correctForScreenSize ){var rightEdge = newPosition.left + toolDiv.width();var windowRightEdge = $(window).width() - settings.sizeCorrectionXPadding + $(window).scrollLeft();var windowLeftEdge = $(window).s
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 75 6c 74 28 29 3b 0d 0a 0d 0a 09 09 09 69 66 28 20 73 65 74 74 69 6e 67 73 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 20 29 0d 0a 09 09 09 09 65 76 65 6e 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 0d 0a 0d 0a 09 09 09 69 66 28 20 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 41 63 74 69 76 65 43 53 53 43 6c 61 73 73 20 29 0d 0a 09 09 09 09 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 73 65 74 74 69 6e 67 73 2e 70 61 72 65 6e 74 41 63 74 69 76 65 43 53 53 43 6c 61 73 73 29 3b 0d 0a 0d 0a 09 09 09 69 66 28 20 73 65 74 74 69 6e 67 73 2e 69 6e 68 65 72 69 74 50 61 72 65 6e 74 4d 69 6e 57 69 64 74 68 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 76 61 72 20 70 61 72 65 6e 74 57 69 64 74 68 20 3d 20 24 28 74 68 69 73 29 2e 6f 75 74 65 72 Data Ascii: ult();if( settings.stopPropagation )event.stopPropagation();if( settings.parentActiveCSSClass )$(this).addClass(settings.parentActiveCSSClass);if( settings.inheritParentMinWidth ){var parentWidth = $(this).outer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49827	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:46 UTC	620	OUT	GET /public/shared/javascript/shared_global.js?v=n5zImpoIZ8NN&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:46 UTC	443	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:46 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Mon, 16 Sep 2024 18:07:53 GMT ETag: W/"n5zImpoIZ8NN" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: HIT CF-Cache-Status: HIT Age: 1400993 Server: cloudflare CF-RAY: 86fd40e4a9e167c3-MIA
2024-04-05 23:17:46 UTC	926	IN	Data Raw: 37 64 65 34 0d 0a 0d 0a 53 74 65 61 6d 20 3d 20 7b 0d 0a 09 73 6d 5f 62 49 6e 69 74 69 61 6c 69 7a 65 64 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 43 6c 69 65 6e 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 47 61 6d 65 4f 76 65 72 6c 61 79 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 54 65 6e 66 6f 6f 74 42 72 6f 77 73 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 43 68 61 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 41 70 70 3a 20 66 61 6c 73 65 2c 0d 0a 0d 0a 09 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 43 6c 69 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 21 53 74 65 61 6d 2e Data Ascii: 7de4Steam = {sm_bInitialized: false,sm_bUserInClient: false,sm_bUserInGameOverlay: false,sm_bUserInTenfootBrowser: false,sm_bUserInMobileChat: false,sm_bUserInMobileApp: false,BIsUserInSteamClient: function(){if ( !Steam.
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 0d 0a 0d 0a 09 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 4d 6f 62 69 6c 65 41 70 70 3a 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 21 53 74 65 61 6d 2e 73 6d 5f 62 49 6e 69 74 69 61 6c 69 7a 65 64 20 29 0d 0a 09 09 09 53 74 65 61 6d 2e 49 6e 69 74 28 29 3b 0d 0a 0d 0a 09 09 72 65 74 75 72 6e 20 53 74 65 61 6d 2e 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 41 70 70 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 47 65 74 43 6c 69 65 6e 74 50 61 63 6b 61 67 65 56 65 72 73 69 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 21 53 74 65 61 6d 2e 42 49 73 55 73 65 72 49 6e 43 6c 69 65 6e 74 4f 72 4f 76 65 72 6c 61 79 28 29 20 29 0d 0a 09 09 09 72 65 74 75 72 6e 20 30 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 74 79 70 Data Ascii: BIsUserInSteamMobileApp: function(){if ( !Steam.sm_bInitialized )Steam.Init();return Steam.sm_bUserInMobileApp;},GetClientPackageVersion: function(){if ( !Steam.BIsUserInClientOrOverlay() )return 0;if ( typ
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 75 65 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 4c 69 6e 6b 49 6e 4e 65 77 57 69 6e 64 6f 77 3a 20 66 75 6e 63 74 69 6f 6e 28 20 24 41 20 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 53 74 65 61 6d 2e 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 43 6c 69 65 6e 74 28 29 20 26 26 20 21 53 74 65 61 6d 2e 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 54 65 6e 66 6f 6f 74 42 72 6f 77 73 65 72 28 29 20 29 0d 0a 09 09 09 24 41 2e 61 74 74 72 28 20 27 68 72 65 66 27 2c 20 27 73 74 65 61 6d 3a 2f 2f 6f 70 65 6e 75 72 6c 5f 65 78 74 65 72 6e 61 6c 2f 27 20 2b 20 24 41 2e 61 74 74 72 28 27 68 72 65 66 27 29 20 29 3b 0d 0a 09 09 65 6c 73 65 0d 0a 09 09 09 24 41 2e 61 74 74 72 28 20 27 74 61 72 67 65 74 27 2c 20 27 5f 62 6c 61 6e 6b 27 20 29 3b 0d 0a 09 7d 0d 0a 7d 3b 0d 0a 0d 0a 66 75 Data Ascii: ue;},LinkInNewWindow: function( $A ){if ( Steam.BIsUserInSteamClient() && !Steam.BIsUserInSteamTenfootBrowser() )$A.attr( 'href', 'steam://openurl_external/' + $A.attr('href') );else$A.attr( 'target', '_blank' );}};fu
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 69 64 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 20 69 66 20 28 20 53 74 65 61 6d 2e 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 4d 6f 62 69 6c 65 41 70 70 28 29 20 29 0d 0a 09 7b 0d 0a 09 09 09 09 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 27 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 63 68 61 74 2f 67 72 6f 75 70 2f 27 20 2b 20 73 74 65 61 6d 69 64 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 20 69 66 20 28 20 21 53 74 65 61 6d 2e 42 49 73 55 73 65 72 49 6e 43 6c 69 65 6e 74 4f 72 4f 76 65 72 6c 61 79 28 29 20 26 26 20 74 79 70 65 6f 66 20 43 6c 69 65 6e 74 43 6f 6e 6e 65 63 74 69 6f 6e 41 50 49 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 7b 0d 0a 09 09 43 6c 69 65 6e 74 43 6f 6e 6e 65 63 74 69 6f 6e 41 Data Ascii: id;}else if ( Steam.BIsUserInSteamMobileApp() ){window.location = 'https://steamcommunity.com/chat/group/' + steamid;}else if ( !Steam.BIsUserInClientOrOverlay() && typeof ClientConnectionAPI !== 'undefined' ){ClientConnectionA
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 20 65 6c 65 6d 20 29 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 2a 09 53 68 6f 77 20 61 20 70 6f 70 75 70 20 64 69 61 6c 6f 67 20 6c 69 6b 65 20 63 6f 6e 66 69 72 6d 28 29 2c 20 77 69 74 68 20 74 77 6f 20 62 75 74 74 6f 6e 73 2e 20 20 43 6c 69 63 6b 69 6e 67 20 6f 6b 20 72 65 73 6f 6c 76 65 73 20 77 69 74 68 20 64 6f 6e 65 28 29 2c 20 63 61 6e 63 65 6c 20 6f 72 20 63 6c 6f 73 69 6e 67 20 74 68 65 20 77 69 6e 64 6f 77 20 72 65 73 6f 6c 76 65 73 20 77 69 74 68 20 66 61 69 6c 28 29 0d 0a 20 2a 0d 0a 20 2a 20 40 70 61 72 61 6d 20 73 74 72 54 69 74 6c 65 09 09 09 54 69 74 6c 65 20 62 61 72 20 74 65 78 74 0d 0a 20 2a 20 40 70 61 72 61 6d 20 73 74 72 44 65 73 63 72 69 70 74 69 6f 6e 09 4d 65 73 73 61 67 65 20 74 65 78 74 0d 0a 20 2a 20 40 70 61 72 61 6d 20 73 74 72 4f 4b 42 Data Ascii: elem );}/*Show a popup dialog like confirm(), with two buttons. Clicking ok resolves with done(), cancel or closing the window resolves with fail() * @param strTitleTitle bar text * @param strDescriptionMessage text * @param strOKB
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 6d 65 64 69 75 6d 27 20 7d 20 29 3b 0d 0a 09 09 24 53 65 63 6f 6e 64 61 72 79 41 63 74 69 6f 6e 42 75 74 74 6f 6e 2e 63 6c 69 63 6b 28 20 66 6e 53 65 63 6f 6e 64 61 72 79 20 29 3b 0d 0a 09 09 72 67 42 75 74 74 6f 6e 73 2e 70 75 73 68 28 20 24 53 65 63 6f 6e 64 61 72 79 41 63 74 69 6f 6e 42 75 74 74 6f 6e 20 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 76 61 72 20 24 43 61 6e 63 65 6c 42 75 74 74 6f 6e 20 3d 20 5f 42 75 69 6c 64 44 69 61 6c 6f 67 42 75 74 74 6f 6e 28 20 73 74 72 43 61 6e 63 65 6c 42 75 74 74 6f 6e 20 29 3b 0d 0a 09 24 43 61 6e 63 65 6c 42 75 74 74 6f 6e 2e 63 6c 69 63 6b 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 66 6e 43 61 6e 63 65 6c 28 20 74 72 75 65 20 29 3b 20 7d 20 29 3b 0d 0a 09 72 67 42 75 74 74 6f 6e 73 2e 70 75 73 68 28 20 24 43 61 6e 63 Data Ascii: medium' } );$SecondaryActionButton.click( fnSecondary );rgButtons.push( $SecondaryActionButton );}var $CancelButton = _BuildDialogButton( strCancelButton );$CancelButton.click( function() { fnCancel( true ); } );rgButtons.push( $Canc
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 20 4d 6f 64 61 6c 2e 44 69 73 6d 69 73 73 28 29 3b 20 7d 20 29 3b 0d 0a 09 4d 6f 64 61 6c 2e 53 68 6f 77 28 29 3b 0d 0a 0d 0a 09 5f 42 69 6e 64 4f 6e 45 6e 74 65 72 4b 65 79 50 72 65 73 73 46 6f 72 44 69 61 6c 6f 67 28 20 4d 6f 64 61 6c 2c 20 64 65 66 65 72 72 65 64 2c 20 66 6e 4f 4b 20 29 3b 0d 0a 0d 0a 09 2f 2f 20 61 74 74 61 63 68 20 74 68 65 20 64 65 66 65 72 72 65 64 27 73 20 65 76 65 6e 74 73 20 74 6f 20 74 68 65 20 6d 6f 64 61 6c 0d 0a 09 64 65 66 65 72 72 65 64 2e 70 72 6f 6d 69 73 65 28 20 4d 6f 64 61 6c 20 29 3b 0d 0a 0d 0a 09 72 65 74 75 72 6e 20 4d 6f 64 61 6c 3b 0d 0a 0d 0a 7d 0d 0a 0d 0a 2f 2a 2a 09 53 68 6f 77 20 61 20 70 6f 70 75 70 20 64 69 61 6c 6f 67 2e 20 20 48 61 73 20 6e 6f 20 62 75 74 74 6f 6e 73 2e 20 20 43 6c 6f 73 69 6e 67 20 74 Data Ascii: Modal.Dismiss(); } );Modal.Show();_BindOnEnterKeyPressForDialog( Modal, deferred, fnOK );// attach the deferred's events to the modaldeferred.promise( Modal );return Modal;}/**Show a popup dialog. Has no buttons. Closing t
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 29 2e 76 61 6c 28 20 64 65 66 61 75 6c 74 56 61 6c 75 65 20 29 3b 0d 0a 09 69 66 20 28 20 69 6e 70 75 74 4d 61 78 53 69 7a 65 20 29 0d 0a 09 7b 0d 0a 09 09 24 49 6e 70 75 74 2e 61 74 74 72 28 20 27 6d 61 78 6c 65 6e 67 74 68 27 2c 20 69 6e 70 75 74 4d 61 78 53 69 7a 65 20 29 3b 0d 0a 09 7d 0d 0a 09 24 42 6f 64 79 2e 61 70 70 65 6e 64 28 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 6e 65 77 6d 6f 64 61 6c 5f 70 72 6f 6d 70 74 5f 64 65 73 63 72 69 70 74 69 6f 6e 27 20 7d 20 29 2e 61 70 70 65 6e 64 28 20 73 74 72 44 65 73 63 72 69 70 74 69 6f 6e 20 29 20 29 3b 0d 0a 09 24 42 6f 64 79 2e 61 70 70 65 6e 64 28 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 6e 65 77 6d 6f 64 61 6c 5f 70 72 6f 6d 70 74 5f Data Ascii: ).val( defaultValue );if ( inputMaxSize ){$Input.attr( 'maxlength', inputMaxSize );}$Body.append( $J('<div/>', {'class': 'newmodal_prompt_description' } ).append( strDescription ) );$Body.append( $J('<div/>', {'class': 'newmodal_prompt_
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 69 70 74 69 6f 6e 2c 20 73 74 72 4f 4b 42 75 74 74 6f 6e 2c 20 73 74 72 43 61 6e 63 65 6c 42 75 74 74 6f 6e 2c 20 72 67 4d 6f 64 61 6c 50 61 72 61 6d 73 2c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 20 29 0d 0a 7b 0d 0a 09 6c 65 74 20 72 67 50 61 72 61 6d 73 20 3d 20 7b 7d 3b 0d 0a 09 69 66 20 28 20 72 67 4d 6f 64 61 6c 50 61 72 61 6d 73 20 29 0d 0a 09 09 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 20 72 67 50 61 72 61 6d 73 2c 20 72 67 4d 6f 64 61 6c 50 61 72 61 6d 73 20 29 3b 0d 0a 09 72 67 50 61 72 61 6d 73 2e 73 74 72 54 69 74 6c 65 20 3d 20 73 74 72 54 69 74 6c 65 3b 0d 0a 09 72 67 50 61 72 61 6d 73 2e 73 74 72 44 65 73 63 72 69 70 74 69 6f 6e 20 3d 20 73 74 72 44 65 73 63 72 69 70 74 69 6f 6e 3b 0d 0a 09 72 67 50 61 72 61 6d 73 2e 73 74 72 4f 4b 42 75 74 Data Ascii: iption, strOKButton, strCancelButton, rgModalParams, defaultValue ){let rgParams = {};if ( rgModalParams )Object.assign( rgParams, rgModalParams );rgParams.strTitle = strTitle;rgParams.strDescription = strDescription;rgParams.strOKBut
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 27 6e 65 77 6d 6f 64 61 6c 5f 70 72 6f 6d 70 74 5f 77 69 74 68 5f 74 65 78 74 61 72 65 61 20 67 72 61 79 5f 62 65 76 65 6c 20 66 75 6c 6c 77 69 64 74 68 27 20 7d 20 29 2e 61 70 70 65 6e 64 28 20 24 54 65 78 74 41 72 65 61 20 29 20 29 3b 0d 0a 0d 0a 09 76 61 72 20 64 65 66 65 72 72 65 64 20 3d 20 6e 65 77 20 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 28 29 3b 0d 0a 09 76 61 72 20 66 6e 4f 4b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 64 65 66 65 72 72 65 64 2e 72 65 73 6f 6c 76 65 28 20 24 54 65 78 74 41 72 65 61 2e 76 61 6c 28 29 20 29 3b 20 7d 3b 0d 0a 09 76 61 72 20 66 6e 43 61 6e 63 65 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 64 65 66 65 72 72 65 64 2e 72 65 6a 65 63 74 28 29 3b 20 7d 3b 0d 0a 0d 0a 09 24 42 6f 64 79 2e 73 75 62 6d 69 Data Ascii: 'newmodal_prompt_with_textarea gray_bevel fullwidth' } ).append( $TextArea ) );var deferred = new jQuery.Deferred();var fnOK = function() { deferred.resolve( $TextArea.val() ); };var fnCancel = function() { deferred.reject(); };$Body.submi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49828	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:46 UTC	604	OUT	GET /public/javascript/main.js?v=X9J2yQeNBQCi&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:46 UTC	443	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:46 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Sun, 22 Sep 2024 22:52:50 GMT ETag: W/"X9J2yQeNBQCi" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 865496 Server: cloudflare CF-RAY: 86fd40e55d05029b-MIA
2024-04-05 23:17:46 UTC	926	IN	Data Raw: 37 64 65 34 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 6f 74 46 6c 61 73 68 50 6f 70 75 70 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 77 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 67 6f 74 66 6c 61 73 68 27 2c 27 67 6f 74 66 6c 61 73 68 27 2c 27 77 69 64 74 68 3d 35 33 36 2c 68 65 69 67 68 74 3d 35 34 36 2c 72 65 73 69 7a 65 3d 79 65 73 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 79 65 73 27 29 3b 0d 0a 09 77 69 6e 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 0d 0a 0d 0a 2f 2f 0d 0a 2f 2f 20 50 61 67 65 2d 61 62 6c 65 20 74 61 62 73 0d 0a 2f 2f 0d 0a 76 61 72 20 74 61 62 53 74 61 72 74 20 3d 20 7b 20 7d 3b 0d 0a 76 61 72 20 74 61 62 4d 61 78 20 3d 20 7b 20 7d 3b 0d 0a 76 61 Data Ascii: 7de4function GotFlashPopup(){var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');win.focus();}//// Page-able tabs//var tabStart = { };var tabMax = { };va
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 2c 20 6d 61 78 20 29 20 7d 20 29 3b 0d 0a 09 09 74 61 62 4d 61 78 5b 74 61 62 5d 20 3d 20 74 61 62 53 74 61 72 74 5b 74 61 62 5d 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 0d 0a 09 7b 0d 0a 09 09 52 6f 6c 6c 54 61 62 28 20 74 61 62 2c 20 64 65 6c 74 61 20 29 3b 0d 0a 09 09 54 61 62 55 70 64 61 74 65 43 6f 75 6e 74 73 28 20 74 61 62 2c 20 64 65 6c 74 61 2c 20 6d 61 78 20 29 3b 0d 0a 09 7d 0d 0a 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 54 61 62 43 6f 6d 70 6c 65 74 69 6f 6e 43 6c 6f 73 75 72 65 28 20 74 61 62 2c 20 64 65 6c 74 61 2c 20 6d 61 78 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 74 61 62 5f 63 6c 6f 73 75 72 65 20 3d 20 74 61 62 3b 0d 0a 09 76 61 72 20 64 65 6c 74 61 5f 63 6c 6f 73 75 72 65 20 3d 20 64 65 6c 74 61 3b 0d 0a 09 76 61 72 20 6d 61 78 5f 63 6c Data Ascii: , max ) } );tabMax[tab] = tabStart[tab];}else{RollTab( tab, delta );TabUpdateCounts( tab, delta, max );}}function TabCompletionClosure( tab, delta, max ){var tab_closure = tab;var delta_closure = delta;var max_cl
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 6e 74 5f 73 74 61 72 74 27 29 2e 75 70 64 61 74 65 28 20 74 61 62 53 74 61 72 74 5b 74 61 62 5d 20 2b 20 31 20 29 3b 0d 0a 09 09 24 28 27 74 61 62 5f 27 20 2b 20 74 61 62 20 2b 20 27 5f 63 6f 75 6e 74 5f 65 6e 64 27 29 2e 75 70 64 61 74 65 28 20 4d 61 74 68 2e 6d 69 6e 28 20 74 61 62 53 74 61 72 74 5b 74 61 62 5d 20 2b 20 4d 61 74 68 2e 61 62 73 28 64 65 6c 74 61 29 2c 20 6d 61 78 20 29 20 29 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 0d 0a 09 7b 0d 0a 09 09 24 28 27 74 61 62 5f 27 20 2b 20 74 61 62 20 2b 20 27 5f 63 6f 75 6e 74 27 29 2e 75 70 64 61 74 65 28 20 28 74 61 62 53 74 61 72 74 5b 74 61 62 5d 20 2b 20 31 29 20 2b 20 27 2d 27 20 2b 20 4d 61 74 68 2e 6d 69 6e 28 20 74 61 62 53 74 61 72 74 5b 74 61 62 5d 20 2b 20 4d 61 74 68 2e 61 62 73 28 64 65 6c 74 61 Data Ascii: nt_start').update( tabStart[tab] + 1 );$('tab_' + tab + '_count_end').update( Math.min( tabStart[tab] + Math.abs(delta), max ) );}else{$('tab_' + tab + '_count').update( (tabStart[tab] + 1) + '-' + Math.min( tabStart[tab] + Math.abs(delta
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 0a 0d 0a 09 53 65 74 44 65 66 61 75 6c 74 54 61 62 53 65 6c 65 63 74 69 6f 6e 28 20 74 61 72 67 65 74 20 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 74 44 65 66 61 75 6c 74 54 61 62 53 65 6c 65 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 76 61 6c 75 65 20 3d 20 57 65 62 53 74 6f 72 61 67 65 2e 47 65 74 4c 6f 63 61 6c 28 20 27 73 74 6f 72 65 5f 6e 65 77 72 65 6c 65 61 73 65 73 5f 66 69 6c 74 65 72 5f 64 6c 63 27 20 29 3b 0d 0a 0d 0a 09 69 66 28 20 76 61 6c 75 65 20 3d 3d 20 6e 75 6c 6c 20 29 0d 0a 09 09 72 65 74 75 72 6e 20 22 74 61 62 5f 66 69 6c 74 65 72 65 64 5f 64 6c 63 5f 63 6f 6e 74 65 6e 74 22 3b 0d 0a 09 72 65 74 75 72 6e 20 76 61 6c 75 65 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 53 65 74 44 65 66 61 75 6c 74 54 61 Data Ascii: SetDefaultTabSelection( target );}function GetDefaultTabSelection(){var value = WebStorage.GetLocal( 'store_newreleases_filter_dlc' );if( value == null )return "tab_filtered_dlc_content";return value;}function SetDefaultTa
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 61 72 67 65 74 69 64 2c 20 64 65 6c 74 61 2c 20 70 61 67 65 53 69 7a 65 2c 20 74 6f 74 61 6c 43 6f 75 6e 74 20 29 3b 0d 0a 09 7d 0d 0a 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 53 63 72 6f 6c 6c 53 74 61 74 69 63 53 6d 61 6c 6c 43 61 70 73 28 20 74 61 72 67 65 74 69 64 2c 20 64 65 6c 74 61 2c 20 70 61 67 65 53 69 7a 65 2c 20 74 6f 74 61 6c 43 6f 75 6e 74 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 65 6c 65 6d 20 3d 20 24 28 20 74 61 72 67 65 74 69 64 20 29 3b 0d 0a 09 69 66 20 28 20 65 6c 65 6d 2e 65 66 66 65 63 74 20 29 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 0d 0a 09 69 66 20 28 20 21 65 6c 65 6d 2e 63 75 72 50 6f 73 20 29 0d 0a 09 7b 0d 0a 09 09 65 6c 65 6d 2e 63 75 72 50 6f 73 20 3d 20 30 3b 0d 0a 09 7d 0d 0a 0d 0a 09 65 6c 65 6d 2e 63 75 72 50 6f 73 20 Data Ascii: argetid, delta, pageSize, totalCount );}}function ScrollStaticSmallCaps( targetid, delta, pageSize, totalCount ){var elem = $( targetid );if ( elem.effect )return;if ( !elem.curPos ){elem.curPos = 0;}elem.curPos
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 61 72 67 65 74 69 64 2c 20 64 65 6c 74 61 2c 20 70 61 67 65 53 69 7a 65 2c 20 74 6f 74 61 6c 43 6f 75 6e 74 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 65 6c 65 6d 20 3d 20 24 28 20 74 61 72 67 65 74 69 64 20 29 3b 0d 0a 09 76 61 72 20 6d 61 78 20 3d 20 4d 61 74 68 2e 63 65 69 6c 28 20 74 6f 74 61 6c 43 6f 75 6e 74 20 2f 20 70 61 67 65 53 69 7a 65 20 29 20 2d 20 31 3b 0d 0a 09 76 61 72 20 77 69 64 74 68 20 3d 20 24 28 65 6c 65 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2e 67 65 74 57 69 64 74 68 28 29 3b 0d 0a 0d 0a 09 76 61 72 20 6e 65 78 74 4c 69 6e 6b 20 3d 20 74 61 72 67 65 74 69 64 20 2b 20 27 5f 6e 65 78 74 27 3b 0d 0a 09 76 61 72 20 70 72 65 76 4c 69 6e 6b 20 3d 20 74 61 72 67 65 74 69 64 20 2b 20 27 5f 70 72 65 76 27 3b 0d 0a 09 69 66 20 28 20 65 6c 65 6d 2e Data Ascii: argetid, delta, pageSize, totalCount ){var elem = $( targetid );var max = Math.ceil( totalCount / pageSize ) - 1;var width = $(elem.parentNode).getWidth();var nextLink = targetid + '_next';var prevLink = targetid + '_prev';if ( elem.
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 72 53 70 65 65 64 3b 0d 0a 0d 0a 09 76 61 72 20 6f 45 6c 65 6d 53 74 61 74 65 20 3d 20 47 65 74 48 6f 76 65 72 53 74 61 74 65 28 20 24 45 6c 65 6d 20 29 3b 0d 0a 0d 0a 09 69 66 20 28 20 21 24 48 6f 76 65 72 2e 6c 65 6e 67 74 68 20 29 0d 0a 09 7b 0d 0a 09 09 09 09 24 48 6f 76 65 72 20 3d 20 24 4a 28 22 5c 74 5c 74 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 68 6f 76 65 72 20 67 61 6d 65 5f 68 6f 76 65 72 5c 22 20 69 64 3d 5c 22 67 6c 6f 62 61 6c 5f 68 6f 76 65 72 5c 22 20 73 74 79 6c 65 3d 5c 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 6c 65 66 74 3a 20 30 3b 20 74 6f 70 3a 20 30 3b 5c 22 3e 5c 72 5c 6e 5c 74 5c 74 5c 74 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 67 61 6d 65 5f 68 6f 76 65 72 5f 62 6f 78 20 68 6f 76 65 72 5f 62 6f 78 5c 22 3e 5c 72 5c 6e 5c 74 Data Ascii: rSpeed;var oElemState = GetHoverState( $Elem );if ( !$Hover.length ){$Hover = $J("\t\t<div class=\"hover game_hover\" id=\"global_hover\" style=\"display: none; left: 0; top: 0;\">\r\n\t\t\t<div class=\"game_hover_box hover_box\">\r\n\t
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 3d 20 27 62 75 6e 64 6c 65 27 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 73 74 72 54 61 72 67 65 74 50 72 65 66 69 78 20 3d 20 27 68 6f 76 65 72 5f 62 75 6e 64 6c 65 5f 27 3b 0d 0a 09 09 09 73 74 72 55 72 6c 54 61 72 67 65 74 20 3d 20 27 62 75 6e 64 6c 65 2f 27 20 2b 20 72 67 48 6f 76 65 72 44 61 74 61 5b 27 69 64 27 5d 20 2b 20 27 2f 68 6f 76 65 72 27 20 2b 20 28 20 62 50 75 62 6c 69 63 20 3f 20 27 5f 70 75 62 6c 69 63 27 20 3a 20 27 27 20 29 20 2b 20 27 2f 27 3b 0d 0a 09 09 7d 0d 0a 09 09 65 6c 73 65 0d 0a 09 09 7b 0d 0a 09 09 09 72 65 74 75 72 6e 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 73 74 72 55 72 6c 54 61 Data Ascii: = 'bundle' ){strTargetPrefix = 'hover_bundle_';strUrlTarget = 'bundle/' + rgHoverData['id'] + '/hover' + ( bPublic ? '_public' : '' ) + '/';}else{return;}if ( typeof GDynamicStore != 'undefined' ){strUrlTa
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 27 20 2b 20 73 74 72 55 72 6c 54 61 72 67 65 74 2c 20 72 67 41 6a 61 78 50 61 72 61 6d 73 20 29 2e 64 6f 6e 65 28 20 66 75 6e 63 74 69 6f 6e 28 20 68 74 6d 6c 20 29 0d 0a 09 09 09 09 09 7b 0d 0a 09 09 09 09 09 09 76 61 72 20 24 43 6f 6e 74 65 6e 74 20 3d 20 24 4a 28 68 74 6d 6c 29 3b 0d 0a 09 09 09 09 09 09 24 43 6f 6e 74 65 6e 74 2e 68 69 64 65 28 29 3b 0d 0a 09 09 09 09 09 09 24 48 6f 76 65 72 2e 66 69 6e 64 28 20 27 2e 63 6f 6e 74 65 6e 74 27 20 29 2e 61 70 70 65 6e 64 28 20 24 43 6f 6e 74 65 6e 74 20 29 3b 0d 0a 09 09 09 09 09 09 53 68 6f 77 47 61 6d 65 48 6f 76 65 72 28 20 24 45 6c 65 6d 2c 20 24 48 6f 76 65 72 2c 20 74 61 72 67 65 74 49 64 2c 20 70 61 72 61 Data Ascii: https://store.steampowered.com/' + strUrlTarget, rgAjaxParams ).done( function( html ){var $Content = $J(html);$Content.hide();$Hover.find( '.content' ).append( $Content );ShowGameHover( $Elem, $Hover, targetId, para
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 20 65 6c 65 6d 20 29 3b 0d 0a 09 76 61 72 20 24 48 6f 76 65 72 20 3d 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 20 64 69 76 48 6f 76 65 72 20 29 3b 0d 0a 09 76 61 72 20 24 54 61 72 67 65 74 20 3d 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 20 74 61 72 67 65 74 43 6f 6e 74 65 6e 74 20 29 3b 0d 0a 0d 0a 09 76 61 72 20 6f 45 6c 65 6d 53 74 61 74 65 20 3d 20 47 65 74 48 6f 76 65 72 53 74 61 74 65 28 20 24 45 6c 65 6d 20 29 3b 0d 0a 0d 0a 09 69 66 20 28 20 21 24 54 61 72 67 65 74 2e 6c 65 6e 67 74 68 20 7c 7c 20 21 6f 45 6c 65 6d 53 74 61 74 65 2e 62 57 61 6e 74 73 48 6f 76 65 72 20 7c 7c 20 21 6f 45 6c 65 6d 53 74 61 74 65 2e 62 52 65 61 64 79 46 6f 72 48 6f 76 65 72 20 7c 7c 20 21 Data Ascii: JFromIDOrElement( elem );var $Hover = $JFromIDOrElement( divHover );var $Target = $JFromIDOrElement( targetContent );var oElemState = GetHoverState( $Elem );if ( !$Target.length \|\| !oElemState.bWantsHover \|\| !oElemState.bReadyForHover \|\| !

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49825	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:46 UTC	1423	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=853926178&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&rn=803033375&browser-info=we%3A1%3Aet%3A1712359064%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011743%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359064&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:17:46 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:46 GMT Expires: Fri, 05-Apr-2024 23:17:46 GMT Last-Modified: Fri, 05-Apr-2024 23:17:46 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49829	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:46 UTC	612	OUT	GET /public/javascript/dynamicstore.js?v=Nd21hnbFh_KC&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:46 UTC	444	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:46 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Mon, 15 Jul 2024 00:22:28 GMT ETag: W/"Nd21hnbFh_KC" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3297901 Server: cloudflare CF-RAY: 86fd40e708d512af-MIA
2024-04-05 23:17:46 UTC	925	IN	Data Raw: 37 64 65 33 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 74 45 6c 65 6d 53 4e 52 28 20 24 45 6c 65 6d 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 73 6e 72 20 3d 20 24 45 6c 65 6d 2e 64 61 74 61 28 20 27 73 6e 72 27 20 29 3b 0d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 73 6e 72 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 73 6e 72 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2f 2f 20 6c 6f 6f 6b 20 66 6f 72 20 6c 69 6e 6b 73 20 77 69 74 68 20 73 6e 72 20 70 61 72 61 6d 65 74 65 72 0d 0a 09 76 61 72 20 6c 69 6e 6b 73 20 3d 20 24 45 6c 65 6d 2e 69 73 28 20 27 61 27 20 29 20 3f 20 24 45 6c 65 6d 20 3a 20 24 45 6c 65 6d 2e 66 69 6e 64 28 20 27 61 27 20 29 3b 0d 0a 09 73 6e 72 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 66 6f 72 20 28 20 76 61 Data Ascii: 7de3function GetElemSNR( $Elem ){var snr = $Elem.data( 'snr' );if ( typeof snr != 'undefined' ){return snr;}// look for links with snr parametervar links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );snr = null;for ( va
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 20 73 6f 20 63 75 74 20 69 74 20 6f 66 66 20 65 61 72 6c 69 65 72 0d 0a 09 76 61 72 20 6e 52 65 6d 61 69 6e 69 6e 67 4c 65 6e 20 3d 20 33 32 30 30 3b 0d 0a 09 76 61 72 20 72 65 73 75 6c 74 20 3d 20 27 27 3b 0d 0a 09 66 6f 72 20 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 72 67 49 6d 70 72 65 73 73 69 6f 6e 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 69 6d 70 72 65 73 73 69 6f 6e 20 3d 20 53 74 72 69 6e 67 28 20 72 67 49 6d 70 72 65 73 73 69 6f 6e 73 5b 20 69 20 5d 20 29 3b 0d 0a 09 09 76 61 72 20 6e 49 6d 70 72 65 73 73 69 6f 6e 4c 65 6e 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 20 69 6d 70 72 65 73 73 69 6f 6e 20 2b 20 27 7c 27 20 29 2e 6c 65 6e 67 74 68 3b 0d 0a 0d 0a 09 09 2f 2f 64 69 Data Ascii: so cut it off earliervar nRemainingLen = 3200;var result = '';for ( var i = 0; i < rgImpressions.length; i++ ){var impression = String( rgImpressions[ i ] );var nImpressionLen = encodeURIComponent( impression + '\|' ).length;//di
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 6f 6e 73 3a 20 66 61 6c 73 65 2c 0d 0a 0d 0a 09 49 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 61 63 63 6f 75 6e 74 69 64 2c 20 62 46 6f 72 63 65 52 65 66 72 65 73 68 2c 20 73 74 72 4f 53 2c 20 70 72 65 66 65 72 65 6e 63 65 73 2c 20 73 74 72 43 43 2c 20 6f 70 74 73 49 6e 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 6f 70 74 73 20 3d 20 24 4a 2e 65 78 74 65 6e 64 28 20 7b 20 62 4e 6f 44 65 66 61 75 6c 74 44 65 73 63 72 69 70 74 6f 72 73 3a 20 66 61 6c 73 65 20 7d 2c 20 6f 70 74 73 49 6e 20 7c 7c 20 7b 7d 20 29 3b 0d 0a 09 09 76 61 72 20 72 67 44 65 73 69 72 65 64 4f 53 54 79 70 65 73 20 3d 20 73 74 72 4f 53 20 3f 20 73 74 72 4f 53 2e 73 70 6c 69 74 28 27 2c 27 29 20 3a 20 27 61 6e 79 27 3b 0d 0a 0d 0a 09 09 66 6f 72 28 20 76 61 72 20 69 3d 30 3b 20 69 20 3c Data Ascii: ons: false,Init: function( accountid, bForceRefresh, strOS, preferences, strCC, optsIn ){var opts = $J.extend( { bNoDefaultDescriptors: false }, optsIn \|\| {} );var rgDesiredOSTypes = strOS ? strOS.split(',') : 'any';for( var i=0; i <
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 3d 20 24 4a 28 65 6c 29 3b 0d 0a 0d 0a 09 09 09 09 09 69 66 20 28 20 24 45 6c 65 6d 2e 64 61 74 61 28 20 27 74 72 61 63 6b 65 64 46 6f 72 49 6d 70 72 65 73 73 69 6f 6e 73 27 20 29 20 29 0d 0a 09 09 09 09 09 7b 0d 0a 09 09 09 09 09 09 72 65 74 75 72 6e 3b 0d 0a 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 24 45 6c 65 6d 2e 64 61 74 61 28 20 27 74 72 61 63 6b 65 64 46 6f 72 49 6d 70 72 65 73 73 69 6f 6e 73 27 2c 20 74 72 75 65 20 29 3b 0d 0a 0d 0a 09 09 09 09 09 2f 2f 20 6d 75 73 74 20 68 61 76 65 20 61 70 70 69 64 73 0d 0a 09 09 09 09 09 76 61 72 20 73 74 72 41 70 70 49 44 73 20 3d 20 24 45 6c 65 6d 2e 64 61 74 61 28 27 64 73 41 70 70 69 64 27 29 3b 0d 0a 09 09 09 09 09 69 66 20 28 20 21 73 74 72 41 70 70 49 44 73 20 7c 7c 20 73 74 72 41 70 70 49 44 73 2e 6c 65 Data Ascii: = $J(el);if ( $Elem.data( 'trackedForImpressions' ) ){return;}$Elem.data( 'trackedForImpressions', true );// must have appidsvar strAppIDs = $Elem.data('dsAppid');if ( !strAppIDs \|\| strAppIDs.le
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 20 28 20 72 67 44 61 74 61 20 26 26 20 72 67 44 61 74 61 2e 6c 65 6e 67 74 68 20 29 0d 0a 09 09 09 09 09 7b 0d 0a 09 09 09 09 09 09 66 6f 72 20 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 72 67 44 61 74 61 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 0d 0a 09 09 09 09 09 09 09 6f 75 74 5b 20 72 67 44 61 74 61 5b 69 5d 20 5d 20 3d 20 74 72 75 65 3b 0d 0a 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 72 65 74 75 72 6e 20 6f 75 74 3b 0d 0a 09 09 09 09 7d 3b 0d 0a 09 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 72 67 57 69 73 68 6c 69 73 74 20 3d 20 66 6e 43 6f 6e 76 65 72 74 54 6f 4d 61 70 28 20 64 61 74 61 2e 72 67 57 69 73 68 6c 69 73 74 20 29 3b 0d 0a 09 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 72 67 4f 77 6e 65 64 50 61 63 6b 61 Data Ascii: ( rgData && rgData.length ){for ( var i = 0; i < rgData.length; i++ )out[ rgData[i] ] = true;}return out;};GDynamicStore.s_rgWishlist = fnConvertToMap( data.rgWishlist );GDynamicStore.s_rgOwnedPacka
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 75 64 65 64 54 61 67 73 2e 6c 65 6e 67 74 68 3b 20 2b 2b 69 20 29 0d 0a 09 09 09 09 09 7b 0d 0a 09 09 09 09 09 09 76 61 72 20 74 61 67 20 3d 20 64 61 74 61 2e 72 67 45 78 63 6c 75 64 65 64 54 61 67 73 5b 69 5d 3b 0d 0a 09 09 09 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 72 67 45 78 63 6c 75 64 65 64 54 61 67 73 5b 74 61 67 2e 74 61 67 69 64 5d 20 3d 20 74 61 67 2e 6e 61 6d 65 3b 0d 0a 09 09 09 09 09 7d 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 09 69 66 20 28 20 64 61 74 61 2e 72 67 45 78 63 6c 75 64 65 64 43 6f 6e 74 65 6e 74 44 65 73 63 72 69 70 74 6f 72 49 44 73 20 26 26 20 64 61 74 61 2e 72 67 45 78 63 6c 75 64 65 64 43 6f 6e 74 65 6e 74 44 65 73 63 72 69 70 74 6f 72 49 44 73 2e 6c 65 6e 67 74 68 20 3e 20 30 20 26 26 0d 0a 09 09 09 09 09 09 21 Data Ascii: udedTags.length; ++i ){var tag = data.rgExcludedTags[i];GDynamicStore.s_rgExcludedTags[tag.tagid] = tag.name;}}if ( data.rgExcludedContentDescriptorIDs && data.rgExcludedContentDescriptorIDs.length > 0 &&!
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 6c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 64 79 6e 61 6d 69 63 73 74 6f 72 65 2f 73 61 6c 65 64 61 74 61 2f 3f 63 63 3d 27 20 2b 20 73 74 72 43 43 3b 0d 0a 0d 0a 09 09 09 24 4a 2e 67 65 74 28 20 75 72 6c 20 29 2e 64 6f 6e 65 28 20 66 75 6e 63 74 69 6f 6e 28 20 64 61 74 61 20 29 20 7b 0d 0a 09 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 6e 50 72 6f 6d 6f 74 69 6f 6e 61 6c 44 69 73 63 6f 75 6e 74 20 3d 20 64 61 74 61 2e 6e 50 72 6f 6d 6f 74 69 6f 6e 61 6c 44 69 73 63 6f 75 6e 74 20 3f 20 64 61 74 61 2e 6e 50 72 6f 6d 6f 74 69 6f 6e 61 6c 44 69 73 63 6f 75 6e 74 20 3a 20 30 3b 0d 0a 09 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 6e 50 72 6f 6d 6f 74 69 6f 6e 61 6c 44 Data Ascii: l = 'https://store.steampowered.com/dynamicstore/saledata/?cc=' + strCC;$J.get( url ).done( function( data ) {GDynamicStore.s_nPromotionalDiscount = data.nPromotionalDiscount ? data.nPromotionalDiscount : 0;GDynamicStore.s_nPromotionalD
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 09 62 72 65 61 6b 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 69 66 20 28 20 69 50 61 72 61 6d 20 3c 20 30 20 29 0d 0a 09 09 09 72 65 74 75 72 6e 3b 0d 0a 0d 0a 09 09 76 61 72 20 73 74 72 52 65 6d 6f 76 65 20 3d 20 27 27 3b 0d 0a 09 09 69 66 20 28 20 72 67 50 61 72 61 6d 73 2e 6c 65 6e 67 74 68 20 3d 3d 20 31 20 7c 7c 20 28 72 67 50 61 72 61 6d 73 2e 6c 65 6e 67 74 68 20 3d 3d 20 32 20 26 26 20 72 67 50 61 72 61 6d 73 5b 31 5d 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 2f 2f 20 72 65 6d 6f 76 65 20 74 68 65 20 65 6e 74 69 72 65 20 73 65 61 72 63 68 2e 2e 20 6a 75 73 74 20 53 4e 52 0d 0a 09 09 09 73 74 72 52 65 6d 6f 76 65 20 3d 20 27 3f 27 20 2b 20 73 74 72 53 65 61 72 63 68 3b 0d 0a 09 09 7d 0d 0a 09 09 65 6c 73 Data Ascii: break;}}if ( iParam < 0 )return;var strRemove = '';if ( rgParams.length == 1 \|\| (rgParams.length == 2 && rgParams[1].length == 0) ){// remove the entire search.. just SNRstrRemove = '?' + strSearch;}els
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 20 2b 2b 69 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 76 61 72 20 73 74 72 50 61 72 61 6d 20 3d 20 72 67 4e 65 77 50 61 72 61 6d 73 5b 69 5d 3b 0d 0a 09 09 09 09 73 74 72 4e 65 77 55 52 4c 20 2b 3d 20 28 20 69 20 3d 3d 20 30 20 3f 20 27 3f 27 20 3a 20 27 26 27 20 29 20 2b 20 73 74 72 50 61 72 61 6d 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 20 68 69 73 74 6f 72 79 2e 73 74 61 74 65 2c 20 6e 75 6c 6c 2c 20 73 74 72 4e 65 77 55 52 4c 20 29 3b 0d 0a 09 09 7d 0d 0a 09 7d 2c 0d 0a 0d 0a 09 2f 2f 20 46 69 78 75 70 20 6e 61 6d 65 20 70 6f 72 74 69 6f 6e 20 6f 66 20 55 52 4c 20 76 69 61 20 68 69 73 74 6f 72 79 20 41 50 49 2c 20 69 66 20 73 75 70 70 6f 72 74 20 61 6e 64 20 69 66 20 6e 61 Data Ascii: ++i ){var strParam = rgNewParams[i];strNewURL += ( i == 0 ? '?' : '&' ) + strParam;}window.history.replaceState( history.state, null, strNewURL );}},// Fixup name portion of URL via history API, if support and if na
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 20 66 69 6e 64 20 6f 75 72 20 68 6f 72 69 7a 6f 6e 74 61 6c 20 73 63 72 6f 6c 6c 65 72 73 20 61 6e 64 20 61 64 64 20 74 72 61 63 6b 69 6e 67 20 74 6f 20 74 68 65 6d 0d 0a 0d 0a 09 09 24 4a 28 27 2e 73 74 6f 72 65 5f 68 6f 72 69 7a 6f 6e 74 61 6c 5f 61 75 74 6f 73 6c 69 64 65 72 27 20 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 69 2c 20 65 6c 54 61 72 67 65 74 20 29 7b 0d 0a 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 49 6d 70 72 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 2e 52 65 67 69 73 74 65 72 53 63 72 6f 6c 6c 45 76 65 6e 74 28 20 65 6c 54 61 72 67 65 74 20 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 0d 0a 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 49 6d 70 72 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 2e 43 68 65 63 6b 56 69 73 69 62 69 6c Data Ascii: find our horizontal scrollers and add tracking to them$J('.store_horizontal_autoslider' ).each(function(i, elTarget ){GDynamicStore.s_ImpressionTracker.RegisterScrollEvent( elTarget );});GDynamicStore.s_ImpressionTracker.CheckVisibil

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49830	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:46 UTC	612	OUT	GET /public/shared/javascript/login.js?v=uyGwRKXH0yy-&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:46 UTC	444	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:46 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Sun, 26 May 2024 17:24:48 GMT ETag: W/"uyGwRKXH0yy-" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3302891 Server: cloudflare CF-RAY: 86fd40e759abb3bc-MIA
2024-04-05 23:17:46 UTC	925	IN	Data Raw: 37 64 65 34 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 43 4c 6f 67 69 6e 50 72 6f 6d 70 74 4d 61 6e 61 67 65 72 28 20 73 74 72 42 61 73 65 55 52 4c 2c 20 72 67 4f 70 74 69 6f 6e 73 20 29 0d 0a 7b 0d 0a 09 2f 2f 20 6e 6f 72 6d 61 6c 69 7a 65 20 77 69 74 68 20 74 72 61 69 6c 69 6e 67 20 73 6c 61 73 68 0d 0a 09 74 68 69 73 2e 6d 5f 73 74 72 42 61 73 65 55 52 4c 20 3d 20 73 74 72 42 61 73 65 55 52 4c 20 2b 20 28 20 73 74 72 42 61 73 65 55 52 4c 2e 73 75 62 73 74 72 28 2d 31 29 20 3d 3d 20 27 2f 27 20 3f 20 27 27 20 3a 20 27 2f 27 20 29 20 2b 20 28 20 74 68 69 73 2e 6d 5f 62 49 73 4d 6f 62 69 6c 65 20 3f 20 27 6d 6f 62 69 6c 65 6c 6f 67 69 6e 27 20 3a 20 27 6c 6f 67 69 6e 27 20 29 20 2b 20 27 2f 27 3b 0d 0a 09 74 68 69 Data Ascii: 7de4"use strict";function CLoginPromptManager( strBaseURL, rgOptions ){// normalize with trailing slashthis.m_strBaseURL = strBaseURL + ( strBaseURL.substr(-1) == '/' ? '' : '/' ) + ( this.m_bIsMobile ? 'mobilelogin' : 'login' ) + '/';thi
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 63 65 73 73 20 3d 20 72 67 4f 70 74 69 6f 6e 73 2e 66 6e 4f 6e 53 75 63 63 65 73 73 20 7c 7c 20 6e 75 6c 6c 3b 0d 0a 0d 0a 09 74 68 69 73 2e 6d 5f 73 74 72 52 65 64 69 72 65 63 74 55 52 4c 20 3d 20 72 67 4f 70 74 69 6f 6e 73 2e 73 74 72 52 65 64 69 72 65 63 74 55 52 4c 20 7c 7c 20 28 74 68 69 73 2e 6d 5f 62 49 73 4d 6f 62 69 6c 65 20 3f 20 27 27 20 3a 20 73 74 72 42 61 73 65 55 52 4c 29 3b 0d 0a 09 74 68 69 73 2e 6d 5f 73 74 72 53 65 73 73 69 6f 6e 49 44 20 3d 20 72 67 4f 70 74 69 6f 6e 73 2e 73 74 72 53 65 73 73 69 6f 6e 49 44 20 7c 7c 20 6e 75 6c 6c 3b 0d 0a 0d 0a 09 74 68 69 73 2e 6d 5f 73 74 72 55 73 65 72 6e 61 6d 65 45 6e 74 65 72 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 74 68 69 73 2e 6d 5f 73 74 72 55 73 65 72 6e 61 6d 65 43 61 6e 6f 6e 69 63 61 6c Data Ascii: cess = rgOptions.fnOnSuccess \|\| null;this.m_strRedirectURL = rgOptions.strRedirectURL \|\| (this.m_bIsMobile ? '' : strBaseURL);this.m_strSessionID = rgOptions.strSessionID \|\| null;this.m_strUsernameEntered = null;this.m_strUsernameCanonical
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 73 69 67 6e 69 6e 27 20 29 2e 63 68 69 6c 64 72 65 6e 28 27 61 2c 20 62 75 74 74 6f 6e 27 20 29 2e 63 6c 69 63 6b 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 5f 74 68 69 73 2e 44 6f 4c 6f 67 69 6e 28 29 3b 20 7d 20 29 3b 0d 0a 0d 0a 09 74 68 69 73 2e 49 6e 69 74 4d 6f 64 61 6c 43 6f 6e 74 65 6e 74 28 29 3b 0d 0a 0d 0a 09 2f 2f 20 74 68 65 73 65 20 6d 6f 64 61 6c 73 20 6e 65 65 64 20 74 6f 20 62 65 20 69 6e 20 74 68 65 20 62 6f 64 79 20 62 65 63 61 75 73 65 20 77 65 20 72 65 66 65 72 20 74 6f 20 65 6c 65 6d 65 6e 74 73 20 62 79 20 6e 61 6d 65 20 62 65 66 6f 72 65 20 74 68 65 79 20 61 72 65 20 72 65 61 64 79 0d 0a 09 74 68 69 73 2e 6d 5f 24 4d 6f 64 61 6c 41 75 74 68 43 6f 64 65 20 3d 20 74 68 69 73 2e 47 65 74 4d 6f 64 61 6c 43 6f 6e 74 65 6e 74 28 20 27 Data Ascii: signin' ).children('a, button' ).click( function() { _this.DoLogin(); } );this.InitModalContent();// these modals need to be in the body because we refer to elements by name before they are readythis.m_$ModalAuthCode = this.GetModalContent( '
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 6e 28 27 53 74 65 61 6d 4d 6f 62 69 6c 65 5f 52 65 63 65 69 76 65 41 75 74 68 43 6f 64 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 20 65 2c 20 61 75 74 68 63 6f 64 65 20 29 20 7b 0d 0a 09 09 5f 74 68 69 73 2e 6d 5f 73 41 75 74 68 43 6f 64 65 20 3d 20 61 75 74 68 63 6f 64 65 3b 0d 0a 09 7d 29 3b 0d 0a 0d 0a 09 24 4a 28 27 23 63 61 70 74 63 68 61 52 65 66 72 65 73 68 4c 69 6e 6b 27 20 29 2e 63 6c 69 63 6b 28 20 24 4a 2e 70 72 6f 78 79 28 20 74 68 69 73 2e 52 65 66 72 65 73 68 43 61 70 74 63 68 61 2c 20 74 68 69 73 20 29 20 29 3b 0d 0a 0d 0a 09 2f 2f 20 69 6e 63 6c 75 64 65 20 73 6f 6d 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 73 63 72 69 70 74 73 20 77 65 20 6d 61 79 20 6e 65 65 64 0d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 42 69 67 4e 75 6d 62 65 72 20 3d 3d 20 Data Ascii: n('SteamMobile_ReceiveAuthCode', function( e, authcode ) {_this.m_sAuthCode = authcode;});$J('#captchaRefreshLink' ).click( $J.proxy( this.RefreshCaptcha, this ) );// include some additional scripts we may needif ( typeof BigNumber ==
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 20 70 61 72 73 65 49 6e 74 28 20 76 65 72 73 69 6f 6e 5b 33 5d 20 29 3b 0d 0a 09 09 76 61 72 20 6e 50 61 74 63 68 20 3d 20 70 61 72 73 65 49 6e 74 28 20 76 65 72 73 69 6f 6e 5b 34 5d 20 29 3b 0d 0a 0d 0a 09 09 72 65 74 75 72 6e 20 6e 4d 61 6a 6f 72 20 3e 20 6e 4d 69 6e 4d 61 6a 6f 72 20 7c 7c 20 28 20 6e 4d 61 6a 6f 72 20 3d 3d 20 6e 4d 69 6e 4d 61 6a 6f 72 20 26 26 20 28 20 6e 4d 69 6e 6f 72 20 3e 20 6e 4d 69 6e 4d 69 6e 6f 72 20 7c 7c 20 28 20 6e 4d 69 6e 6f 72 20 3d 3d 20 6e 4d 69 6e 4d 69 6e 6f 72 20 26 26 20 6e 50 61 74 63 68 20 3e 3d 20 6e 4d 69 6e 50 61 74 63 68 20 29 20 29 20 29 3b 0d 0a 09 7d 0d 0a 7d 3b 0d 0a 0d 0a 43 4c 6f 67 69 6e 50 72 6f 6d 70 74 4d 61 6e 61 67 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 47 65 74 50 61 72 61 6d 65 74 65 72 73 20 Data Ascii: parseInt( version[3] );var nPatch = parseInt( version[4] );return nMajor > nMinMajor \|\| ( nMajor == nMinMajor && ( nMinor > nMinMinor \|\| ( nMinor == nMinMinor && nPatch >= nMinPatch ) ) );}};CLoginPromptManager.prototype.GetParameters
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 0a 0d 0a 0d 0a 2f 2f 52 65 66 72 65 73 68 20 74 68 65 20 63 61 74 70 63 68 61 20 69 6d 61 67 65 0d 0a 43 4c 6f 67 69 6e 50 72 6f 6d 70 74 4d 61 6e 61 67 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 52 65 66 72 65 73 68 43 61 70 74 63 68 61 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 5f 74 68 69 73 20 3d 20 74 68 69 73 3b 0d 0a 09 24 4a 2e 70 6f 73 74 28 20 74 68 69 73 2e 6d 5f 73 74 72 42 61 73 65 55 52 4c 20 2b 20 27 72 65 66 72 65 73 68 63 61 70 74 63 68 61 2f 27 2c 20 74 68 69 73 2e 47 65 74 50 61 72 61 6d 65 74 65 72 73 28 20 7b 7d 20 29 20 29 0d 0a 09 09 2e 64 6f 6e 65 28 20 66 75 6e 63 74 69 6f 6e 28 20 64 61 74 61 20 29 20 7b 0d 0a 09 09 09 5f 74 68 69 73 2e 55 70 64 61 74 65 43 61 70 74 63 68 61 28 20 64 61 74 61 2e 67 69 64 20 Data Ascii: //Refresh the catpcha imageCLoginPromptManager.prototype.RefreshCaptcha = function(){var _this = this;$J.post( this.m_strBaseURL + 'refreshcaptcha/', this.GetParameters( {} ) ).done( function( data ) {_this.UpdateCaptcha( data.gid
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 74 6e 5f 73 69 67 6e 69 6e 27 29 2e 68 69 64 65 28 29 3b 0d 0a 09 24 4a 28 27 23 6c 6f 67 69 6e 5f 62 74 6e 5f 77 61 69 74 27 29 2e 73 68 6f 77 28 29 3b 0d 0a 0d 0a 09 2f 2f 20 72 65 73 65 74 20 73 6f 6d 65 20 73 74 61 74 65 0d 0a 09 74 68 69 73 2e 48 69 67 68 6c 69 67 68 74 46 61 69 6c 75 72 65 28 20 27 27 20 29 3b 0d 0a 0d 0a 09 76 61 72 20 5f 74 68 69 73 20 3d 20 74 68 69 73 3b 0d 0a 09 24 4a 2e 70 6f 73 74 28 20 74 68 69 73 2e 6d 5f 73 74 72 42 61 73 65 55 52 4c 20 2b 20 27 67 65 74 72 73 61 6b 65 79 2f 27 2c 20 74 68 69 73 2e 47 65 74 50 61 72 61 6d 65 74 65 72 73 28 20 7b 20 75 73 65 72 6e 61 6d 65 3a 20 75 73 65 72 6e 61 6d 65 20 7d 20 29 20 29 0d 0a 09 09 2e 64 6f 6e 65 28 20 24 4a 2e 70 72 6f 78 79 28 20 74 68 69 73 2e 4f 6e 52 53 41 4b 65 79 52 Data Ascii: tn_signin').hide();$J('#login_btn_wait').show();// reset some statethis.HighlightFailure( '' );var _this = this;$J.post( this.m_strBaseURL + 'getrsakey/', this.GetParameters( { username: username } ) ).done( $J.proxy( this.OnRSAKeyR
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 7b 0d 0a 09 09 09 69 66 20 28 20 67 5f 69 6e 74 65 72 76 61 6c 20 29 0d 0a 09 09 09 09 77 69 6e 64 6f 77 2e 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 20 67 5f 69 6e 74 65 72 76 61 6c 20 29 3b 0d 0a 0d 0a 09 09 09 76 61 72 20 76 61 6c 75 65 20 3d 20 77 69 6e 64 6f 77 2e 53 47 48 61 6e 64 6c 65 72 2e 67 65 74 52 65 73 75 6c 74 56 61 6c 75 65 28 29 3b 0d 0a 09 09 09 63 61 6c 6c 62 61 63 6b 28 20 5b 20 73 74 61 74 75 73 2c 20 76 61 6c 75 65 20 5d 20 29 3b 0d 0a 09 09 09 72 65 74 75 72 6e 3b 0d 0a 09 09 7d 0d 0a 09 09 69 66 20 28 20 44 61 74 65 2e 6e 6f 77 28 29 20 3e 20 74 69 6d 65 6f 75 74 54 69 6d 65 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 69 66 20 28 20 67 5f 69 6e 74 65 72 76 61 6c 20 29 0d 0a 09 09 09 09 77 69 6e 64 6f 77 2e 63 6c 65 61 72 49 6e 74 65 72 76 Data Ascii: {if ( g_interval )window.clearInterval( g_interval );var value = window.SGHandler.getResultValue();callback( [ status, value ] );return;}if ( Date.now() > timeoutTime ){if ( g_interval )window.clearInterv
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 65 3a 2f 2f 74 77 6f 66 61 63 74 6f 72 63 6f 64 65 3f 67 69 64 3d 27 20 2b 20 72 65 73 75 6c 74 73 2e 74 6f 6b 65 6e 5f 67 69 64 2c 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 75 6c 74 29 20 7b 0d 0a 09 09 09 09 69 66 20 28 20 72 65 73 75 6c 74 5b 30 5d 20 3d 3d 20 27 6f 6b 27 20 29 0d 0a 09 09 09 09 7b 0d 0a 09 09 09 09 09 63 61 6c 6c 62 61 63 6b 28 72 65 73 75 6c 74 73 2c 20 72 65 73 75 6c 74 5b 31 5d 29 3b 0d 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0d 0a 09 09 09 09 09 2f 2f 20 74 68 69 73 20 6d 61 79 20 62 65 20 69 6e 20 74 68 65 20 6d 6f 64 61 6c 0d 0a 09 09 09 09 09 63 61 6c 6c 62 61 63 6b 28 72 65 73 75 6c 74 73 2c 20 24 4a 28 27 23 74 77 6f 66 61 63 74 6f 72 63 6f 64 65 5f 65 6e 74 72 79 27 29 2e 76 61 6c 28 29 29 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 Data Ascii: e://twofactorcode?gid=' + results.token_gid, function(result) {if ( result[0] == 'ok' ){callback(results, result[1]);} else {// this may be in the modalcallback(results, $J('#twofactorcode_entry').val());}
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 77 6f 72 64 20 3d 20 70 61 73 73 77 6f 72 64 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 5c 78 30 30 2d 5c 78 37 46 5d 2f 67 2c 20 27 27 29 3b 20 2f 2f 20 72 65 6d 6f 76 65 20 6e 6f 6e 2d 73 74 61 6e 64 61 72 64 2d 41 53 43 49 49 20 63 68 61 72 61 63 74 65 72 73 0d 0a 09 76 61 72 20 65 6e 63 72 79 70 74 65 64 50 61 73 73 77 6f 72 64 20 3d 20 52 53 41 2e 65 6e 63 72 79 70 74 28 70 61 73 73 77 6f 72 64 2c 20 70 75 62 4b 65 79 29 3b 0d 0a 0d 0a 09 76 61 72 20 72 67 50 61 72 61 6d 65 74 65 72 73 20 3d 20 7b 0d 0a 09 09 70 61 73 73 77 6f 72 64 3a 20 65 6e 63 72 79 70 74 65 64 50 61 73 73 77 6f 72 64 2c 0d 0a 09 09 75 73 65 72 6e 61 6d 65 3a 20 75 73 65 72 6e 61 6d 65 2c 0d 0a 09 09 74 77 6f 66 61 63 74 6f 72 63 6f 64 65 3a 20 61 75 74 68 43 6f 64 65 2c 0d 0a 09 09 65 Data Ascii: word = password.replace(/[^\x00-\x7F]/g, ''); // remove non-standard-ASCII charactersvar encryptedPassword = RSA.encrypt(password, pubKey);var rgParameters = {password: encryptedPassword,username: username,twofactorcode: authCode,e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49831	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:46 UTC	632	OUT	GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:46 UTC	444	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:46 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Wed, 29 May 2024 06:57:03 GMT ETag: W/"pSvIAKtunfWg" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3307268 Server: cloudflare CF-RAY: 86fd40e82bb4287e-MIA
2024-04-05 23:17:46 UTC	925	IN	Data Raw: 36 30 35 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 2f 2f 20 62 75 69 6c 64 20 6f 75 72 20 6d 65 6e 75 20 6f 6e 20 69 6e 69 74 0d 0a 6a 51 75 65 72 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 09 76 61 72 20 6d 71 51 75 65 72 79 4d 65 6e 75 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 22 29 20 3a 20 7b 6d 61 74 63 68 65 73 3a 20 66 61 6c 73 65 7d 3b 0d 0a 09 76 61 72 20 6d 71 4d 6f 62 69 6c 65 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 22 Data Ascii: 6051"use strict";// build our menu on initjQuery( function($) {var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)"
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 73 73 5f 6d 61 78 77 69 64 74 68 0d 0a 09 09 72 65 74 75 72 6e 20 24 48 54 4d 4c 2e 68 61 73 43 6c 61 73 73 28 20 27 72 65 73 70 6f 6e 73 69 76 65 27 20 29 20 26 26 20 24 48 54 4d 4c 2e 68 61 73 43 6c 61 73 73 28 20 27 72 6e 5f 6d 6f 62 69 6c 65 5f 61 70 70 27 20 29 3b 0d 0a 09 7d 3b 0d 0a 0d 0a 09 2f 2f 20 6d 61 69 6e 20 6d 65 6e 75 0d 0a 0d 0a 09 76 61 72 20 24 4d 65 6e 75 20 3d 20 24 28 27 23 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 27 29 3b 0d 0a 09 76 61 72 20 24 46 72 61 6d 65 20 3d 20 24 28 27 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 27 29 3b 0d 0a 09 76 61 72 20 24 43 6f 6e 74 65 6e 74 43 74 6e 20 3d 20 24 28 27 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 27 20 29 3b 0d 0a 09 Data Ascii: ss_maxwidthreturn $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobile_app' );};// main menuvar $Menu = $('#responsive_page_menu');var $Frame = $('.responsive_page_frame');var $ContentCtn = $('.responsive_page_content' );
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 72 61 70 70 65 72 2e 61 64 64 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 29 3b 0d 0a 09 09 7d 0d 0a 09 09 65 6c 73 65 0d 0a 09 09 7b 0d 0a 09 09 09 24 53 75 62 6d 65 6e 75 57 72 61 70 70 65 72 2e 63 73 73 28 20 27 68 65 69 67 68 74 27 2c 20 30 20 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 24 53 75 62 6d 65 6e 75 2e 73 68 6f 77 28 29 3b 0d 0a 0d 0a 09 09 24 4d 65 6e 75 49 74 65 6d 2e 63 6c 69 63 6b 28 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0d 0a 09 09 09 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 09 09 09 69 66 20 28 20 24 53 75 62 6d 65 6e 75 57 72 61 70 70 65 72 2e 68 61 73 43 6c 61 73 73 28 27 61 63 74 69 76 65 27 20 29 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 24 53 75 62 6d 65 6e 75 57 72 61 70 70 65 72 2e 72 65 6d 6f 76 65 43 6c 61 Data Ascii: rapper.addClass('active');}else{$SubmenuWrapper.css( 'height', 0 );}$Submenu.show();$MenuItem.click( function(e) {e.preventDefault();if ( $SubmenuWrapper.hasClass('active' ) ){$SubmenuWrapper.removeCla
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 69 6e 67 4d 6f 64 61 6c 57 69 6e 64 6f 77 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 09 09 7d 0d 0a 0d 0a 09 09 09 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 09 69 66 20 28 20 21 24 46 72 61 6d 65 2e 68 61 73 43 6c 61 73 73 28 27 6d 61 69 6e 6d 65 6e 75 5f 61 63 74 69 76 65 27 29 20 26 26 20 21 24 46 72 61 6d 65 2e 68 61 73 43 6c 61 73 73 28 27 6c 6f 63 61 6c 6d 65 6e 75 5f 61 63 74 69 76 65 27 29 20 29 0d 0a 09 09 09 09 7b 0d 0a 09 09 09 09 09 66 6e 52 65 73 65 74 4d 65 6e 75 53 74 61 74 65 28 29 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 7d 2c 20 35 30 30 20 29 3b 0d 0a 09 09 7d 3b 0d 0a 0d 0a 09 09 76 61 72 20 62 49 6e 69 74 69 61 6c 69 7a 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 09 09 76 61 72 20 66 6e Data Ascii: ingModalWindow = null;}window.setTimeout( function() {if ( !$Frame.hasClass('mainmenu_active') && !$Frame.hasClass('localmenu_active') ){fnResetMenuState();}}, 500 );};var bInitialized = false;var fn
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 09 09 66 6e 4d 61 6b 65 45 78 70 61 6e 64 61 62 6c 65 4d 65 6e 75 49 74 65 6d 28 20 24 45 6c 65 6d 65 6e 74 2c 20 24 53 75 62 6d 65 6e 75 20 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 29 3b 0d 0a 0d 0a 09 09 76 61 72 20 24 4e 6f 74 69 66 69 63 61 74 69 6f 6e 49 74 65 6d 20 3d 20 24 4d 65 6e 75 2e 66 69 6e 64 28 20 27 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 5f 69 74 65 6d 27 20 29 3b 0d 0a 09 09 76 61 72 20 24 4e 6f 74 69 66 69 63 61 74 69 6f 6e 53 75 62 6d 65 6e 75 20 3d 20 24 4d 65 6e 75 2e 66 69 6e 64 28 27 2e 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 75 62 6d 65 6e 75 27 29 3b 0d 0a 09 09 69 66 20 28 20 24 4e 6f 74 69 66 69 63 61 74 69 6f 6e 49 74 65 6d 2e 6c 65 6e 67 74 68 20 26 26 20 24 4e 6f 74 69 66 69 63 61 74 69 6f 6e 53 75 62 6d 65 6e 75 2e 6c 65 Data Ascii: fnMakeExpandableMenuItem( $Element, $Submenu );}});var $NotificationItem = $Menu.find( '.notifications_item' );var $NotificationSubmenu = $Menu.find('.notification_submenu');if ( $NotificationItem.length && $NotificationSubmenu.le
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 7d 0d 0a 09 09 7d 3b 0d 0a 0d 0a 09 09 24 4c 6f 63 61 6c 4d 65 6e 75 20 3d 20 24 4a 28 27 23 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6c 6f 63 61 6c 5f 6d 65 6e 75 27 29 3b 0d 0a 09 09 76 61 72 20 24 41 66 66 6f 72 64 61 6e 63 65 20 3d 20 24 4a 28 27 2e 72 65 73 70 6f 6e 73 69 76 65 5f 6c 6f 63 61 6c 5f 6d 65 6e 75 5f 74 61 62 27 29 3b 0d 0a 0d 0a 09 09 4c 6f 63 61 6c 4d 65 6e 75 45 76 65 6e 74 73 20 3d 20 66 6e 42 75 69 6c 64 4d 65 6e 75 45 76 65 6e 74 73 28 20 24 4c 6f 63 61 6c 4d 65 6e 75 2c 20 27 6c 6f 63 61 6c 6d 65 6e 75 27 20 29 3b 0d 0a 0d 0a 09 09 24 41 66 66 6f 72 64 61 6e 63 65 2e 63 6c 69 63 6b 28 20 66 75 6e 63 74 69 6f 6e 28 20 65 20 29 20 7b 0d 0a 09 09 09 4c 6f 63 61 6c 4d 65 6e 75 45 76 65 6e 74 73 2e 66 6e 41 63 74 69 76 61 74 65 Data Ascii: }};$LocalMenu = $J('#responsive_page_local_menu');var $Affordance = $J('.responsive_local_menu_tab');LocalMenuEvents = fnBuildMenuEvents( $LocalMenu, 'localmenu' );$Affordance.click( function( e ) {LocalMenuEvents.fnActivate
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 75 45 76 65 6e 74 73 2e 66 6e 41 63 74 69 76 61 74 65 4d 65 6e 75 28 29 3b 20 7d 20 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 52 65 73 70 6f 6e 73 69 76 65 5f 49 6e 69 74 4d 65 6e 75 53 77 69 70 65 73 28 20 24 2c 20 24 4d 65 6e 75 2c 20 24 4c 6f 63 61 6c 4d 65 6e 75 2c 20 4d 61 69 6e 4d 65 6e 75 45 76 65 6e 74 73 2c 20 4c 6f 63 61 6c 4d 65 6e 75 45 76 65 6e 74 73 20 29 3b 0d 0a 0d 0a 09 52 65 73 70 6f 6e 73 69 76 65 5f 49 6e 69 74 46 69 78 4f 6e 53 63 72 6f 6c 6c 28 20 24 20 29 3b 0d 0a 0d 0a 09 52 65 73 70 6f 6e 73 69 76 65 5f 49 6e 69 74 54 6f 75 63 68 44 65 74 65 63 74 69 6f 6e 28 20 24 20 29 3b 0d 0a 0d 0a 09 52 65 73 70 6f 6e 73 69 76 65 5f 49 6e 69 74 54 61 62 53 65 6c 65 63 74 28 20 24 20 29 3b 0d 0a 0d 0a 09 52 65 73 70 6f 6e 73 69 76 65 5f 49 6e 69 74 52 Data Ascii: uEvents.fnActivateMenu(); } );}Responsive_InitMenuSwipes( $, $Menu, $LocalMenu, MainMenuEvents, LocalMenuEvents );Responsive_InitFixOnScroll( $ );Responsive_InitTouchDetection( $ );Responsive_InitTabSelect( $ );Responsive_InitR
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 6b 73 4c 69 6b 65 53 77 69 70 65 20 3d 20 66 61 6c 73 65 3b 0d 0a 09 76 61 72 20 6e 44 72 61 67 4d 65 6e 75 57 69 64 74 68 20 3d 20 30 3b 0d 0a 0d 0a 09 76 61 72 20 6e 43 75 72 44 72 61 67 4f 66 66 73 65 74 20 3d 20 30 3b 0d 0a 09 76 61 72 20 6e 54 6f 75 63 68 53 74 61 72 74 50 61 67 65 58 20 3d 20 30 3b 09 2f 2f 20 70 61 67 65 2f 43 53 53 20 63 6f 6f 72 64 69 6e 61 74 65 73 20 62 65 63 61 75 73 65 20 74 68 61 74 27 73 20 68 6f 77 20 77 65 20 6d 65 61 73 75 72 65 20 74 68 65 20 6d 65 6e 75 20 77 69 64 74 68 0d 0a 09 76 61 72 20 6e 54 6f 75 63 68 53 74 61 72 74 50 61 67 65 59 20 3d 20 30 3b 0d 0a 0d 0a 09 76 61 72 20 66 6e 47 65 74 53 69 6e 67 6c 65 54 6f 75 63 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0d 0a 09 09 76 61 72 20 54 6f 75 63 68 45 76 Data Ascii: ksLikeSwipe = false;var nDragMenuWidth = 0;var nCurDragOffset = 0;var nTouchStartPageX = 0;// page/CSS coordinates because that's how we measure the menu widthvar nTouchStartPageY = 0;var fnGetSingleTouch = function(e) {var TouchEv
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 49 6e 44 69 73 6d 69 73 73 4d 65 6e 75 44 72 61 67 20 3d 20 74 72 75 65 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 09 09 65 6c 73 65 20 69 66 20 28 20 24 46 72 61 6d 65 2e 68 61 73 43 6c 61 73 73 28 27 6c 6f 63 61 6c 6d 65 6e 75 5f 61 63 74 69 76 65 27 29 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 69 66 20 28 20 54 6f 75 63 68 2e 63 6c 69 65 6e 74 58 20 3c 20 28 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 20 2d 20 24 4c 6f 63 61 6c 4d 65 6e 75 2e 77 69 64 74 68 28 29 20 2a 20 30 2e 39 20 29 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 62 49 6e 4c 6f 63 61 6c 4d 65 6e 75 44 72 61 67 20 3d 20 74 72 75 65 3b 0d 0a 09 09 09 09 62 49 6e 44 69 73 6d 69 73 73 4d 65 6e 75 44 72 61 67 20 3d 20 74 72 75 65 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 09 09 65 6c 73 65 Data Ascii: InDismissMenuDrag = true;}}else if ( $Frame.hasClass('localmenu_active') ){if ( Touch.clientX < ( window.innerWidth - $LocalMenu.width() * 0.9 ) ){bInLocalMenuDrag = true;bInDismissMenuDrag = true;}}else
2024-04-05 23:17:46 UTC	1369	IN	Data Raw: 72 61 6d 65 2e 61 64 64 43 6c 61 73 73 28 27 69 6e 5f 6d 65 6e 75 5f 64 72 61 67 27 29 3b 0d 0a 09 09 09 69 66 20 28 20 21 62 49 6e 44 69 73 6d 69 73 73 4d 65 6e 75 44 72 61 67 20 29 0d 0a 09 09 09 09 44 72 61 67 4d 65 6e 75 45 76 65 6e 74 73 2e 66 6e 41 63 74 69 76 61 74 65 4d 65 6e 75 28 29 3b 0d 0a 09 09 09 2f 2f 24 46 72 61 6d 65 2e 61 64 64 43 6c 61 73 73 28 20 62 49 6e 4c 6f 63 61 6c 4d 65 6e 75 44 72 61 67 20 3f 20 27 6c 6f 63 61 6c 6d 65 6e 75 5f 61 63 74 69 76 65 27 20 3a 20 27 6d 61 69 6e 6d 65 6e 75 5f 61 63 74 69 76 65 27 20 29 3b 0d 0a 09 09 09 6e 44 72 61 67 4d 65 6e 75 57 69 64 74 68 20 3d 20 24 44 72 61 67 4d 65 6e 75 2e 77 69 64 74 68 28 29 3b 0d 0a 09 09 09 62 4c 6f 6f 6b 73 4c 69 6b 65 53 77 69 70 65 20 3d 20 74 72 75 65 3b 0d 0a 09 09 Data Ascii: rame.addClass('in_menu_drag');if ( !bInDismissMenuDrag )DragMenuEvents.fnActivateMenu();//$Frame.addClass( bInLocalMenuDrag ? 'localmenu_active' : 'mainmenu_active' );nDragMenuWidth = $DragMenu.width();bLooksLikeSwipe = true;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49832	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:47 UTC	1605	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=310184681&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=964554916&browser-info=we%3A1%3Aet%3A1712359066%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011745%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359066&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 199 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:47 UTC	199	OUT	Data Raw: 0a 17 08 00 10 01 18 13 20 00 8a 01 0c 08 f6 09 10 8b 07 18 f6 09 20 d2 07 0a 1b 08 00 10 01 18 04 20 00 62 11 08 00 10 00 18 01 20 ff ff ff ff ff ff ff ff ff 01 0a 14 08 c2 03 10 01 18 00 20 00 5a 09 08 8d 05 10 c0 03 18 9a 01 0a 14 08 b3 04 10 01 18 00 20 00 5a 09 08 8d 05 10 c0 03 18 9a 01 0a 14 08 b0 05 10 01 18 00 20 00 5a 09 08 8c 05 10 bf 03 18 9a 01 0a 14 08 95 06 10 01 18 00 20 00 5a 09 08 84 05 10 b7 03 18 9a 01 0a 14 08 cd 07 10 01 18 00 20 00 5a 09 08 80 05 10 b3 03 18 9a 01 0a 0e 08 db 0d 10 01 18 08 20 00 aa 01 02 08 01 0a 09 08 e1 0d 10 01 18 05 20 00 0a 06 10 04 e0 01 b2 02 Data Ascii: b Z Z Z Z Z
2024-04-05 23:17:47 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:47 GMT Expires: Fri, 05-Apr-2024 23:17:47 GMT Last-Modified: Fri, 05-Apr-2024 23:17:47 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49834	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:47 UTC	651	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:47 UTC	355	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:47 GMT Content-Type: image/png Content-Length: 1846 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-736" Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 1005 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40ebabb00a0e-MIA
2024-04-05 23:17:47 UTC	1014	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-04-05 23:17:47 UTC	832	IN	Data Raw: 86 89 60 36 db 2d ac ed 55 12 3c 83 1b eb c1 2d 81 4e ee 50 30 6b aa 65 fb 83 b6 8e 3a 5c 76 8a fb 9a e9 9a 02 86 03 d9 92 07 27 b1 a7 80 a7 d9 6e 07 ab 2c ee 39 06 4e 67 7b 3f 18 8d 33 de 34 f0 84 d2 b6 0a ec d1 9c ef 1e 30 c2 f6 5e f0 9e c6 33 67 c1 71 6c 57 f1 7b 48 ac 07 77 b0 7d 05 3c 6c 31 46 2e 78 d2 c6 93 2b e1 bd 5f bd 12 9c e2 4e 1e 38 01 5c 0c ee 02 3f 89 fe 74 7e 89 61 e0 00 f8 cc 61 bc 4a b0 48 69 2b 07 cf 68 ce 77 86 78 3e 5b f3 19 12 63 0d db cb c0 e3 4a ff 5a 31 e6 51 9b 31 46 5a cc 5b 57 c3 bf 90 e2 d0 1f e3 af 6e de 5b ac f4 2f 62 b1 0d f6 b6 6e 87 f1 96 5b b4 ad 70 31 df 11 09 ac e2 4b c2 5e aa f4 85 84 90 bf c0 46 8d f1 96 80 73 05 bf 78 29 b8 b9 99 9a 28 51 fa e4 07 68 70 18 27 43 dc 1f 15 2b 25 c2 2f ee c5 8a b4 42 13 d8 c7 76 a9 f2 Data Ascii: `6-U<-NP0ke:\v'n,9Ng{?340^3gqlW{Hw}<l1F.x+_N8\?t~aaJHi+hwx>[cJZ1Q1FZ[Wn[/bn[p1K^Fsx)(Qhp'C+%/Bv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49833	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:47 UTC	655	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:47 UTC	355	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:47 GMT Content-Type: image/png Content-Length: 3777 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-ec1" Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 6511 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40ebb9815c63-MIA
2024-04-05 23:17:47 UTC	1014	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 81 06 40 a0 01 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@ @
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 78 3c b1 c5 f6 81 74 d1 e7 70 64 3a 3d ed f3 e1 70 f8 a5 ea ea 6a eb 90 1d 96 1a b2 fe 0d 37 ab 8b ab aa aa 3a 58 56 56 d6 eb f7 fb 3f 94 cd 85 49 bb c6 b1 31 d5 d1 d1 4e d7 c1 09 e1 50 28 b4 bf a6 a6 a6 ce 9a 5d 65 d8 4d ec 8c fa a4 98 8c d6 e3 b5 b5 b5 47 3b 3a 3a b6 48 78 8f d0 43 30 81 f4 e2 c7 5d 5d 5d 9b 6d 61 8e 1d 2a 2a 83 ce 70 1b 37 e5 9e 54 59 59 39 5f 8f d0 a5 a5 a5 45 b9 b9 b9 3b 65 1a fe 98 db ed 2e a1 b5 30 5b a2 d1 68 40 0e 01 4f 05 83 c1 ba 86 86 86 54 77 c8 18 92 de 0d 4b af 26 3d e1 68 a6 4c 0c 74 3c d4 7a e1 35 bf b2 ac 06 91 97 97 37 af b8 b8 78 2d ed 86 74 69 6e 6e 6e 69 6f 6f 0f df e5 4f 74 60 42 d2 b7 23 f1 3e 35 2a d0 c6 de ca 51 de b0 88 bc 59 b7 d5 c4 ba c7 b1 d3 db 3d 3d 3d 23 f5 f5 f5 01 da 0e 0e d1 21 1e 96 de 1c 33 f5 05 3a Data Ascii: x<tpd:=pj7:XVV?I1NP(]eMG;::HxC0]]]ma*p7TYY9_E;e.0[h@OTwK&=hLt<z57x-tinnniooOt`B#>5QY===#!3:
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 46 05 da d8 d3 c6 f2 86 45 e4 cd ba ad 26 d6 3d 8e dd 26 47 8e 9f 47 ea eb eb 03 b4 1d 1c a2 43 3c 2c bd 69 ec 97 f6 1d 1f a1 67 c8 13 0f b5 cf e4 9d 10 32 92 3e e5 1d 89 87 79 46 41 66 84 9e c1 79 09 35 71 36 71 78 0e be 76 cc 4d 63 ca b0 13 5e 99 14 e8 e9 f6 9c 00 2c 58 e0 00 20 d0 00 98 72 db f0 bd 67 80 11 1a 00 81 06 08 34 00 02 0d 80 40 03 20 d0 00 08 34 40 a0 01 10 68 00 04 1a 00 81 06 08 34 00 02 0d 80 40 03 f8 ff 73 7c c5 92 f2 f2 72 fe 0b 98 b3 2a 2a 2a 08 f4 a4 bb 2d e3 6b a3 ef 7f 53 28 b5 4e c5 57 00 05 d2 44 2f 06 78 5e aa 4b aa 7b 26 3d 6c c7 22 81 a9 65 49 ed 93 da 29 b5 8d 3e 83 03 9a a4 f4 1d 5c de 53 86 dd f2 66 ae 1d 43 3f 2f 75 59 ea 2d c2 0c 07 3d 22 f5 a6 d4 15 a9 bd 04 fa c7 d3 eb 6f bf 23 a5 6f 47 50 40 3f c1 10 f9 52 87 a5 0e 9a Data Ascii: FE&=&GGC<,ig2>yFAfy5q6qxvMc^,X rg4@ 4@h4@s\|r***-kS(NWD/x^K{&=l"eI)>\SfC?/uY-="o#oGP@?R
2024-04-05 23:17:47 UTC	25	IN	Data Raw: f8 8f 00 03 00 51 0b de 8f bf 45 3e 59 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: QE>YIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49835	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:47 UTC	631	OUT	GET /public/css/applications/store/main.css?v=t81gm6SF3BGU&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:47 UTC	437	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:47 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Sun, 15 Sep 2024 22:37:39 GMT ETag: W/"t81gm6SF3BGU" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 1471207 Server: cloudflare CF-RAY: 86fd40ee298167c9-MIA
2024-04-05 23:17:47 UTC	932	IN	Data Raw: 37 64 65 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 68 74 6d 6c 20 62 6f 64 79 2e 65 76 65 6e 74 73 5f 68 75 62 2e 76 36 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 37 31 61 32 31 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 30 30 70 78 29 7b 68 74 6d 6c 20 62 6f 64 79 2e 65 76 65 6e 74 73 5f 68 75 62 2e 76 36 7b 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 68 74 6d 6c 20 62 6f 64 79 2e 65 76 65 6e 74 73 5f 68 75 62 2e 76 36 3a 3a 2d 77 65 62 6b Data Ascii: 7deahtml body.events_hub.v6{background-color:#171a21;font-family:"Motiva Sans",Arial,Helvetica,sans-serif}@media screen and (max-width: 400px){html body.events_hub.v6{scrollbar-width:none;-ms-overflow-style:none}html body.events_hub.v6::-webk
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 78 3a 31 35 39 39 7d 2e 5f 32 71 79 42 5a 56 38 59 76 78 73 74 58 75 53 4b 69 59 44 46 31 39 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 47 72 65 65 6e 45 6e 76 65 6c 6f 70 65 4d 65 6e 75 2c 2e 4c 51 6b 72 62 62 61 79 5a 50 59 31 31 71 48 6d 30 31 74 37 46 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6f 70 61 63 69 74 79 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 65 6c 6c 69 70 73 65 20 66 61 72 74 68 65 73 74 2d 63 6f 72 6e 65 72 20 61 74 20 35 30 25 20 30 25 2c 20 23 33 63 34 30 34 37 20 30 25 2c 20 23 33 63 34 30 34 37 20 35 30 25 2c 20 23 33 33 33 36 33 64 20 31 30 30 25 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 32 30 30 6d 73 3b 62 6f 78 2d 73 68 61 64 Data Ascii: x:1599}._2qyBZV8YvxstXuSKiYDF19:focus{outline:none}.GreenEnvelopeMenu,.LQkrbbayZPY11qHm01t7F{position:absolute;opacity:1;background:radial-gradient(ellipse farthest-corner at 50% 0%, #3c4047 0%, #3c4047 50%, #33363d 100%);transition:opacity 200ms;box-shad
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 3a 72 6f 77 7d 2e 70 46 6f 33 6b 51 4f 7a 72 6c 39 71 56 4c 50 58 58 47 49 4d 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 38 30 2c 38 37 2c 39 34 2c 30 29 7d 2e 70 46 6f 33 6b 51 4f 7a 72 6c 39 71 56 4c 50 58 58 47 49 4d 70 3a 68 6f 76 65 72 2c 2e 70 46 6f 33 6b 51 4f 7a 72 6c 39 71 56 4c 50 58 58 47 49 4d 70 2e 5f 31 4b 50 57 55 74 37 77 59 57 53 66 44 33 56 37 73 59 70 73 79 54 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 61 36 30 36 39 3b 63 6f 6c 6f 72 3a 23 62 38 63 35 63 39 7d 2e 70 46 6f 33 6b 51 4f 7a 72 6c 39 71 56 4c 50 58 58 47 49 4d 70 2e 64 69 73 61 62 6c 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 36 62 37 30 37 32 3b 63 75 72 73 6f 72 Data Ascii: :row}.pFo3kQOzrl9qVLPXXGIMp:first-child{border-top:1px solid rgba(80,87,94,0)}.pFo3kQOzrl9qVLPXXGIMp:hover,.pFo3kQOzrl9qVLPXXGIMp._1KPWUt7wYWSfD3V7sYpsyT{background:#5a6069;color:#b8c5c9}.pFo3kQOzrl9qVLPXXGIMp.disabled{background:none;color:#6b7072;cursor
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 70 46 6f 33 6b 51 4f 7a 72 6c 39 71 56 4c 50 58 58 47 49 4d 70 20 73 76 67 7b 68 65 69 67 68 74 3a 31 32 70 78 3b 77 69 64 74 68 3a 31 32 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 36 70 78 7d 2e 70 46 6f 33 6b 51 4f 7a 72 6c 39 71 56 4c 50 58 58 47 49 4d 70 20 2e 53 56 47 49 63 6f 6e 5f 50 6c 75 73 43 69 72 63 6c 65 7b 68 65 69 67 68 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 33 70 78 7d 2e 70 46 6f 33 6b 51 4f 7a 72 6c 39 71 56 4c 50 58 58 47 49 4d 70 20 2e 53 56 47 49 63 6f 6e 5f 50 6c 75 73 43 69 72 63 6c 65 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 67 72 61 79 3b 73 68 61 70 65 2d 72 65 6e 64 65 72 69 6e 67 3a 63 72 69 73 70 45 64 67 65 73 3b Data Ascii: pFo3kQOzrl9qVLPXXGIMp svg{height:12px;width:12px;margin-right:6px}.pFo3kQOzrl9qVLPXXGIMp .SVGIcon_PlusCircle{height:16px;width:16px;margin-left:-3px;margin-bottom:-3px}.pFo3kQOzrl9qVLPXXGIMp .SVGIcon_PlusCircle line{stroke:gray;shape-rendering:crispEdges;
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 44 65 73 6b 74 6f 70 55 49 20 2e 70 46 6f 33 6b 51 4f 7a 72 6c 39 71 56 4c 50 58 58 47 49 4d 70 3a 68 6f 76 65 72 2c 2e 44 65 73 6b 74 6f 70 55 49 20 2e 70 46 6f 33 6b 51 4f 7a 72 6c 39 71 56 4c 50 58 58 47 49 4d 70 2e 5f 31 4b 50 57 55 74 37 77 59 57 53 66 44 33 56 37 73 59 70 73 79 54 2c 2e 5f 37 4b 31 6e 39 45 5a 67 39 32 31 38 4b 37 35 5a 4f 7a 63 48 6c 20 2e 70 46 6f 33 6b 51 4f 7a 72 6c 39 71 56 4c 50 58 58 47 49 4d 70 3a 68 6f 76 65 72 2c 2e 5f 37 4b 31 6e 39 45 5a 67 39 32 31 38 4b 37 35 5a 4f 7a 63 48 6c 20 2e 70 46 6f 33 6b 51 4f 7a 72 6c 39 71 56 4c 50 58 58 47 49 4d 70 2e 5f 31 4b 50 57 55 74 37 77 59 57 53 66 44 33 56 37 73 59 70 73 79 54 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 63 64 65 64 66 3b 63 6f 6c 6f 72 3a 23 33 64 34 34 35 30 7d 2e Data Ascii: DesktopUI .pFo3kQOzrl9qVLPXXGIMp:hover,.DesktopUI .pFo3kQOzrl9qVLPXXGIMp._1KPWUt7wYWSfD3V7sYpsyT,._7K1n9EZg9218K75ZOzcHl .pFo3kQOzrl9qVLPXXGIMp:hover,._7K1n9EZg9218K75ZOzcHl .pFo3kQOzrl9qVLPXXGIMp._1KPWUt7wYWSfD3V7sYpsyT{background:#dcdedf;color:#3d4450}.
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 72 64 6f 33 50 50 51 66 46 35 6c 64 46 34 7b 77 69 64 74 68 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 5f 33 6d 76 5a 71 65 62 73 55 4b 68 35 4b 74 5a 64 68 4a 6d 5f 4f 4a 7b 63 6f 6c 6f 72 3a 23 35 39 62 66 34 30 7d 2e 53 37 42 44 6d 74 68 73 6c 38 2d 78 46 37 61 45 75 44 57 2d 45 7b 63 6f 6c 6f 72 3a 23 66 66 63 38 32 63 7d 2e 5f 31 53 65 4f 50 32 37 32 37 6b 71 38 46 34 79 58 4c 51 56 6b 69 4e 2c 2e 5f 31 35 64 45 73 79 4f 4c 57 63 76 61 71 45 74 56 5a 45 31 79 47 32 7b 63 6f 6c 6f 72 3a 23 64 63 64 65 64 66 7d 0d 0a 2e 5f 33 6a 58 57 51 6c 32 58 75 6e 35 6e 43 71 75 5f 58 5a 75 57 6c 78 7b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 75 72 73 6f 72 3a 70 6f Data Ascii: rdo3PPQfF5ldF4{width:20px;height:20px}._3mvZqebsUKh5KtZdhJm_OJ{color:#59bf40}.S7BDmthsl8-xF7aEuDW-E{color:#ffc82c}._1SeOP2727kq8F4yXLQVkiN,._15dEsyOLWcvaqEtVZE1yG2{color:#dcdedf}._3jXWQl2Xun5nCqu_XZuWlx{width:40px;height:16px;position:relative;cursor:po
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 71 75 5f 58 5a 75 57 6c 78 20 2e 5f 32 6d 57 38 42 36 6e 70 44 49 4b 32 33 46 74 30 6f 57 55 34 36 49 2e 5f 33 5f 67 4d 58 45 6f 31 4d 4a 43 68 5f 5f 31 6f 50 52 5a 56 72 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 62 35 32 35 64 7d 2e 52 46 52 56 59 31 7a 45 41 4d 68 5a 45 47 30 65 37 79 48 68 4b 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 35 39 2c 36 33 2c 37 32 2c 2e 35 29 7d 2e Data Ascii: qu_XZuWlx ._2mW8B6npDIK23Ft0oWU46I._3_gMXEo1MJCh__1oPRZVrl{background-color:#4b525d}.RFRVY1zEAMhZEG0e7yHhK{display:flex;flex-direction:row;justify-content:space-between;align-items:center;padding:12px;border-radius:3px;background-color:rgba(59,63,72,.5)}.
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 70 78 7d 0d 0a 2e 5f 33 58 55 41 4e 79 63 4b 45 39 68 34 72 45 58 6c 50 6f 33 54 49 57 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 3b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 35 73 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 5f 33 58 55 41 4e 79 63 4b 45 39 68 34 72 45 58 6c 50 6f 33 54 49 57 2e 71 45 6f 38 38 63 70 64 6a 55 47 54 4d 4e 67 43 5f 51 4b 38 63 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 5f 33 58 55 41 4e 79 63 4b 45 39 68 34 72 45 58 6c 50 6f 33 54 49 57 2e 5f 32 4e 54 62 62 65 33 5a 4b 34 45 Data Ascii: x rgba(0,0,0,.2);margin-top:2px;margin-bottom:2px}._3XUANycKE9h4rEXlPo3TIW{position:absolute;z-index:100;opacity:0;transition:opacity .25s;pointer-events:none}._3XUANycKE9h4rEXlPo3TIW.qEo88cpdjUGTMNgC_QK8c{opacity:1}._3XUANycKE9h4rEXlPo3TIW._2NTbbe3ZK4E
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 6e 48 55 6e 5f 78 41 4d 62 68 38 2d 38 6a 6b 65 7a 69 34 55 66 3e 73 76 67 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 50 34 6a 59 51 31 35 46 5f 6a 4b 6b 73 49 49 46 51 4e 4f 51 43 7b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 25 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 75 44 42 5a 57 47 42 79 5f 42 50 30 49 46 58 54 6f 48 59 6a 6b 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: nHUn_xAMbh8-8jkezi4Uf>svg{width:100%;height:100%}.P4jYQ15F_jKksIIFQNOQC{min-width:50%;flex-grow:1;display:flex;flex-direction:column;justify-content:center}.uDBZWGBy_BP0IFXToHYjk{font-family:"Motiva Sans",Helvetica,sans-serif;font-weight:normal;font-size:
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 31 49 33 4e 69 66 78 71 54 48 43 6b 45 2d 32 44 65 72 69 74 41 73 2e 5f 31 69 57 68 48 65 79 6e 50 6d 4c 63 58 63 41 65 62 4b 73 61 6c 4b 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 5f 31 49 33 4e 69 66 78 71 54 48 43 6b 45 2d 32 44 65 72 69 74 41 73 2e 44 65 73 6b 74 6f 70 55 49 2c 2e 44 65 73 6b 74 6f 70 55 49 20 2e 5f 31 49 33 4e 69 66 78 71 54 48 43 6b 45 2d 32 44 65 72 69 74 41 73 7b 70 61 64 64 69 6e 67 3a 32 34 70 78 20 30 70 78 20 30 70 78 20 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 37 31 64 32 35 7d 2e 5f 31 49 33 4e 69 66 78 71 54 48 43 6b 45 2d 32 44 65 72 69 74 41 73 2e 44 65 73 6b 74 6f 70 55 49 2e 5f 31 69 57 68 48 65 79 6e 50 6d 4c 63 58 63 41 65 62 4b 73 61 6c 4b 2c 2e 44 65 73 6b 74 6f 70 55 49 20 2e 5f 31 49 33 4e 69 66 78 71 54 48 Data Ascii: 1I3NifxqTHCkE-2DeritAs._1iWhHeynPmLcXcAebKsalK{padding:0}._1I3NifxqTHCkE-2DeritAs.DesktopUI,.DesktopUI ._1I3NifxqTHCkE-2DeritAs{padding:24px 0px 0px 24px;background:#171d25}._1I3NifxqTHCkE-2DeritAs.DesktopUI._1iWhHeynPmLcXcAebKsalK,.DesktopUI ._1I3NifxqTH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49836	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:47 UTC	752	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=qUG5Ub5rrq2J&l=english&_cdn=cloudflare Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:47 UTC	354	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:47 GMT Content-Type: image/png Content-Length: 291 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:11 GMT ETag: "649bb1ef-123" Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 4124 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40ee2a418d9a-MIA
2024-04-05 23:17:47 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 79 06 d2 c1 63 Data Ascii: PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49837	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:47 UTC	649	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:47 UTC	346	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:47 GMT Content-Type: image/svg+xml Content-Length: 3684 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:11 GMT ETag: "649bb1ef-e64" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 1201 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40ee4bfa2884-MIA
2024-04-05 23:17:47 UTC	1023	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 33 32 2e 31 38 31 63 32 34 2e 34 33 32 2c 30 2c 34 34 2e 32 33 37 2d 31 39 2e 38 30 36 2c 34 34 2e 32 33 37 2d 34 34 2e 32 33 35 43 38 38 2e 34 37 35 2c 32 30 2e 34 30 36 2c 36 38 2e 36 36 39 2c 30 2e 36 30 31 2c 34 34 2e 32 33 38 2c 30 2e 36 30 31 22 2f 3e 0d 0a 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 43 35 43 33 43 30 22 20 64 3d 22 4d 32 37 2e 38 37 35 2c 36 37 2e 37 32 33 6c 2d 35 2e 34 33 34 2d 32 2e 32 34 35 63 30 2e 39 36 33 2c 32 2e 30 30 35 2c 32 2e 36 32 39 2c 33 2e 36 38 34 2c 34 2e 38 34 31 2c 34 2e 36 30 36 63 34 2e 37 38 32 2c 31 2e 39 39 32 2c 31 30 2e 32 39 35 2d 30 2e 32 37 37 2c 31 32 2e 32 38 38 2d 35 2e 30 36 33 0d 0a 09 09 63 30 2e 39 36 35 2d 32 2e 33 31 34 2c 30 2e 39 37 31 2d 34 2e 38 36 39 2c 30 2e 30 31 34 2d 37 2e 31 38 39 63 Data Ascii: 32.181c24.432,0,44.237-19.806,44.237-44.235C88.475,20.406,68.669,0.601,44.238,0.601"/><path fill="#C5C3C0" d="M27.875,67.723l-5.434-2.245c0.963,2.005,2.629,3.684,4.841,4.606c4.782,1.992,10.295-0.277,12.288-5.063c0.965-2.314,0.971-4.869,0.014-7.189c
2024-04-05 23:17:47 UTC	1292	IN	Data Raw: 20 31 34 31 2e 37 37 39 2c 32 38 2e 31 37 35 20 0d 0a 09 09 31 36 38 2e 39 38 38 2c 32 38 2e 31 37 35 20 31 36 38 2e 39 38 38 2c 33 34 2e 31 36 31 20 09 22 2f 3e 0d 0a 09 3c 70 6f 6c 79 67 6f 6e 20 66 69 6c 6c 3d 22 23 43 35 43 33 43 30 22 20 70 6f 69 6e 74 73 3d 22 31 38 33 2e 37 2c 33 34 2e 31 34 33 20 31 38 33 2e 37 2c 34 31 2e 36 35 32 20 31 39 37 2e 30 35 36 2c 34 31 2e 36 35 32 20 31 39 37 2e 30 35 36 2c 34 37 2e 36 33 38 20 31 38 33 2e 37 2c 34 37 2e 36 33 38 20 31 38 33 2e 37 2c 35 35 2e 34 35 39 20 0d 0a 09 09 31 39 39 2e 31 39 36 2c 35 35 2e 34 35 39 20 31 39 39 2e 31 39 36 2c 36 31 2e 35 20 31 37 36 2e 37 32 33 2c 36 31 2e 35 20 31 37 36 2e 37 32 33 2c 32 38 2e 31 37 35 20 31 39 39 2e 31 39 36 2c 32 38 2e 31 37 35 20 31 39 39 2e 31 39 36 2c 33 Data Ascii: 141.779,28.175 168.988,28.175 168.988,34.161 "/><polygon fill="#C5C3C0" points="183.7,34.143 183.7,41.652 197.056,41.652 197.056,47.638 183.7,47.638 183.7,55.459 199.196,55.459 199.196,61.5 176.723,61.5 176.723,28.175 199.196,28.175 199.196,3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49838	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:47 UTC	645	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:47 UTC	357	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:47 GMT Content-Type: image/png Content-Length: 10863 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-2a6f" Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 2764 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40ee3bfb224b-MIA
2024-04-05 23:17:47 UTC	1012	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af 9b c3 15 8f 87 9e Data Ascii: PNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 7f 59 d0 27 fd fc 90 c3 8c 44 44 44 66 80 45 a2 f3 81 42 50 ba b5 68 ce 97 07 bb 25 a4 34 f9 da 8b 88 88 cc 00 23 e8 f3 81 f1 fd 97 35 87 d2 13 8f 87 1e 0c fd fa 48 eb 08 35 b9 df 0f 87 5e 16 5a 77 c8 39 33 c4 10 a8 d3 42 b4 b6 e4 71 6c f8 5d 2f 0c f1 fb 89 88 88 48 a5 68 d0 e7 c1 07 43 b7 34 87 72 20 e4 72 df 17 fa 56 08 53 de 95 53 43 af 0b bd 25 74 49 88 1e e6 63 70 6b e8 a6 e6 50 44 44 44 6a 44 83 5e 3f 44 6b bf 13 1a cb 00 ce 91 27 43 9f 0d d1 b2 90 a8 79 df 9c 1c ba 2a c4 80 a1 31 22 eb 14 8d b2 c0 10 11 11 91 0a d1 a0 d7 0d a3 fb 1f 09 61 00 25 1f cc 38 11 67 8c f9 ff f2 85 81 61 11 85 51 67 c7 83 94 98 a1 60 c1 f1 ca d0 10 8b 0d 11 11 11 19 18 8b 44 eb e6 0b 21 cd 79 3e b4 26 c4 98 9f 11 22 72 3e 86 39 07 72 c3 bf 18 3a 2b 74 63 e8 4f a1 21 e0 3d Data Ascii: Y'DDDfEBPh%4#5H5^Zw93Bql]/HhC4r rVSSC%tIcpkPDDDjD^?Dk'Cy*1"a%8gaQg`D!y>&"r>9r:+tcO!=
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 9c 05 4c b4 ed 62 04 ce 0b fd a0 39 2c 1e ea 62 4a 88 4c 5e 16 fa 5a 73 98 05 53 90 99 dd 50 12 5d 3e 07 ec 72 9d 15 2a b9 de 66 db bd 61 17 9f 0f 51 2b 95 02 1d cb 78 0f 10 9c 22 80 c0 e0 3c 82 09 34 38 a0 61 02 9f 2b 52 1e 79 7e 99 c4 7d 43 c8 2e 5f 13 a3 41 2f 0f 56 b5 a4 31 ec 6a d5 27 7f 25 e7 46 cf 8d 9d 0b d1 71 b8 08 71 f1 1e 23 52 c4 76 e2 af 42 5c 04 8f 93 53 b0 49 a4 e5 f7 a1 be 76 57 88 62 d2 79 a6 0f 13 59 03 44 cb 3f 1d 7a d9 ea 6c 78 88 a0 d2 a2 93 05 d8 21 91 29 0d 7a 83 06 3d 1f 8c 19 26 3d 17 ae 09 2f 0a 6d eb 5e 35 05 5d 3f 07 eb 4e 5c 25 42 ca 22 7f 13 46 39 87 54 83 4e 9a 1e 69 9d 40 30 68 5b 4a 25 81 0a 82 83 d7 87 68 29 fc 86 90 4d 04 26 c4 22 d1 f2 60 eb 49 73 9e 06 db 72 a9 37 79 2e 52 9b e6 1c 88 20 8f b5 8d cb 62 a0 2d 8d 86 9b Data Ascii: Lb9,bJL^ZsSP]>r*faQ+x"<48a+Ry~}C._A/V1j'%Fqq#RvB\SIvWbyYD?zlx!)z=&=/m^5]?N\%B"F9TNi@0h[J%h)M&"`Isr7y.R b-
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: be 8e a8 73 7d 24 3a 7e 7c b1 f5 a9 10 9f 13 26 1e c3 47 8e c4 7d d6 28 fa 44 98 e2 52 06 b4 c2 d2 9c a7 83 91 cd 89 4c b5 45 ea 88 2e 4c 95 a7 cc cf 6e 2b 08 4d bd 10 b6 e5 14 f6 05 06 a8 56 78 5e bb a6 e9 10 29 ba 3c d4 c5 9c 03 0b 3d 86 50 b1 ab 73 7a 88 1b dd f1 c5 1f df 77 aa 88 9d 2c 8b a1 06 8f 71 cd 2a 75 d8 4f 2e 2c 52 a7 18 c2 c4 35 6a e8 e2 d0 e3 70 1d 22 df 9c a2 f9 75 c4 9e 69 a2 9b 3b 21 ec de ae cd 39 af 31 c6 9e 05 80 e6 7c 42 34 e8 65 c0 30 08 49 83 8b 4b 5b 5f d7 5d 10 19 20 97 78 93 a9 cc 28 15 f4 6d 26 3b 75 cb 7f c8 2e 04 6d fd e2 6b 81 e8 5a 97 ae 03 dc c0 e8 62 d0 17 b4 c1 64 5b 98 e8 d3 ba d7 3e 83 3f ba 9a 7f 91 54 b8 b6 0c 39 00 6b 4e 83 6b 30 ca 43 e7 81 6f 32 76 17 19 76 08 48 5d e1 da f8 c3 d0 be a1 48 e4 e7 93 4a f7 50 08 d3 Data Ascii: s}$:~\|&G}(DRLE.Ln+MVx^)<=Pszw,q*uO.,R5jp"ui;!91\|B4e0IK[_] x(m&;u.mkZbd[>?T9kNk0Co2vvH]HJP
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: be 50 d7 3c e2 5c 30 c9 af 09 ed ea 60 b0 2e cc 24 e5 e1 f7 a1 a7 43 ff 15 62 02 1b 63 93 39 ff 9f 10 e6 8d 48 d6 2e 63 4b 5a 0b 3f 2f f7 75 26 d7 73 ec be c3 35 ef ec dc 10 4a 2d bc 4d 85 f7 01 e6 9c d7 99 f7 01 b9 ea 73 2a 92 9b 33 a4 2d f0 39 1d 5a 53 ec b2 e4 46 b0 b9 e6 51 7c df 06 f5 3e b9 69 2e a4 b8 90 ea 52 32 14 c0 12 18 49 81 cf 79 5f 39 e3 39 d1 f3 5b 8f 1e 45 9e 41 83 5e 06 5c 18 d9 9a 3f 37 c4 94 2f da ee 2d 71 ba 21 37 07 26 db 8d 09 11 23 22 e9 4c 2a 4d 85 1b 3e 45 59 39 29 27 fc 6d bc be b9 8b 0f 0c 3f fd d3 c7 a6 d6 08 3a d0 96 73 c8 1b 1e 46 0c 63 44 ad 02 66 9d 08 7b 6e 91 9e c8 a1 f0 19 cd ed ea b4 2f 8d 25 b7 9b 0b 94 3e 59 94 fb eb ed cd 61 12 7d 74 5d e1 de 90 da ba 95 80 4d ee 34 57 59 00 1a f4 f2 a0 cb c8 35 a1 7f 0e 11 4d 1e aa Data Ascii: P<\0`.$Cbc9H.cKZ?/u&s5J-Ms3-9ZSFQ\|>i.R2Iy_99[EA^\?7/-q!7&#"LM>EY9)'m?:sFcDf{n/%>Ya}t]M4WY5M
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: a0 9c ae 0f 73 07 53 cb 6b 47 fe 6f ae 61 d9 05 83 c8 c6 9e 16 bc 34 83 ce ef cc ef 5e 3b 44 71 7f d1 1c 26 f3 60 88 80 48 57 b8 3f 30 7c 2b 87 c7 43 3c df 43 2c 56 fa 34 e8 7c 9e 31 d6 29 ec 32 d6 fc 4e bf 09 a5 2c e0 69 f3 48 e7 b2 36 34 e8 72 02 a6 b8 2c 17 2e 38 6c 61 72 f1 c6 24 0c d1 d5 02 83 b7 6e 4d 48 ce 1f e3 f4 97 68 ce 31 44 ec 58 3c 12 e2 86 50 ba 39 07 b7 60 4f 84 36 a6 6c 4d d3 07 9f 2e 30 dc 68 fb 30 20 35 0c 78 91 32 e8 92 df 7d 68 9f ed 2e 13 ac e9 42 45 aa 4b e9 f0 b7 a5 f6 7b 27 a0 b5 2d c7 9c 45 4c 8a 39 e7 79 cc 49 ad 91 85 63 04 5d 8e c3 f4 48 0c c3 bb 43 67 f3 85 0c d8 46 fe 8f 10 69 11 44 6d 96 1e 7d 25 7d 88 9c 44 a2 34 a4 49 d4 d4 5a 8f 1b 09 83 99 86 88 80 cd 09 fa 9b 53 3f 70 88 19 21 f7 9d 02 d5 31 31 82 5e 1f 18 40 26 d3 e6 Data Ascii: sSkGoa4^;Dq&`HW?0\|+C<C,V4\|1)2N,iH64r,.8lar$nMHh1DX<P9`O6lM.0h0 5x2}h.BEK{'-EL9yIc]HCgFiDm}%}D4IZS?p!11^@&
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 86 22 d2 57 86 da a2 b6 98 68 72 88 fb 86 16 59 b4 82 d4 9c 9f 08 e3 a8 6b 87 a2 d0 43 cc 39 60 60 d9 e1 39 ae be cd 39 91 c4 db 9b 43 91 67 d1 a5 7b 0b 05 8e 43 9b 73 b8 e7 e8 31 97 9a 52 76 0e c9 45 67 e1 9d 6b ce 45 9e 85 06 bd 1c 88 d0 1d cf 9b 5d 12 44 99 ce 3f 7a dc 84 08 7b 5f 63 ae 19 d3 4c 21 28 3d d9 6b 9c cc 37 34 73 c8 87 ae a5 63 04 93 0b ed 37 2f 6d 10 b9 ed d2 fb 3c a7 8f f7 21 90 0a d6 25 f5 90 d4 11 ae c1 35 c0 22 a4 cb ee 87 0b 6f e9 0d 0d 7a 39 f0 c1 a6 50 91 6d cd 25 46 76 49 af b8 32 d4 56 f5 fe f1 a3 c7 43 20 27 99 a8 b9 85 a0 ed f0 fe ab 7d 1c 35 a6 86 5d 97 d2 e1 c6 9f 9b 9f 2a cb a1 4b f4 9c b4 ac 31 3f bf 5d a2 e8 35 b5 8d e4 3e 44 17 96 5c 18 4a 34 87 39 12 52 00 1a f4 72 58 1b 24 72 0f 31 92 e4 59 72 31 1b a3 87 73 29 50 3d cf Data Ascii: "WhrYkC9``99Cg{Cs1RvEgkE]D?z{_cL!(=k74sc7/m<!%5"oz9Pm%FvI2VC '}5]*K1?]5>D\J49RrX$r1Yr1s)P=
2024-04-05 23:17:47 UTC	1369	IN	Data Raw: 60 52 e7 07 42 5d fa dd a6 c0 04 d4 af 86 da 8a 56 ff 35 84 b1 dc 84 ff a7 a6 91 d1 25 c0 73 39 75 2f 6b 11 11 11 d9 81 39 e8 f5 c0 38 ff 2e 93 e6 72 79 7d 88 0e 32 9b 90 76 f2 48 88 1c 71 a6 c7 d1 57 9d 41 13 7d 80 d1 fe 7a 88 d6 92 9b 90 2f 4d af 6e a2 e8 9b 30 b0 e2 ee e6 50 12 78 2c f4 f2 90 06 5d 44 44 a4 60 8c a0 d7 03 e3 84 c7 e0 23 47 8f 9b 3c 1e 22 1f 1e 83 7e 55 e8 87 21 86 09 d1 7f bc ad 25 62 2a 2f 09 f1 bd da cc 39 d0 ab bb cd 9c 83 c3 89 f2 60 c8 93 e6 5c 44 44 a4 70 34 e8 f5 c0 48 df 31 fa 56 9f 17 da 66 96 29 2e 3c fe 3b 50 54 4a 8b 46 5a 35 7e 26 44 eb c6 54 30 f5 8c e7 ff 59 68 5b 71 2a 3f ef 5b cd e1 b3 b8 2c c4 78 6c 49 e3 fe 23 89 88 88 48 e1 98 e2 52 17 eb 34 93 43 22 d6 29 3c 14 3a 37 d4 d6 72 91 08 fa 03 21 ba a7 b4 41 da 0b 46 f0 Data Ascii: `RB]V5%s9u/k98.ry}2vHqWA}z/Mn0Px,]DD`#G<"~U!%b/9`\DDp4H1Vf).<;PTJFZ5~&DT0Yh[q?[,xlI#HR4C")<:7r!AF
2024-04-05 23:17:47 UTC	268	IN	Data Raw: 21 8c fa bf 84 e8 00 b3 04 c8 2f 67 2c 3f c2 a0 8b 88 88 88 1c 84 06 5d 86 e2 8d 21 8c fa 25 a1 e7 f1 85 19 41 3e f9 fd a1 2f 1e 3d 8a 88 88 88 f4 86 06 5d 86 e6 a4 10 a9 2f 97 85 30 eb 27 87 6a 04 53 4e ff f2 fb 42 5f 09 39 c4 49 44 44 44 06 41 83 2e 63 73 5e 08 a3 4e 84 bd e4 be ea 14 77 3e 18 c2 94 af 25 22 22 22 32 38 1a 74 99 92 e7 87 18 82 84 5e 75 f4 78 5a 68 0a fe 10 62 b2 e7 71 53 6e 07 16 11 11 11 19 1d 0d ba 94 06 29 30 b4 6d 7c 59 88 a2 53 8a 4d 89 b4 f3 78 4a e8 10 fe 12 a2 90 f3 89 10 3d ca 31 e4 bf 3e 7a e4 5c 44 44 44 64 72 34 e8 52 1b 98 f6 cd 3c f6 b3 43 9b 85 a8 bf 0c ad 87 03 ad 0d b9 88 88 88 48 f1 68 d0 45 44 44 44 44 8a e1 39 cf f9 ff e8 59 1b b0 7b 17 7d 1e 00 00 00 00 49 45 4e 44 ae 42 60 82 c5 78 ce 73 fe 3f d9 31 1b b6 a0 af 57 Data Ascii: !/g,?]!%A>/=]/0'jSNB_9IDDDA.cs^Nw>%"""28t^uxZhbqSn)0m\|YSMxJ=1>z\DDDdr4R<CHhEDDDD9Y{}IENDB`xs?1W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49839	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:47 UTC	627	OUT	GET /public/javascript/applications/store/manifest.js?v=sbQ8ylrvPWaV&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:48 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:48 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Wed, 02 Oct 2024 16:18:46 GMT ETag: W/"sbQ8ylrvPWaV" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: HIT CF-Cache-Status: HIT Age: 25142 Server: cloudflare CF-RAY: 86fd40ef3942a56c-MIA
2024-04-05 23:17:48 UTC	928	IN	Data Raw: 34 63 64 66 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 76 61 72 20 43 4c 53 54 41 4d 50 3d 22 38 38 30 38 31 31 38 22 3b 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 61 2c 6e 2c 73 2c 63 2c 64 3d 7b 7d 2c 66 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 76 61 72 20 61 Data Ascii: 4cdf/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/var CLSTAMP="8808118";(()=>{"use strict";var e,a,n,s,c,d={},f={};function b(e){var a
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 29 7b 69 66 28 34 26 73 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 69 66 28 31 36 26 73 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 68 65 6e 29 72 65 74 75 72 6e 20 65 7d 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 62 2e 72 28 63 29 3b 76 61 72 20 64 3d 7b 7d 3b 61 3d 61 7c 7c 5b 6e 75 6c 6c 2c 6e 28 7b 7d 29 2c 6e 28 5b 5d 29 2c 6e 28 6e 29 5d 3b 66 6f 72 28 76 61 72 20 66 3d 32 26 73 26 26 65 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 66 26 26 21 7e 61 2e 69 6e 64 65 78 4f 66 28 66 29 3b 66 3d 6e 28 66 29 29 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 66 29 2e 66 6f 72 45 Data Ascii: t"==typeof e&&e){if(4&s&&e.__esModule)return e;if(16&s&&"function"==typeof e.then)return e}var c=Object.create(null);b.r(c);var d={};a=a\|\|[null,n({}),n([]),n(n)];for(var f=2&s&&e;"object"==typeof f&&!~a.indexOf(f);f=n(f))Object.getOwnPropertyNames(f).forE
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 22 2c 31 31 36 32 3a 22 73 68 61 72 65 64 5f 74 68 61 69 2d 6a 73 6f 6e 22 2c 31 31 36 34 3a 22 73 61 6c 65 73 5f 6e 6f 72 77 65 67 69 61 6e 2d 6a 73 6f 6e 22 2c 31 32 33 36 3a 22 73 68 6f 70 70 69 6e 67 63 61 72 74 5f 70 6f 72 74 75 67 75 65 73 65 2d 6a 73 6f 6e 22 2c 31 33 31 33 3a 22 73 68 61 72 65 64 5f 62 75 6c 67 61 72 69 61 6e 2d 6a 73 6f 6e 22 2c 31 35 30 33 3a 22 73 68 6f 70 70 69 6e 67 63 61 72 74 5f 67 65 72 6d 61 6e 2d 6a 73 6f 6e 22 2c 31 37 31 32 3a 22 6c 69 62 72 61 72 69 65 73 7e 30 66 30 31 32 39 64 33 36 22 2c 31 37 32 32 3a 22 73 61 6c 65 73 5f 63 7a 65 63 68 2d 6a 73 6f 6e 22 2c 31 38 32 35 3a 22 64 65 63 6b 76 65 72 69 66 69 65 64 22 2c 31 39 31 38 3a 22 73 75 6d 6d 65 72 73 61 6c 65 32 30 32 31 73 74 6f 72 79 22 2c 32 30 32 39 3a 22 Data Ascii: ",1162:"shared_thai-json",1164:"sales_norwegian-json",1236:"shoppingcart_portuguese-json",1313:"shared_bulgarian-json",1503:"shoppingcart_german-json",1712:"libraries~0f0129d36",1722:"sales_czech-json",1825:"deckverified",1918:"summersale2021story",2029:"
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 64 62 22 2c 33 34 31 33 3a 22 70 6f 69 6e 74 73 62 75 6e 64 6c 65 73 22 2c 33 34 32 34 3a 22 6c 6f 79 61 6c 74 79 5f 70 6f 6c 69 73 68 2d 6a 73 6f 6e 22 2c 33 34 35 33 3a 22 6d 61 72 6b 65 74 69 6e 67 5f 63 7a 65 63 68 2d 6a 73 6f 6e 22 2c 33 35 35 37 3a 22 73 68 61 72 65 64 5f 66 69 6e 6e 69 73 68 2d 6a 73 6f 6e 22 2c 33 36 33 34 3a 22 73 61 6c 65 73 5f 62 75 6c 67 61 72 69 61 6e 2d 6a 73 6f 6e 22 2c 33 36 38 35 3a 22 73 61 6c 65 73 5f 67 65 72 6d 61 6e 2d 6a 73 6f 6e 22 2c 33 37 31 31 3a 22 6c 6f 79 61 6c 74 79 5f 73 70 61 6e 69 73 68 2d 6a 73 6f 6e 22 2c 33 37 35 39 3a 22 6c 6f 79 61 6c 74 79 5f 65 6e 67 6c 69 73 68 2d 6a 73 6f 6e 22 2c 33 37 36 36 3a 22 73 68 6f 70 70 69 6e 67 63 61 72 74 5f 65 6e 67 6c 69 73 68 2d 6a 73 6f 6e 22 2c 33 37 36 38 3a 22 Data Ascii: db",3413:"pointsbundles",3424:"loyalty_polish-json",3453:"marketing_czech-json",3557:"shared_finnish-json",3634:"sales_bulgarian-json",3685:"sales_german-json",3711:"loyalty_spanish-json",3759:"loyalty_english-json",3766:"shoppingcart_english-json",3768:"
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 68 6f 70 70 69 6e 67 63 61 72 74 5f 69 6e 64 6f 6e 65 73 69 61 6e 2d 6a 73 6f 6e 22 2c 35 38 32 31 3a 22 61 63 63 6f 75 6e 74 70 72 65 66 65 72 65 6e 63 65 73 22 2c 35 38 33 31 3a 22 6c 6f 79 61 6c 74 79 5f 66 72 65 6e 63 68 2d 6a 73 6f 6e 22 2c 35 38 34 39 3a 22 73 68 61 72 65 64 5f 70 6f 72 74 75 67 75 65 73 65 2d 6a 73 6f 6e 22 2c 35 38 35 35 3a 22 73 61 6c 65 73 5f 73 77 65 64 69 73 68 2d 6a 73 6f 6e 22 2c 35 39 32 35 3a 22 73 68 61 72 65 64 5f 64 75 74 63 68 2d 6a 73 6f 6e 22 2c 35 39 33 33 3a 22 73 68 61 72 65 64 5f 69 74 61 6c 69 61 6e 2d 6a 73 6f 6e 22 2c 35 39 34 38 3a 22 73 68 61 72 65 64 5f 68 75 6e 67 61 72 69 61 6e 2d 6a 73 6f 6e 22 2c 36 30 30 37 3a 22 73 68 61 72 65 64 5f 67 65 72 6d 61 6e 2d 6a 73 6f 6e 22 2c 36 30 31 39 3a 22 6d 61 72 6b Data Ascii: hoppingcart_indonesian-json",5821:"accountpreferences",5831:"loyalty_french-json",5849:"shared_portuguese-json",5855:"sales_swedish-json",5925:"shared_dutch-json",5933:"shared_italian-json",5948:"shared_hungarian-json",6007:"shared_german-json",6019:"mark
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 61 6c 74 79 5f 6b 6f 72 65 61 6e 61 2d 6a 73 6f 6e 22 2c 37 38 37 31 3a 22 6d 61 72 6b 65 74 69 6e 67 5f 67 72 65 65 6b 2d 6a 73 6f 6e 22 2c 37 38 39 30 3a 22 6d 61 69 6e 5f 74 68 61 69 2d 6a 73 6f 6e 22 2c 37 39 33 34 3a 22 73 61 6c 65 73 5f 75 6b 72 61 69 6e 69 61 6e 2d 6a 73 6f 6e 22 2c 37 39 34 32 3a 22 6d 61 72 6b 65 74 69 6e 67 5f 66 69 6e 6e 69 73 68 2d 6a 73 6f 6e 22 2c 37 39 35 31 3a 22 6d 61 69 6e 5f 6e 6f 72 77 65 67 69 61 6e 2d 6a 73 6f 6e 22 2c 37 39 35 32 3a 22 73 61 6c 65 73 5f 65 6e 67 6c 69 73 68 2d 6a 73 6f 6e 22 2c 37 39 37 35 3a 22 73 68 61 72 65 64 5f 65 6e 67 6c 69 73 68 2d 6a 73 6f 6e 22 2c 38 30 30 31 3a 22 6d 61 72 6b 65 74 69 6e 67 5f 69 74 61 6c 69 61 6e 2d 6a 73 6f 6e 22 2c 38 30 33 38 3a 22 63 68 75 6e 6b 7e 37 39 32 31 33 61 Data Ascii: alty_koreana-json",7871:"marketing_greek-json",7890:"main_thai-json",7934:"sales_ukrainian-json",7942:"marketing_finnish-json",7951:"main_norwegian-json",7952:"sales_english-json",7975:"shared_english-json",8001:"marketing_italian-json",8038:"chunk~79213a
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 22 2b 7b 34 30 3a 22 39 63 65 37 62 65 37 36 62 63 63 31 35 30 39 38 30 33 31 34 22 2c 36 31 3a 22 66 63 39 37 34 38 32 35 31 37 38 39 62 37 37 31 35 66 32 36 22 2c 37 37 3a 22 61 30 62 65 32 33 32 65 61 32 64 39 30 61 38 37 65 63 66 64 22 2c 31 30 31 3a 22 64 30 64 38 32 30 62 35 36 38 63 38 31 38 64 34 37 62 66 62 22 2c 31 30 32 3a 22 65 65 66 31 30 32 36 30 39 65 63 30 65 63 38 33 36 64 34 33 22 2c 32 33 30 3a 22 38 35 66 64 64 37 36 36 31 64 62 66 63 33 62 38 37 61 30 39 22 2c 32 35 39 3a 22 39 30 31 38 61 64 31 36 62 36 63 63 33 65 37 37 66 65 64 34 22 2c 32 39 31 3a 22 65 36 61 33 38 65 63 65 63 62 38 31 61 31 34 33 38 64 64 37 22 2c 32 39 38 3a 22 30 64 36 37 34 31 39 36 33 39 36 61 63 66 33 39 32 65 37 34 22 2c 33 31 39 3a 22 37 66 64 64 61 34 30 Data Ascii: "+{40:"9ce7be76bcc150980314",61:"fc9748251789b7715f26",77:"a0be232ea2d90a87ecfd",101:"d0d820b568c818d47bfb",102:"eef102609ec0ec836d43",230:"85fdd7661dbfc3b87a09",259:"9018ad16b6cc3e77fed4",291:"e6a38ececb81a1438dd7",298:"0d674196396acf392e74",319:"7fdda40
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 33 30 31 3a 22 63 61 35 38 36 32 38 61 66 66 62 34 36 65 66 35 62 63 62 33 22 2c 32 33 30 36 3a 22 38 65 64 36 63 63 31 62 66 37 65 33 37 31 39 32 35 33 39 33 22 2c 32 33 31 38 3a 22 63 39 35 31 37 62 63 63 31 63 31 39 34 63 32 36 35 34 66 33 22 2c 32 34 33 31 3a 22 35 38 31 38 34 37 32 35 36 62 31 31 61 30 62 61 36 37 30 33 22 2c 32 34 34 33 3a 22 31 35 31 63 66 37 38 34 31 62 64 62 33 36 38 65 35 35 39 30 22 2c 32 34 34 38 3a 22 32 31 31 62 39 62 33 31 38 39 31 63 61 32 65 35 66 35 62 35 22 2c 32 35 33 37 3a 22 33 30 39 36 39 61 64 39 62 33 30 62 38 62 32 30 65 66 62 39 22 2c 32 35 38 31 3a 22 38 31 65 61 32 34 30 30 39 62 31 37 32 31 62 38 32 63 64 31 22 2c 32 36 30 31 3a 22 31 39 63 31 35 39 37 64 32 65 64 66 36 30 62 36 63 32 39 35 22 2c 32 36 38 31 Data Ascii: 301:"ca58628affb46ef5bcb3",2306:"8ed6cc1bf7e371925393",2318:"c9517bcc1c194c2654f3",2431:"581847256b11a0ba6703",2443:"151cf7841bdb368e5590",2448:"211b9b31891ca2e5f5b5",2537:"30969ad9b30b8b20efb9",2581:"81ea24009b1721b82cd1",2601:"19c1597d2edf60b6c295",2681
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 22 2c 33 37 35 39 3a 22 38 61 64 31 66 61 35 65 65 34 35 31 34 31 65 64 61 64 36 31 22 2c 33 37 36 36 3a 22 37 39 37 39 64 66 37 37 37 37 63 33 61 64 30 32 32 37 32 33 22 2c 33 37 36 38 3a 22 31 65 38 37 63 32 36 31 61 63 34 37 32 38 61 30 38 37 63 35 22 2c 33 38 30 35 3a 22 30 34 36 34 66 36 35 33 65 30 61 66 64 62 30 33 34 35 62 39 22 2c 33 38 30 37 3a 22 36 37 37 65 36 39 32 63 61 34 64 34 35 38 32 34 62 32 34 65 22 2c 33 39 33 34 3a 22 39 32 32 34 36 66 39 39 34 32 64 37 64 62 36 36 35 30 39 64 22 2c 33 39 33 35 3a 22 31 32 30 37 33 63 31 36 31 62 32 32 62 36 32 36 61 33 31 30 22 2c 34 30 33 33 3a 22 33 64 64 35 64 63 35 39 65 37 66 33 61 39 30 35 35 31 64 66 22 2c 34 31 30 33 3a 22 66 39 30 64 62 32 30 39 30 38 65 65 61 61 38 37 31 63 66 32 22 2c 34 Data Ascii: ",3759:"8ad1fa5ee45141edad61",3766:"7979df7777c3ad022723",3768:"1e87c261ac4728a087c5",3805:"0464f653e0afdb0345b9",3807:"677e692ca4d45824b24e",3934:"92246f9942d7db66509d",3935:"12073c161b22b626a310",4033:"3dd5dc59e7f3a90551df",4103:"f90db20908eeaa871cf2",4
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 39 33 37 22 2c 35 38 34 39 3a 22 64 34 37 39 61 66 61 35 30 36 38 34 61 35 62 34 30 38 65 62 22 2c 35 38 35 35 3a 22 61 37 37 37 64 30 33 65 64 33 31 62 31 34 35 36 39 34 30 36 22 2c 35 39 32 35 3a 22 61 64 66 64 66 64 64 61 63 65 37 32 30 39 38 65 37 65 65 33 22 2c 35 39 33 33 3a 22 61 34 66 34 30 61 30 63 35 38 30 37 30 30 39 63 35 66 35 66 22 2c 35 39 34 34 3a 22 66 38 33 63 32 36 31 33 62 64 63 39 66 36 63 39 39 37 61 37 22 2c 35 39 34 38 3a 22 34 36 33 32 36 38 36 61 66 34 34 62 39 39 38 37 65 30 64 62 22 2c 36 30 30 37 3a 22 39 30 65 30 37 66 65 63 33 39 65 36 61 35 64 39 36 35 62 39 22 2c 36 30 31 39 3a 22 30 33 30 30 64 61 66 63 30 30 32 37 35 32 33 37 34 34 38 34 22 2c 36 30 33 35 3a 22 34 36 37 64 64 66 36 62 33 36 63 37 36 38 61 31 64 30 36 37 Data Ascii: 937",5849:"d479afa50684a5b408eb",5855:"a777d03ed31b14569406",5925:"adfdfddace72098e7ee3",5933:"a4f40a0c5807009c5f5f",5944:"f83c2613bdc9f6c997a7",5948:"4632686af44b9987e0db",6007:"90e07fec39e6a5d965b9",6019:"0300dafc002752374484",6035:"467ddf6b36c768a1d067

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49840	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:47 UTC	638	OUT	GET /public/javascript/applications/store/libraries~b28b7af69.js?v=ysrKn5WbfO7I&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:48 UTC	443	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:48 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Sun, 29 Sep 2024 22:32:13 GMT ETag: W/"ysrKn5WbfO7I" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 261934 Server: cloudflare CF-RAY: 86fd40f1996e748e-MIA
2024-04-05 23:17:48 UTC	926	IN	Data Raw: 37 64 65 34 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 32 35 30 5d 2c 7b 38 30 37 35 31 3a 28 65 2c 74 2c 72 29 3d 3e 7b 65 2e Data Ascii: 7de4/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[3250],{80751:(e,t,r)=>{e.
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 70 6f 6e 73 65 48 65 61 64 65 72 73 22 69 6e 20 5f 3f 6c 28 5f 2e 67 65 74 41 6c 6c 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 73 28 29 29 3a 6e 75 6c 6c 2c 61 3d 7b 64 61 74 61 3a 68 26 26 22 74 65 78 74 22 21 3d 3d 68 26 26 22 6a 73 6f 6e 22 21 3d 3d 68 3f 5f 2e 72 65 73 70 6f 6e 73 65 3a 5f 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 73 74 61 74 75 73 3a 5f 2e 73 74 61 74 75 73 2c 73 74 61 74 75 73 54 65 78 74 3a 5f 2e 73 74 61 74 75 73 54 65 78 74 2c 68 65 61 64 65 72 73 3a 69 2c 63 6f 6e 66 69 67 3a 65 2c 72 65 71 75 65 73 74 3a 5f 7d 3b 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 65 29 2c 62 28 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 65 29 2c 62 28 29 7d 29 2c 61 29 2c 5f 3d 6e 75 6c 6c 7d 7d 69 66 28 5f 2e 6f 70 65 6e 28 65 2e Data Ascii: ponseHeaders"in _?l(_.getAllResponseHeaders()):null,a={data:h&&"text"!==h&&"json"!==h?_.response:_.responseText,status:_.status,statusText:_.statusText,headers:i,config:e,request:_};n((function(e){t(e),b()}),(function(e){r(e),b()}),a),_=null}}if(_.open(e.
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 67 72 65 73 73 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6f 6e 55 70 6c 6f 61 64 50 72 6f 67 72 65 73 73 26 26 5f 2e 75 70 6c 6f 61 64 26 26 5f 2e 75 70 6c 6f 61 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 6f 67 72 65 73 73 22 2c 65 2e 6f 6e 55 70 6c 6f 61 64 50 72 6f 67 72 65 73 73 29 2c 28 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 7c 7c 65 2e 73 69 67 6e 61 6c 29 26 26 28 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 26 26 28 72 28 21 65 7c 7c 65 26 26 65 2e 74 79 70 65 3f 6e 65 77 20 67 3a 65 29 2c 5f 2e 61 62 6f 72 74 28 29 2c 5f 3d 6e 75 6c 6c 29 7d 2c 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 26 26 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 2e 73 75 62 73 63 72 69 62 65 28 70 29 2c 65 2e 73 69 67 6e 61 6c 26 26 Data Ascii: gress),"function"==typeof e.onUploadProgress&&_.upload&&_.upload.addEventListener("progress",e.onUploadProgress),(e.cancelToken\|\|e.signal)&&(p=function(e){_&&(r(!e\|\|e&&e.type?new g:e),_.abort(),_=null)},e.cancelToken&&e.cancelToken.subscribe(p),e.signal&&
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 65 29 7b 72 2e 73 75 62 73 63 72 69 62 65 28 65 29 2c 74 3d 65 7d 29 29 2e 74 68 65 6e 28 65 29 3b 72 65 74 75 72 6e 20 69 2e 63 61 6e 63 65 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 75 6e 73 75 62 73 63 72 69 62 65 28 74 29 7d 2c 69 7d 2c 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 2e 72 65 61 73 6f 6e 7c 7c 28 72 2e 72 65 61 73 6f 6e 3d 6e 65 77 20 69 28 65 29 2c 74 28 72 2e 72 65 61 73 6f 6e 29 29 7d 29 29 7d 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 72 6f 77 49 66 52 65 71 75 65 73 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 72 65 61 73 6f 6e 29 74 68 72 6f 77 20 74 68 69 73 2e 72 65 61 73 6f 6e 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 62 73 63 72 69 62 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 72 Data Ascii: e){r.subscribe(e),t=e})).then(e);return i.cancel=function(){r.unsubscribe(t)},i},e((function(e){r.reason\|\|(r.reason=new i(e),t(r.reason))}))}n.prototype.throwIfRequested=function(){if(this.reason)throw this.reason},n.prototype.subscribe=function(e){this.r
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 6e 29 2c 63 6c 61 72 69 66 79 54 69 6d 65 6f 75 74 45 72 72 6f 72 3a 63 2e 74 72 61 6e 73 69 74 69 6f 6e 61 6c 28 63 2e 62 6f 6f 6c 65 61 6e 29 7d 2c 21 31 29 3b 76 61 72 20 69 3d 5b 5d 2c 6e 3d 21 30 3b 74 68 69 73 2e 69 6e 74 65 72 63 65 70 74 6f 72 73 2e 72 65 71 75 65 73 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 72 75 6e 57 68 65 6e 26 26 21 31 3d 3d 3d 65 2e 72 75 6e 57 68 65 6e 28 74 29 7c 7c 28 6e 3d 6e 26 26 65 2e 73 79 6e 63 68 72 6f 6e 6f 75 73 2c 69 2e 75 6e 73 68 69 66 74 28 65 2e 66 75 6c 66 69 6c 6c 65 64 2c 65 2e 72 65 6a 65 63 74 65 64 29 29 7d 29 29 3b 76 61 72 20 61 2c 6c 3d 5b 5d 3b 69 66 28 74 68 69 73 2e 69 6e 74 65 72 63 65 70 74 6f 72 73 2e 72 Data Ascii: n),clarifyTimeoutError:c.transitional(c.boolean)},!1);var i=[],n=!0;this.interceptors.request.forEach((function(e){"function"==typeof e.runWhen&&!1===e.runWhen(t)\|\|(n=n&&e.synchronous,i.unshift(e.fulfilled,e.rejected))}));var a,l=[];if(this.interceptors.r
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 2e 69 6e 68 65 72 69 74 73 28 6e 2c 45 72 72 6f 72 2c 7b 74 6f 4a 53 4f 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6d 65 73 73 61 67 65 3a 74 68 69 73 2e 6d 65 73 73 61 67 65 2c 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 64 65 73 63 72 69 70 74 69 6f 6e 3a 74 68 69 73 2e 64 65 73 63 72 69 70 74 69 6f 6e 2c 6e 75 6d 62 65 72 3a 74 68 69 73 2e 6e 75 6d 62 65 72 2c 66 69 6c 65 4e 61 6d 65 3a 74 68 69 73 2e 66 69 6c 65 4e 61 6d 65 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 74 68 69 73 2e 6c 69 6e 65 4e 75 6d 62 65 72 2c 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 3a 74 68 69 73 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 2c 73 74 61 63 6b 3a 74 68 69 73 2e 73 74 61 63 6b 2c 63 6f 6e 66 69 67 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2c 63 6f 64 65 3a 74 68 69 73 2e Data Ascii: .inherits(n,Error,{toJSON:function(){return{message:this.message,name:this.name,description:this.description,number:this.number,fileName:this.fileName,lineNumber:this.lineNumber,columnNumber:this.columnNumber,stack:this.stack,config:this.config,code:this.
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 74 7d 7d 2c 36 34 36 32 36 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 72 28 38 36 34 33 35 29 2c 6e 3d 72 28 34 38 38 32 30 29 2c 61 3d 72 28 36 32 36 34 31 29 2c 73 3d 72 28 38 32 36 36 29 2c 6f 3d 72 28 36 31 32 33 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 69 66 28 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 26 26 65 2e 63 61 6e 63 65 6c 54 6f 6b 65 6e 2e 74 68 72 6f 77 49 66 52 65 71 75 65 73 74 65 64 28 29 2c 65 2e 73 69 67 6e 61 6c 26 26 65 2e 73 69 67 6e 61 6c 2e 61 62 6f 72 74 65 64 29 74 68 72 6f 77 20 6e 65 77 20 6f 7d 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6c 28 65 29 2c 65 2e 68 65 61 64 65 72 73 3d 65 2e 68 65 61 64 65 72 73 7c 7c 7b 7d 2c 65 2e 64 Data Ascii: t}},64626:(e,t,r)=>{"use strict";var i=r(86435),n=r(48820),a=r(62641),s=r(8266),o=r(6123);function l(e){if(e.cancelToken&&e.cancelToken.throwIfRequested(),e.signal&&e.signal.aborted)throw new o}e.exports=function(e){return l(e),e.headers=e.headers\|\|{},e.d
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 72 61 6d 73 53 65 72 69 61 6c 69 7a 65 72 3a 6f 2c 74 69 6d 65 6f 75 74 3a 6f 2c 74 69 6d 65 6f 75 74 4d 65 73 73 61 67 65 3a 6f 2c 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 6f 2c 61 64 61 70 74 65 72 3a 6f 2c 72 65 73 70 6f 6e 73 65 54 79 70 65 3a 6f 2c 78 73 72 66 43 6f 6f 6b 69 65 4e 61 6d 65 3a 6f 2c 78 73 72 66 48 65 61 64 65 72 4e 61 6d 65 3a 6f 2c 6f 6e 55 70 6c 6f 61 64 50 72 6f 67 72 65 73 73 3a 6f 2c 6f 6e 44 6f 77 6e 6c 6f 61 64 50 72 6f 67 72 65 73 73 3a 6f 2c 64 65 63 6f 6d 70 72 65 73 73 3a 6f 2c 6d 61 78 43 6f 6e 74 65 6e 74 4c 65 6e 67 74 68 3a 6f 2c 6d 61 78 42 6f 64 79 4c 65 6e 67 74 68 3a 6f 2c 62 65 66 6f 72 65 52 65 64 69 72 65 63 74 3a 6f 2c 74 72 61 6e 73 70 6f 72 74 3a 6f 2c 68 74 74 70 41 67 65 6e 74 3a 6f 2c 68 74 74 70 73 Data Ascii: ramsSerializer:o,timeout:o,timeoutMessage:o,withCredentials:o,adapter:o,responseType:o,xsrfCookieName:o,xsrfHeaderName:o,onUploadProgress:o,onDownloadProgress:o,decompress:o,maxContentLength:o,maxBodyLength:o,beforeRedirect:o,transport:o,httpAgent:o,https
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 61 28 65 29 7c 7c 69 2e 69 73 41 72 72 61 79 42 75 66 66 65 72 28 65 29 7c 7c 69 2e 69 73 42 75 66 66 65 72 28 65 29 7c 7c 69 2e 69 73 53 74 72 65 61 6d 28 65 29 7c 7c 69 2e 69 73 46 69 6c 65 28 65 29 7c 7c 69 2e 69 73 42 6c 6f 62 28 65 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 69 2e 69 73 41 72 72 61 79 42 75 66 66 65 72 56 69 65 77 28 65 29 29 72 65 74 75 72 6e 20 65 2e 62 75 66 66 65 72 3b 69 66 28 69 2e 69 73 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 65 29 29 72 65 74 75 72 6e 20 75 28 74 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 29 2c 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 76 61 72 20 72 2c 61 3d 69 2e 69 73 4f 62 6a 65 63 74 28 65 29 2c Data Ascii: a(e)\|\|i.isArrayBuffer(e)\|\|i.isBuffer(e)\|\|i.isStream(e)\|\|i.isFile(e)\|\|i.isBlob(e))return e;if(i.isArrayBufferView(e))return e.buffer;if(i.isURLSearchParams(e))return u(t,"application/x-www-form-urlencoded;charset=utf-8"),e.toString();var r,a=i.isObject(e),
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 74 73 3d 7b 73 69 6c 65 6e 74 4a 53 4f 4e 50 61 72 73 69 6e 67 3a 21 30 2c 66 6f 72 63 65 64 4a 53 4f 4e 50 61 72 73 69 6e 67 3a 21 30 2c 63 6c 61 72 69 66 79 54 69 6d 65 6f 75 74 45 72 72 6f 72 3a 21 31 7d 7d 2c 39 39 35 30 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 76 65 72 73 69 6f 6e 3a 22 30 2e 32 37 2e 32 22 7d 7d 2c 32 33 30 39 3a 65 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 72 3d 6e 65 77 20 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 2c 69 3d 30 3b 69 3c 72 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 5b 69 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 72 65 74 75 72 Data Ascii: ts={silentJSONParsing:!0,forcedJSONParsing:!0,clarifyTimeoutError:!1}},99504:e=>{e.exports={version:"0.27.2"}},2309:e=>{"use strict";e.exports=function(e,t){return function(){for(var r=new Array(arguments.length),i=0;i<r.length;i++)r[i]=arguments[i];retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49842	104.18.42.105	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:47 UTC	409	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:48 UTC	355	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:48 GMT Content-Type: image/png Content-Length: 1846 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-736" Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 1006 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40f01e56da8b-MIA
2024-04-05 23:17:48 UTC	1014	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-04-05 23:17:48 UTC	832	IN	Data Raw: 86 89 60 36 db 2d ac ed 55 12 3c 83 1b eb c1 2d 81 4e ee 50 30 6b aa 65 fb 83 b6 8e 3a 5c 76 8a fb 9a e9 9a 02 86 03 d9 92 07 27 b1 a7 80 a7 d9 6e 07 ab 2c ee 39 06 4e 67 7b 3f 18 8d 33 de 34 f0 84 d2 b6 0a ec d1 9c ef 1e 30 c2 f6 5e f0 9e c6 33 67 c1 71 6c 57 f1 7b 48 ac 07 77 b0 7d 05 3c 6c 31 46 2e 78 d2 c6 93 2b e1 bd 5f bd 12 9c e2 4e 1e 38 01 5c 0c ee 02 3f 89 fe 74 7e 89 61 e0 00 f8 cc 61 bc 4a b0 48 69 2b 07 cf 68 ce 77 86 78 3e 5b f3 19 12 63 0d db cb c0 e3 4a ff 5a 31 e6 51 9b 31 46 5a cc 5b 57 c3 bf 90 e2 d0 1f e3 af 6e de 5b ac f4 2f 62 b1 0d f6 b6 6e 87 f1 96 5b b4 ad 70 31 df 11 09 ac e2 4b c2 5e aa f4 85 84 90 bf c0 46 8d f1 96 80 73 05 bf 78 29 b8 b9 99 9a 28 51 fa e4 07 68 70 18 27 43 dc 1f 15 2b 25 c2 2f ee c5 8a b4 42 13 d8 c7 76 a9 f2 Data Ascii: `6-U<-NP0ke:\v'n,9Ng{?340^3gqlW{Hw}<l1F.x+_N8\?t~aaJHi+hwx>[cJZ1Q1FZ[Wn[/bn[p1K^Fsx)(Qhp'C+%/Bv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49843	104.18.42.105	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:47 UTC	413	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:48 UTC	355	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:48 GMT Content-Type: image/png Content-Length: 3777 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-ec1" Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 6512 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40f01a9b8dcd-MIA
2024-04-05 23:17:48 UTC	1014	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 81 06 40 a0 01 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@ @
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 78 3c b1 c5 f6 81 74 d1 e7 70 64 3a 3d ed f3 e1 70 f8 a5 ea ea 6a eb 90 1d 96 1a b2 fe 0d 37 ab 8b ab aa aa 3a 58 56 56 d6 eb f7 fb 3f 94 cd 85 49 bb c6 b1 31 d5 d1 d1 4e d7 c1 09 e1 50 28 b4 bf a6 a6 a6 ce 9a 5d 65 d8 4d ec 8c fa a4 98 8c d6 e3 b5 b5 b5 47 3b 3a 3a b6 48 78 8f d0 43 30 81 f4 e2 c7 5d 5d 5d 9b 6d 61 8e 1d 2a 2a 83 ce 70 1b 37 e5 9e 54 59 59 39 5f 8f d0 a5 a5 a5 45 b9 b9 b9 3b 65 1a fe 98 db ed 2e a1 b5 30 5b a2 d1 68 40 0e 01 4f 05 83 c1 ba 86 86 86 54 77 c8 18 92 de 0d 4b af 26 3d e1 68 a6 4c 0c 74 3c d4 7a e1 35 bf b2 ac 06 91 97 97 37 af b8 b8 78 2d ed 86 74 69 6e 6e 6e 69 6f 6f 0f df e5 4f 74 60 42 d2 b7 23 f1 3e 35 2a d0 c6 de ca 51 de b0 88 bc 59 b7 d5 c4 ba c7 b1 d3 db 3d 3d 3d 23 f5 f5 f5 01 da 0e 0e d1 21 1e 96 de 1c 33 f5 05 3a Data Ascii: x<tpd:=pj7:XVV?I1NP(]eMG;::HxC0]]]ma*p7TYY9_E;e.0[h@OTwK&=hLt<z57x-tinnniooOt`B#>5QY===#!3:
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 46 05 da d8 d3 c6 f2 86 45 e4 cd ba ad 26 d6 3d 8e dd 26 47 8e 9f 47 ea eb eb 03 b4 1d 1c a2 43 3c 2c bd 69 ec 97 f6 1d 1f a1 67 c8 13 0f b5 cf e4 9d 10 32 92 3e e5 1d 89 87 79 46 41 66 84 9e c1 79 09 35 71 36 71 78 0e be 76 cc 4d 63 ca b0 13 5e 99 14 e8 e9 f6 9c 00 2c 58 e0 00 20 d0 00 98 72 db f0 bd 67 80 11 1a 00 81 06 08 34 00 02 0d 80 40 03 20 d0 00 08 34 40 a0 01 10 68 00 04 1a 00 81 06 08 34 00 02 0d 80 40 03 f8 ff 73 7c c5 92 f2 f2 72 fe 0b 98 b3 2a 2a 2a 08 f4 a4 bb 2d e3 6b a3 ef 7f 53 28 b5 4e c5 57 00 05 d2 44 2f 06 78 5e aa 4b aa 7b 26 3d 6c c7 22 81 a9 65 49 ed 93 da 29 b5 8d 3e 83 03 9a a4 f4 1d 5c de 53 86 dd f2 66 ae 1d 43 3f 2f 75 59 ea 2d c2 0c 07 3d 22 f5 a6 d4 15 a9 bd 04 fa c7 d3 eb 6f bf 23 a5 6f 47 50 40 3f c1 10 f9 52 87 a5 0e 9a Data Ascii: FE&=&GGC<,ig2>yFAfy5q6qxvMc^,X rg4@ 4@h4@s\|r***-kS(NWD/x^K{&=l"eI)>\SfC?/uY-="o#oGP@?R
2024-04-05 23:17:48 UTC	25	IN	Data Raw: f8 8f 00 03 00 51 0b de 8f bf 45 3e 59 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: QE>YIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49841	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:48 UTC	1597	OUT	POST /webvisor/95654225?wv-part=2&wv-type=7&wmode=0&wv-hit=853926178&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&rn=1044954885&browser-info=we%3A1%3Aet%3A1712359067%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011746%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359067&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 35 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:48 UTC	35	OUT	Data Raw: 0a 0e 08 a2 16 10 01 18 08 20 00 aa 01 02 08 01 0a 09 08 a9 16 10 01 18 05 20 00 0a 06 10 04 e0 01 a8 02 Data Ascii:
2024-04-05 23:17:48 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:48 GMT Expires: Fri, 05-Apr-2024 23:17:48 GMT Last-Modified: Fri, 05-Apr-2024 23:17:48 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49846	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:48 UTC	623	OUT	GET /public/javascript/applications/store/main.js?v=iWo9qaWJIuZH&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:48 UTC	443	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:48 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Mon, 30 Sep 2024 16:05:15 GMT ETag: W/"iWo9qaWJIuZH" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 198752 Server: cloudflare CF-RAY: 86fd40f21bb3a539-MIA
2024-04-05 23:17:48 UTC	926	IN	Data Raw: 37 64 65 34 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 35 31 31 39 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 Data Ascii: 7de4/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[179],{51194:e=>{e.exports
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 57 74 49 54 68 78 33 76 37 4a 4f 56 2d 22 2c 48 6f 76 65 72 50 6f 73 69 74 69 6f 6e 4f 75 74 65 72 3a 22 45 55 4e 34 47 50 6d 43 43 61 6a 31 51 58 32 59 79 39 43 56 62 22 7d 7d 2c 32 37 32 34 31 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 22 64 75 72 61 74 69 6f 6e 2d 61 70 70 2d 6c 61 75 6e 63 68 22 3a 22 38 30 30 6d 73 22 2c 43 6f 6e 74 65 78 74 4d 65 6e 75 4d 6f 75 73 65 4f 76 65 72 6c 61 79 3a 22 70 75 39 63 4f 70 55 4d 4e 30 51 34 6d 6d 49 58 32 57 5a 50 6c 22 2c 43 6f 6e 74 65 78 74 4d 65 6e 75 46 6f 63 75 73 43 6f 6e 74 61 69 6e 65 72 3a 22 5f 32 71 79 42 5a 56 38 59 76 78 73 74 58 75 53 4b 69 59 44 46 31 39 22 2c 63 6f 6e 74 65 78 74 4d 65 6e 75 3a 22 4c 51 6b 72 62 62 61 79 5a 50 59 31 31 71 48 6d 30 31 74 37 46 22 2c 43 6f 6e 74 65 78 74 4d Data Ascii: WtIThx3v7JOV-",HoverPositionOuter:"EUN4GPmCCaj1QX2Yy9CVb"}},27241:e=>{e.exports={"duration-app-launch":"800ms",ContextMenuMouseOverlay:"pu9cOpUMN0Q4mmIX2WZPl",ContextMenuFocusContainer:"_2qyBZV8YvxstXuSKiYDF19",contextMenu:"LQkrbbayZPY11qHm01t7F",ContextM
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 55 4d 4b 62 2d 4e 4e 59 30 61 5f 67 6a 58 22 2c 44 65 73 74 72 75 63 74 69 76 65 3a 22 5f 33 61 49 46 76 47 77 65 4f 79 32 38 76 59 45 6f 4a 39 72 39 44 4b 22 2c 50 6f 73 69 74 69 76 65 3a 22 5f 32 67 4a 57 6a 2d 46 66 62 4b 72 53 73 41 75 44 51 57 4d 68 63 62 22 2c 45 6d 70 68 61 73 69 73 3a 22 5f 31 76 69 4f 47 61 41 6a 75 62 67 52 62 57 51 67 55 34 39 79 72 42 22 2c 61 63 74 69 76 65 3a 22 5f 32 50 6b 2d 78 63 72 50 42 30 7a 72 50 51 76 5f 6d 37 47 6c 67 31 22 2c 53 65 6c 65 63 74 65 64 3a 22 5f 31 50 6e 45 54 72 30 64 48 4d 6c 5a 66 59 5a 46 64 51 44 49 52 72 22 2c 46 6f 63 75 73 65 64 3a 22 58 38 31 33 72 48 37 4e 73 35 6b 6e 54 2d 2d 59 50 6e 48 76 62 22 2c 43 61 70 69 74 61 6c 69 7a 65 64 3a 22 5f 33 4a 77 77 35 54 6d 58 33 46 68 74 2d 65 53 4e 68 Data Ascii: UMKb-NNY0a_gjX",Destructive:"_3aIFvGweOy28vYEoJ9r9DK",Positive:"_2gJWj-FfbKrSsAuDQWMhcb",Emphasis:"_1viOGaAjubgRbWQgU49yrB",active:"_2Pk-xcrPB0zrPQv_m7Glg1",Selected:"_1PnETr0dHMlZfYZFdQDIRr",Focused:"X813rH7Ns5knT--YPnHvb",Capitalized:"_3Jww5TmX3Fht-eSNh
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 30 49 46 58 54 6f 48 59 6a 6b 22 2c 44 72 6f 70 44 6f 77 6e 4c 61 62 65 6c 55 70 70 65 72 44 65 73 63 72 69 70 74 69 6f 6e 3a 22 5f 32 5f 4a 4e 33 67 33 32 2d 7a 57 73 43 42 6f 55 38 52 38 79 7a 47 22 2c 44 72 6f 70 44 6f 77 6e 4c 61 62 65 6c 44 65 73 63 72 69 70 74 69 6f 6e 3a 22 5f 31 4a 50 63 62 62 6f 6a 72 67 4e 4d 5f 46 54 4f 44 73 6b 43 52 61 22 7d 7d 2c 39 39 39 36 37 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 22 64 75 72 61 74 69 6f 6e 2d 61 70 70 2d 6c 61 75 6e 63 68 22 3a 22 38 30 30 6d 73 22 2c 47 61 6d 65 70 61 64 44 69 61 6c 6f 67 43 6f 6e 74 65 6e 74 3a 22 5f 33 6a 6f 4e 6b 59 36 6b 52 79 4c 2d 36 52 4b 31 72 4b 49 72 56 32 22 2c 47 61 6d 65 70 61 64 44 69 61 6c 6f 67 43 6f 6e 74 65 6e 74 5f 49 6e 6e 65 72 57 69 64 74 68 3a 22 5f 33 58 Data Ascii: 0IFXToHYjk",DropDownLabelUpperDescription:"_2_JN3g32-zWsCBoU8R8yzG",DropDownLabelDescription:"_1JPcbbojrgNM_FTODskCRa"}},99967:e=>{e.exports={"duration-app-launch":"800ms",GamepadDialogContent:"_3joNkY6kRyL-6RK1rKIrV2",GamepadDialogContent_InnerWidth:"_3X
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 3a 22 5f 35 55 4f 2d 5f 56 68 67 46 68 44 57 6c 6b 44 49 4f 5a 63 6e 5f 22 2c 43 68 69 6c 64 72 65 6e 57 69 64 74 68 46 69 78 65 64 3a 22 5f 31 75 67 49 55 62 6f 77 78 44 67 30 71 4d 30 70 4a 55 62 42 52 4d 22 2c 43 68 69 6c 64 72 65 6e 57 69 64 74 68 47 72 6f 77 3a 22 5f 4f 65 71 76 74 6c 39 2d 72 6b 63 47 48 4c 47 5f 38 2d 42 75 22 2c 57 69 74 68 46 69 72 73 74 52 6f 77 3a 22 71 46 58 69 36 49 2d 43 73 30 6d 4a 6a 54 6a 71 47 58 57 5a 41 22 2c 57 69 74 68 43 68 69 6c 64 72 65 6e 42 65 6c 6f 77 3a 22 5f 31 75 35 46 54 59 6c 34 73 44 39 79 31 4b 4d 57 76 43 67 67 41 4f 22 2c 46 69 65 6c 64 4c 61 62 65 6c 3a 22 5f 33 62 30 55 2d 51 44 44 2d 75 68 46 70 77 36 78 4d 37 31 36 66 77 22 2c 46 69 65 6c 64 4c 61 62 65 6c 56 61 6c 75 65 3a 22 6c 63 44 37 4a 77 74 Data Ascii: :"_5UO-_VhgFhDWlkDIOZcn_",ChildrenWidthFixed:"_1ugIUbowxDg0qM0pJUbBRM",ChildrenWidthGrow:"_Oeqvtl9-rkcGHLG_8-Bu",WithFirstRow:"qFXi6I-Cs0mJjTjqGXWZA",WithChildrenBelow:"_1u5FTYl4sD9y1KMWvCggAO",FieldLabel:"_3b0U-QDD-uhFpw6xM716fw",FieldLabelValue:"lcD7Jwt
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 22 2c 22 51 75 69 63 6b 41 63 63 65 73 73 2d 4d 65 6e 75 22 3a 22 5f 31 59 45 58 6e 43 78 32 35 53 32 4f 72 48 65 4d 6b 42 51 35 6d 66 22 2c 42 6f 74 74 6f 6d 42 75 74 74 6f 6e 73 3a 22 5f 33 5f 45 76 70 58 4b 5f 4a 57 4c 54 44 37 48 71 6e 4a 52 45 53 6b 22 2c 42 61 63 6b 67 72 6f 75 6e 64 41 6e 69 6d 61 74 69 6f 6e 3a 22 5f 31 5f 52 63 30 6f 45 6a 4e 41 64 2d 69 43 59 52 51 35 5f 46 4f 6d 22 2c 22 49 74 65 6d 46 6f 63 75 73 41 6e 69 6d 2d 64 61 72 6b 65 72 47 72 65 79 2d 6e 6f 63 6f 6c 6f 72 22 3a 22 5f 32 30 75 4f 67 37 34 66 2d 61 51 63 43 65 4b 63 45 33 78 31 34 55 22 2c 22 49 74 65 6d 46 6f 63 75 73 41 6e 69 6d 2d 67 72 65 79 22 3a 22 5f 33 37 4f 68 63 38 6c 77 6f 39 6d 42 49 65 55 30 31 53 5a 54 35 47 22 2c 22 49 74 65 6d 46 6f 63 75 73 41 6e 69 6d Data Ascii: ","QuickAccess-Menu":"_1YEXnCx25S2OrHeMkBQ5mf",BottomButtons:"_3_EvpXK_JWLTD7HqnJRESk",BackgroundAnimation:"_1_Rc0oEjNAd-iCYRQ5_FOm","ItemFocusAnim-darkerGrey-nocolor":"_20uOg74f-aQcCeKcE3x14U","ItemFocusAnim-grey":"_37Ohc8lwo9mBIeU01SZT5G","ItemFocusAnim
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 69 61 6c 6f 67 5f 50 61 67 65 4c 69 73 74 49 74 65 6d 3a 22 5f 31 69 78 37 72 5a 4c 32 50 76 76 35 63 39 38 56 55 78 39 31 6f 6e 22 2c 44 69 73 61 62 6c 65 64 49 74 65 6d 3a 22 5f 33 4c 70 32 66 4a 55 53 55 5f 63 35 4d 4e 49 65 69 74 6f 41 46 22 2c 41 63 74 69 76 65 3a 22 5f 32 32 4c 4c 42 4b 65 70 62 5f 76 45 39 43 7a 50 37 32 6a 33 37 56 22 2c 22 49 74 65 6d 46 6f 63 75 73 41 6e 69 6d 2d 64 61 72 6b 65 72 47 72 65 79 22 3a 22 75 72 37 67 75 42 65 54 77 56 38 50 72 41 4a 79 57 30 63 6f 56 22 2c 22 49 74 65 6d 46 6f 63 75 73 41 6e 69 6d 2d 64 61 72 6b 47 72 65 79 22 3a 22 5f 33 71 46 78 6c 49 36 75 6c 42 5a 73 30 4c 41 78 45 32 48 48 38 34 22 2c 50 61 67 65 4c 69 73 74 49 74 65 6d 5f 49 63 6f 6e 3a 22 5f 31 46 5f 35 51 61 74 68 52 7a 47 32 34 56 63 62 47 Data Ascii: ialog_PageListItem:"_1ix7rZL2Pvv5c98VUx91on",DisabledItem:"_3Lp2fJUSU_c5MNIeitoAF",Active:"_22LLBKepb_vE9CzP72j37V","ItemFocusAnim-darkerGrey":"ur7guBeTwV8PrAJyW0coV","ItemFocusAnim-darkGrey":"_3qFxlI6ulBZs0LAxE2HH84",PageListItem_Icon:"_1F_5QathRzG24VcbG
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 6c 65 64 3a 22 5f 31 6c 49 31 4e 39 67 66 4a 73 33 73 5f 47 66 6f 31 46 5f 34 2d 44 22 2c 53 6c 69 64 65 72 54 72 61 63 6b 3a 22 4d 71 32 35 4e 61 70 32 32 34 68 56 64 54 64 74 58 53 73 6e 71 22 2c 53 6c 69 64 65 72 48 61 73 4e 6f 74 63 68 65 73 3a 22 5f 32 58 69 41 79 56 4f 6c 34 51 72 55 71 6f 66 53 43 33 49 47 41 33 22 2c 44 65 66 61 75 6c 74 56 61 6c 75 65 49 73 43 6f 6c 6f 72 52 61 6e 67 65 3a 22 5f 32 78 4b 35 42 2d 77 44 58 6c 67 59 2d 38 71 48 59 79 55 49 33 69 22 2c 44 65 66 61 75 6c 74 56 61 6c 75 65 43 6f 6c 6f 72 4c 65 66 74 3a 22 75 61 6e 54 73 47 63 68 49 4c 37 41 57 38 58 7a 4b 59 2d 33 76 22 2c 44 65 66 61 75 6c 74 56 61 6c 75 65 43 6f 6c 6f 72 52 69 67 68 74 3a 22 5f 33 61 46 4b 59 61 6c 71 69 73 31 69 36 50 38 4f 4c 54 79 57 58 37 22 2c Data Ascii: led:"_1lI1N9gfJs3s_Gfo1F_4-D",SliderTrack:"Mq25Nap224hVdTdtXSsnq",SliderHasNotches:"_2XiAyVOl4QrUqofSC3IGA3",DefaultValueIsColorRange:"_2xK5B-wDXlgY-8qHYyUI3i",DefaultValueColorLeft:"uanTsGchIL7AW8XzKY-3v",DefaultValueColorRight:"_3aFKYalqis1i6P8OLTyWX7",
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 59 48 54 6b 72 4a 78 43 32 48 78 22 2c 52 69 67 68 74 3a 22 73 79 4e 38 6e 41 5f 6a 67 73 4a 6d 34 6f 48 47 46 30 4a 56 33 22 2c 43 6f 6d 70 6f 75 6e 64 53 6c 69 64 65 72 53 75 62 53 6c 69 64 65 72 4c 61 62 65 6c 43 6f 6e 74 61 69 6e 65 72 3a 22 5f 31 68 5f 6f 65 62 65 50 62 45 32 50 54 6d 44 4a 70 4e 61 68 53 51 22 2c 43 6f 6d 70 6f 75 6e 64 53 6c 69 64 65 72 53 75 62 53 6c 69 64 65 72 4c 61 62 65 6c 50 6f 73 69 74 69 6f 6e 65 72 3a 22 6d 4b 63 55 6e 50 4f 50 68 53 76 57 65 4c 59 37 77 78 70 49 53 22 2c 43 6f 6d 70 6f 75 6e 64 53 6c 69 64 65 72 53 75 62 53 6c 69 64 65 72 4c 61 62 65 6c 3a 22 69 59 72 7a 39 37 53 72 73 72 4f 32 32 38 63 64 6e 4d 2d 54 35 22 2c 43 6f 6d 70 6f 75 6e 64 53 6c 69 64 65 72 53 75 62 53 6c 69 64 65 72 4c 61 62 65 6c 49 6e 74 65 Data Ascii: YHTkrJxC2Hx",Right:"syN8nA_jgsJm4oHGF0JV3",CompoundSliderSubSliderLabelContainer:"_1h_oebePbE2PTmDJpNahSQ",CompoundSliderSubSliderLabelPositioner:"mKcUnPOPhSvWeLY7wxpIS",CompoundSliderSubSliderLabel:"iYrz97SrsrO228cdnM-T5",CompoundSliderSubSliderLabelInte
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 64 53 65 74 74 69 6e 67 73 44 69 61 6c 6f 67 5f 50 61 67 65 4c 69 73 74 49 74 65 6d 3a 22 62 6b 66 6a 6e 30 79 6b 61 32 75 48 4e 71 45 76 57 5a 61 54 4a 22 2c 50 61 67 65 4c 69 73 74 49 74 65 6d 5f 49 63 6f 6e 3a 22 55 36 48 63 4b 73 77 58 7a 6a 6d 57 74 46 78 62 6a 78 75 7a 34 22 2c 50 61 67 65 4c 69 73 74 49 74 65 6d 5f 54 69 74 6c 65 3a 22 5f 32 58 39 5f 49 73 51 73 45 4a 44 70 41 64 32 4a 47 72 48 64 4a 49 22 2c 44 69 73 61 62 6c 65 64 49 74 65 6d 3a 22 5f 31 52 44 70 39 78 31 4b 33 57 73 6a 58 66 37 68 59 57 6d 6d 69 58 22 2c 41 63 74 69 76 65 3a 22 4d 79 72 61 37 69 47 6a 7a 43 64 4d 50 7a 69 74 62 6f 56 66 68 22 2c 50 61 67 65 4c 69 73 74 53 70 61 63 65 72 3a 22 5f 33 33 6c 43 5a 56 48 6d 33 49 57 31 66 55 67 6c 37 2d 7a 68 6e 78 22 2c 50 61 67 65 Data Ascii: dSettingsDialog_PageListItem:"bkfjn0yka2uHNqEvWZaTJ",PageListItem_Icon:"U6HcKswXzjmWtFxbjxuz4",PageListItem_Title:"_2X9_IsQsEJDpAd2JGrHdJI",DisabledItem:"_1RDp9x1K3WsjXf7hYWmmiX",Active:"Myra7iGjzCdMPzitboVfh",PageListSpacer:"_33lCZVHm3IW1fUgl7-zhnx",Page

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49847	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:48 UTC	636	OUT	GET /public/images/v6/logo_steam_footer.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:48 UTC	342	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:48 GMT Content-Type: image/png Content-Length: 2843 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:22 GMT ETag: "649bb1fa-b1b" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 5440 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40f21cc2da2f-MIA
2024-04-05 23:17:48 UTC	1027	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 cc 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR\:;)pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 43 37 42 45 39 34 36 32 31 31 46 35 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 31 45 31 44 43 42 41 43 31 30 43 31 31 45 37 39 32 35 37 43 37 42 45 39 34 36 32 31 31 46 35 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 31 45 31 44 43 42 42 43 31 30 43 31 31 45 37 39 32 35 37 43 37 42 45 39 34 36 32 31 31 46 35 22 2f 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f Data Ascii: C7BE946211F5" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:11E1DCBAC10C11E79257C7BE946211F5" stRef:documentID="xmp.did:11E1DCBBC10C11E79257C7BE946211F5"/> <xmpMM:Histo
2024-04-05 23:17:48 UTC	447	IN	Data Raw: 94 02 35 47 ec d9 5a bb e6 b6 fd a0 e5 5f 63 fe 45 a6 77 89 36 ba 70 a2 47 c1 2a da 8f 6b fd 7c e2 a1 69 25 78 2d 77 8f da c5 4b 84 4d 45 6c 3f c0 49 50 c4 b2 67 2c 3e 56 80 88 ea 0c de 19 2c 05 f7 e3 36 51 ce be 1f 18 07 2e bb 28 7c 1d 3b 8d 6e 82 d8 21 5a 84 60 32 8b f6 74 c6 e5 c9 4c 67 88 32 3d b4 43 33 87 02 a9 f1 e4 5a 84 6b 05 36 2b 39 87 be fd 23 f8 c2 c3 db c1 60 e1 89 76 26 64 68 e7 80 f2 ef 1b 35 17 54 06 92 9c c5 e1 61 14 fc 13 bf de 33 fa a1 62 e6 b9 22 7e 19 dd 53 78 23 05 2f 77 d2 56 3e 43 54 15 25 8c 05 17 84 2d cd 03 51 93 bf bb 6f 9a 43 c0 06 b0 58 04 ee a1 f4 a7 0f 5c 14 5e 45 38 db 55 d0 ef 64 20 cb 5d 6c d3 24 dd 9b ae f6 ce 88 07 67 9b 20 d0 15 5e aa cc 76 26 82 7d 2e d4 af e6 07 cf 6b 03 cf 0e 1e 15 dc 64 00 58 cf db 97 2b c2 3f a4 Data Ascii: 5GZ_cEw6pG*k\|i%x-wKMEl?IPg,>V,6Q.(\|;n!Z`2tLg2=C3Zk6+9#`v&dh5Ta3b"~Sx#/wV>CT%-QoCX\^E8Ud ]l$g ^v&}.kdX+?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49848	104.18.42.105	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:48 UTC	424	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:48 UTC	354	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:48 GMT Content-Type: image/png Content-Length: 291 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:11 GMT ETag: "649bb1ef-123" Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 4125 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40f218a6336d-MIA
2024-04-05 23:17:48 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 79 06 d2 c1 63 Data Ascii: PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49850	104.18.42.105	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:48 UTC	407	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:48 UTC	346	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:48 GMT Content-Type: image/svg+xml Content-Length: 3684 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:11 GMT ETag: "649bb1ef-e64" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 1202 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40f22ebb6dad-MIA
2024-04-05 23:17:48 UTC	1023	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 33 32 2e 31 38 31 63 32 34 2e 34 33 32 2c 30 2c 34 34 2e 32 33 37 2d 31 39 2e 38 30 36 2c 34 34 2e 32 33 37 2d 34 34 2e 32 33 35 43 38 38 2e 34 37 35 2c 32 30 2e 34 30 36 2c 36 38 2e 36 36 39 2c 30 2e 36 30 31 2c 34 34 2e 32 33 38 2c 30 2e 36 30 31 22 2f 3e 0d 0a 09 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 43 35 43 33 43 30 22 20 64 3d 22 4d 32 37 2e 38 37 35 2c 36 37 2e 37 32 33 6c 2d 35 2e 34 33 34 2d 32 2e 32 34 35 63 30 2e 39 36 33 2c 32 2e 30 30 35 2c 32 2e 36 32 39 2c 33 2e 36 38 34 2c 34 2e 38 34 31 2c 34 2e 36 30 36 63 34 2e 37 38 32 2c 31 2e 39 39 32 2c 31 30 2e 32 39 35 2d 30 2e 32 37 37 2c 31 32 2e 32 38 38 2d 35 2e 30 36 33 0d 0a 09 09 63 30 2e 39 36 35 2d 32 2e 33 31 34 2c 30 2e 39 37 31 2d 34 2e 38 36 39 2c 30 2e 30 31 34 2d 37 2e 31 38 39 63 Data Ascii: 32.181c24.432,0,44.237-19.806,44.237-44.235C88.475,20.406,68.669,0.601,44.238,0.601"/><path fill="#C5C3C0" d="M27.875,67.723l-5.434-2.245c0.963,2.005,2.629,3.684,4.841,4.606c4.782,1.992,10.295-0.277,12.288-5.063c0.965-2.314,0.971-4.869,0.014-7.189c
2024-04-05 23:17:48 UTC	1292	IN	Data Raw: 20 31 34 31 2e 37 37 39 2c 32 38 2e 31 37 35 20 0d 0a 09 09 31 36 38 2e 39 38 38 2c 32 38 2e 31 37 35 20 31 36 38 2e 39 38 38 2c 33 34 2e 31 36 31 20 09 22 2f 3e 0d 0a 09 3c 70 6f 6c 79 67 6f 6e 20 66 69 6c 6c 3d 22 23 43 35 43 33 43 30 22 20 70 6f 69 6e 74 73 3d 22 31 38 33 2e 37 2c 33 34 2e 31 34 33 20 31 38 33 2e 37 2c 34 31 2e 36 35 32 20 31 39 37 2e 30 35 36 2c 34 31 2e 36 35 32 20 31 39 37 2e 30 35 36 2c 34 37 2e 36 33 38 20 31 38 33 2e 37 2c 34 37 2e 36 33 38 20 31 38 33 2e 37 2c 35 35 2e 34 35 39 20 0d 0a 09 09 31 39 39 2e 31 39 36 2c 35 35 2e 34 35 39 20 31 39 39 2e 31 39 36 2c 36 31 2e 35 20 31 37 36 2e 37 32 33 2c 36 31 2e 35 20 31 37 36 2e 37 32 33 2c 32 38 2e 31 37 35 20 31 39 39 2e 31 39 36 2c 32 38 2e 31 37 35 20 31 39 39 2e 31 39 36 2c 33 Data Ascii: 141.779,28.175 168.988,28.175 168.988,34.161 "/><polygon fill="#C5C3C0" points="183.7,34.143 183.7,41.652 197.056,41.652 197.056,47.638 183.7,47.638 183.7,55.459 199.196,55.459 199.196,61.5 176.723,61.5 176.723,28.175 199.196,28.175 199.196,3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49845	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:48 UTC	636	OUT	GET /public/images/footerLogo_valve_new.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:48 UTC	342	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:48 GMT Content-Type: image/png Content-Length: 2584 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:18 GMT ETag: "649bb1f6-a18" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 1254 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40f22eb4da43-MIA
2024-04-05 23:17:48 UTC	1027	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 32 08 06 00 00 00 fc cf 51 8d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2QtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 7f 57 71 dd 30 02 c1 5a e0 d7 c0 e9 92 6f 00 9f 65 01 33 42 c1 0a e0 66 60 2d 70 0c 58 c0 42 16 30 23 24 54 c9 e8 7b 2e f0 30 8a 78 1a d7 09 23 10 bc 0d 5c 07 dc 02 fc 0c d8 01 3c c2 11 98 11 0a de 01 fe 02 6c 02 de 23 ad c4 e3 1c 81 19 21 e1 4d c9 ff 79 0a 06 23 68 53 cc 60 b0 80 19 8c d3 81 4a 3d f0 16 39 2a 54 f1 14 f0 42 c3 63 3c 0d fc 86 28 5f 0f bc 28 e5 7d 3d 09 1c 4c d8 fe 84 28 cd ee b8 c4 00 f0 19 a2 fc 0e e0 8d 8e ce 31 0a bc 0f a8 ce 9e 5e 0c 7c cc f0 18 3f c9 fb 57 d1 0c bc d7 e2 5a 46 e4 b5 d8 e0 39 e0 d9 59 10 f0 5c e0 c6 14 95 30 0e dc 00 3c a6 94 cf 03 be 96 f2 9e 8e c9 63 8f 25 fc cd 15 a2 94 92 71 89 5f 35 75 72 a5 43 01 cf 04 1e 00 7e ae 94 9f 01 7c 48 94 72 a4 e5 d0 af b9 ce 16 cb 6b 19 d3 1c 27 09 eb 5d 0b b8 52 0b d1 22 d3 18 2a 76 Data Ascii: Wq0Zoe3Bf`-pXB0#$T{.0x#\<l#!My#hS`J=9TBc<(_(}=L(1^\|?WZF9Y\0<c%q_5urC~\|Hrk']R"v
2024-04-05 23:17:48 UTC	188	IN	Data Raw: 27 65 76 2e 11 a5 37 5f 58 c0 29 2b d2 d7 ea 33 53 fb 10 61 95 a0 17 73 87 9c 0f c6 fb 9f 5b 41 9b b0 80 0d 2b 0b 3f b3 e4 e2 db 00 7d 0e 04 8c 36 86 4a e5 ed 15 a7 ae 9a 0b 69 4c d3 ee b1 e7 9b 12 83 38 44 8b ac 48 75 f1 f8 6d 8e 8e 8f 4b 08 6f 05 fe 23 7f d7 c6 46 d9 36 b8 4b f3 10 1f 12 f6 df 0a ab b5 7c 80 44 c2 43 9e 06 77 02 7f 27 c6 06 2b f2 28 e0 02 ff 3f 71 8c 00 80 d9 95 c1 c9 b4 10 0c 46 d0 1e 98 c1 60 01 33 18 2c 60 06 0b 98 c1 60 01 33 18 2c 60 06 83 05 cc 60 01 33 18 d9 c0 7f 02 0c 00 09 10 3c 07 fd f1 91 a3 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 'ev.7_X)+3Sas[A+?}6JiL8DHumKo#F6K\|DCw'+(?qF`3,``3,``3<IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49844	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:48 UTC	1431	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=310184681&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=964554916&browser-info=we%3A1%3Aet%3A1712359066%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011745%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359066&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:17:48 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:48 GMT Expires: Fri, 05-Apr-2024 23:17:48 GMT Last-Modified: Fri, 05-Apr-2024 23:17:48 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:48 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49849	104.18.42.105	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:48 UTC	403	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:48 UTC	357	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:48 GMT Content-Type: image/png Content-Length: 10863 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-2a6f" Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 2765 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40f229dc4c20-MIA
2024-04-05 23:17:48 UTC	1012	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af 9b c3 15 8f 87 9e Data Ascii: PNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 7f 59 d0 27 fd fc 90 c3 8c 44 44 44 66 80 45 a2 f3 81 42 50 ba b5 68 ce 97 07 bb 25 a4 34 f9 da 8b 88 88 cc 00 23 e8 f3 81 f1 fd 97 35 87 d2 13 8f 87 1e 0c fd fa 48 eb 08 35 b9 df 0f 87 5e 16 5a 77 c8 39 33 c4 10 a8 d3 42 b4 b6 e4 71 6c f8 5d 2f 0c f1 fb 89 88 88 48 a5 68 d0 e7 c1 07 43 b7 34 87 72 20 e4 72 df 17 fa 56 08 53 de 95 53 43 af 0b bd 25 74 49 88 1e e6 63 70 6b e8 a6 e6 50 44 44 44 6a 44 83 5e 3f 44 6b bf 13 1a cb 00 ce 91 27 43 9f 0d d1 b2 90 a8 79 df 9c 1c ba 2a c4 80 a1 31 22 eb 14 8d b2 c0 10 11 11 91 0a d1 a0 d7 0d a3 fb 1f 09 61 00 25 1f cc 38 11 67 8c f9 ff f2 85 81 61 11 85 51 67 c7 83 94 98 a1 60 c1 f1 ca d0 10 8b 0d 11 11 11 19 18 8b 44 eb e6 0b 21 cd 79 3e b4 26 c4 98 9f 11 22 72 3e 86 39 07 72 c3 bf 18 3a 2b 74 63 e8 4f a1 21 e0 3d Data Ascii: Y'DDDfEBPh%4#5H5^Zw93Bql]/HhC4r rVSSC%tIcpkPDDDjD^?Dk'Cy*1"a%8gaQg`D!y>&"r>9r:+tcO!=
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 9c 05 4c b4 ed 62 04 ce 0b fd a0 39 2c 1e ea 62 4a 88 4c 5e 16 fa 5a 73 98 05 53 90 99 dd 50 12 5d 3e 07 ec 72 9d 15 2a b9 de 66 db bd 61 17 9f 0f 51 2b 95 02 1d cb 78 0f 10 9c 22 80 c0 e0 3c 82 09 34 38 a0 61 02 9f 2b 52 1e 79 7e 99 c4 7d 43 c8 2e 5f 13 a3 41 2f 0f 56 b5 a4 31 ec 6a d5 27 7f 25 e7 46 cf 8d 9d 0b d1 71 b8 08 71 f1 1e 23 52 c4 76 e2 af 42 5c 04 8f 93 53 b0 49 a4 e5 f7 a1 be 76 57 88 62 d2 79 a6 0f 13 59 03 44 cb 3f 1d 7a d9 ea 6c 78 88 a0 d2 a2 93 05 d8 21 91 29 0d 7a 83 06 3d 1f 8c 19 26 3d 17 ae 09 2f 0a 6d eb 5e 35 05 5d 3f 07 eb 4e 5c 25 42 ca 22 7f 13 46 39 87 54 83 4e 9a 1e 69 9d 40 30 68 5b 4a 25 81 0a 82 83 d7 87 68 29 fc 86 90 4d 04 26 c4 22 d1 f2 60 eb 49 73 9e 06 db 72 a9 37 79 2e 52 9b e6 1c 88 20 8f b5 8d cb 62 a0 2d 8d 86 9b Data Ascii: Lb9,bJL^ZsSP]>r*faQ+x"<48a+Ry~}C._A/V1j'%Fqq#RvB\SIvWbyYD?zlx!)z=&=/m^5]?N\%B"F9TNi@0h[J%h)M&"`Isr7y.R b-
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: be 8e a8 73 7d 24 3a 7e 7c b1 f5 a9 10 9f 13 26 1e c3 47 8e c4 7d d6 28 fa 44 98 e2 52 06 b4 c2 d2 9c a7 83 91 cd 89 4c b5 45 ea 88 2e 4c 95 a7 cc cf 6e 2b 08 4d bd 10 b6 e5 14 f6 05 06 a8 56 78 5e bb a6 e9 10 29 ba 3c d4 c5 9c 03 0b 3d 86 50 b1 ab 73 7a 88 1b dd f1 c5 1f df 77 aa 88 9d 2c 8b a1 06 8f 71 cd 2a 75 d8 4f 2e 2c 52 a7 18 c2 c4 35 6a e8 e2 d0 e3 70 1d 22 df 9c a2 f9 75 c4 9e 69 a2 9b 3b 21 ec de ae cd 39 af 31 c6 9e 05 80 e6 7c 42 34 e8 65 c0 30 08 49 83 8b 4b 5b 5f d7 5d 10 19 20 97 78 93 a9 cc 28 15 f4 6d 26 3b 75 cb 7f c8 2e 04 6d fd e2 6b 81 e8 5a 97 ae 03 dc c0 e8 62 d0 17 b4 c1 64 5b 98 e8 d3 ba d7 3e 83 3f ba 9a 7f 91 54 b8 b6 0c 39 00 6b 4e 83 6b 30 ca 43 e7 81 6f 32 76 17 19 76 08 48 5d e1 da f8 c3 d0 be a1 48 e4 e7 93 4a f7 50 08 d3 Data Ascii: s}$:~\|&G}(DRLE.Ln+MVx^)<=Pszw,q*uO.,R5jp"ui;!91\|B4e0IK[_] x(m&;u.mkZbd[>?T9kNk0Co2vvH]HJP
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: be 50 d7 3c e2 5c 30 c9 af 09 ed ea 60 b0 2e cc 24 e5 e1 f7 a1 a7 43 ff 15 62 02 1b 63 93 39 ff 9f 10 e6 8d 48 d6 2e 63 4b 5a 0b 3f 2f f7 75 26 d7 73 ec be c3 35 ef ec dc 10 4a 2d bc 4d 85 f7 01 e6 9c d7 99 f7 01 b9 ea 73 2a 92 9b 33 a4 2d f0 39 1d 5a 53 ec b2 e4 46 b0 b9 e6 51 7c df 06 f5 3e b9 69 2e a4 b8 90 ea 52 32 14 c0 12 18 49 81 cf 79 5f 39 e3 39 d1 f3 5b 8f 1e 45 9e 41 83 5e 06 5c 18 d9 9a 3f 37 c4 94 2f da ee 2d 71 ba 21 37 07 26 db 8d 09 11 23 22 e9 4c 2a 4d 85 1b 3e 45 59 39 29 27 fc 6d bc be b9 8b 0f 0c 3f fd d3 c7 a6 d6 08 3a d0 96 73 c8 1b 1e 46 0c 63 44 ad 02 66 9d 08 7b 6e 91 9e c8 a1 f0 19 cd ed ea b4 2f 8d 25 b7 9b 0b 94 3e 59 94 fb eb ed cd 61 12 7d 74 5d e1 de 90 da ba 95 80 4d ee 34 57 59 00 1a f4 f2 a0 cb c8 35 a1 7f 0e 11 4d 1e aa Data Ascii: P<\0`.$Cbc9H.cKZ?/u&s5J-Ms3-9ZSFQ\|>i.R2Iy_99[EA^\?7/-q!7&#"LM>EY9)'m?:sFcDf{n/%>Ya}t]M4WY5M
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: a0 9c ae 0f 73 07 53 cb 6b 47 fe 6f ae 61 d9 05 83 c8 c6 9e 16 bc 34 83 ce ef cc ef 5e 3b 44 71 7f d1 1c 26 f3 60 88 80 48 57 b8 3f 30 7c 2b 87 c7 43 3c df 43 2c 56 fa 34 e8 7c 9e 31 d6 29 ec 32 d6 fc 4e bf 09 a5 2c e0 69 f3 48 e7 b2 36 34 e8 72 02 a6 b8 2c 17 2e 38 6c 61 72 f1 c6 24 0c d1 d5 02 83 b7 6e 4d 48 ce 1f e3 f4 97 68 ce 31 44 ec 58 3c 12 e2 86 50 ba 39 07 b7 60 4f 84 36 a6 6c 4d d3 07 9f 2e 30 dc 68 fb 30 20 35 0c 78 91 32 e8 92 df 7d 68 9f ed 2e 13 ac e9 42 45 aa 4b e9 f0 b7 a5 f6 7b 27 a0 b5 2d c7 9c 45 4c 8a 39 e7 79 cc 49 ad 91 85 63 04 5d 8e c3 f4 48 0c c3 bb 43 67 f3 85 0c d8 46 fe 8f 10 69 11 44 6d 96 1e 7d 25 7d 88 9c 44 a2 34 a4 49 d4 d4 5a 8f 1b 09 83 99 86 88 80 cd 09 fa 9b 53 3f 70 88 19 21 f7 9d 02 d5 31 31 82 5e 1f 18 40 26 d3 e6 Data Ascii: sSkGoa4^;Dq&`HW?0\|+C<C,V4\|1)2N,iH64r,.8lar$nMHh1DX<P9`O6lM.0h0 5x2}h.BEK{'-EL9yIc]HCgFiDm}%}D4IZS?p!11^@&
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 86 22 d2 57 86 da a2 b6 98 68 72 88 fb 86 16 59 b4 82 d4 9c 9f 08 e3 a8 6b 87 a2 d0 43 cc 39 60 60 d9 e1 39 ae be cd 39 91 c4 db 9b 43 91 67 d1 a5 7b 0b 05 8e 43 9b 73 b8 e7 e8 31 97 9a 52 76 0e c9 45 67 e1 9d 6b ce 45 9e 85 06 bd 1c 88 d0 1d cf 9b 5d 12 44 99 ce 3f 7a dc 84 08 7b 5f 63 ae 19 d3 4c 21 28 3d d9 6b 9c cc 37 34 73 c8 87 ae a5 63 04 93 0b ed 37 2f 6d 10 b9 ed d2 fb 3c a7 8f f7 21 90 0a d6 25 f5 90 d4 11 ae c1 35 c0 22 a4 cb ee 87 0b 6f e9 0d 0d 7a 39 f0 c1 a6 50 91 6d cd 25 46 76 49 af b8 32 d4 56 f5 fe f1 a3 c7 43 20 27 99 a8 b9 85 a0 ed f0 fe ab 7d 1c 35 a6 86 5d 97 d2 e1 c6 9f 9b 9f 2a cb a1 4b f4 9c b4 ac 31 3f bf 5d a2 e8 35 b5 8d e4 3e 44 17 96 5c 18 4a 34 87 39 12 52 00 1a f4 72 58 1b 24 72 0f 31 92 e4 59 72 31 1b a3 87 73 29 50 3d cf Data Ascii: "WhrYkC9``99Cg{Cs1RvEgkE]D?z{_cL!(=k74sc7/m<!%5"oz9Pm%FvI2VC '}5]*K1?]5>D\J49RrX$r1Yr1s)P=
2024-04-05 23:17:48 UTC	1369	IN	Data Raw: 60 52 e7 07 42 5d fa dd a6 c0 04 d4 af 86 da 8a 56 ff 35 84 b1 dc 84 ff a7 a6 91 d1 25 c0 73 39 75 2f 6b 11 11 11 d9 81 39 e8 f5 c0 38 ff 2e 93 e6 72 79 7d 88 0e 32 9b 90 76 f2 48 88 1c 71 a6 c7 d1 57 9d 41 13 7d 80 d1 fe 7a 88 d6 92 9b 90 2f 4d af 6e a2 e8 9b 30 b0 e2 ee e6 50 12 78 2c f4 f2 90 06 5d 44 44 a4 60 8c a0 d7 03 e3 84 c7 e0 23 47 8f 9b 3c 1e 22 1f 1e 83 7e 55 e8 87 21 86 09 d1 7f bc ad 25 62 2a 2f 09 f1 bd da cc 39 d0 ab bb cd 9c 83 c3 89 f2 60 c8 93 e6 5c 44 44 a4 70 34 e8 f5 c0 48 df 31 fa 56 9f 17 da 66 96 29 2e 3c fe 3b 50 54 4a 8b 46 5a 35 7e 26 44 eb c6 54 30 f5 8c e7 ff 59 68 5b 71 2a 3f ef 5b cd e1 b3 b8 2c c4 78 6c 49 e3 fe 23 89 88 88 48 e1 98 e2 52 17 eb 34 93 43 22 d6 29 3c 14 3a 37 d4 d6 72 91 08 fa 03 21 ba a7 b4 41 da 0b 46 f0 Data Ascii: `RB]V5%s9u/k98.ry}2vHqWA}z/Mn0Px,]DD`#G<"~U!%b/9`\DDp4H1Vf).<;PTJFZ5~&DT0Yh[q?[,xlI#HR4C")<:7r!AF
2024-04-05 23:17:48 UTC	268	IN	Data Raw: 21 8c fa bf 84 e8 00 b3 04 c8 2f 67 2c 3f c2 a0 8b 88 88 88 1c 84 06 5d 86 e2 8d 21 8c fa 25 a1 e7 f1 85 19 41 3e f9 fd a1 2f 1e 3d 8a 88 88 88 f4 86 06 5d 86 e6 a4 10 a9 2f 97 85 30 eb 27 87 6a 04 53 4e ff f2 fb 42 5f 09 39 c4 49 44 44 44 06 41 83 2e 63 73 5e 08 a3 4e 84 bd e4 be ea 14 77 3e 18 c2 94 af 25 22 22 22 32 38 1a 74 99 92 e7 87 18 82 84 5e 75 f4 78 5a 68 0a fe 10 62 b2 e7 71 53 6e 07 16 11 11 11 19 1d 0d ba 94 06 29 30 b4 6d 7c 59 88 a2 53 8a 4d 89 b4 f3 78 4a e8 10 fe 12 a2 90 f3 89 10 3d ca 31 e4 bf 3e 7a e4 5c 44 44 44 64 72 34 e8 52 1b 98 f6 cd 3c f6 b3 43 9b 85 a8 bf 0c ad 87 03 ad 0d b9 88 88 88 48 f1 68 d0 45 44 44 44 44 8a e1 39 cf f9 ff e8 59 1b b0 7b 17 7d 1e 00 00 00 00 49 45 4e 44 ae 42 60 82 c5 78 ce 73 fe 3f d9 31 1b b6 a0 af 57 Data Ascii: !/g,?]!%A>/=]/0'jSNB_9IDDDA.cs^Nw>%"""28t^uxZhbqSn)0m\|YSMxJ=1>z\DDDdr4R<CHhEDDDD9Y{}IENDB`xs?1W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49851	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:48 UTC	632	OUT	GET /public/images/ico/ico_facebook.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:48 UTC	342	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:48 GMT Content-Type: image/png Content-Length: 1161 Connection: close Last-Modified: Wed, 06 Dec 2023 00:00:29 GMT ETag: "656fb99d-489" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 1727 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40f36cb974ac-MIA
2024-04-05 23:17:48 UTC	1027	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 27 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:
2024-04-05 23:17:48 UTC	134	IN	Data Raw: 9a 8b 93 0b 4c 47 45 84 30 d8 da 58 32 7c fe fc 85 21 39 3d 87 b0 01 76 36 56 28 7c 45 05 79 30 be 74 f9 0a 71 2e 58 bc 6c 25 98 8e 08 0d 62 60 65 65 65 38 7f e1 12 c3 95 6b d7 19 ae 5c c1 1e 0e a0 84 f4 1f 9b c4 ad ab 67 19 f8 78 79 19 5a 3b 7a 19 26 4f 9b 49 7a 20 12 0b 06 87 01 cf 29 d0 ff 02 64 00 28 c1 bf 20 43 f3 53 50 76 06 08 30 00 5e c6 42 1a 2b ad 86 b1 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: LGE0X2\|!9=v6V(\|Ey0tq.Xl%b`eee8k\gxyZ;z&OIz )d( CSPv0^B+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49852	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:48 UTC	631	OUT	GET /public/images/ico/ico_twitter.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:48 UTC	342	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:48 GMT Content-Type: image/png Content-Length: 1430 Connection: close Last-Modified: Wed, 06 Dec 2023 00:00:29 GMT ETag: "656fb99d-596" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 1839 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40f37ec32269-MIA
2024-04-05 23:17:48 UTC	1027	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 27 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:
2024-04-05 23:17:48 UTC	403	IN	Data Raw: df b9 9b e1 ee bd fb 0c f9 b9 99 60 39 90 8d b3 a6 4d 64 28 28 ae 64 b8 ff e0 21 8a ab 98 90 39 3b 76 ed 61 b8 7a f5 3a 43 49 61 2e 43 65 6d 13 43 44 58 10 83 b9 99 09 c3 e2 79 33 19 66 cc 9e c7 70 e4 d8 09 0c 6f 81 02 f1 3f b2 00 2f 0f 0f c3 9e 1d 1b 19 b2 f2 8a 19 f8 78 79 19 16 ce 9d ce 30 6b ee 02 86 96 f6 1e ac a1 c8 84 2e f0 f9 cb 17 86 a2 b2 6a 86 49 7d 5d 0c 27 4f 9f 61 58 b6 62 35 03 1b 1b 1b ce 68 60 c2 26 78 14 e8 d4 6b d7 af 33 d4 55 95 31 34 b5 75 31 38 3b 3a 30 58 03 63 80 68 03 8c 0c f5 19 f4 74 75 18 6c ac 2d 19 cc 4d 4d 18 f2 8a ca 18 fa ba 5a c1 de 23 18 06 8a 0a f2 0c ab 97 2f 60 48 4a cb 65 60 62 62 64 98 33 63 12 83 b3 47 00 43 56 7a 32 83 b8 98 28 43 41 49 25 8a 01 cc 3c fc c2 0d 30 0e 28 d0 96 2d 9a c3 d0 dc d6 cd 70 ec f8 49 86 17 Data Ascii: `9Md((d!9;vaz:CIa.CemCDXy3fpo?/xy0k.jI}]'OaXb5h`&xk3U14u18;:0Xchtul-MMZ#/`HJe`bbd3cGCVz2(CAI%<0(-pI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49853	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:48 UTC	737	OUT	GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.cloudflare.steamstatic.com/public/shared/css/shared_global.css?v=qUG5Ub5rrq2J&l=english&_cdn=cloudflare Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:49 UTC	353	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:49 GMT Content-Type: image/png Content-Length: 161 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-a1" Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3955 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd40f628752251-MIA
2024-04-05 23:17:49 UTC	161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 0c 08 06 00 00 00 80 d0 86 82 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 43 49 44 41 54 78 da 62 fc ff ff 3f 03 b5 00 e3 08 36 ec d8 91 c3 fc 40 ea 00 10 1b e0 d0 b7 c0 ca c6 36 91 68 97 e1 31 10 ab 41 04 bd 89 c5 40 9c 06 11 15 66 48 06 5e c0 67 d0 48 4f 1a e4 02 80 00 03 00 23 ae 37 e9 64 d5 5d 17 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<CIDATxb?6@6h1A@fH^gHO#7d]IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49856	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:51 UTC	707	OUT	GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://store.steampowered.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflare Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:51 UTC	361	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:51 GMT Content-Type: application/octet-stream Content-Length: 122684 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT ETag: "649bb1ee-1df3c" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 1259 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd4102ad6ea518-MIA
2024-04-05 23:17:51 UTC	1008	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 df 34 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 3a 3e 7d 8f 00 00 01 6c 00 00 75 7a 47 53 55 42 e1 64 c1 db 00 00 76 e8 00 00 1b a4 4f 53 2f 32 75 36 9e 08 00 00 92 8c 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 92 ec 00 00 05 8e 63 76 74 20 46 bf 09 94 00 01 cf 7c 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d0 44 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 cf 74 00 00 00 08 67 6c 79 66 8a 5f 6d c2 00 00 98 7c 00 01 01 ee 68 65 61 64 17 b4 fb 48 00 01 9a 6c 00 00 00 36 68 68 65 61 06 bf 06 47 00 01 9a a4 00 00 00 24 68 6d 74 78 86 e3 6c 96 00 01 9a c8 00 00 0c e6 6c 6f 63 61 43 48 02 9a 00 01 a7 b0 00 00 06 a6 6d 61 78 70 04 a0 0f 13 00 01 ae 58 00 00 00 20 6e 61 6d Data Ascii: DSIG4GDEF4,@GPOS:>}luzGSUBdvOS/2u6`cmapdcvt F\|fpgm6!Dgasptglyf_m\|headHl6hheaG$hmtxllocaCHmaxpX nam
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 00 00 00 02 00 01 00 02 00 00 00 02 00 01 00 02 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 07 00 10 00 18 00 26 00 3a 00 42 00 4a 00 52 00 01 00 00 00 01 00 4a 00 02 00 08 00 04 00 4c 00 76 00 9a 01 94 00 02 00 08 00 07 01 fa 26 2c 30 7a 36 8e 3c ce 3c fc 3f 7c 00 04 00 00 00 Data Ascii: &:BJRJLv&,0z6<<?\|
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 02 01 00 00 00 01 08 00 02 00 06 01 00 00 00 01 08 00 02 01 09 00 2f 01 0a 00 2f 01 0b 00 2f 01 0c 00 2f 00 02 01 00 00 00 01 08 00 02 00 06 00 ff 00 02 01 00 00 12 01 08 00 16 01 bc ff fe 01 bd 00 02 01 c5 00 14 00 09 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 09 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 09 00 47 00 0f 00 4a Data Ascii: ////GJNGJNGJ
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 00 09 01 c0 00 0c 01 c5 00 07 00 09 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 09 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 09 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 0d 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 09 00 07 01 0a 00 07 01 0b 00 07 01 0c 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 09 00 47 00 0f 00 4a 00 0f 00 4e 00 17 00 ff 00 05 01 08 00 07 01 bb 00 09 01 bd 00 09 01 c0 00 0c 01 c5 00 07 00 06 00 fe 00 07 01 00 00 07 01 03 00 09 01 08 00 07 01 c0 00 07 01 c5 00 07 00 06 00 fe 00 07 01 00 00 07 01 03 00 Data Ascii: GJNGJNGJNGJNGJN
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 01 01 03 00 09 00 0e 01 03 00 09 01 09 00 59 01 0a 00 59 01 0b 00 59 01 0c 00 59 01 67 ff f8 01 68 ff f8 01 69 ff f8 01 6a ff f8 01 6b ff f8 01 6c ff f8 01 6d ff f8 01 6e ff f8 01 6f ff f8 00 01 01 03 00 09 00 01 01 03 00 09 00 02 01 00 00 07 01 03 00 13 00 01 01 03 00 07 00 01 01 03 00 07 00 01 01 03 00 07 00 05 01 03 00 07 01 09 00 07 01 0a 00 07 01 0b 00 07 01 0c 00 07 00 01 01 03 00 07 00 01 01 03 00 07 00 07 00 f8 00 07 00 ff 00 09 01 00 00 05 01 03 00 07 01 06 00 05 01 08 00 11 01 14 Data Ascii: YYYYghijklmno
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 00 ff 00 19 01 00 00 20 01 01 00 20 01 02 00 20 01 03 00 0f 01 04 00 20 01 05 00 20 01 06 00 19 01 07 00 20 01 08 00 2f 00 0b 00 f8 00 05 00 fe 00 27 00 ff 00 0f 01 00 00 23 01 03 00 0f 01 06 00 19 01 08 00 17 01 09 00 2a 01 0a 00 2a 01 0b 00 2a 01 0c 00 2a 00 20 00 d2 00 07 00 f7 00 07 00 f8 00 05 00 f9 00 07 00 fa 00 33 00 fb 00 33 00 fc 00 33 00 fd 00 33 00 fe 00 27 00 ff 00 1e 01 00 00 23 01 01 00 33 01 02 00 33 01 03 00 31 01 04 00 33 01 05 00 33 01 06 00 25 01 07 00 33 01 08 00 34 01 0d 00 07 01 0e 00 07 01 0f 00 07 01 10 00 07 01 11 00 07 01 12 00 07 01 13 00 07 01 14 00 07 01 36 00 07 01 42 00 07 02 a6 00 0c 02 aa 00 07 02 ae 00 09 00 01 01 08 00 07 00 01 01 08 00 07 00 01 01 08 00 07 00 01 01 08 00 07 00 01 01 1c ff e3 00 01 01 1c ff e3 00 07 00 Data Ascii: /'#**** 3333'#33133%346B
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 05 00 01 01 c0 00 00 00 01 01 c0 00 05 00 01 01 c0 00 00 00 01 01 c0 00 00 00 01 01 c0 00 00 00 01 01 c0 00 00 00 04 01 bb 00 0c 01 bd 00 07 01 c0 00 11 01 c5 00 05 00 04 01 bb 00 0c 01 bd 00 07 01 c0 00 11 01 c5 00 05 00 04 01 bb 00 0c 01 bd 00 07 01 c0 00 11 01 c5 00 05 00 04 01 bb 00 0c 01 bd 00 07 01 c0 00 11 01 c5 00 05 00 04 01 bb 00 0c 01 bd 00 07 01 c0 00 11 01 c5 00 05 00 40 01 76 00 00 01 8f 00 00 01 96 00 00 01 97 00 00 01 98 00 00 01 99 00 00 01 9a 00 00 01 9b 00 00 01 9c 00 00 01 9d 00 00 01 9e 00 00 01 9f 00 00 01 a0 00 00 01 a1 00 00 01 a2 00 00 01 a3 00 00 01 a4 00 00 01 a5 00 00 01 a6 00 00 01 a7 00 00 01 a8 00 00 01 a9 00 00 01 aa 00 00 01 ab 00 00 01 ad 00 00 01 b4 00 00 01 b5 00 00 01 b6 00 00 01 b7 00 00 01 b8 00 00 01 b9 00 00 01 ba Data Ascii: @v
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 01 c2 00 00 01 c3 00 07 01 c4 00 00 01 c5 00 09 01 ca 00 00 01 cb 00 00 01 cc 00 00 01 cd 00 00 01 ce 00 00 01 cf 00 00 01 d0 00 00 01 d1 00 00 01 d2 00 00 01 d3 00 00 01 d4 00 00 01 d5 00 00 01 d6 00 00 01 d7 00 00 01 d8 00 00 01 f2 00 00 01 f3 00 00 01 f5 00 00 01 f6 00 00 01 f7 00 00 01 f8 00 00 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 40 01 76 00 0c 01 8f 00 0c 01 96 00 0c 01 97 00 0c 01 98 00 0c 01 99 00 0c 01 9a 00 0c 01 9b 00 0c 01 9c 00 0c 01 9d 00 0c 01 9e 00 0c 01 9f 00 0c 01 a0 00 0c 01 a1 00 0c 01 a2 00 0c 01 a3 00 0c 01 a4 00 0c 01 a5 00 0c 01 a6 00 0c 01 a7 00 0c 01 a8 00 0c 01 a9 00 0c 01 aa 00 0c 01 ab 00 0c 01 ad 00 0c 01 b4 00 0c 01 b5 00 0c 01 b6 00 0c 01 b7 00 0c 01 b8 00 0c 01 b9 00 0c 01 ba 00 Data Ascii: @v
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 06 01 bb 00 13 01 bc 00 07 01 bd 00 0e 01 c0 00 00 01 c3 00 07 01 c5 00 09 00 02 01 bd 00 05 01 c5 00 09 00 02 01 bd 00 05 01 c5 00 09 00 02 01 bd 00 05 01 c5 00 09 00 02 01 bd 00 05 01 c5 00 09 00 02 01 bd 00 05 01 c5 00 09 00 02 01 bd 00 05 01 c5 00 09 00 04 01 bb 00 0c 01 bd 00 07 01 c0 00 11 01 c5 00 05 00 05 01 bc Data Ascii:
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: ff e7 ff e4 ff f7 ff e0 ff f7 ff d6 ff e7 ff db ff e2 00 0f 00 07 ff f6 ff fb 00 00 00 07 ff f1 ff f1 00 00 00 00 ff fe 00 05 00 00 00 00 00 02 00 05 00 00 00 05 00 00 ff f6 ff b5 ff f8 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff d2 ff 8d ff e9 ff ba ff cc ff 9c 00 00 00 00 00 00 00 23 00 00 ff c4 ff f9 ff b7 ff f1 ff c4 ff cc ff dd ff c4 00 14 00 0c 00 02 ff fe 00 00 00 00 00 00 ff e9 00 00 ff b8 00 00 00 02 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c7 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff da 00 00 ff e0 ff fb ff d0 ff f8 00 00 00 0c ff ea ff fe ff e1 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ff de ff da ff fe 00 02 00 Data Ascii: #

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49854	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:51 UTC	704	OUT	GET /public/shared/fonts/MotivaSans-Thin.ttf?v=4.015 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://store.steampowered.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflare Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:51 UTC	361	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:51 GMT Content-Type: application/octet-stream Content-Length: 118736 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT ETag: "649bb1ee-1cfd0" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 5585 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd4102a9c3a551-MIA
2024-04-05 23:17:51 UTC	1008	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 cf c8 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 22 a8 6a e1 00 00 01 6c 00 00 6a 86 47 53 55 42 e1 64 c1 db 00 00 6b f4 00 00 1b a4 4f 53 2f 32 74 0a 9a fe 00 00 87 98 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 87 f8 00 00 05 8e 63 76 74 20 45 b2 08 a6 00 01 c0 10 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 c0 d8 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 c0 08 00 00 00 08 67 6c 79 66 3b 39 02 90 00 00 8d 88 00 00 fd 54 68 65 61 64 17 7a fb 3b 00 01 8a dc 00 00 00 36 68 68 65 61 06 85 06 15 00 01 8b 14 00 00 00 24 68 6d 74 78 6a 34 80 77 00 01 8b 38 00 00 0c e6 6c 6f 63 61 69 6a 2a 56 00 01 98 20 00 00 06 a6 6d 61 78 70 04 9c 0f 17 00 01 9e c8 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOS"jljGSUBdkOS/2t`cmapdcvt Efpgm6!gaspglyf;9Theadz;6hhea$hmtxj4w8locaij*V maxp nam
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 00 00 00 02 00 01 00 02 00 00 00 02 00 01 00 02 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 07 00 10 00 18 00 26 00 38 00 40 00 48 00 50 00 01 00 00 00 01 00 48 00 02 00 08 00 04 00 4a 00 74 00 92 01 12 00 02 00 08 00 06 01 54 25 86 2d a0 32 96 35 c6 35 ee 00 04 00 00 00 01 37 Data Ascii: &8@HPHJtT%-2557
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 00 01 c5 00 14 00 09 00 47 00 14 00 4a 00 14 00 4e 00 1e 00 ff 00 00 01 08 00 00 01 bb 00 00 01 bd 00 00 01 c0 00 00 01 c5 00 00 00 09 00 47 00 14 00 4a 00 14 00 4e 00 1e 00 ff 00 00 01 08 00 00 01 bb 00 00 01 bd 00 00 01 c0 00 00 01 c5 00 00 00 09 00 47 00 14 00 4a 00 14 00 4e 00 1e 00 ff 00 00 01 08 00 00 01 bb 00 00 01 bd 00 00 01 c0 00 00 01 c5 00 00 00 09 00 47 00 14 00 4a 00 14 00 4e 00 1e 00 ff 00 00 01 08 00 00 01 bb 00 00 01 bd 00 00 01 c0 00 00 01 c5 00 00 00 09 00 47 00 14 00 4a 00 14 00 4e 00 1e 00 ff 00 00 01 08 00 00 01 bb 00 00 01 bd 00 00 01 c0 00 00 01 c5 00 00 00 09 00 47 00 14 00 4a 00 14 00 4e 00 1e 00 ff 00 00 01 08 00 00 01 bb 00 00 01 bd 00 00 01 c0 00 00 01 c5 00 00 00 09 00 47 00 14 00 4a 00 14 00 4e 00 1e 00 ff 00 00 01 08 00 00 Data Ascii: GJNGJNGJNGJNGJNGJNGJN
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 01 bd 00 00 01 c0 00 00 01 c5 00 00 00 09 00 47 00 14 00 4a 00 14 00 4e 00 1e 00 ff 00 00 01 08 00 00 01 bb 00 00 01 bd 00 00 01 c0 00 00 01 c5 00 00 00 06 00 fe 00 00 01 00 00 00 01 03 00 00 01 08 00 00 01 c0 00 00 01 c5 00 00 00 06 00 fe 00 00 01 00 00 00 01 03 00 00 01 08 00 00 01 c0 00 00 01 c5 00 00 00 06 00 fe 00 00 01 00 00 00 01 03 00 00 01 08 00 00 01 c0 00 00 01 c5 00 00 00 06 00 fe 00 00 01 00 00 00 01 03 00 00 01 08 00 00 01 c0 00 00 01 c5 00 00 00 06 00 fe 00 00 01 00 00 00 01 03 00 00 01 08 00 00 01 c0 00 00 01 c5 00 00 00 06 00 fe 00 00 01 00 00 00 01 03 00 00 01 08 00 00 01 c0 00 00 01 c5 00 00 00 02 01 00 00 00 01 08 00 00 00 07 01 00 00 1e 01 08 00 1e 01 bc 00 00 01 bd 00 00 01 c0 ff f6 01 c3 ff f6 01 c5 00 14 00 07 01 00 00 1e 01 08 00 Data Ascii: GJN
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 02 01 00 00 00 01 03 ff ff 00 01 01 03 00 00 00 01 01 03 00 00 00 01 01 03 00 00 00 05 01 03 00 00 01 09 00 00 01 0a 00 00 01 0b 00 00 01 0c 00 00 00 01 01 03 00 00 00 01 01 03 00 00 00 07 00 f8 00 00 00 ff 00 00 01 00 00 00 01 03 00 00 01 06 00 00 01 08 00 0a 01 14 00 14 00 14 00 bd 00 00 00 be 00 00 00 bf 00 00 00 c0 00 00 00 c1 00 00 00 c2 00 00 00 c9 00 00 00 d0 00 00 00 df ff f6 00 ea ff f6 00 f2 ff f6 00 fe 00 31 00 ff 00 09 01 00 00 27 01 03 00 27 01 06 00 09 01 08 00 31 01 28 ff f6 01 2d ff f6 01 3a ff ff 00 11 00 f8 00 00 00 fa 00 00 00 fb 00 00 00 fc 00 00 00 fd 00 00 00 fe 00 00 00 ff 00 00 01 00 00 00 01 01 00 00 01 02 00 00 01 03 00 00 01 04 00 00 01 05 00 00 01 06 00 00 01 07 00 00 01 08 00 0a 01 14 00 14 00 02 01 00 00 00 01 03 ff ff 00 02 Data Ascii: 1''1(-:
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 00 00 01 0e 00 00 01 0f 00 00 01 10 00 00 01 11 00 00 01 12 00 00 01 13 00 00 01 14 00 00 01 36 00 00 01 42 00 00 02 a6 00 00 02 aa 00 00 02 ae 00 00 00 01 01 08 00 00 00 01 01 08 00 00 00 01 01 08 00 00 00 01 01 08 00 00 00 01 01 1c ff ec 00 01 01 1c ff ec 00 07 00 f8 00 00 00 ff 00 00 01 00 00 00 01 03 00 00 01 06 00 00 01 08 00 0a 01 14 00 14 00 07 00 f8 00 00 00 ff 00 00 01 00 00 00 01 03 00 00 01 06 00 00 01 08 00 0a 01 14 00 14 00 14 00 bd 00 00 00 be 00 00 00 bf 00 00 00 c0 00 00 00 c1 00 00 00 c2 00 00 00 c9 00 00 00 d0 00 00 00 df ff f6 00 ea ff f6 00 f2 ff f6 00 fe 00 31 00 ff 00 09 01 00 00 27 01 03 00 27 01 06 00 09 01 08 00 31 01 28 ff f6 01 2d ff f6 01 3a ff ff 00 0b 00 f8 00 00 00 ff 00 00 01 00 00 00 01 03 00 00 01 06 00 00 01 08 00 0a 01 Data Ascii: 6B1''1(-:
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 9d 00 00 01 9e 00 00 01 9f 00 00 01 a0 00 00 01 a1 00 00 01 a2 00 00 01 a3 00 00 01 a4 00 00 01 a5 00 00 01 a6 00 00 01 a7 00 00 01 a8 00 00 01 a9 00 00 01 aa 00 00 01 ab 00 00 01 ad 00 00 01 b4 00 00 01 b5 00 00 01 b6 00 00 01 b7 00 00 01 b8 00 00 01 b9 00 00 01 ba 00 00 01 bb 00 00 01 bc 00 00 01 bd 00 00 01 be 00 00 01 bf 00 00 01 c0 ff ff 01 c1 00 00 01 c2 00 00 01 c3 00 00 01 c4 00 00 01 c5 00 00 01 ca 00 00 01 cb 00 00 01 cc 00 00 01 cd 00 00 01 ce 00 00 01 cf 00 00 01 d0 00 00 01 d1 00 00 01 d2 00 00 01 d3 00 00 01 d4 00 00 01 d5 00 00 01 d6 00 00 01 d7 00 00 01 d8 00 00 01 f2 00 00 01 f3 00 00 01 f5 00 00 01 f6 00 00 01 f7 00 00 01 f8 00 00 00 04 01 bb 00 00 01 bd 00 00 01 c0 ff ff 01 c5 00 00 00 40 01 76 00 00 01 8f 00 00 01 96 00 00 01 97 00 00 Data Ascii: @v
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 00 00 01 9e 00 00 01 9f 00 00 01 a0 00 00 01 a1 00 00 01 a2 00 00 01 a3 00 00 01 a4 00 00 01 a5 00 00 01 a6 00 00 01 a7 00 00 01 a8 00 00 01 a9 00 00 01 aa 00 00 01 ab 00 00 01 ad 00 00 01 b4 00 00 01 b5 00 00 01 b6 00 00 01 b7 00 00 01 b8 00 00 01 b9 00 00 01 ba 00 00 01 bb 00 14 01 bc 00 00 01 bd 00 00 01 be 00 00 01 bf 00 00 01 c0 00 14 01 c1 00 00 01 c2 00 00 01 c3 00 00 01 c4 00 00 01 c5 00 00 01 ca 00 00 01 cb 00 00 01 cc 00 00 01 cd 00 00 01 ce 00 00 01 cf 00 00 01 d0 00 00 01 d1 00 00 01 d2 00 00 01 d3 00 00 01 d4 00 00 01 d5 00 00 01 d6 00 00 01 d7 00 00 01 d8 00 00 01 f2 00 00 01 f3 00 00 01 f5 00 00 01 f6 00 00 01 f7 00 00 01 f8 00 00 00 07 01 bb ff ff 01 bc 00 14 01 bd 00 00 01 c0 00 00 01 c3 00 00 01 c5 00 14 02 ae 00 00 00 42 01 76 00 00 01 Data Ascii: Bv
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: c3 00 00 01 c5 00 00 00 02 01 bd 00 00 01 c5 00 00 00 02 01 bd 00 00 01 c5 00 00 00 02 01 bd 00 00 01 c5 00 00 00 02 01 bd 00 00 01 c5 00 00 00 02 01 bd 00 00 01 c5 00 00 00 02 01 bd 00 00 01 c5 00 00 00 04 01 bb 00 00 01 bd 00 00 01 c0 ff ff 01 c5 00 00 00 05 01 bc 00 13 01 bd ff ff 01 c0 00 00 01 c3 ff ff 01 c5 00 1d 00 05 01 bc 00 13 01 bd ff ff 01 c0 00 00 01 c3 ff ff 01 c5 00 1d 00 05 01 bc 00 13 01 bd ff ff 01 c0 00 00 01 c3 ff ff 01 c5 00 1d 00 05 01 bc 00 13 01 bd ff ff 01 c0 00 00 01 c3 ff ff 01 c5 00 1d 00 05 01 bc 00 13 01 bd ff ff 01 c0 00 00 01 c3 ff ff 01 c5 00 1d 00 05 01 bc 00 13 01 bd ff ff 01 c0 00 00 01 c3 ff ff 01 c5 00 1d 00 01 02 99 ff 7d 00 01 02 99 ff 7d 00 01 02 99 ff 7d 00 01 02 99 ff 7d 00 01 02 99 ff 7d 00 01 02 99 ff 7d 00 02 Data Ascii: }}}}}}
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 00 00 00 0a 00 00 00 00 00 0a 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff d8 00 1e 00 00 00 0a 00 0a 00 14 00 00 00 00 ff 9c ff 92 00 00 ff f6 ff f6 ff ba ff a5 ff d8 ff af ff c3 ff 6a ff a6 ff b0 ff b0 ff d8 00 00 00 00 ff 9c 00 00 ff c4 ff ad ff 9c 00 00 ff a6 ff ad ff b0 00 00 00 00 00 00 00 1e ff c4 ff Data Ascii: j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49855	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:51 UTC	706	OUT	GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://store.steampowered.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflare Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:51 UTC	361	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:51 GMT Content-Type: application/octet-stream Content-Length: 124048 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT ETag: "649bb1ee-1e490" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 2222 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd4102a8a9a54c-MIA
2024-04-05 23:17:51 UTC	1008	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 e4 88 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 89 ce b2 88 00 00 01 6c 00 00 75 9a 47 53 55 42 e1 64 c1 db 00 00 77 08 00 00 1b a4 4f 53 2f 32 75 9a 9f 11 00 00 92 ac 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 93 0c 00 00 05 8e 63 76 74 20 47 bc 0a 74 00 01 d4 d0 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d5 98 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 d4 c8 00 00 00 08 67 6c 79 66 35 8e 7d 32 00 00 98 9c 00 01 06 e4 68 65 61 64 17 e9 fb 57 00 01 9f 80 00 00 00 36 68 68 65 61 06 f4 06 76 00 01 9f b8 00 00 00 24 68 6d 74 78 a2 5f 58 e0 00 01 9f dc 00 00 0c e6 6c 6f 63 61 ba 3a 79 56 00 01 ac c4 00 00 06 a6 6d 61 78 70 04 a0 0f 0c 00 01 b3 6c 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSluGSUBdwOS/2u`cmapdcvt Gtfpgm6!gaspglyf5}2headW6hheav$hmtx_Xloca:yVmaxpl nam
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 00 00 00 02 00 01 00 02 00 00 00 02 00 01 00 02 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 07 00 10 00 18 00 26 00 3a 00 42 00 4a 00 52 00 01 00 00 00 01 00 4a 00 02 00 08 00 04 00 4c 00 76 00 9c 01 96 00 02 00 08 00 07 01 fc 26 2e 30 7c 36 90 3c d0 3c fe 3f 7e 00 04 00 00 00 Data Ascii: &:BJRJLv&.0\|6<<?~
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 02 01 00 00 00 01 08 00 05 00 06 01 00 00 00 01 08 00 05 01 09 00 36 01 0a 00 36 01 0b 00 36 01 0c 00 36 00 02 01 00 00 00 01 08 00 05 00 06 00 ff 00 05 01 00 00 0f 01 08 00 19 01 bc ff fb 01 bd 00 05 01 c5 00 14 00 09 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 09 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 09 00 47 00 0b Data Ascii: 6666GJNGJNG
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 09 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 09 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 09 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 0d 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 09 00 0e 01 0a 00 0e 01 0b 00 0e 01 0c 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 09 00 47 00 0b 00 4a 00 0b 00 4e 00 10 00 ff 00 09 01 08 00 0e 01 bb 00 13 01 bd 00 13 01 c0 00 17 01 c5 00 0e 00 06 00 fe 00 0e 01 00 00 0e 01 03 00 13 01 08 00 0e 01 c0 00 0e 01 c5 00 0e 00 06 00 fe 00 0e 01 00 00 0e 01 Data Ascii: GJNGJNGJNGJNGJN
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 0e 01 03 00 13 01 09 00 63 01 0a 00 63 01 0b 00 63 01 0c 00 63 01 67 ff fb 01 68 ff fb 01 69 ff fb 01 6a ff fb 01 6b ff fb 01 6c ff fb 01 6d ff fb 01 6e ff fb 01 6f ff fb 00 01 01 03 00 13 00 01 01 03 00 13 00 02 01 00 00 0e 01 03 00 25 00 01 01 03 00 0e 00 01 01 03 00 0e 00 01 01 03 00 0e 00 05 01 03 00 0e 01 09 00 0e 01 0a 00 0e 01 0b 00 0e 01 0c 00 0e 00 01 01 03 00 0e 00 01 01 03 00 0e 00 07 00 f8 00 0e 00 ff 00 13 01 00 00 09 01 03 00 0e 01 06 00 09 01 08 00 18 Data Ascii: ccccghijklmno%
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 00 39 00 ff 00 1d 01 00 00 2b 01 01 00 2b 01 02 00 2b 01 03 00 0b 01 04 00 2b 01 05 00 2b 01 06 00 1d 01 07 00 2b 01 08 00 36 00 0b 00 f8 00 09 00 fe 00 39 00 ff 00 0b 01 00 00 1f 01 03 00 0b 01 06 00 1d 01 08 00 10 01 09 00 35 01 0a 00 35 01 0b 00 35 01 0c 00 35 00 20 00 d2 00 0e 00 f7 00 0e 00 f8 00 09 00 f9 00 0e 00 fa 00 48 00 fb 00 48 00 fc 00 48 00 fd 00 48 00 fe 00 39 00 ff 00 1e 01 00 00 1f 01 01 00 48 01 02 00 48 01 03 00 43 01 04 00 48 01 05 00 48 01 06 00 2c 01 07 00 48 01 08 00 3f 01 0d 00 0e 01 0e 00 0e 01 0f 00 0e 01 10 00 0e 01 11 00 0e 01 12 00 0e 01 13 00 0e 01 14 00 0e 01 36 00 0e 01 42 00 0e 02 a6 00 17 02 aa 00 0e 02 ae 00 13 00 01 01 08 00 0e 00 01 01 08 00 0e 00 01 01 08 00 0e 00 01 01 08 00 0e 00 01 01 1c ff d9 00 01 01 1c ff d9 00 Data Ascii: 9++++++695555 HHHH9HHCHH,H?6B
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: c5 00 09 00 01 01 c0 00 00 00 01 01 c0 00 09 00 01 01 c0 00 00 00 01 01 c0 00 00 00 01 01 c0 00 00 00 01 01 c0 00 00 00 04 01 bb 00 17 01 bd 00 0e 01 c0 00 21 01 c5 00 09 00 04 01 bb 00 17 01 bd 00 0e 01 c0 00 21 01 c5 00 09 00 04 01 bb 00 17 01 bd 00 0e 01 c0 00 21 01 c5 00 09 00 04 01 bb 00 17 01 bd 00 0e 01 c0 00 21 01 c5 00 09 00 04 01 bb 00 17 01 bd 00 0e 01 c0 00 21 01 c5 00 09 00 40 01 76 00 00 01 8f 00 00 01 96 00 00 01 97 00 00 01 98 00 00 01 99 00 00 01 9a 00 00 01 9b 00 00 01 9c 00 00 01 9d 00 00 01 9e 00 00 01 9f 00 00 01 a0 00 00 01 a1 00 00 01 a2 00 00 01 a3 00 00 01 a4 00 00 01 a5 00 00 01 a6 00 00 01 a7 00 00 01 a8 00 00 01 a9 00 00 01 aa 00 00 01 ab 00 00 01 ad 00 00 01 b4 00 00 01 b5 00 00 01 b6 00 00 01 b7 00 00 01 b8 00 00 01 b9 00 00 Data Ascii: !!!!!@v
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 00 00 01 c2 00 00 01 c3 00 0e 01 c4 00 00 01 c5 00 13 01 ca 00 00 01 cb 00 00 01 cc 00 00 01 cd 00 00 01 ce 00 00 01 cf 00 00 01 d0 00 00 01 d1 00 00 01 d2 00 00 01 d3 00 00 01 d4 00 00 01 d5 00 00 01 d6 00 00 01 d7 00 00 01 d8 00 00 01 f2 00 00 01 f3 00 00 01 f5 00 00 01 f6 00 00 01 f7 00 00 01 f8 00 00 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 40 01 76 00 17 01 8f 00 17 01 96 00 17 01 97 00 17 01 98 00 17 01 99 00 17 01 9a 00 17 01 9b 00 17 01 9c 00 17 01 9d 00 17 01 9e 00 17 01 9f 00 17 01 a0 00 17 01 a1 00 17 01 a2 00 17 01 a3 00 17 01 a4 00 17 01 a5 00 17 01 a6 00 17 01 a7 00 17 01 a8 00 17 01 a9 00 17 01 aa 00 17 01 ab 00 17 01 ad 00 17 01 b4 00 17 01 b5 00 17 01 b6 00 17 01 b7 00 17 01 b8 00 17 01 b9 00 17 01 Data Ascii: %@v
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 06 01 bb 00 25 01 bc 00 0e 01 bd 00 1c 01 c0 00 00 01 c3 00 0e 01 c5 00 13 00 02 01 bd 00 09 01 c5 00 13 00 02 01 bd 00 09 01 c5 00 13 00 02 01 bd 00 09 01 c5 00 13 00 02 01 bd 00 09 01 c5 00 13 00 02 01 bd 00 09 01 c5 00 13 00 02 01 bd 00 09 01 c5 00 13 00 04 01 bb 00 17 01 bd 00 0e 01 c0 00 21 01 c5 00 09 00 05 Data Ascii: %%%%%%!
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 00 19 ff e3 ff e7 ff ed ff dd ff ed ff cb ff e3 ff d4 ff e2 00 0b 00 0e ff f6 ff f7 00 00 00 0e ff f5 ff ed 00 00 00 00 ff fb 00 09 00 00 00 00 00 05 00 09 00 00 00 09 00 00 ff f6 ff b9 ff fb 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e0 ff 91 ff f0 ff ba ff ca ff 9c 00 00 00 00 00 00 00 1f 00 00 ff c4 ff f2 ff be ff f5 ff c4 ff c9 ff d9 ff c4 00 14 00 0f 00 05 ff fb 00 00 00 00 00 00 ff f0 00 00 ff b5 00 00 00 05 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff c0 00 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fe ff dd 00 00 ff e1 ff f7 ff d3 ff fb 00 00 00 17 ff e7 ff fc ff eb 00 05 00 00 00 00 00 00 00 00 00 00 00 00 ff db ff dd ff fb 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49857	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:51 UTC	735	OUT	GET /public/shared/images/joinsteam/new_login_bg_strong_mask.jpg HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.cloudflare.steamstatic.com/public/shared/css/login.css?v=N_ALu0tisSbF&l=english&_cdn=cloudflare Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:51 UTC	374	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:51 GMT Content-Type: image/jpeg Content-Length: 124529 Connection: close Cf-Bgj: h2pri ETag: "649bb1ef-1e671" Last-Modified: Wed, 28 Jun 2023 04:07:11 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 304 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41057bc55c75-MIA
2024-04-05 23:17:51 UTC	995	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 04 38 07 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 87 00 00 03 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 01 01 01 01 01 01 01 01 00 Data Ascii: ExifII*Ducky<Adobed8
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: ac dc a3 56 9f 82 2e 63 20 da aa e1 81 d0 e9 5b 57 80 d3 9e f5 69 90 4c 36 44 26 00 50 11 4a 40 0a 80 07 20 20 00 18 00 00 08 00 00 20 00 90 1c 85 12 01 21 00 00 0c a0 00 00 00 01 10 00 00 00 00 00 00 38 28 20 80 60 22 80 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 4a b0 06 80 88 e4 0a 4a 00 b2 04 ec 8a 33 76 90 10 00 0e 0a 18 00 02 4d 81 a5 72 09 d6 d5 a2 45 65 70 9a 0a e6 d6 b0 c8 a8 0a e8 eb 69 cc 32 0b ed 52 6b 28 0e 0f 0c 0b 71 00 66 c0 40 30 2d 5b 80 25 b0 24 28 90 80 28 01 a0 8e fe 86 8e 60 0f 4f d5 35 c8 57 27 67 eb d5 b9 a8 1c 16 e9 68 9f 80 8c 74 c6 f4 f2 80 cc 00 00 06 14 d5 80 a9 02 b3 d3 d2 c9 84 Data Ascii: V.c [WiL6D&PJ@ !8( `"JJ3vMrEepi2Rk(qf@0-[%$((`O5W'ght
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: f3 50 d4 1a 56 ad 72 45 72 68 94 f0 12 b3 08 00 40 04 50 54 30 00 00 00 00 00 80 00 00 00 00 00 06 90 0e 0a 02 06 00 03 54 64 ea f0 9a 82 a1 14 26 40 80 00 65 01 00 00 00 03 92 84 03 82 02 00 0a 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 10 00 00 00 00 00 00 00 00 00 00 30 1a 02 d3 80 25 dc 09 6c 04 03 28 20 06 00 05 56 8d 81 ad 73 82 b3 d6 8a a9 01 40 01 0c 00 29 f9 41 1c db 52 1c 91 a8 c8 2b 4c ae d3 80 3a de 0a f5 92 0e 7b f5 1a 7c 01 86 94 74 60 4d 6b ec e0 0d 3f e6 72 03 bf 59 aa c8 18 5a 8d 01 00 34 80 70 03 01 d5 4b 03 b3 ab f8 dd 01 eb d7 9a a6 03 6e 00 c7 45 20 14 a0 19 76 ad 9a a4 7c 85 79 8d 2e 58 46 17 f2 04 05 01 0d 00 e0 29 00 48 Data Ascii: PVrErh@PT0Td&@eP0%l( Vs@)AR+L:{\|t`Mk?rYZ4pKnE v\|y.XF)H
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 0a d5 db bf 5b ae b5 14 2e 48 e7 de b4 e9 7d 87 bd bd 6c 13 8d 7b dd 4f d9 5f 6a 85 8f 39 74 ec d3 4d 72 1b ce b8 e5 d3 1f 4b 43 0e f2 f5 9d ea 92 0b 63 32 b2 02 1f c1 0b 0e b6 29 2a eb 0f c9 1a 84 d3 ab ff 00 01 39 c5 7a 4a 94 17 82 a9 a6 0e 1c 04 e2 bd 66 a4 2c 61 65 0c ae 56 12 2a 1b b3 64 6b a2 b5 96 06 cf 38 5c 15 19 b6 d3 e4 0c ef 04 12 00 00 00 03 08 00 00 00 00 00 20 06 90 0e 0a 18 02 40 ea d5 0b 23 17 4a 84 8d 71 9e a9 1c f5 1d 73 54 61 b2 60 26 a5 14 63 65 0c d4 65 21 09 94 22 00 a1 80 10 00 52 45 03 40 08 05 e1 80 00 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 86 00 02 20 00 00 00 00 00 00 70 00 01 20 20 00 1c 14 04 0c 01 22 8b ae 6d Data Ascii: [.H}l{O_j9tMrKCc2)9zJf,aeVdk8\ @#JqsTa`&cee!"RE@ p "m
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 1d ea b0 45 52 a9 43 b5 92 5f e4 23 3c b6 77 b3 ab 2d 83 6f d7 5f 83 22 96 60 63 a7 5d 7b fb 23 52 a1 2e e5 2b 7f 4b 70 38 85 bd bf 3a d9 78 11 2b a2 f9 ad 71 87 fc 01 e7 61 67 d7 df d1 f8 66 a8 ec ec e3 ee 95 eb e4 cc a3 5c 28 de 69 59 0a 34 ae 54 af 85 04 14 d7 00 73 69 fe c6 6b 71 04 51 00 38 28 4e 10 46 77 d6 95 f2 c2 f1 85 fb 54 98 92 75 af aa 7d d5 94 a2 c4 bf 09 f6 37 f4 73 fb 1c 99 e3 4e 5e ff 00 59 69 9b 71 c9 65 66 c7 cf e9 47 4b 34 ce 8c 33 68 0c ac a1 86 e5 08 34 41 0c 01 80 7c 00 01 49 b4 14 d6 97 5f 20 75 f4 b6 7e d0 d9 9a af 63 3b d5 d6 19 23 86 b2 75 c7 25 6f 64 b9 2f 58 ad ff 00 62 4b 82 b1 58 69 7e 02 47 8f dd bb 77 0f 5f 9b 09 6d 07 64 58 a9 50 10 c0 d7 1a 2b 3e 49 56 43 d7 18 7c 12 52 e5 34 94 ca 46 cb f9 44 6d a2 e5 11 62 5a 86 51 4b Data Ascii: ERC_#<w-o_"`c]{#R.+Kp8:x+qagf\(iY4TsikqQ8(NFwTu}7sN^YiqefGK43h4A\|I_ u~c;#u%od/XbKXi~Gw_mdXP+>IVC\|R4FDmbZQK
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 5f 15 42 b5 98 be 96 ae 3d 2f f2 6b 2c e9 97 6b a3 6b 69 35 5c 33 37 2d 4d 32 fd 16 eb d9 59 9a 91 9d 69 d1 7f b3 6e 8a b5 f2 5b 58 cd ed 72 d9 ed a5 a5 c9 cf ee ef c6 d9 e6 eb e4 e5 ab d5 76 e2 93 47 2a 34 b2 84 41 c5 a3 fc 8d aa 24 2a 6d 62 8e 6d 6c 6e 31 5c 1b 6b ea fc 9d a4 72 ae 6b f6 ad f0 cd 7d 53 ec c6 da 5e de 59 a9 12 d2 55 2b 2a 82 86 91 06 d8 f5 74 d1 f8 28 f4 ba ff 00 5f 5a c3 b2 08 ec ae 75 aa 84 8a 39 3b fd 6f 6a 36 bc 92 ab c6 b5 5d 5c 30 2b 0d 5e 7a 2b 22 55 8f ac fa de ca db 25 cf 27 3a eb 1d e9 21 d1 e7 fd ce 4a d8 36 6f 35 2b e5 57 ba bb 55 3b 30 d1 e5 ba 7e c4 1e c7 d4 fd 9d e8 d5 34 39 eb 2b 2b dc d3 3c f7 ce 7f 93 9f 78 d3 c8 ec 63 ae 5a a8 e6 b2 6b a3 b1 75 ab b6 49 b5 c9 8e f1 ae 37 c3 2f d5 58 44 b4 e3 a6 9a 47 91 d4 b1 56 bf 1c Data Ascii: _B=/k,kki5\37-M2Yin[XrvG4A$mbmln1\krk}S^YU+*t(_Zu9;oj6]\0+^z+"U%':!J6o5+WU;0~49++<xcZkuI7/XDGV
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c a1 00 00 10 00 00 00 34 50 00 00 00 c8 2a b4 6c a3 5a e6 90 16 90 0c 00 01 80 7c 01 21 4c 29 a6 04 dc 0c fd 9c 85 55 9c d4 22 68 a4 0d f3 aa af ff 00 24 1b 7b 24 b9 27 43 69 5e a4 e8 f3 f5 5e b7 66 94 27 28 d2 09 69 81 a5 5f 01 95 2b 04 55 1c d9 10 7a 34 ac d0 0e 0e e6 10 e5 01 c8 14 eb c3 03 4b da be bf e4 83 0b a5 12 04 55 f2 06 89 c8 55 7b 2a 81 a6 5a db d9 40 1d ce 34 ce 1f 90 8f 3b 7e a5 aa db 5e 00 e6 6a 02 9a 41 04 05 3f 01 0d 58 29 bb 20 21 b0 24 06 90 0e 08 25 a0 10 46 bd 7e bd f6 b4 54 2b d8 ea fd 55 69 0e e0 6f db a2 c3 29 a2 03 c0 df 7b 5e ce 40 c4 00 a3 4c ed 0c 44 74 27 26 91 79 db d6 c9 99 d4 59 5e c7 5e ea f4 47 97 53 95 e9 cd 75 f5 7b 1f af Data Ascii: 4PlZ\|!L)U"h${$'Ci^^f'(i_+Uz4KUU{Z@4;~^jA?X) !$%F~T+Uio){^@LDt'&yY^^GSu{
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 9e d9 47 82 d8 33 a3 fc a0 e5 c6 e5 6d 7a 71 c2 17 2b d4 7a b4 61 5a 27 f8 99 6d 29 72 69 ce b7 c5 c3 44 ad 4a f6 7a f7 56 cd 1d 71 a7 2f 4c b5 f4 4c ef 2b cd 61 7a c1 51 c3 f6 5d 3f 7c dd 92 e4 c6 9a cb e7 ed 57 5b 34 ce 6e 88 68 2c 43 41 db 35 a6 50 f8 25 74 ca 74 a4 31 19 b0 a8 54 87 eb c8 38 de 98 ab 29 27 5b 99 43 a3 4e 01 c6 99 c2 62 b7 c6 92 dd 94 19 66 3a e8 e2 9c f9 23 3a 85 f2 18 6d 5b 06 6c 57 b1 59 b0 bd c3 3f 51 ee 56 6e 47 ee 09 f5 4d f6 70 16 61 c9 ad e4 3a 4c b0 b4 95 64 66 ed 01 b9 13 ed 2c 37 d5 36 16 9f b7 01 7a 12 90 8c b6 7e ac 39 6d 9f ec b7 f2 57 2e 0f 76 fc 83 8a 4c 06 00 03 48 06 03 ad 5b 2c 89 6f 1b 53 1f e4 dc cb 8e b6 d5 55 23 7c 73 b4 c2 1a 93 36 b7 9c da aa e6 df 93 9d db b6 7c da d7 34 8e 76 ba c8 b8 22 90 09 94 26 41 86 bb Data Ascii: G3mzq+zaZ'm)riDJzVq/LL+azQ]?\|W[4nh,CA5P%tt1T8)'[CNbf:#:m[lWY?QVnGMpa:Ldf,76z~9mW.vLH[,oSU#\|s6\|4v"&A
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 9f d7 69 a6 1a 7e bb f8 02 fe e3 a6 af 4f d9 54 07 cf 59 3a b8 60 15 b3 ad 93 40 7b 1d 3e c2 d7 2f 4b 30 3c fe fe 1e 97 6d 78 03 8c 00 02 40 df 1b fc 1a 88 dc a8 bc af eb 63 3a 8b 1d 95 b4 9c b8 d4 74 e7 77 07 3b 1d a3 7c ed ca 33 5a 7a 19 69 15 47 2b 05 bd 49 c5 4d b6 49 72 cb c1 c5 d9 fb 2c f3 4e 1f 26 f3 e7 d4 ba e3 c6 ed 7d 96 9a b6 93 e0 f4 67 cf 8e 3a db 8d fb 59 cb 67 69 1c ed 34 8a 86 06 99 e1 7b b8 48 0f 4f a9 f5 4d c3 ba 03 d4 cb ad 4c d7 08 23 58 28 20 8a 20 02 00 20 02 00 20 28 80 08 01 41 14 e0 04 d0 1e 5f da 75 26 ae e9 04 78 8d 43 80 8d fa 5d 8b 63 b2 b2 64 b1 65 7d af d7 f6 6b b6 29 a7 c9 ca ba c7 51 14 40 04 00 9b 48 0c ef 16 ab 4c 0f 9f fb 4f ac 6e ce f4 46 e6 9a eb cb 59 59 71 1e 0e 92 33 6b b3 15 6f 43 69 c3 5a d9 5a 24 b2 31 bd 1e ba Data Ascii: i~OTY:`@{>/K0<mx@c:tw;\|3ZziG+IMIr,N&}g:Ygi4{HOML#X( (A_u&xC]cde}k)Q@HLOnFYYq3koCiZZ$1
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: e8 bd 78 61 95 5a 92 b8 02 6b 4b 7c 84 5c 00 8a 11 02 65 12 c0 40 0c 08 bd 65 01 cc d4 32 b2 45 08 00 00 00 81 a2 86 45 04 52 90 82 4a 8a 2a 13 01 05 20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a1 80 80 00 00 00 00 00 60 30 36 ca ff 00 04 1b 05 05 0c 81 14 2b 10 84 98 51 21 4e 1a 25 0d 55 b3 2a ba 64 fe 47 0e b7 ad 61 15 95 94 34 05 20 1a 20 20 a3 1e c2 8a 30 b1 e6 5b c8 e3 7d 56 55 4e c6 a3 15 d5 af a2 a2 55 f2 19 8d ba 99 36 a5 f8 05 76 7e ba b2 22 d5 10 14 92 41 0d 05 2b 55 5a b0 c2 3c 6e f7 5d d2 ed fc 14 72 01 17 a8 56 6d 90 29 0a 72 10 7b 05 12 c0 4d b0 89 0a 08 80 0e be 86 15 db 45 5b 05 77 f7 fe b1 65 92 b5 10 1c 5d 1e cd b0 d9 73 c4 81 f4 3d 8a d3 b7 d5 95 Data Ascii: xaZkK\|\e@e2EERJ* `06+Q!N%U*dGa4 0[}VUNU6v~"A+UZ<n]rVm)r{ME[we]s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49858	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:51 UTC	577	OUT	GET /public/shared/javascript/crypto/jsbn.js HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:51 UTC	455	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:51 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=981,must-revalidate Expires: Fri, 05 Apr 2024 23:13:52 GMT Edge-Control: !no-store,!bypass-cache,max-age=981 ETag: W/"P5-v3JwM3dJd" Strict-Transport-Security: max-age=10368000 X-Cache: HIT CF-Cache-Status: HIT Age: 204 Server: cloudflare CF-RAY: 86fd4105781c571f-MIA
2024-04-05 23:17:51 UTC	914	IN	Data Raw: 37 64 64 39 0d 0a 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 35 20 20 54 6f 6d 20 57 75 0d 0a 2f 2f 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 20 53 65 65 20 22 4c 49 43 45 4e 53 45 22 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0d 0a 0d 0a 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 33 2d 32 30 30 35 20 20 54 6f 6d 20 57 75 0d 0a 20 2a 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0d 0a 20 2a 0d 0a 20 2a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 0d 0a 20 2a 20 61 20 63 6f 70 79 20 6f 66 20 74 68 Data Ascii: 7dd9// Copyright (c) 2005 Tom Wu// All Rights Reserved.// See "LICENSE" for details./* * Copyright (c) 2003-2005 Tom Wu * All Rights Reserved. * * Permission is hereby granted, free of charge, to any person obtaining * a copy of th
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 20 57 41 52 52 41 4e 54 59 20 4f 46 20 4d 45 52 43 48 41 4e 54 41 42 49 4c 49 54 59 20 4f 52 20 46 49 54 4e 45 53 53 20 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 2e 20 20 0d 0a 20 2a 0d 0a 20 2a 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 4c 4c 20 54 4f 4d 20 57 55 20 42 45 20 4c 49 41 42 4c 45 20 46 4f 52 20 41 4e 59 20 53 50 45 43 49 41 4c 2c 20 49 4e 43 49 44 45 4e 54 41 4c 2c 0d 0a 20 2a 20 49 4e 44 49 52 45 43 54 20 4f 52 20 43 4f 4e 53 45 51 55 45 4e 54 49 41 4c 20 44 41 4d 41 47 45 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 4f 52 20 41 4e 59 20 44 41 4d 41 47 45 53 20 57 48 41 54 53 4f 45 56 45 52 0d 0a 20 2a 20 52 45 53 55 4c 54 49 4e 47 20 46 52 4f 4d 20 4c 4f 53 53 20 4f 46 20 55 53 45 2c 20 44 41 54 41 20 4f Data Ascii: WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. * * IN NO EVENT SHALL TOM WU BE LIABLE FOR ANY SPECIAL, INCIDENTAL, * INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY KIND, OR ANY DAMAGES WHATSOEVER * RESULTING FROM LOSS OF USE, DATA O
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 64 69 76 69 64 65 20 74 6f 20 67 65 74 20 74 68 65 20 68 69 67 68 20 62 69 74 73 2c 0d 0a 2f 2f 20 6d 61 78 20 64 69 67 69 74 20 62 69 74 73 20 73 68 6f 75 6c 64 20 62 65 20 32 36 20 62 65 63 61 75 73 65 0d 0a 2f 2f 20 6d 61 78 20 69 6e 74 65 72 6e 61 6c 20 76 61 6c 75 65 20 3d 20 32 2a 64 76 61 6c 75 65 5e 32 2d 32 2a 64 76 61 6c 75 65 20 28 3c 20 32 5e 35 33 29 0d 0a 66 75 6e 63 74 69 6f 6e 20 61 6d 31 28 69 2c 78 2c 77 2c 6a 2c 63 2c 6e 29 20 7b 0d 0a 09 77 68 69 6c 65 28 2d 2d 6e 20 3e 3d 20 30 29 20 7b 0d 0a 09 09 76 61 72 20 76 20 3d 20 78 2a 74 68 69 73 5b 69 2b 2b 5d 2b 77 5b 6a 5d 2b 63 3b 0d 0a 09 09 63 20 3d 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 76 2f 30 78 34 30 30 30 30 30 30 29 3b 0d 0a 09 09 77 5b 6a 2b 2b 5d 20 3d 20 76 26 30 78 33 66 66 66 Data Ascii: divide to get the high bits,// max digit bits should be 26 because// max internal value = 2dvalue^2-2dvalue (< 2^53)function am1(i,x,w,j,c,n) {while(--n >= 0) {var v = x*this[i++]+w[j]+c;c = Math.floor(v/0x4000000);w[j++] = v&0x3fff
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 70 72 65 66 65 72 20 61 6d 33 0d 0a 09 42 69 67 49 6e 74 65 67 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 61 6d 20 3d 20 61 6d 33 3b 0d 0a 09 64 62 69 74 73 20 3d 20 32 38 3b 0d 0a 7d 0d 0a 0d 0a 42 69 67 49 6e 74 65 67 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 44 42 20 3d 20 64 62 69 74 73 3b 0d 0a 42 69 67 49 6e 74 65 67 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 44 4d 20 3d 20 28 28 31 3c 3c 64 62 69 74 73 29 2d 31 29 3b 0d 0a 42 69 67 49 6e 74 65 67 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 44 56 20 3d 20 28 31 3c 3c 64 62 69 74 73 29 3b 0d 0a 0d 0a 76 61 72 20 42 49 5f 46 50 20 3d 20 35 32 3b 0d 0a 42 69 67 49 6e 74 65 67 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 46 56 20 3d 20 4d 61 74 68 2e 70 6f 77 28 32 2c 42 49 5f 46 50 29 3b 0d 0a 42 69 67 49 6e 74 65 67 65 72 Data Ascii: prefer am3BigInteger.prototype.am = am3;dbits = 28;}BigInteger.prototype.DB = dbits;BigInteger.prototype.DM = ((1<<dbits)-1);BigInteger.prototype.DV = (1<<dbits);var BI_FP = 52;BigInteger.prototype.FV = Math.pow(2,BI_FP);BigInteger
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 33 3b 0d 0a 09 65 6c 73 65 20 69 66 28 62 20 3d 3d 20 32 35 36 29 20 6b 20 3d 20 38 3b 20 2f 2f 20 62 79 74 65 20 61 72 72 61 79 0d 0a 09 65 6c 73 65 20 69 66 28 62 20 3d 3d 20 32 29 20 6b 20 3d 20 31 3b 0d 0a 09 65 6c 73 65 20 69 66 28 62 20 3d 3d 20 33 32 29 20 6b 20 3d 20 35 3b 0d 0a 09 65 6c 73 65 20 69 66 28 62 20 3d 3d 20 34 29 20 6b 20 3d 20 32 3b 0d 0a 09 65 6c 73 65 20 7b 20 74 68 69 73 2e 66 72 6f 6d 52 61 64 69 78 28 73 2c 62 29 3b 20 72 65 74 75 72 6e 3b 20 7d 0d 0a 09 74 68 69 73 2e 74 20 3d 20 30 3b 0d 0a 09 74 68 69 73 2e 73 20 3d 20 30 3b 0d 0a 09 76 61 72 20 69 20 3d 20 73 2e 6c 65 6e 67 74 68 2c 20 6d 69 20 3d 20 66 61 6c 73 65 2c 20 73 68 20 3d 20 30 3b 0d 0a 09 77 68 69 6c 65 28 2d 2d 69 20 3e 3d 20 30 29 20 7b 0d 0a 09 09 76 61 72 20 Data Ascii: 3;else if(b == 256) k = 8; // byte arrayelse if(b == 2) k = 1;else if(b == 32) k = 5;else if(b == 4) k = 2;else { this.fromRadix(s,b); return; }this.t = 0;this.s = 0;var i = s.length, mi = false, sh = 0;while(--i >= 0) {var
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 70 20 3c 20 74 68 69 73 2e 44 42 20 26 26 20 28 64 20 3d 20 74 68 69 73 5b 69 5d 3e 3e 70 29 20 3e 20 30 29 20 7b 20 6d 20 3d 20 74 72 75 65 3b 20 72 20 3d 20 69 6e 74 32 63 68 61 72 28 64 29 3b 20 7d 0d 0a 09 09 77 68 69 6c 65 28 69 20 3e 3d 20 30 29 20 7b 0d 0a 09 09 09 69 66 28 70 20 3c 20 6b 29 20 7b 0d 0a 09 09 09 09 64 20 3d 20 28 74 68 69 73 5b 69 5d 26 28 28 31 3c 3c 70 29 2d 31 29 29 3c 3c 28 6b 2d 70 29 3b 0d 0a 09 09 09 09 64 20 7c 3d 20 74 68 69 73 5b 2d 2d 69 5d 3e 3e 28 70 2b 3d 74 68 69 73 2e 44 42 2d 6b 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 09 65 6c 73 65 20 7b 0d 0a 09 09 09 09 64 20 3d 20 28 74 68 69 73 5b 69 5d 3e 3e 28 70 2d 3d 6b 29 29 26 6b 6d 3b 0d 0a 09 09 09 09 69 66 28 70 20 3c 3d 20 30 29 20 7b 20 70 20 2b 3d 20 74 68 69 73 2e 44 Data Ascii: p < this.DB && (d = this[i]>>p) > 0) { m = true; r = int2char(d); }while(i >= 0) {if(p < k) {d = (this[i]&((1<<p)-1))<<(k-p);d \|= this[--i]>>(p+=this.DB-k);}else {d = (this[i]>>(p-=k))&km;if(p <= 0) { p += this.D
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 20 72 5b 69 2b 6e 5d 20 3d 20 74 68 69 73 5b 69 5d 3b 0d 0a 09 66 6f 72 28 69 20 3d 20 6e 2d 31 3b 20 69 20 3e 3d 20 30 3b 20 2d 2d 69 29 20 72 5b 69 5d 20 3d 20 30 3b 0d 0a 09 72 2e 74 20 3d 20 74 68 69 73 2e 74 2b 6e 3b 0d 0a 09 72 2e 73 20 3d 20 74 68 69 73 2e 73 3b 0d 0a 7d 0d 0a 0d 0a 2f 2f 20 28 70 72 6f 74 65 63 74 65 64 29 20 72 20 3d 20 74 68 69 73 20 3e 3e 20 6e 2a 44 42 0d 0a 66 75 6e 63 74 69 6f 6e 20 62 6e 70 44 52 53 68 69 66 74 54 6f 28 6e 2c 72 29 20 7b 0d 0a 09 66 6f 72 28 76 61 72 20 69 20 3d 20 6e 3b 20 69 20 3c 20 74 68 69 73 2e 74 3b 20 2b 2b 69 29 20 72 5b 69 2d 6e 5d 20 3d 20 74 68 69 73 5b 69 5d 3b 0d 0a 09 72 2e 74 20 3d 20 4d 61 74 68 2e 6d 61 78 28 74 68 69 73 2e 74 2d 6e 2c 30 29 3b 0d 0a 09 72 2e 73 20 3d 20 74 68 69 73 2e 73 Data Ascii: r[i+n] = this[i];for(i = n-1; i >= 0; --i) r[i] = 0;r.t = this.t+n;r.s = this.s;}// (protected) r = this >> n*DBfunction bnpDRShiftTo(n,r) {for(var i = n; i < this.t; ++i) r[i-n] = this[i];r.t = Math.max(this.t-n,0);r.s = this.s
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 3b 0d 0a 09 09 09 63 20 3e 3e 3d 20 74 68 69 73 2e 44 42 3b 0d 0a 09 09 7d 0d 0a 09 09 63 20 2b 3d 20 74 68 69 73 2e 73 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 20 7b 0d 0a 09 09 63 20 2b 3d 20 74 68 69 73 2e 73 3b 0d 0a 09 09 77 68 69 6c 65 28 69 20 3c 20 61 2e 74 29 20 7b 0d 0a 09 09 09 63 20 2d 3d 20 61 5b 69 5d 3b 0d 0a 09 09 09 72 5b 69 2b 2b 5d 20 3d 20 63 26 74 68 69 73 2e 44 4d 3b 0d 0a 09 09 09 63 20 3e 3e 3d 20 74 68 69 73 2e 44 42 3b 0d 0a 09 09 7d 0d 0a 09 09 63 20 2d 3d 20 61 2e 73 3b 0d 0a 09 7d 0d 0a 09 72 2e 73 20 3d 20 28 63 3c 30 29 3f 2d 31 3a 30 3b 0d 0a 09 69 66 28 63 20 3c 20 2d 31 29 20 72 5b 69 2b 2b 5d 20 3d 20 74 68 69 73 2e 44 56 2b 63 3b 0d 0a 09 65 6c 73 65 20 69 66 28 63 20 3e 20 30 29 20 72 5b 69 2b 2b 5d 20 3d 20 63 3b 0d 0a 09 Data Ascii: ;c >>= this.DB;}c += this.s;}else {c += this.s;while(i < a.t) {c -= a[i];r[i++] = c&this.DM;c >>= this.DB;}c -= a.s;}r.s = (c<0)?-1:0;if(c < -1) r[i++] = this.DV+c;else if(c > 0) r[i++] = c;
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 74 75 72 6e 3b 0d 0a 09 7d 0d 0a 09 69 66 28 72 20 3d 3d 20 6e 75 6c 6c 29 20 72 20 3d 20 6e 62 69 28 29 3b 0d 0a 09 76 61 72 20 79 20 3d 20 6e 62 69 28 29 2c 20 74 73 20 3d 20 74 68 69 73 2e 73 2c 20 6d 73 20 3d 20 6d 2e 73 3b 0d 0a 09 76 61 72 20 6e 73 68 20 3d 20 74 68 69 73 2e 44 42 2d 6e 62 69 74 73 28 70 6d 5b 70 6d 2e 74 2d 31 5d 29 3b 20 20 20 20 2f 2f 20 6e 6f 72 6d 61 6c 69 7a 65 20 6d 6f 64 75 6c 75 73 0d 0a 09 69 66 28 6e 73 68 20 3e 20 30 29 20 7b 20 70 6d 2e 6c 53 68 69 66 74 54 6f 28 6e 73 68 2c 79 29 3b 20 70 74 2e 6c 53 68 69 66 74 54 6f 28 6e 73 68 2c 72 29 3b 20 7d 0d 0a 09 65 6c 73 65 20 7b 20 70 6d 2e 63 6f 70 79 54 6f 28 79 29 3b 20 70 74 2e 63 6f 70 79 54 6f 28 72 29 3b 20 7d 0d 0a 09 76 61 72 20 79 73 20 3d 20 79 2e 74 3b 0d 0a 09 Data Ascii: turn;}if(r == null) r = nbi();var y = nbi(), ts = this.s, ms = m.s;var nsh = this.DB-nbits(pm[pm.t-1]); // normalize modulusif(nsh > 0) { pm.lShiftTo(nsh,y); pt.lShiftTo(nsh,r); }else { pm.copyTo(y); pt.copyTo(r); }var ys = y.t;
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 69 6e 67 20 22 63 6c 61 73 73 69 63 22 20 61 6c 67 6f 72 69 74 68 6d 0d 0a 66 75 6e 63 74 69 6f 6e 20 43 6c 61 73 73 69 63 28 6d 29 20 7b 20 74 68 69 73 2e 6d 20 3d 20 6d 3b 20 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 63 43 6f 6e 76 65 72 74 28 78 29 20 7b 0d 0a 09 69 66 28 78 2e 73 20 3c 20 30 20 7c 7c 20 78 2e 63 6f 6d 70 61 72 65 54 6f 28 74 68 69 73 2e 6d 29 20 3e 3d 20 30 29 20 72 65 74 75 72 6e 20 78 2e 6d 6f 64 28 74 68 69 73 2e 6d 29 3b 0d 0a 09 65 6c 73 65 20 72 65 74 75 72 6e 20 78 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 63 52 65 76 65 72 74 28 78 29 20 7b 20 72 65 74 75 72 6e 20 78 3b 20 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 63 52 65 64 75 63 65 28 78 29 20 7b 20 78 2e 64 69 76 52 65 6d 54 6f 28 74 68 69 73 2e 6d 2c 6e 75 6c 6c 2c 78 29 3b 20 7d Data Ascii: ing "classic" algorithmfunction Classic(m) { this.m = m; }function cConvert(x) {if(x.s < 0 \|\| x.compareTo(this.m) >= 0) return x.mod(this.m);else return x;}function cRevert(x) { return x; }function cReduce(x) { x.divRemTo(this.m,null,x); }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49859	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:51 UTC	576	OUT	GET /public/shared/javascript/crypto/rsa.js HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:51 UTC	455	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:51 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=1076,must-revalidate Expires: Fri, 05 Apr 2024 23:28:40 GMT ETag: W/".2DapVp3yyevw" Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT Strict-Transport-Security: max-age=10368000 X-Cache: EXPIRED CF-Cache-Status: HIT Age: 25 Server: cloudflare CF-RAY: 86fd41058e773352-MIA
2024-04-05 23:17:51 UTC	914	IN	Data Raw: 64 31 62 0d 0a 76 61 72 20 52 53 41 50 75 62 6c 69 63 4b 65 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 24 6d 6f 64 75 6c 75 73 5f 68 65 78 2c 20 24 65 6e 63 72 79 70 74 69 6f 6e 45 78 70 6f 6e 65 6e 74 5f 68 65 78 29 20 7b 0d 0a 09 74 68 69 73 2e 6d 6f 64 75 6c 75 73 20 3d 20 6e 65 77 20 42 69 67 49 6e 74 65 67 65 72 28 20 24 6d 6f 64 75 6c 75 73 5f 68 65 78 2c 20 31 36 29 3b 0d 0a 09 74 68 69 73 2e 65 6e 63 72 79 70 74 69 6f 6e 45 78 70 6f 6e 65 6e 74 20 3d 20 6e 65 77 20 42 69 67 49 6e 74 65 67 65 72 28 20 24 65 6e 63 72 79 70 74 69 6f 6e 45 78 70 6f 6e 65 6e 74 5f 68 65 78 2c 20 31 36 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 76 61 72 20 42 61 73 65 36 34 20 3d 20 7b 0d 0a 09 62 61 73 65 36 34 3a 20 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 Data Ascii: d1bvar RSAPublicKey = function($modulus_hex, $encryptionExponent_hex) {this.modulus = new BigInteger( $modulus_hex, 16);this.encryptionExponent = new BigInteger( $encryptionExponent_hex, 16);};var Base64 = {base64: "ABCDEFGHIJKLMNOPQRSTUV
2024-04-05 23:17:51 UTC	1369	IN	Data Raw: 69 73 2e 62 61 73 65 36 34 2e 63 68 61 72 41 74 28 24 65 6e 63 34 29 3b 0d 0a 09 09 7d 20 77 68 69 6c 65 20 28 24 69 20 3c 20 24 69 6e 70 75 74 2e 6c 65 6e 67 74 68 29 3b 0d 0a 09 09 72 65 74 75 72 6e 20 24 6f 75 74 70 75 74 3b 0d 0a 09 7d 2c 0d 0a 09 64 65 63 6f 64 65 3a 20 66 75 6e 63 74 69 6f 6e 28 24 69 6e 70 75 74 29 20 7b 0d 0a 09 09 69 66 28 21 24 69 6e 70 75 74 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 09 24 69 6e 70 75 74 20 3d 20 24 69 6e 70 75 74 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 41 2d 5a 61 2d 7a 30 2d 39 5c 2b 5c 2f 5c 3d 5d 2f 67 2c 20 22 22 29 3b 0d 0a 09 09 76 61 72 20 24 6f 75 74 70 75 74 20 3d 20 22 22 3b 0d 0a 09 09 76 61 72 20 24 65 6e 63 31 2c 20 24 65 6e 63 32 2c 20 24 65 6e 63 33 2c 20 24 65 6e 63 34 3b 0d 0a 09 09 76 Data Ascii: is.base64.charAt($enc4);} while ($i < $input.length);return $output;},decode: function($input) {if(!$input) return false;$input = $input.replace(/[^A-Za-z0-9\+\/\=]/g, "");var $output = "";var $enc1, $enc2, $enc3, $enc4;v
2024-04-05 23:17:51 UTC	1079	IN	Data Raw: 6e 70 75 74 2e 63 68 61 72 41 74 28 24 69 2b 2b 29 29 20 26 20 30 78 66 29 29 3b 0d 0a 09 09 7d 20 77 68 69 6c 65 20 28 24 69 20 3c 20 24 69 6e 70 75 74 2e 6c 65 6e 67 74 68 29 3b 0d 0a 09 09 72 65 74 75 72 6e 20 24 6f 75 74 70 75 74 3b 0d 0a 09 7d 0d 0a 7d 3b 0d 0a 0d 0a 76 61 72 20 52 53 41 20 3d 20 7b 0d 0a 0d 0a 09 67 65 74 50 75 62 6c 69 63 4b 65 79 3a 20 66 75 6e 63 74 69 6f 6e 28 20 24 6d 6f 64 75 6c 75 73 5f 68 65 78 2c 20 24 65 78 70 6f 6e 65 6e 74 5f 68 65 78 20 29 20 7b 0d 0a 09 09 72 65 74 75 72 6e 20 6e 65 77 20 52 53 41 50 75 62 6c 69 63 4b 65 79 28 20 24 6d 6f 64 75 6c 75 73 5f 68 65 78 2c 20 24 65 78 70 6f 6e 65 6e 74 5f 68 65 78 20 29 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 65 6e 63 72 79 70 74 3a 20 66 75 6e 63 74 69 6f 6e 28 24 64 61 74 61 2c Data Ascii: nput.charAt($i++)) & 0xf));} while ($i < $input.length);return $output;}};var RSA = {getPublicKey: function( $modulus_hex, $exponent_hex ) {return new RSAPublicKey( $modulus_hex, $exponent_hex );},encrypt: function($data,
2024-04-05 23:17:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49861	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:51 UTC	630	OUT	GET /public/javascript/applications/store/shared_english-json.js?contenthash=6b4792eaeb66b96b16e2 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:52 UTC	418	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:51 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 02 Apr 2024 22:30:34 GMT Cache-Control: public,max-age=15552000 Expires: Sun, 29 Sep 2024 22:32:12 GMT Strict-Transport-Security: max-age=10368000 X-Cache: HIT CF-Cache-Status: HIT Age: 261938 Server: cloudflare CF-RAY: 86fd4107cf9c370f-MIA
2024-04-05 23:17:52 UTC	951	IN	Data Raw: 33 39 65 33 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 37 35 5d 2c 7b 34 34 39 36 35 Data Ascii: 39e3/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/"use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[7975],{44965
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 65 6d 6f 76 65 22 3a 22 52 65 6d 6f 76 65 22 2c 22 42 75 74 74 6f 6e 5f 52 65 76 65 72 74 22 3a 22 52 65 76 65 72 74 22 2c 22 42 75 74 74 6f 6e 5f 53 61 76 65 22 3a 22 53 61 76 65 22 2c 22 42 75 74 74 6f 6e 5f 53 61 76 65 64 22 3a 22 53 61 76 65 64 22 2c 22 42 75 74 74 6f 6e 5f 53 68 61 72 65 22 3a 22 53 68 61 72 65 22 2c 22 42 75 74 74 6f 6e 5f 55 70 64 61 74 65 22 3a 22 55 70 64 61 74 65 22 2c 22 42 75 74 74 6f 6e 5f 53 61 76 65 41 6e 64 43 6f 6e 74 69 6e 75 65 22 3a 22 53 61 76 65 20 61 6e 64 20 43 6f 6e 74 69 6e 75 65 22 2c 22 42 75 74 74 6f 6e 5f 53 61 76 65 41 6e 64 43 6c 6f 73 65 22 3a 22 53 61 76 65 20 61 6e 64 20 43 6c 6f 73 65 22 2c 22 42 75 74 74 6f 6e 5f 53 75 62 6d 69 74 22 3a 22 53 75 62 6d 69 74 22 2c 22 42 75 74 74 6f 6e 5f 46 6f 6c 6c 6f Data Ascii: emove":"Remove","Button_Revert":"Revert","Button_Save":"Save","Button_Saved":"Saved","Button_Share":"Share","Button_Update":"Update","Button_SaveAndContinue":"Save and Continue","Button_SaveAndClose":"Save and Close","Button_Submit":"Submit","Button_Follo
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 54 6f 6f 4c 61 72 67 65 22 3a 22 4e 75 6d 62 65 72 20 74 6f 6f 20 6c 61 72 67 65 2e 22 2c 22 49 6e 70 75 74 5f 45 72 72 6f 72 5f 4d 75 73 74 42 65 55 52 4c 22 3a 22 46 69 65 6c 64 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 55 52 4c 2e 22 2c 22 49 6e 70 75 74 5f 45 72 72 6f 72 5f 4d 75 73 74 42 65 45 6d 61 69 6c 22 3a 22 46 69 65 6c 64 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 45 6d 61 69 6c 2e 22 2c 22 49 6e 70 75 74 5f 45 72 72 6f 72 5f 4d 75 73 74 42 65 4e 75 6d 62 65 72 22 3a 22 46 69 65 6c 64 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 2e 22 2c 22 49 6e 70 75 74 5f 45 72 72 6f 72 5f 54 6f 6f 4d 61 6e 79 43 68 61 72 61 63 74 65 72 73 22 3a 22 46 69 65 6c 64 20 65 78 63 65 65 64 73 20 6d 61 78 69 6d 75 6d 20 63 68 61 72 61 63 74 65 72 Data Ascii: TooLarge":"Number too large.","Input_Error_MustBeURL":"Field is not a valid URL.","Input_Error_MustBeEmail":"Field is not a valid Email.","Input_Error_MustBeNumber":"Field must be a number.","Input_Error_TooManyCharacters":"Field exceeds maximum character
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 6f 69 63 65 54 72 61 6e 73 6d 69 73 73 69 6f 6e 54 79 70 65 5f 4f 70 65 6e 4d 69 63 22 3a 22 4f 70 65 6e 20 4d 69 63 72 6f 70 68 6f 6e 65 22 2c 22 56 6f 69 63 65 54 72 61 6e 73 6d 69 73 73 69 6f 6e 54 79 70 65 5f 50 75 73 68 54 6f 54 61 6c 6b 22 3a 22 50 75 73 68 2d 74 6f 2d 54 61 6c 6b 22 2c 22 56 6f 69 63 65 54 72 61 6e 73 6d 69 73 73 69 6f 6e 54 79 70 65 5f 50 75 73 68 54 6f 4d 75 74 65 22 3a 22 50 75 73 68 2d 74 6f 2d 4d 75 74 65 22 2c 22 56 6f 69 63 65 43 6c 65 61 72 48 6f 74 4b 65 79 54 6f 6f 6c 74 69 70 22 3a 22 43 6c 65 61 72 20 6d 75 74 65 20 74 6f 67 67 6c 65 20 68 6f 74 6b 65 79 20 61 73 73 69 67 6e 6d 65 6e 74 22 2c 22 56 6f 69 63 65 54 72 61 6e 73 6d 69 73 73 69 6f 6e 54 79 70 65 45 78 70 6c 61 69 6e 65 72 22 3a 22 50 75 73 68 20 61 20 75 73 Data Ascii: oiceTransmissionType_OpenMic":"Open Microphone","VoiceTransmissionType_PushToTalk":"Push-to-Talk","VoiceTransmissionType_PushToMute":"Push-to-Mute","VoiceClearHotKeyTooltip":"Clear mute toggle hotkey assignment","VoiceTransmissionTypeExplainer":"Push a us
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 22 2c 22 56 6f 69 63 65 4e 6f 69 73 65 43 61 6e 63 65 6c 6c 61 74 69 6f 6e 22 3a 22 4e 6f 69 73 65 20 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 22 2c 22 56 6f 69 63 65 41 75 74 6f 47 61 69 6e 43 6f 6e 74 72 6f 6c 22 3a 22 41 75 74 6f 6d 61 74 69 63 20 76 6f 6c 75 6d 65 2f 67 61 69 6e 20 63 6f 6e 74 72 6f 6c 22 2c 22 44 65 66 61 75 6c 74 4d 69 63 22 3a 22 44 65 66 61 75 6c 74 22 2c 22 4d 69 63 4c 6f 61 64 69 6e 67 2e 2e 2e 22 3a 22 4c 6f 61 64 69 6e 67 2e 2e 2e 22 2c 22 44 65 66 61 75 6c 74 4f 75 74 70 75 74 44 65 76 69 63 65 22 3a 22 44 65 66 61 75 6c 74 22 2c 22 4f 75 74 70 75 74 44 65 76 69 63 65 4c 6f 61 64 69 6e 67 2e 2e 2e 22 3a 22 4c 6f 61 64 69 6e 67 2e 2e 2e 22 2c 22 42 72 65 61 64 43 72 75 6d 62 73 5f 41 6c 6c 45 76 65 6e 74 73 22 3a 22 Data Ascii: ation","VoiceNoiseCancellation":"Noise cancellation","VoiceAutoGainControl":"Automatic volume/gain control","DefaultMic":"Default","MicLoading...":"Loading...","DefaultOutputDevice":"Default","OutputDeviceLoading...":"Loading...","BreadCrumbs_AllEvents":"
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 20 53 74 65 61 6d 20 63 75 72 61 74 6f 72 73 22 2c 22 45 76 65 6e 74 43 75 72 61 74 6f 72 5f 4e 6f 45 76 65 6e 74 73 46 6f 75 6e 64 5f 54 69 74 6c 65 22 3a 22 4e 6f 20 50 6f 73 74 69 6e 67 73 20 46 6f 75 6e 64 22 2c 22 45 76 65 6e 74 43 75 72 61 74 6f 72 5f 4e 6f 45 76 65 6e 74 73 46 6f 75 6e 64 5f 42 6f 64 79 22 3a 22 4e 6f 20 70 6f 73 74 69 6e 67 73 20 77 65 72 65 20 66 6f 75 6e 64 20 66 6f 72 20 74 68 69 73 20 63 75 72 61 74 6f 72 22 2c 22 45 76 65 6e 74 43 75 72 61 74 6f 72 5f 42 72 6f 77 73 65 4d 6f 72 65 22 3a 22 42 72 6f 77 73 65 20 4d 6f 72 65 20 53 6f 75 72 63 65 73 22 2c 22 45 76 65 6e 74 43 75 72 61 74 6f 72 5f 46 65 65 64 43 61 70 74 69 6f 6e 5f 4c 6f 6e 67 22 3a 22 46 6f 6c 6c 6f 77 20 73 6f 6d 65 20 6f 66 20 74 68 65 73 65 20 53 74 65 61 6d Data Ascii: Steam curators","EventCurator_NoEventsFound_Title":"No Postings Found","EventCurator_NoEventsFound_Body":"No postings were found for this curator","EventCurator_BrowseMore":"Browse More Sources","EventCurator_FeedCaption_Long":"Follow some of these Steam
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 61 6c 65 6e 64 61 72 5f 4e 6f 46 75 74 75 72 65 45 76 65 6e 74 73 22 3a 22 4e 6f 20 75 70 63 6f 6d 69 6e 67 20 65 76 65 6e 74 73 20 66 6f 75 6e 64 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 4e 6f 50 61 73 74 45 76 65 6e 74 73 22 3a 22 4e 6f 20 6f 6c 64 65 72 20 70 6f 73 74 73 20 66 6f 75 6e 64 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 4e 6f 4d 6f 72 65 46 75 74 75 72 65 45 76 65 6e 74 73 22 3a 22 4e 6f 20 6d 6f 72 65 20 75 70 63 6f 6d 69 6e 67 20 65 76 65 6e 74 73 20 66 6f 75 6e 64 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 4e 6f 4d 6f 72 65 50 61 73 74 45 76 65 6e 74 73 22 3a 22 4e 6f 20 6d 6f 72 65 20 6f 6c 64 65 72 20 70 6f 73 74 73 20 66 6f 75 6e 64 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 55 70 64 61 74 65 73 56 69 Data Ascii: alendar_NoFutureEvents":"No upcoming events found","EventCalendar_NoPastEvents":"No older posts found","EventCalendar_NoMoreFutureEvents":"No more upcoming events found","EventCalendar_NoMorePastEvents":"No more older posts found","EventCalendar_UpdatesVi
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 20 50 6c 61 79 65 64 20 25 31 24 73 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 54 69 6d 65 45 76 65 6e 74 57 69 73 68 6c 69 73 74 65 64 22 3a 22 57 69 73 68 6c 69 73 74 65 64 20 25 31 24 73 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 47 6c 6f 62 61 6c 43 61 6c 65 6e 64 61 72 5f 41 63 74 69 6f 6e 22 3a 22 52 65 74 75 72 6e 20 74 6f 20 4e 65 77 73 20 48 75 62 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 53 70 65 63 69 66 69 63 43 61 6c 65 6e 64 61 72 22 3a 22 25 31 24 73 20 25 32 24 73 20 4e 65 77 73 20 48 75 62 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 47 6f 74 6f 5f 53 70 65 63 69 66 69 63 43 61 6c 65 6e 64 61 72 22 3a 22 47 6f 20 74 6f 20 25 31 24 73 20 4e 65 77 73 20 48 75 62 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 Data Ascii: Played %1$s","EventCalendar_TimeEventWishlisted":"Wishlisted %1$s","EventCalendar_GlobalCalendar_Action":"Return to News Hub","EventCalendar_SpecificCalendar":"%1$s %2$s News Hub","EventCalendar_Goto_SpecificCalendar":"Go to %1$s News Hub","EventCalendar
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 65 64 20 61 64 75 6c 74 20 63 6f 6e 74 65 6e 74 20 66 6c 61 67 22 2c 22 45 76 65 6e 74 4d 6f 64 54 69 6c 65 5f 41 63 74 69 6f 6e 5f 54 69 74 6c 65 22 3a 22 4d 6f 64 65 72 61 74 69 6f 6e 20 48 69 73 74 6f 72 79 22 2c 22 45 76 65 6e 74 4d 6f 64 54 69 6c 65 5f 41 63 74 69 6f 6e 5f 4d 6f 72 65 22 3a 22 53 68 6f 77 20 25 31 24 73 20 6f 6c 64 65 72 20 61 63 74 69 6f 6e 28 73 29 22 2c 22 45 76 65 6e 74 4d 6f 64 54 69 6c 65 5f 41 63 74 69 6f 6e 5f 48 69 64 65 22 3a 22 48 69 64 65 20 61 63 74 69 6f 6e 73 22 2c 22 53 74 65 61 6d 4c 61 62 73 22 3a 22 53 74 65 61 6d 20 4c 61 62 73 22 2c 22 53 74 65 61 6d 4c 61 62 73 5f 45 78 70 65 72 69 6d 65 6e 74 4e 75 6d 62 65 72 22 3a 22 45 78 70 65 72 69 6d 65 6e 74 20 25 31 24 73 22 2c 22 53 74 65 61 6d 4c 61 62 73 5f 44 69 73 Data Ascii: ed adult content flag","EventModTile_Action_Title":"Moderation History","EventModTile_Action_More":"Show %1$s older action(s)","EventModTile_Action_Hide":"Hide actions","SteamLabs":"Steam Labs","SteamLabs_ExperimentNumber":"Experiment %1$s","SteamLabs_Dis
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 72 74 41 74 44 61 74 65 54 69 6d 65 22 3a 22 25 31 24 73 20 61 74 20 25 32 24 73 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 4c 61 74 65 72 54 6f 64 61 79 22 3a 22 6c 61 74 65 72 20 74 6f 64 61 79 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 54 6f 6d 6f 72 72 6f 77 22 3a 22 74 6f 6d 6f 72 72 6f 77 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 4e 65 78 74 57 65 65 6b 22 3a 22 6e 65 78 74 20 77 65 65 6b 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 4c 61 74 65 72 54 68 69 73 4d 6f 6e 74 68 22 3a 22 6c 61 74 65 72 20 74 68 69 73 20 6d 6f 6e 74 68 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 4d 75 63 68 4c 61 74 65 72 22 3a 22 6d 75 63 68 20 6c 61 74 65 72 22 2c 22 45 76 65 6e 74 43 61 6c 65 6e 64 61 72 5f 4d 75 74 65 41 70 70 22 Data Ascii: rtAtDateTime":"%1$s at %2$s","EventCalendar_LaterToday":"later today","EventCalendar_Tomorrow":"tomorrow","EventCalendar_NextWeek":"next week","EventCalendar_LaterThisMonth":"later this month","EventCalendar_MuchLater":"much later","EventCalendar_MuteApp"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49862	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:51 UTC	629	OUT	GET /public/javascript/applications/store/sales_english-json.js?contenthash=70f95eb8c0363204a8e3 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:52 UTC	418	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:51 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 02 Apr 2024 22:30:33 GMT Cache-Control: public,max-age=15552000 Expires: Sun, 29 Sep 2024 22:32:12 GMT Strict-Transport-Security: max-age=10368000 X-Cache: HIT CF-Cache-Status: HIT Age: 166936 Server: cloudflare CF-RAY: 86fd4107dbb0226f-MIA
2024-04-05 23:17:52 UTC	951	IN	Data Raw: 33 39 65 35 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 39 35 32 5d 2c 7b 31 32 34 34 35 Data Ascii: 39e5/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/"use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[7952],{12445
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 3a 22 41 6e 79 77 61 79 2c 20 49 20 63 61 6e e2 80 99 74 20 6f 75 74 72 69 67 68 74 20 74 65 6c 6c 20 79 6f 75 20 74 68 65 20 6e 61 6d 65 73 20 6f 66 20 74 68 65 73 65 20 69 6e 63 72 65 64 69 62 6c 65 20 67 61 6d 65 73 2c 20 6f 72 20 74 68 65 69 72 20 65 78 61 63 74 20 6c 6f 63 61 74 69 6f 6e 20 6f 6e 20 53 74 65 61 6d 2e 20 54 68 69 73 20 77 6f 75 6c 64 20 63 72 65 61 74 65 20 61 20 74 69 6d 65 6c 69 6e 65 2d 64 65 73 74 72 6f 79 69 6e 67 20 70 61 72 61 64 6f 78 20 74 68 61 74 20 77 69 6c 6c 20 6d 61 6b 65 20 74 68 65 20 66 75 74 75 72 65 20 61 6e 20 75 6e 6c 69 76 61 62 6c 65 20 68 65 6c 6c 73 63 61 70 65 2e 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 49 6e 74 72 6f 5f 34 22 3a 22 49 6e 73 74 65 61 64 2c 20 49 20 63 61 6e 20 67 69 76 65 20 Data Ascii: :"Anyway, I cant outright tell you the names of these incredible games, or their exact location on Steam. This would create a timeline-destroying paradox that will make the future an unlivable hellscape.","Summer2022_hunt_Intro_4":"Instead, I can give
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 65 65 74 20 6c 69 74 69 67 61 74 69 6f 6e 21 20 59 6f 75 20 66 6f 75 6e 64 3a 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 79 6f 75 5f 66 6f 75 6e 64 5f 33 22 3a 22 57 68 61 74 20 61 20 63 61 74 63 68 21 20 59 6f 75 20 66 6f 75 6e 64 3a 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 79 6f 75 5f 66 6f 75 6e 64 5f 34 22 3a 22 59 6f 75 5c 27 72 65 20 66 6c 79 69 6e 67 20 68 69 67 68 21 20 59 6f 75 20 66 6f 75 6e 64 3a 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 79 6f 75 5f 66 6f 75 6e 64 5f 35 22 3a 22 59 6f 75 5c 27 72 65 20 74 68 65 20 56 69 63 74 6f 72 21 20 59 6f 75 20 66 6f 75 6e 64 3a 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 79 6f 75 5f 66 6f 75 6e 64 5f 36 22 3a 22 53 65 65 2c 20 69 74 20 61 6c 6c 20 77 6f 72 6b 65 64 20 6f 75 74 2e 20 59 6f 75 20 66 6f 75 6e Data Ascii: eet litigation! You found:","Summer2022_you_found_3":"What a catch! You found:","Summer2022_you_found_4":"You\'re flying high! You found:","Summer2022_you_found_5":"You\'re the Victor! You found:","Summer2022_you_found_6":"See, it all worked out. You foun
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 6e 61 69 72 65 20 69 73 20 79 6f 75 72 20 6a 61 6d 2c 20 64 6f 6e 5c 27 74 20 66 72 65 74 21 20 59 6f 75 20 63 61 6e 20 61 6c 73 6f 20 72 6f 63 6b 20 6f 75 74 20 77 69 74 68 20 74 68 65 73 65 20 73 68 72 65 64 64 65 72 73 21 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 72 65 77 61 72 64 5f 71 75 65 73 74 5f 31 22 3a 22 54 68 65 20 47 75 69 74 61 72 20 42 69 6c 6c 69 6f 6e 61 69 72 65 20 61 76 61 74 61 72 20 61 6e 64 20 53 74 65 61 6d 20 33 30 30 30 20 42 61 64 67 65 20 4c 65 76 65 6c 20 31 21 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 32 5f 63 6c 75 65 5f 31 22 3a 22 59 6f 75 5c 27 76 65 20 73 65 74 74 6c 65 64 20 61 20 63 69 74 79 20 61 6e 64 20 70 75 74 20 64 6f 77 6e 20 79 6f 75 72 20 72 6f 6f 74 73 22 2c 22 53 75 6d 6d 65 Data Ascii: naire is your jam, don\'t fret! You can also rock out with these shredders!","Summer2022_reward_quest_1":"The Guitar Billionaire avatar and Steam 3000 Badge Level 1!","Summer2022_hunt_quest_2_clue_1":"You\'ve settled a city and put down your roots","Summe
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 20 3c 31 3e 42 61 73 73 20 41 69 6e e2 80 99 74 20 42 69 74 69 6e e2 80 99 20 32 30 30 34 3f 3c 2f 31 3e 20 4d 61 6e 2c 20 77 65 72 65 20 74 68 6f 73 65 20 62 61 73 73 20 61 6c 6d 6f 73 74 20 62 69 74 69 6e e2 80 99 20 74 68 61 74 20 79 65 61 72 21 20 59 6f 75 20 77 65 72 65 20 70 72 61 63 74 69 63 61 6c 6c 79 20 3c 32 3e 68 61 75 6c 69 6e e2 80 99 3c 2f 32 3e 20 74 68 6f 73 65 20 73 6d 61 6c 6c 6d 6f 75 74 68 20 69 6e 74 6f 20 74 68 65 20 62 6f 61 74 2e 20 41 6e 64 20 73 75 72 65 2c 20 69 74 e2 80 99 73 20 62 65 65 6e 20 61 20 62 69 74 20 6f 66 20 61 20 64 72 79 20 73 70 65 6c 6c 20 73 69 6e 63 65 2e 20 42 75 74 20 74 68 69 73 20 69 73 20 67 6f 6e 6e 61 20 62 65 20 79 6f 75 72 20 79 65 61 72 2e 20 4f 72 20 79 6f 75 e2 80 99 72 65 20 73 65 6c 6c 69 6e 67 Data Ascii: <1>Bass Aint Bitin 2004?</1> Man, were those bass almost bitin that year! You were practically <2>haulin</2> those smallmouth into the boat. And sure, its been a bit of a dry spell since. But this is gonna be your year. Or youre selling
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 34 5f 74 61 67 32 22 3a 22 53 75 70 70 6c 79 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 34 5f 74 61 67 33 22 3a 22 44 65 6d 61 6e 64 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 34 5f 74 61 67 34 22 3a 22 44 69 73 65 61 73 65 73 20 26 20 50 61 72 61 73 69 74 65 73 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 34 5f 72 65 63 73 22 3a 22 57 68 79 20 6e 6f 74 20 6b 69 6c 6c 20 74 77 6f 20 62 69 72 64 73 20 77 69 74 68 20 6f 6e 65 20 73 74 6f 6e 65 20 61 6e 64 20 74 72 79 20 6f 75 74 20 74 68 65 73 65 20 74 69 74 6c 65 73 20 74 6f 6f 3f 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 72 65 77 61 72 64 5f 71 75 65 73 74 5f Data Ascii: er2022_hunt_quest_4_tag2":"Supply","Summer2022_hunt_quest_4_tag3":"Demand","Summer2022_hunt_quest_4_tag4":"Diseases & Parasites","Summer2022_hunt_quest_4_recs":"Why not kill two birds with one stone and try out these titles too?","Summer2022_reward_quest_
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 74 61 6b 65 20 6f 72 20 63 68 6f 69 63 65 73 20 74 6f 20 6d 61 6b 65 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 36 5f 63 6c 75 65 5f 32 22 3a 22 54 68 69 73 20 70 61 73 73 69 76 65 20 61 64 76 65 6e 74 75 72 65 20 70 72 65 66 65 72 73 20 74 68 61 74 20 79 6f 75 20 77 61 69 74 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 36 5f 67 61 6d 65 22 3a 22 49 74 5c 27 73 20 50 72 6f 62 61 62 6c 79 20 46 69 6e 65 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 36 5f 64 65 73 63 22 3a 22 59 6f 75 e2 80 99 76 65 20 67 6f 74 20 33 37 20 75 6e 70 61 69 64 20 70 61 72 6b 69 6e 67 20 74 69 63 6b 65 74 73 2e 20 59 6f 75 20 6a 75 73 74 20 67 6f 74 20 70 75 6c 6c 65 64 20 6f 76 65 72 20 Data Ascii: take or choices to make","Summer2022_hunt_quest_6_clue_2":"This passive adventure prefers that you wait","Summer2022_hunt_quest_6_game":"It\'s Probably Fine","Summer2022_hunt_quest_6_desc":"Youve got 37 unpaid parking tickets. You just got pulled over
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 68 65 20 67 72 65 61 74 65 73 74 20 72 75 6c 65 72 20 45 73 6d 65 72 69 61 20 68 61 73 20 65 76 65 72 20 68 61 64 2e 20 42 75 74 20 61 6e 20 65 76 69 6c 20 77 69 74 63 68 20 68 61 73 20 63 75 72 73 65 64 20 68 69 6d 20 74 6f 20 66 6f 72 67 65 74 20 68 69 73 20 64 61 75 67 68 74 65 72 73 20 74 68 72 65 65 2c 20 61 6e 64 20 61 6c 73 6f 20 77 68 65 72 65 20 74 68 65 20 62 61 74 68 72 6f 6f 6d 20 69 73 2e 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 37 5f 64 65 73 63 32 22 3a 22 4c 75 63 6b 79 20 66 6f 72 20 45 73 6d 65 72 69 61 2c 20 79 6f 75 20 61 72 65 20 74 68 65 20 4b 69 6e 67 e2 80 99 73 20 42 61 74 68 72 6f 6f 6d 20 41 64 76 69 73 6f 72 2e 20 42 75 74 20 74 68 65 72 65 e2 80 99 73 20 61 20 63 61 74 63 68 3a 20 59 6f 75 20 Data Ascii: he greatest ruler Esmeria has ever had. But an evil witch has cursed him to forget his daughters three, and also where the bathroom is.","Summer2022_hunt_quest_7_desc2":"Lucky for Esmeria, you are the Kings Bathroom Advisor. But theres a catch: You
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 72 6f 72 20 74 68 65 20 68 6f 72 72 6f 72 2c 20 70 72 65 74 65 6e 74 69 6f 75 73 20 65 78 70 6c 6f 72 65 72 73 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 38 5f 63 6c 75 65 5f 32 22 3a 22 54 68 69 73 20 6f 6e 65 e2 80 99 73 20 74 68 65 20 66 61 74 68 65 72 20 6f 66 20 61 6c 6c 20 61 72 74 79 20 73 6e 6f 72 65 72 73 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 38 5f 67 61 6d 65 22 3a 22 54 68 65 20 43 6f 6e 73 65 63 72 61 74 69 6f 6e 20 4f 66 20 45 73 74 68 6d 65 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 38 5f 64 65 73 63 22 3a 22 54 68 69 73 20 69 73 20 79 6f 75 72 20 66 61 74 68 65 72 2e 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f Data Ascii: ror the horror, pretentious explorers","Summer2022_hunt_quest_8_clue_2":"This ones the father of all arty snorers","Summer2022_hunt_quest_8_game":"The Consecration Of Esthme","Summer2022_hunt_quest_8_desc":"This is your father.","Summer2022_hunt_quest_
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 72 65 20 63 6c 69 63 6b 20 6f 6e 20 61 20 64 69 66 66 65 72 65 6e 74 20 67 61 6d 65 2e 20 49 20 61 6d 20 79 6f 75 72 20 3c 31 3e 66 61 74 68 65 72 21 3c 2f 31 3e 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 38 5f 74 61 67 31 22 3a 22 4d 6f 76 65 20 4f 75 74 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 38 5f 74 61 67 32 22 3a 22 47 65 74 20 4d 61 72 72 69 65 64 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 38 5f 74 61 67 33 22 3a 22 41 74 20 4c 65 61 73 74 20 47 65 74 20 61 20 4a 6f 62 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 75 6e 74 5f 71 75 65 73 74 5f 38 5f 74 61 67 34 22 3a 22 54 6f 77 65 72 20 44 65 66 65 6e 73 65 22 2c 22 53 75 6d 6d 65 72 32 30 32 32 5f 68 Data Ascii: re click on a different game. I am your <1>father!</1>","Summer2022_hunt_quest_8_tag1":"Move Out","Summer2022_hunt_quest_8_tag2":"Get Married","Summer2022_hunt_quest_8_tag3":"At Least Get a Job","Summer2022_hunt_quest_8_tag4":"Tower Defense","Summer2022_h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49863	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:51 UTC	628	OUT	GET /public/javascript/applications/store/main_english-json.js?contenthash=485049d171f183ac5e03 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:52 UTC	419	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:51 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 03 Apr 2024 22:18:14 GMT Cache-Control: public,max-age=15552000 Expires: Mon, 30 Sep 2024 22:19:50 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 176281 Server: cloudflare CF-RAY: 86fd4107dc0fa55e-MIA
2024-04-05 23:17:52 UTC	950	IN	Data Raw: 33 39 65 33 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 31 35 5d 2c 7b 36 33 33 33 36 Data Ascii: 39e3/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/"use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6815],{63336
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 65 64 69 74 20 74 68 65 20 67 72 6f 75 70 20 70 72 6f 66 69 6c 65 20 61 6e 64 20 74 68 65 6e 20 72 65 2d 73 65 74 75 70 20 74 68 69 73 20 66 65 65 64 2e 22 2c 22 43 75 72 61 74 6f 72 41 64 6d 69 6e 5f 52 53 53 46 65 65 64 5f 65 6e 67 6c 69 73 68 22 3a 22 45 6e 67 6c 69 73 68 20 52 53 53 20 46 65 65 64 20 55 52 4c 22 2c 22 43 75 72 61 74 6f 72 41 64 6d 69 6e 5f 52 53 53 46 65 65 64 5f 65 6e 67 6c 69 73 68 5f 64 65 73 63 22 3a 22 45 6e 74 65 72 20 74 68 65 20 55 52 4c 20 74 6f 20 79 6f 75 72 20 45 6e 67 6c 69 73 68 20 52 53 53 20 66 65 65 64 2e 20 41 74 20 74 68 69 73 20 74 69 6d 65 20 77 65 20 61 72 65 20 6c 69 6d 69 74 65 64 20 74 6f 20 45 6e 67 6c 69 73 68 20 6f 6e 6c 79 2c 20 68 6f 77 65 76 65 72 2c 20 77 65 20 77 69 6c 6c 20 73 6f 6f 6e 20 6f 70 65 6e Data Ascii: edit the group profile and then re-setup this feed.","CuratorAdmin_RSSFeed_english":"English RSS Feed URL","CuratorAdmin_RSSFeed_english_desc":"Enter the URL to your English RSS feed. At this time we are limited to English only, however, we will soon open
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 74 68 65 20 66 75 6c 6c 20 72 65 76 69 65 77 22 2c 22 53 74 65 61 6d 43 75 72 61 74 6f 72 5f 57 61 74 63 68 46 75 6c 6c 52 65 76 69 65 77 22 3a 22 57 61 74 63 68 20 74 68 65 20 66 75 6c 6c 20 72 65 76 69 65 77 22 2c 22 53 74 65 61 6d 43 75 72 61 74 6f 72 5f 52 65 76 69 65 77 4c 69 6e 6b 48 6f 73 74 6e 61 6d 65 42 72 61 63 6b 65 74 65 64 22 3a 22 5b 25 31 24 73 5d 22 2c 22 53 74 65 61 6d 43 75 72 61 74 6f 72 5f 45 78 70 6c 6f 72 65 4d 6f 72 65 54 69 74 6c 65 22 3a 22 45 78 70 6c 6f 72 65 20 6d 6f 72 65 22 2c 22 53 74 65 61 6d 43 75 72 61 74 6f 72 5f 4d 6f 72 65 52 65 76 69 65 77 73 22 3a 22 53 65 65 20 61 6c 6c 20 72 65 76 69 65 77 73 20 62 79 20 25 31 24 73 22 2c 22 53 74 65 61 6d 43 75 72 61 74 6f 72 5f 48 69 64 64 65 6e 22 3a 22 54 68 65 72 65 20 69 73 Data Ascii: the full review","SteamCurator_WatchFullReview":"Watch the full review","SteamCurator_ReviewLinkHostnameBracketed":"[%1$s]","SteamCurator_ExploreMoreTitle":"Explore more","SteamCurator_MoreReviews":"See all reviews by %1$s","SteamCurator_Hidden":"There is
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 74 73 3f 22 2c 22 52 53 53 4d 6f 64 65 72 61 74 69 6f 6e 5f 52 65 69 6e 64 65 78 5f 41 63 74 69 6f 6e 22 3a 22 52 65 2d 69 6e 64 65 78 69 6e 67 20 61 6e 64 20 52 65 6c 6f 61 64 69 6e 67 20 25 31 24 73 20 6f 66 20 25 32 24 73 20 61 63 63 6f 75 6e 74 73 2e 22 2c 22 52 53 53 46 65 65 64 5f 50 6f 73 74 45 72 72 6f 72 5f 4e 6f 54 69 6d 65 4f 72 49 6e 76 61 6c 69 64 46 6f 72 6d 61 74 22 3a 22 4e 65 77 73 20 50 6f 73 74 20 69 73 20 6d 69 73 73 69 6e 67 20 61 20 64 61 74 65 2e 22 2c 22 52 53 53 46 65 65 64 5f 50 6f 73 74 45 72 72 6f 72 5f 54 69 6d 65 4f 75 74 4f 66 52 61 6e 67 65 22 3a 22 4e 65 77 73 20 50 6f 73 74 20 64 61 74 65 20 69 73 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 2e 20 49 74 20 69 73 20 65 69 74 68 65 72 20 69 6e 20 74 68 65 20 66 75 74 75 72 65 20 Data Ascii: ts?","RSSModeration_Reindex_Action":"Re-indexing and Reloading %1$s of %2$s accounts.","RSSFeed_PostError_NoTimeOrInvalidFormat":"News Post is missing a date.","RSSFeed_PostError_TimeOutOfRange":"News Post date is out of range. It is either in the future
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 6f 20 74 68 65 73 65 20 65 76 65 6e 74 20 74 79 70 65 73 22 2c 22 45 76 65 6e 74 4d 6f 64 65 72 61 74 69 6f 6e 5f 46 69 6c 74 65 72 54 6f 44 61 74 65 22 3a 22 46 69 6c 74 65 72 20 74 6f 20 74 68 69 73 20 44 61 74 65 22 2c 22 45 76 65 6e 74 4d 6f 64 65 72 61 74 69 6f 6e 5f 50 69 63 6b 44 61 74 65 65 22 3a 22 50 69 63 6b 20 61 20 44 61 74 65 22 2c 22 45 76 65 6e 74 4d 6f 64 65 72 61 74 69 6f 6e 5f 50 65 72 50 61 67 65 4c 6f 61 64 22 3a 22 45 76 65 6e 74 73 20 74 6f 20 4c 6f 61 64 20 70 65 72 20 50 61 67 65 22 2c 22 45 76 65 6e 74 4d 6f 64 65 72 61 74 69 6f 6e 5f 4f 72 64 65 72 42 79 46 69 72 73 74 56 69 73 69 62 6c 65 22 3a 22 4f 72 64 65 72 20 62 79 20 66 69 72 73 74 20 76 69 73 69 62 6c 65 22 2c 22 45 76 65 6e 74 4d 6f 64 65 72 61 74 69 6f 6e 5f 53 68 6f Data Ascii: o these event types","EventModeration_FilterToDate":"Filter to this Date","EventModeration_PickDatee":"Pick a Date","EventModeration_PerPageLoad":"Events to Load per Page","EventModeration_OrderByFirstVisible":"Order by first visible","EventModeration_Sho
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 6f 64 54 69 6c 65 5f 53 74 61 74 73 5f 56 6f 74 65 55 70 22 3a 22 56 6f 74 65 20 55 70 3a 20 25 31 24 73 22 2c 22 45 76 65 6e 74 4d 6f 64 54 69 6c 65 5f 53 74 61 74 73 5f 56 6f 74 65 44 6f 77 6e 22 3a 22 56 6f 74 65 20 44 6f 77 6e 3a 20 25 31 24 73 22 2c 22 45 76 65 6e 74 4d 6f 64 54 69 6c 65 5f 4c 61 6e 67 75 61 67 65 73 22 3a 22 54 69 74 6c 65 20 61 6e 64 20 42 6f 64 79 20 69 6e 20 25 31 24 73 20 4c 61 6e 67 75 61 67 65 73 22 2c 22 45 76 65 6e 74 4d 6f 64 54 69 6c 65 5f 4c 61 6e 67 75 61 67 65 73 5f 53 75 62 74 69 74 6c 65 22 3a 22 53 75 62 74 69 74 6c 65 20 69 6e 20 25 31 24 73 20 4c 61 6e 67 75 61 67 65 73 22 2c 22 45 76 65 6e 74 4d 6f 64 54 69 6c 65 5f 4c 61 6e 67 75 61 67 65 73 5f 53 75 6d 6d 61 72 79 22 3a 22 53 75 6d 6d 61 72 79 20 69 6e 20 25 31 Data Ascii: odTile_Stats_VoteUp":"Vote Up: %1$s","EventModTile_Stats_VoteDown":"Vote Down: %1$s","EventModTile_Languages":"Title and Body in %1$s Languages","EventModTile_Languages_Subtitle":"Subtitle in %1$s Languages","EventModTile_Languages_Summary":"Summary in %1
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 67 41 64 75 6c 74 43 6f 6e 74 65 6e 74 22 3a 22 46 6c 61 67 20 41 64 75 6c 74 20 43 6f 6e 74 65 6e 74 22 2c 22 45 76 65 6e 74 4d 6f 64 54 69 6c 65 5f 4d 6f 64 65 72 61 74 65 5f 52 65 6d 6f 76 65 41 64 75 6c 74 43 6f 6e 74 65 6e 74 22 3a 22 43 6c 65 61 72 20 41 64 75 6c 74 20 43 6f 6e 74 65 6e 74 20 46 6c 61 67 22 2c 22 45 76 65 6e 74 4d 6f 64 54 69 6c 65 5f 4d 6f 64 65 72 61 74 65 5f 46 6c 61 67 48 61 6c 6c 6f 77 65 65 6e 22 3a 22 46 6c 61 67 20 61 73 20 48 61 6c 6c 6f 77 65 65 6e 20 45 76 65 6e 74 22 2c 22 45 76 65 6e 74 4d 6f 64 54 69 6c 65 5f 4d 6f 64 65 72 61 74 65 5f 52 65 6d 6f 76 65 48 61 6c 6c 6f 77 65 65 6e 46 6c 61 67 22 3a 22 43 6c 65 61 72 20 48 61 6c 6c 6f 77 65 65 6e 20 46 6c 61 67 22 2c 22 45 76 65 6e 74 4d 6f 64 54 69 6c 65 5f 4d 6f 64 65 Data Ascii: gAdultContent":"Flag Adult Content","EventModTile_Moderate_RemoveAdultContent":"Clear Adult Content Flag","EventModTile_Moderate_FlagHalloween":"Flag as Halloween Event","EventModTile_Moderate_RemoveHalloweenFlag":"Clear Halloween Flag","EventModTile_Mode
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 24 73 20 67 61 6d 65 73 22 2c 22 50 6c 61 79 74 69 6d 65 4c 69 73 74 5f 52 65 63 65 6e 74 47 61 6d 65 73 22 3a 22 72 65 63 65 6e 74 20 67 61 6d 65 73 22 2c 22 50 6c 61 79 74 69 6d 65 4c 69 73 74 5f 48 6f 75 72 73 22 3a 22 25 31 24 73 20 68 6f 75 72 73 22 2c 22 50 6c 61 79 74 69 6d 65 4c 69 73 74 5f 48 6f 75 72 73 54 6f 74 61 6c 22 3a 22 25 31 24 73 20 68 6f 75 72 73 20 74 6f 74 61 6c 22 2c 22 50 6c 61 79 74 69 6d 65 4c 69 73 74 5f 4c 61 73 74 50 6c 61 79 65 64 22 3a 22 6c 61 73 74 20 70 6c 61 79 65 64 20 25 31 24 73 22 2c 22 50 6c 61 79 74 69 6d 65 4c 69 73 74 5f 4c 61 73 74 50 6c 61 79 65 64 4d 61 78 22 3a 22 6c 61 73 74 20 70 6c 61 79 65 64 20 3e 20 31 30 20 79 65 61 72 73 20 61 67 6f 22 2c 22 50 6c 61 79 74 69 6d 65 4c 69 73 74 5f 55 6e 49 67 6e 6f 72 Data Ascii: $s games","PlaytimeList_RecentGames":"recent games","PlaytimeList_Hours":"%1$s hours","PlaytimeList_HoursTotal":"%1$s hours total","PlaytimeList_LastPlayed":"last played %1$s","PlaytimeList_LastPlayedMax":"last played > 10 years ago","PlaytimeList_UnIgnor
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 65 64 20 74 6f 20 73 69 67 6e 20 69 6e 74 6f 20 79 6f 75 72 20 53 74 65 61 6d 20 61 63 63 6f 75 6e 74 22 2c 22 4c 6f 67 69 6e 42 75 74 74 6f 6e 22 3a 22 53 69 67 6e 20 49 6e 22 2c 22 62 74 6e 5f 61 64 64 5f 74 6f 5f 63 61 72 74 22 3a 22 41 64 64 20 74 6f 20 43 61 72 74 22 2c 22 77 69 73 68 6c 69 73 74 5f 61 64 64 5f 74 6f 5f 77 69 73 68 6c 69 73 74 22 3a 22 41 64 64 20 74 6f 20 57 69 73 68 6c 69 73 74 22 2c 22 46 72 65 65 54 6f 50 6c 61 79 22 3a 22 46 72 65 65 20 74 6f 20 50 6c 61 79 22 2c 22 4f 6e 57 69 73 68 6c 69 73 74 22 3a 22 4f 6e 20 57 69 73 68 6c 69 73 74 22 2c 22 4f 6e 57 69 73 68 6c 69 73 74 54 6f 6f 6c 74 69 70 22 3a 22 54 68 69 73 20 70 72 6f 64 75 63 74 20 69 73 20 61 6c 72 65 61 64 79 20 6f 6e 20 79 6f 75 72 20 77 69 73 68 6c 69 73 74 2e 20 Data Ascii: ed to sign into your Steam account","LoginButton":"Sign In","btn_add_to_cart":"Add to Cart","wishlist_add_to_wishlist":"Add to Wishlist","FreeToPlay":"Free to Play","OnWishlist":"On Wishlist","OnWishlistTooltip":"This product is already on your wishlist.
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 53 74 65 61 6d 43 68 61 72 74 73 5f 54 6f 70 53 65 6c 6c 65 72 73 5f 54 61 62 6c 65 47 61 6d 65 22 3a 22 47 61 6d 65 22 2c 22 53 74 65 61 6d 43 68 61 72 74 73 5f 54 6f 70 53 65 6c 6c 65 72 73 5f 54 61 62 6c 65 50 72 69 63 65 22 3a 22 50 72 69 63 65 22 2c 22 53 74 65 61 6d 43 68 61 72 74 73 5f 54 6f 70 53 65 6c 6c 65 72 73 5f 54 61 62 6c 65 43 68 61 6e 67 65 22 3a 22 43 68 61 6e 67 65 22 2c 22 53 74 65 61 6d 43 68 61 72 74 73 5f 54 6f 70 53 65 6c 6c 65 72 73 5f 54 61 62 6c 65 43 68 61 6e 67 65 54 6f 6f 6c 74 69 70 22 3a 22 43 68 61 6e 67 65 20 69 6e 20 72 61 6e 6b 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 70 72 65 76 69 6f 75 73 20 77 65 65 6b 22 2c 22 53 74 65 61 6d 43 68 61 72 74 73 5f 54 6f 70 53 65 6c 6c 65 72 73 5f 54 61 62 6c 65 50 72 69 63 65 54 6f 6f Data Ascii: SteamCharts_TopSellers_TableGame":"Game","SteamCharts_TopSellers_TablePrice":"Price","SteamCharts_TopSellers_TableChange":"Change","SteamCharts_TopSellers_TableChangeTooltip":"Change in rank compared to previous week","SteamCharts_TopSellers_TablePriceToo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49866	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	633	OUT	GET /public/javascript/applications/store/marketing_english-json.js?contenthash=a0f8e137c9f8a0086b7b HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:52 UTC	419	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:52 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 02 Apr 2024 22:30:33 GMT Cache-Control: public,max-age=15552000 Expires: Sun, 29 Sep 2024 22:32:13 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 261939 Server: cloudflare CF-RAY: 86fd4109dfdd7448-MIA
2024-04-05 23:17:52 UTC	950	IN	Data Raw: 35 39 31 31 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 32 39 5d 2c 7b 35 3a 65 3d 3e Data Ascii: 5911/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/"use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[4929],{5:e=>
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 61 6d 77 6f 72 6b 73 22 2c 22 6d 73 67 5f 6e 6f 77 5f 61 76 61 69 6c 61 62 6c 65 5f 6f 6e 5f 73 74 65 61 6d 6f 73 22 3a 22 4e 6f 77 20 41 76 61 69 6c 61 62 6c 65 20 6f 6e 20 53 74 65 61 6d 4f 53 21 22 2c 22 6d 73 67 5f 6e 6f 77 5f 61 76 61 69 6c 61 62 6c 65 5f 6f 6e 5f 73 74 65 61 6d 6f 73 5f 6d 61 63 5f 61 6e 64 5f 6c 69 6e 75 78 22 3a 22 4e 6f 77 20 41 76 61 69 6c 61 62 6c 65 20 6f 6e 20 53 74 65 61 6d 4f 53 2c 20 4d 61 63 20 61 6e 64 20 4c 69 6e 75 78 21 22 2c 22 6d 73 67 5f 70 72 65 6c 6f 61 64 5f 6e 6f 77 22 3a 22 50 72 65 2d 6c 6f 61 64 20 6e 6f 77 22 2c 22 6d 73 67 5f 66 72 65 65 5f 75 70 64 61 74 65 22 3a 22 46 72 65 65 20 75 70 64 61 74 65 22 2c 22 6d 73 67 5f 70 6c 61 79 5f 64 65 6d 6f 5f 6e 6f 77 22 3a 22 50 6c 61 79 20 74 68 65 20 64 65 6d 6f Data Ascii: amworks","msg_now_available_on_steamos":"Now Available on SteamOS!","msg_now_available_on_steamos_mac_and_linux":"Now Available on SteamOS, Mac and Linux!","msg_preload_now":"Pre-load now","msg_free_update":"Free update","msg_play_demo_now":"Play the demo
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 20 45 61 72 6c 79 20 41 63 63 65 73 73 22 2c 22 6d 73 67 5f 6e 65 77 5f 63 6f 6e 74 65 6e 74 5f 6e 6f 77 5f 61 76 61 69 6c 61 62 6c 65 22 3a 22 4e 65 77 20 43 6f 6e 74 65 6e 74 20 4e 6f 77 20 41 76 61 69 6c 61 62 6c 65 22 2c 22 6d 73 74 5f 77 65 65 6b 65 6e 64 5f 64 65 73 63 72 69 70 74 69 6f 6e 5f 66 72 65 65 22 3a 22 50 6c 61 79 20 74 68 65 20 66 75 6c 6c 20 67 61 6d 65 20 66 6f 72 20 66 72 65 65 20 74 68 69 73 20 77 65 65 6b 65 6e 64 20 6f 6e 6c 79 22 2c 22 6d 73 67 5f 77 65 65 6b 65 6e 64 5f 6f 6e 5f 6e 6f 77 22 3a 22 46 72 65 65 20 77 65 65 6b 65 6e 64 20 2d 20 6f 6e 20 6e 6f 77 22 2c 22 6d 73 67 5f 77 65 65 6b 65 6e 64 5f 74 72 69 61 6c 22 3a 22 46 72 65 65 20 66 75 6c 6c 20 67 61 6d 65 20 74 72 69 61 6c 22 2c 22 6d 73 67 5f 77 65 65 6b 65 6e 64 5f Data Ascii: Early Access","msg_new_content_now_available":"New Content Now Available","mst_weekend_description_free":"Play the full game for free this weekend only","msg_weekend_on_now":"Free weekend - on now","msg_weekend_trial":"Free full game trial","msg_weekend_
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 22 2c 22 64 69 73 63 6f 75 6e 74 5f 64 65 73 63 5f 6c 69 6d 69 74 65 64 5f 74 69 6d 65 22 3a 22 4c 69 6d 69 74 65 64 20 54 69 6d 65 20 4f 66 66 65 72 22 2c 22 64 69 73 63 6f 75 6e 74 5f 64 65 73 63 5f 6c 69 6d 69 74 65 64 5f 74 69 6d 65 5f 64 61 74 65 22 3a 22 4c 69 6d 69 74 65 64 20 54 69 6d 65 20 4f 66 66 65 72 22 2c 22 74 65 78 74 5f 6e 6f 77 5f 61 76 61 69 6c 61 62 6c 65 22 3a 22 4e 6f 77 20 41 76 61 69 6c 61 62 6c 65 22 2c 22 74 65 78 74 5f 6e 6f 77 5f 61 76 61 69 6c 61 62 6c 65 5f 73 74 65 61 6d 70 6c 61 79 22 3a 22 4e 6f 77 20 41 76 61 69 6c 61 62 6c 65 22 2c 22 74 65 78 74 5f 6e 6f 77 5f 61 76 61 69 6c 61 62 6c 65 5f 6d 61 63 22 3a 22 4e 6f 77 20 41 76 61 69 6c 61 62 6c 65 20 6f 6e 20 4d 61 63 22 2c 22 74 65 78 74 5f 6e 6f 77 5f 61 76 61 69 6c 61 Data Ascii: ","discount_desc_limited_time":"Limited Time Offer","discount_desc_limited_time_date":"Limited Time Offer","text_now_available":"Now Available","text_now_available_steamplay":"Now Available","text_now_available_mac":"Now Available on Mac","text_now_availa
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 22 41 63 74 69 6f 6e 20 48 6f 72 72 6f 72 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 61 63 74 69 6f 6e 5f 68 6f 72 72 6f 72 5f 6d 65 6e 75 22 3a 22 41 63 74 69 6f 6e 20 48 6f 72 72 6f 72 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 61 63 74 69 6f 6e 5f 72 6f 67 75 65 5f 6c 69 6b 65 22 3a 22 41 63 74 69 6f 6e 20 52 6f 67 75 65 2d 4c 69 6b 65 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 61 63 74 69 6f 6e 5f 72 6f 67 75 65 5f 6c 69 6b 65 5f 6d 65 6e 75 22 3a 22 41 63 74 69 6f 6e 20 52 6f 67 75 65 2d 4c 69 6b 65 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 61 63 74 69 6f 6e 5f 72 70 67 22 3a 22 41 63 74 69 6f 6e 20 52 6f 6c 65 2d 50 6c 61 79 69 6e 67 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f Data Ascii: "Action Horror","ContentHubby_Hub_action_horror_menu":"Action Horror","ContentHubby_Hub_action_rogue_like":"Action Rogue-Like","ContentHubby_Hub_action_rogue_like_menu":"Action Rogue-Like","ContentHubby_Hub_action_rpg":"Action Role-Playing","ContentHubby_
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 61 73 75 61 6c 20 52 6f 6c 65 2d 50 6c 61 79 69 6e 67 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 61 64 76 65 6e 74 75 72 65 5f 72 70 67 5f 63 61 73 75 61 6c 5f 6d 65 6e 75 22 3a 22 43 61 73 75 61 6c 20 52 50 47 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 61 65 73 74 68 65 74 69 63 22 3a 22 41 65 73 74 68 65 74 69 63 61 6c 6c 79 20 50 6c 65 61 73 69 6e 67 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 61 65 73 74 68 65 74 69 63 5f 6d 65 6e 75 22 3a 22 54 68 65 6d 65 73 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 61 6e 69 6d 65 5f 6d 69 6c 64 22 3a 22 41 6e 69 6d 65 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 61 6e 69 6d 65 5f 6d 69 6c 64 5f 6d 65 6e 75 22 3a 22 41 6e 69 6d 65 22 Data Ascii: asual Role-Playing","ContentHubby_Hub_adventure_rpg_casual_menu":"Casual RPG","ContentHubby_Hub_aesthetic":"Aesthetically Pleasing","ContentHubby_Hub_aesthetic_menu":"Themes","ContentHubby_Hub_anime_mild":"Anime","ContentHubby_Hub_anime_mild_menu":"Anime"
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 69 6f 6e 20 47 61 6d 65 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 63 6c 69 63 6b 65 72 73 5f 69 64 6c 65 72 73 22 3a 22 43 6c 69 63 6b 65 72 73 20 26 20 49 64 6c 65 72 73 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 63 6c 69 63 6b 65 72 73 5f 69 64 6c 65 72 73 5f 6d 65 6e 75 22 3a 22 43 6c 69 63 6b 65 72 20 26 20 49 64 6c 65 72 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 63 72 69 6d 65 5f 6a 75 73 74 69 63 65 22 3a 22 43 72 69 6d 65 20 26 20 4a 75 73 74 69 63 65 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 63 72 69 6d 65 5f 6a 75 73 74 69 63 65 5f 6d 65 6e 75 22 3a 22 43 72 69 6d 65 20 26 20 4a 75 73 74 69 63 65 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 63 75 74 65 5f 63 61 Data Ascii: ion Game","ContentHubby_Hub_clickers_idlers":"Clickers & Idlers","ContentHubby_Hub_clickers_idlers_menu":"Clicker & Idler","ContentHubby_Hub_crime_justice":"Crime & Justice","ContentHubby_Hub_crime_justice_menu":"Crime & Justice","ContentHubby_Hub_cute_ca
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 61 63 6b 5f 61 6e 64 5f 73 6c 61 73 68 22 3a 22 48 61 63 6b 20 26 20 53 6c 61 73 68 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 68 69 64 64 65 6e 5f 6f 62 6a 65 63 74 5f 6d 65 6e 75 22 3a 22 48 69 64 64 65 6e 20 4f 62 6a 65 63 74 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 68 69 64 64 65 6e 5f 6f 62 6a 65 63 74 22 3a 22 48 69 64 64 65 6e 20 4f 62 6a 65 63 74 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 68 69 73 74 6f 72 79 22 3a 22 48 69 73 74 6f 72 79 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 68 6f 72 72 6f 72 22 3a 22 48 6f 72 72 6f 72 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 68 6f 72 72 6f 72 5f 6d 65 6e 75 22 3a 22 48 6f 72 72 6f 72 22 2c 22 43 6f 6e 74 65 6e 74 48 75 Data Ascii: ack_and_slash":"Hack & Slash","ContentHubby_Hub_hidden_object_menu":"Hidden Object","ContentHubby_Hub_hidden_object":"Hidden Object","ContentHubby_Hub_history":"History","ContentHubby_Hub_horror":"Horror","ContentHubby_Hub_horror_menu":"Horror","ContentHu
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 75 62 5f 6d 75 6c 74 69 70 6c 61 79 65 72 5f 63 6f 6d 70 65 74 69 74 69 76 65 22 3a 22 43 6f 6d 70 65 74 69 74 69 76 65 20 4d 75 6c 74 69 70 6c 61 79 65 72 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 6d 75 6c 74 69 70 6c 61 79 65 72 5f 63 6f 6d 70 65 74 69 74 69 76 65 5f 6d 65 6e 75 22 3a 22 43 6f 6d 70 65 74 69 74 69 76 65 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 6d 75 6c 74 69 70 6c 61 79 65 72 5f 62 61 74 74 6c 65 5f 72 6f 79 61 6c 65 22 3a 22 42 61 74 74 6c 65 20 52 6f 79 61 6c 65 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 6d 75 6c 74 69 70 6c 61 79 65 72 5f 62 61 74 74 6c 65 5f 72 6f 79 61 6c 65 5f 6d 65 6e 75 22 3a 22 42 61 74 74 6c 65 20 52 6f 79 61 6c 65 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 Data Ascii: ub_multiplayer_competitive":"Competitive Multiplayer","ContentHubby_Hub_multiplayer_competitive_menu":"Competitive","ContentHubby_Hub_multiplayer_battle_royale":"Battle Royale","ContentHubby_Hub_multiplayer_battle_royale_menu":"Battle Royale","ContentHubb
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 75 62 62 79 5f 48 75 62 5f 70 65 6f 70 6c 65 5f 63 72 65 61 74 75 72 65 73 22 3a 22 50 65 6f 70 6c 65 20 26 20 43 72 65 61 74 75 72 65 73 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 70 6c 61 79 65 72 73 22 3a 22 50 6c 61 79 65 72 73 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 70 73 79 63 68 65 64 65 6c 69 63 22 3a 22 50 73 79 63 68 65 64 65 6c 69 63 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 70 73 79 63 68 65 64 65 6c 69 63 5f 6d 65 6e 75 22 3a 22 50 73 79 63 68 65 64 65 6c 69 63 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 79 5f 48 75 62 5f 70 73 79 63 68 65 64 65 6c 69 63 5f 73 75 72 72 65 61 6c 22 3a 22 50 73 79 63 68 65 64 65 6c 69 63 20 26 20 53 75 72 72 65 61 6c 22 2c 22 43 6f 6e 74 65 6e 74 48 75 62 62 Data Ascii: ubby_Hub_people_creatures":"People & Creatures","ContentHubby_Hub_players":"Players","ContentHubby_Hub_psychedelic":"Psychedelic","ContentHubby_Hub_psychedelic_menu":"Psychedelic","ContentHubby_Hub_psychedelic_surreal":"Psychedelic & Surreal","ContentHubb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49867	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	705	OUT	GET /public/shared/fonts/MotivaSans-Black.ttf?v=4.015 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://store.steampowered.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflare Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:52 UTC	361	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:52 GMT Content-Type: application/octet-stream Content-Length: 120816 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT ETag: "649bb1ee-1d7f0" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 6211 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd4109eb7a74b2-MIA
2024-04-05 23:17:52 UTC	1008	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 d7 e8 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 ba d6 42 a4 00 00 01 6c 00 00 6c 82 47 53 55 42 e1 64 c1 db 00 00 6d f0 00 00 1b a4 4f 53 2f 32 77 2a a3 27 00 00 89 94 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 89 f4 00 00 05 8e 63 76 74 20 4a 10 0c 81 00 01 c8 30 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 c8 f8 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 c8 28 00 00 00 08 67 6c 79 66 1f f5 1b 47 00 00 8f 84 00 01 03 6a 68 65 61 64 18 67 fb 6e 00 01 92 f0 00 00 00 36 68 68 65 61 07 72 06 c5 00 01 93 28 00 00 00 24 68 6d 74 78 e1 17 2a c4 00 01 93 4c 00 00 0c e6 6c 6f 63 61 03 46 c2 20 00 01 a0 34 00 00 06 a6 6d 61 78 70 04 a0 0f 14 00 01 a6 dc 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSBllGSUBdmOS/2w'`cmapdcvt J0fpgm6!gasp(glyfGjheadgn6hhear($hmtxLlocaF 4maxp nam
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 00 00 00 02 00 01 00 02 00 00 00 02 00 01 00 02 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 07 00 10 00 18 00 26 00 3a 00 42 00 4a 00 52 00 01 00 00 00 01 00 4a 00 02 00 08 00 04 00 4c 00 76 00 96 01 6c 00 02 00 08 00 07 01 92 22 c8 2d 16 32 d2 38 ca 38 f2 3a 6a 00 04 00 00 00 Data Ascii: &:BJRJLvl"-288:j
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 02 01 00 00 00 01 08 00 0a 00 05 00 ff 00 0a 01 00 00 0a 01 08 00 1e 01 bd 00 0a 01 c5 00 14 00 06 00 ff 00 14 01 08 00 1e 01 bb 00 28 01 bd 00 28 01 c0 00 32 01 c5 00 1e 00 06 00 ff 00 14 01 08 00 1e 01 bb 00 28 01 bd 00 28 01 c0 00 32 01 c5 00 1e 00 06 00 ff 00 14 01 08 00 1e 01 bb 00 28 01 bd 00 28 01 c0 00 32 01 c5 00 1e 00 06 00 ff 00 14 01 08 00 1e 01 bb 00 28 01 bd 00 28 01 c0 00 32 01 c5 00 1e 00 06 00 ff 00 14 01 08 00 1e 01 bb 00 28 01 bd 00 28 01 c0 00 32 01 c5 00 1e 00 06 00 ff 00 14 01 08 00 1e 01 bb 00 28 01 bd 00 28 01 c0 00 32 01 c5 00 1e 00 06 00 ff 00 14 01 08 00 1e 01 bb 00 28 01 bd 00 28 01 c0 00 32 01 c5 00 1e 00 06 00 ff 00 14 01 08 00 1e 01 bb 00 28 01 bd 00 28 01 c0 00 32 01 c5 00 1e 00 42 00 ff 00 14 01 08 00 1e 01 76 00 1e 01 8f Data Ascii: ((2((2((2((2((2((2((2((2Bv
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 00 78 01 03 00 8c 01 08 00 6e 01 bc 00 46 01 bd 00 78 01 be 00 28 01 c0 00 78 01 c1 00 28 01 c3 00 50 01 c5 00 6e 00 0d 00 47 00 6e 00 4e 00 82 00 fe 00 64 01 00 00 78 01 03 00 8c 01 08 00 6e 01 bc 00 46 01 bd 00 78 01 be 00 28 01 c0 00 78 01 c1 00 28 01 c3 00 50 01 c5 00 6e 00 0d 00 47 00 6e 00 4e 00 82 00 fe 00 64 01 00 00 78 01 03 00 8c 01 08 00 6e 01 bc 00 46 01 bd 00 78 01 be 00 28 01 c0 00 78 01 c1 00 28 01 c3 00 50 01 c5 00 6e 00 0d 00 47 00 6e 00 4e 00 82 00 fe 00 64 01 00 00 78 01 03 00 8c 01 08 00 6e 01 bc 00 46 01 bd 00 78 01 be 00 28 01 c0 00 78 01 c1 00 28 01 c3 00 50 01 c5 00 6e 00 07 00 19 ff 6a 01 00 00 32 01 08 00 3c 01 bc 00 14 01 bd 00 28 01 c3 00 0a 01 c5 00 3c 00 07 00 19 ff 88 01 03 00 14 01 08 00 3c 01 bc 00 14 01 bd 00 32 01 c3 00 Data Ascii: xnFx(x(PnGnNdxnFx(x(PnGnNdxnFx(x(PnGnNdxnFx(x(Pnj2<(<<2
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 00 00 fb 00 00 00 fc 00 00 00 fd 00 00 00 fe 00 64 00 ff 00 00 01 00 00 14 01 01 00 00 01 02 00 00 01 03 00 00 01 04 00 00 01 05 00 00 01 06 00 28 01 07 00 00 01 08 00 14 00 04 00 f8 00 14 00 fe 00 64 01 00 00 14 01 06 00 28 00 1e 00 d2 00 1e 00 f7 00 1e 00 f8 00 14 00 f9 00 1e 00 fa 00 5a 00 fb 00 5a 00 fc 00 5a 00 fd 00 5a 00 fe 00 64 00 ff 00 5a 01 00 00 14 01 01 00 5a 01 02 00 5a 01 03 00 5a 01 04 00 5a 01 05 00 5a 01 06 00 28 01 07 00 5a 01 08 00 5a 01 0d 00 1e 01 0e 00 1e 01 0f 00 1e 01 10 00 1e 01 11 00 1e 01 12 00 1e 01 13 00 1e 01 14 00 1e 01 36 00 1e 01 42 00 1e 02 a6 00 3c 00 04 00 f8 00 14 00 fe 00 64 01 00 00 14 01 06 00 28 00 12 00 f8 00 14 00 fa 00 3c 00 fb 00 3c 00 fc 00 3c 00 fd 00 3c 00 fe 00 64 00 ff 00 3c 01 00 00 32 01 01 00 3c 01 02 Data Ascii: d(d(ZZZZdZZZZZZ(ZZ6B<d(<<<<d<2<
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 01 06 00 1e 01 07 00 1e 01 08 00 1e 00 03 00 fe 00 1e 01 00 00 1e 01 03 00 46 00 06 00 fe 00 33 00 ff 00 0a 01 00 00 32 01 03 00 50 01 06 00 14 01 08 00 32 00 06 00 fe 00 33 00 ff 00 0a 01 00 00 32 01 03 00 50 01 06 00 14 01 08 00 32 00 06 00 fe 00 33 00 ff 00 0a 01 00 00 32 01 03 00 50 01 06 00 14 01 08 00 32 00 0a 00 fe 00 33 00 ff 00 0a 01 00 00 32 01 03 00 50 01 06 00 14 01 08 00 32 01 09 00 46 01 0a 00 46 01 0b 00 46 01 0c 00 46 00 06 00 fe 00 33 00 ff 00 0a 01 00 00 32 01 03 00 50 01 06 00 14 01 08 00 32 00 05 00 f8 00 1e 00 ff 00 46 01 00 00 50 01 06 00 32 01 08 00 5a 00 05 00 f8 00 1e 00 ff 00 46 01 00 00 50 01 06 00 32 01 08 00 5a 00 05 00 f8 00 1e 00 ff 00 46 01 00 00 50 01 06 00 32 01 08 00 5a 00 05 00 f8 00 1e 00 ff 00 46 01 00 00 50 01 06 00 Data Ascii: F32P232P232P232P2FFFF32P2FP2ZFP2ZFP2ZFP
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: ab 00 28 01 ad 00 28 01 b4 00 28 01 b5 00 28 01 b6 00 28 01 b7 00 28 01 b8 00 28 01 b9 00 28 01 ba 00 28 01 bb 00 32 01 bc 00 28 01 bd 00 1e 01 be 00 28 01 bf 00 28 01 c0 00 32 01 c1 00 28 01 c2 00 28 01 c3 00 28 01 c4 00 28 01 c5 00 1e 01 ca 00 28 01 cb 00 28 01 cc 00 28 01 cd 00 28 01 ce 00 28 01 cf 00 28 01 d0 00 28 01 d1 00 28 01 d2 00 28 01 d3 00 28 01 d4 00 28 01 d5 00 28 01 d6 00 28 01 d7 00 28 01 d8 00 28 01 f2 00 28 01 f3 00 28 01 f5 00 28 01 f6 00 28 01 f7 00 28 01 f8 00 28 00 04 01 bb 00 32 01 bd 00 1e 01 c0 00 46 01 c5 00 14 00 04 01 bb 00 32 01 bd 00 1e 01 c0 00 46 01 c5 00 14 00 04 01 bb 00 32 01 bd 00 1e 01 c0 00 46 01 c5 00 14 00 04 01 bb 00 32 01 bd 00 1e 01 c0 00 46 01 c5 00 14 00 04 01 bb 00 32 01 bd 00 1e 01 c0 00 46 01 c5 00 14 00 04 Data Ascii: (((((((((2(((2(((((((((((((((((((((((((2F2F2F2F2F
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 01 9d 00 14 01 9e 00 14 01 9f 00 14 01 a0 00 14 01 a1 00 14 01 a2 00 14 01 a3 00 14 01 a4 00 14 01 a5 00 14 01 a6 00 14 01 a7 00 14 01 a8 00 14 01 a9 00 14 01 aa 00 14 01 ab 00 14 01 ad 00 14 01 b4 00 14 01 b5 00 14 01 b6 00 14 01 b7 00 14 01 b8 00 14 01 b9 00 14 01 ba 00 14 01 bb 00 50 01 bc 00 1e 01 bd 00 3c 01 be 00 14 01 bf 00 14 01 c0 00 14 01 c1 00 14 01 c2 00 14 01 c3 00 1e 01 c4 00 14 01 c5 00 1e 01 ca 00 14 01 cb 00 14 01 cc 00 14 01 cd 00 14 01 ce 00 14 01 cf 00 14 01 d0 00 14 01 d1 00 14 01 d2 00 14 01 d3 00 14 01 d4 00 14 01 d5 00 14 01 d6 00 14 01 d7 00 14 01 d8 00 14 01 f2 00 14 01 f3 00 14 01 f5 00 14 01 f6 00 14 01 f7 00 14 01 f8 00 14 00 05 01 bb 00 50 01 bc 00 1e 01 bd 00 3c 01 c3 00 1e 01 c5 00 28 00 40 01 76 00 1e 01 8f 00 1e 01 96 00 Data Ascii: P<P<(@v
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ba 00 00 00 00 00 00 00 0a 00 00 00 00 00 0a ff df 00 00 00 00 00 00 00 00 ff ec ff ec ff e6 ff dd 00 00 ff ec 00 00 00 00 ff e2 ff ec 00 00 00 00 00 00 00 14 00 00 ff f6 00 14 ff e2 ff b4 ff ba 00 00 ff ce ff f6 ff ce ff d8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f6 ff f6 00 00 ff e9 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f6 00 00 00 00 ff f6 00 00 00 00 ff f6 ff f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 00 00 00 00 00 00 00 00 00 ff f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f6 00 00 00 00 00 00 00 00 ff f6 00 00 00 00 00 00 00 00 00 00 00 00 ff f6 00 00 ff f6 ff ce ff e2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 00 00 46 00 32 00 50 00 46 00 3c 00 50 ff f6 00 00 00 50 00 1e 00 3c 00 46 00 32 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ec ff ec 00 0a 00 00 00 64 00 00 00 00 00 28 00 00 00 00 00 00 00 0a 00 00 00 00 00 28 00 46 00 32 00 50 00 28 00 1e 00 3c 00 1e 00 1e 00 32 00 3c 00 00 ff a6 ff Data Ascii: F2PF<PP<F2(d((F2P(<2<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49868	104.18.42.105	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	394	OUT	GET /public/images/v6/logo_steam_footer.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:52 UTC	342	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:52 GMT Content-Type: image/png Content-Length: 2843 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:22 GMT ETag: "649bb1fa-b1b" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 5444 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd410a1a958dae-MIA
2024-04-05 23:17:52 UTC	1027	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 cc 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR\:;)pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 43 37 42 45 39 34 36 32 31 31 46 35 22 20 64 63 3a 66 6f 72 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 70 68 6f 74 6f 73 68 6f 70 3a 43 6f 6c 6f 72 4d 6f 64 65 3d 22 33 22 20 70 68 6f 74 6f 73 68 6f 70 3a 49 43 43 50 72 6f 66 69 6c 65 3d 22 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 31 45 31 44 43 42 41 43 31 30 43 31 31 45 37 39 32 35 37 43 37 42 45 39 34 36 32 31 31 46 35 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 31 45 31 44 43 42 42 43 31 30 43 31 31 45 37 39 32 35 37 43 37 42 45 39 34 36 32 31 31 46 35 22 2f 3e 20 3c 78 6d 70 4d 4d 3a 48 69 73 74 6f Data Ascii: C7BE946211F5" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:11E1DCBAC10C11E79257C7BE946211F5" stRef:documentID="xmp.did:11E1DCBBC10C11E79257C7BE946211F5"/> <xmpMM:Histo
2024-04-05 23:17:52 UTC	447	IN	Data Raw: 94 02 35 47 ec d9 5a bb e6 b6 fd a0 e5 5f 63 fe 45 a6 77 89 36 ba 70 a2 47 c1 2a da 8f 6b fd 7c e2 a1 69 25 78 2d 77 8f da c5 4b 84 4d 45 6c 3f c0 49 50 c4 b2 67 2c 3e 56 80 88 ea 0c de 19 2c 05 f7 e3 36 51 ce be 1f 18 07 2e bb 28 7c 1d 3b 8d 6e 82 d8 21 5a 84 60 32 8b f6 74 c6 e5 c9 4c 67 88 32 3d b4 43 33 87 02 a9 f1 e4 5a 84 6b 05 36 2b 39 87 be fd 23 f8 c2 c3 db c1 60 e1 89 76 26 64 68 e7 80 f2 ef 1b 35 17 54 06 92 9c c5 e1 61 14 fc 13 bf de 33 fa a1 62 e6 b9 22 7e 19 dd 53 78 23 05 2f 77 d2 56 3e 43 54 15 25 8c 05 17 84 2d cd 03 51 93 bf bb 6f 9a 43 c0 06 b0 58 04 ee a1 f4 a7 0f 5c 14 5e 45 38 db 55 d0 ef 64 20 cb 5d 6c d3 24 dd 9b ae f6 ce 88 07 67 9b 20 d0 15 5e aa cc 76 26 82 7d 2e d4 af e6 07 cf 6b 03 cf 0e 1e 15 dc 64 00 58 cf db 97 2b c2 3f a4 Data Ascii: 5GZ_cEw6pG*k\|i%x-wKMEl?IPg,>V,6Q.(\|;n!Z`2tLg2=C3Zk6+9#`v&dh5Ta3b"~Sx#/wV>CT%-QoCX\^E8Ud ]l$g ^v&}.kdX+?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49869	104.18.42.105	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	394	OUT	GET /public/images/footerLogo_valve_new.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:52 UTC	342	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:52 GMT Content-Type: image/png Content-Length: 2584 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:18 GMT ETag: "649bb1f6-a18" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 1258 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd410a3800d9b5-MIA
2024-04-05 23:17:52 UTC	1027	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 32 08 06 00 00 00 fc cf 51 8d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2QtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 7f 57 71 dd 30 02 c1 5a e0 d7 c0 e9 92 6f 00 9f 65 01 33 42 c1 0a e0 66 60 2d 70 0c 58 c0 42 16 30 23 24 54 c9 e8 7b 2e f0 30 8a 78 1a d7 09 23 10 bc 0d 5c 07 dc 02 fc 0c d8 01 3c c2 11 98 11 0a de 01 fe 02 6c 02 de 23 ad c4 e3 1c 81 19 21 e1 4d c9 ff 79 0a 06 23 68 53 cc 60 b0 80 19 8c d3 81 4a 3d f0 16 39 2a 54 f1 14 f0 42 c3 63 3c 0d fc 86 28 5f 0f bc 28 e5 7d 3d 09 1c 4c d8 fe 84 28 cd ee b8 c4 00 f0 19 a2 fc 0e e0 8d 8e ce 31 0a bc 0f a8 ce 9e 5e 0c 7c cc f0 18 3f c9 fb 57 d1 0c bc d7 e2 5a 46 e4 b5 d8 e0 39 e0 d9 59 10 f0 5c e0 c6 14 95 30 0e dc 00 3c a6 94 cf 03 be 96 f2 9e 8e c9 63 8f 25 fc cd 15 a2 94 92 71 89 5f 35 75 72 a5 43 01 cf 04 1e 00 7e ae 94 9f 01 7c 48 94 72 a4 e5 d0 af b9 ce 16 cb 6b 19 d3 1c 27 09 eb 5d 0b b8 52 0b d1 22 d3 18 2a 76 Data Ascii: Wq0Zoe3Bf`-pXB0#$T{.0x#\<l#!My#hS`J=9TBc<(_(}=L(1^\|?WZF9Y\0<c%q_5urC~\|Hrk']R"v
2024-04-05 23:17:52 UTC	188	IN	Data Raw: 27 65 76 2e 11 a5 37 5f 58 c0 29 2b d2 d7 ea 33 53 fb 10 61 95 a0 17 73 87 9c 0f c6 fb 9f 5b 41 9b b0 80 0d 2b 0b 3f b3 e4 e2 db 00 7d 0e 04 8c 36 86 4a e5 ed 15 a7 ae 9a 0b 69 4c d3 ee b1 e7 9b 12 83 38 44 8b ac 48 75 f1 f8 6d 8e 8e 8f 4b 08 6f 05 fe 23 7f d7 c6 46 d9 36 b8 4b f3 10 1f 12 f6 df 0a ab b5 7c 80 44 c2 43 9e 06 77 02 7f 27 c6 06 2b f2 28 e0 02 ff 3f 71 8c 00 80 d9 95 c1 c9 b4 10 0c 46 d0 1e 98 c1 60 01 33 18 2c 60 06 0b 98 c1 60 01 33 18 2c 60 06 83 05 cc 60 01 33 18 d9 c0 7f 02 0c 00 09 10 3c 07 fd f1 91 a3 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 'ev.7_X)+3Sas[A+?}6JiL8DHumKo#F6K\|DCw'+(?qF`3,``3,``3<IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49871	104.18.42.105	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	390	OUT	GET /public/images/ico/ico_facebook.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:52 UTC	342	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:52 GMT Content-Type: image/png Content-Length: 1161 Connection: close Last-Modified: Wed, 06 Dec 2023 00:00:29 GMT ETag: "656fb99d-489" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 1731 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd410a6e4a742c-MIA
2024-04-05 23:17:52 UTC	1027	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 27 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:
2024-04-05 23:17:52 UTC	134	IN	Data Raw: 9a 8b 93 0b 4c 47 45 84 30 d8 da 58 32 7c fe fc 85 21 39 3d 87 b0 01 76 36 56 28 7c 45 05 79 30 be 74 f9 0a 71 2e 58 bc 6c 25 98 8e 08 0d 62 60 65 65 65 38 7f e1 12 c3 95 6b d7 19 ae 5c c1 1e 0e a0 84 f4 1f 9b c4 ad ab 67 19 f8 78 79 19 5a 3b 7a 19 26 4f 9b 49 7a 20 12 0b 06 87 01 cf 29 d0 ff 02 64 00 28 c1 bf 20 43 f3 53 50 76 06 08 30 00 5e c6 42 1a 2b ad 86 b1 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: LGE0X2\|!9=v6V(\|Ey0tq.Xl%b`eee8k\gxyZ;z&OIz )d( CSPv0^B+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49864	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	2065	OUT	POST /watch/95654225/1?page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&hittoken=1712359053_eb4f10e780968ec3dd74d22e4b5e005642e679bea92ed16a529d3c473f861a6c&browser-info=nb%3A1%3Acl%3A297%3Aar%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A1%3Als%3A1173339980762%3Ahid%3A310184681%3Az%3A120%3Ai%3A20240406011750%3Aet%3A1712359071%3Ac%3A1%3Arn%3A341129470%3Arqn%3A8%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C281%2C%2C%2C%2C12%2C1%2C2185%2C2185%2C1%2C2136%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1712359050977%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359071&t=gdpr(14)clc(0-0-0)rqnt(2)eco(21037572)lt(6100)aw(0)rcm(0)cdl(na)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:52 UTC	757	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:52 GMT Expires: Fri, 05-Apr-2024 23:17:52 GMT Last-Modified: Fri, 05-Apr-2024 23:17:52 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49872	104.18.42.105	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	389	OUT	GET /public/images/ico/ico_twitter.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:52 UTC	342	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:52 GMT Content-Type: image/png Content-Length: 1430 Connection: close Last-Modified: Wed, 06 Dec 2023 00:00:29 GMT ETag: "656fb99d-596" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 1843 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd410a79b60302-MIA
2024-04-05 23:17:52 UTC	1027	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 27 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<'iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:
2024-04-05 23:17:52 UTC	403	IN	Data Raw: df b9 9b e1 ee bd fb 0c f9 b9 99 60 39 90 8d b3 a6 4d 64 28 28 ae 64 b8 ff e0 21 8a ab 98 90 39 3b 76 ed 61 b8 7a f5 3a 43 49 61 2e 43 65 6d 13 43 44 58 10 83 b9 99 09 c3 e2 79 33 19 66 cc 9e c7 70 e4 d8 09 0c 6f 81 02 f1 3f b2 00 2f 0f 0f c3 9e 1d 1b 19 b2 f2 8a 19 f8 78 79 19 16 ce 9d ce 30 6b ee 02 86 96 f6 1e ac a1 c8 84 2e f0 f9 cb 17 86 a2 b2 6a 86 49 7d 5d 0c 27 4f 9f 61 58 b6 62 35 03 1b 1b 1b ce 68 60 c2 26 78 14 e8 d4 6b d7 af 33 d4 55 95 31 34 b5 75 31 38 3b 3a 30 58 03 63 80 68 03 8c 0c f5 19 f4 74 75 18 6c ac 2d 19 cc 4d 4d 18 f2 8a ca 18 fa ba 5a c1 de 23 18 06 8a 0a f2 0c ab 97 2f 60 48 4a cb 65 60 62 62 64 98 33 63 12 83 b3 47 00 43 56 7a 32 83 b8 98 28 43 41 49 25 8a 01 cc 3c fc c2 0d 30 0e 28 d0 96 2d 9a c3 d0 dc d6 cd 70 ec f8 49 86 17 Data Ascii: `9Md((d!9;vaz:CIa.CemCDXy3fpo?/xy0k.jI}]'OaXb5h`&xk3U14u18;:0Xchtul-MMZ#/`HJe`bbd3cGCVz2(CAI%<0(-pI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49873	104.18.42.105	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	409	OUT	GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:52 UTC	353	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:52 GMT Content-Type: image/png Content-Length: 161 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-a1" Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3958 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd410a7be5034d-MIA
2024-04-05 23:17:52 UTC	161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 0c 08 06 00 00 00 80 d0 86 82 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 43 49 44 41 54 78 da 62 fc ff ff 3f 03 b5 00 e3 08 36 ec d8 91 c3 fc 40 ea 00 10 1b e0 d0 b7 c0 ca c6 36 91 68 97 e1 31 10 ab 41 04 bd 89 c5 40 9c 06 11 15 66 48 06 5e c0 67 d0 48 4f 1a e4 02 80 00 03 00 23 ae 37 e9 64 d5 5d 17 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<CIDATxb?6@6h1A@fH^gHO#7d]IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49874	104.18.42.105	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	415	OUT	GET /public/shared/images/joinsteam/new_login_bg_strong_mask.jpg HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:52 UTC	374	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:52 GMT Content-Type: image/jpeg Content-Length: 124529 Connection: close Cf-Bgj: h2pri ETag: "649bb1ef-1e671" Last-Modified: Wed, 28 Jun 2023 04:07:11 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 305 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd410abe253717-MIA
2024-04-05 23:17:52 UTC	995	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 04 38 07 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 87 00 00 03 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 01 01 01 01 01 01 01 01 00 Data Ascii: ExifII*Ducky<Adobed8
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: ac dc a3 56 9f 82 2e 63 20 da aa e1 81 d0 e9 5b 57 80 d3 9e f5 69 90 4c 36 44 26 00 50 11 4a 40 0a 80 07 20 20 00 18 00 00 08 00 00 20 00 90 1c 85 12 01 21 00 00 0c a0 00 00 00 01 10 00 00 00 00 00 00 38 28 20 80 60 22 80 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 4a b0 06 80 88 e4 0a 4a 00 b2 04 ec 8a 33 76 90 10 00 0e 0a 18 00 02 4d 81 a5 72 09 d6 d5 a2 45 65 70 9a 0a e6 d6 b0 c8 a8 0a e8 eb 69 cc 32 0b ed 52 6b 28 0e 0f 0c 0b 71 00 66 c0 40 30 2d 5b 80 25 b0 24 28 90 80 28 01 a0 8e fe 86 8e 60 0f 4f d5 35 c8 57 27 67 eb d5 b9 a8 1c 16 e9 68 9f 80 8c 74 c6 f4 f2 80 cc 00 00 06 14 d5 80 a9 02 b3 d3 d2 c9 84 Data Ascii: V.c [WiL6D&PJ@ !8( `"JJ3vMrEepi2Rk(qf@0-[%$((`O5W'ght
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: f3 50 d4 1a 56 ad 72 45 72 68 94 f0 12 b3 08 00 40 04 50 54 30 00 00 00 00 00 80 00 00 00 00 00 06 90 0e 0a 02 06 00 03 54 64 ea f0 9a 82 a1 14 26 40 80 00 65 01 00 00 00 03 92 84 03 82 02 00 0a 10 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 50 10 00 00 00 00 00 00 00 00 00 00 30 1a 02 d3 80 25 dc 09 6c 04 03 28 20 06 00 05 56 8d 81 ad 73 82 b3 d6 8a a9 01 40 01 0c 00 29 f9 41 1c db 52 1c 91 a8 c8 2b 4c ae d3 80 3a de 0a f5 92 0e 7b f5 1a 7c 01 86 94 74 60 4d 6b ec e0 0d 3f e6 72 03 bf 59 aa c8 18 5a 8d 01 00 34 80 70 03 01 d5 4b 03 b3 ab f8 dd 01 eb d7 9a a6 03 6e 00 c7 45 20 14 a0 19 76 ad 9a a4 7c 85 79 8d 2e 58 46 17 f2 04 05 01 0d 00 e0 29 00 48 Data Ascii: PVrErh@PT0Td&@eP0%l( Vs@)AR+L:{\|t`Mk?rYZ4pKnE v\|y.XF)H
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 0a d5 db bf 5b ae b5 14 2e 48 e7 de b4 e9 7d 87 bd bd 6c 13 8d 7b dd 4f d9 5f 6a 85 8f 39 74 ec d3 4d 72 1b ce b8 e5 d3 1f 4b 43 0e f2 f5 9d ea 92 0b 63 32 b2 02 1f c1 0b 0e b6 29 2a eb 0f c9 1a 84 d3 ab ff 00 01 39 c5 7a 4a 94 17 82 a9 a6 0e 1c 04 e2 bd 66 a4 2c 61 65 0c ae 56 12 2a 1b b3 64 6b a2 b5 96 06 cf 38 5c 15 19 b6 d3 e4 0c ef 04 12 00 00 00 03 08 00 00 00 00 00 20 06 90 0e 0a 18 02 40 ea d5 0b 23 17 4a 84 8d 71 9e a9 1c f5 1d 73 54 61 b2 60 26 a5 14 63 65 0c d4 65 21 09 94 22 00 a1 80 10 00 52 45 03 40 08 05 e1 80 00 88 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 86 00 02 20 00 00 00 00 00 00 70 00 01 20 20 00 1c 14 04 0c 01 22 8b ae 6d Data Ascii: [.H}l{O_j9tMrKCc2)9zJf,aeVdk8\ @#JqsTa`&cee!"RE@ p "m
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 1d ea b0 45 52 a9 43 b5 92 5f e4 23 3c b6 77 b3 ab 2d 83 6f d7 5f 83 22 96 60 63 a7 5d 7b fb 23 52 a1 2e e5 2b 7f 4b 70 38 85 bd bf 3a d9 78 11 2b a2 f9 ad 71 87 fc 01 e7 61 67 d7 df d1 f8 66 a8 ec ec e3 ee 95 eb e4 cc a3 5c 28 de 69 59 0a 34 ae 54 af 85 04 14 d7 00 73 69 fe c6 6b 71 04 51 00 38 28 4e 10 46 77 d6 95 f2 c2 f1 85 fb 54 98 92 75 af aa 7d d5 94 a2 c4 bf 09 f6 37 f4 73 fb 1c 99 e3 4e 5e ff 00 59 69 9b 71 c9 65 66 c7 cf e9 47 4b 34 ce 8c 33 68 0c ac a1 86 e5 08 34 41 0c 01 80 7c 00 01 49 b4 14 d6 97 5f 20 75 f4 b6 7e d0 d9 9a af 63 3b d5 d6 19 23 86 b2 75 c7 25 6f 64 b9 2f 58 ad ff 00 62 4b 82 b1 58 69 7e 02 47 8f dd bb 77 0f 5f 9b 09 6d 07 64 58 a9 50 10 c0 d7 1a 2b 3e 49 56 43 d7 18 7c 12 52 e5 34 94 ca 46 cb f9 44 6d a2 e5 11 62 5a 86 51 4b Data Ascii: ERC_#<w-o_"`c]{#R.+Kp8:x+qagf\(iY4TsikqQ8(NFwTu}7sN^YiqefGK43h4A\|I_ u~c;#u%od/XbKXi~Gw_mdXP+>IVC\|R4FDmbZQK
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 5f 15 42 b5 98 be 96 ae 3d 2f f2 6b 2c e9 97 6b a3 6b 69 35 5c 33 37 2d 4d 32 fd 16 eb d9 59 9a 91 9d 69 d1 7f b3 6e 8a b5 f2 5b 58 cd ed 72 d9 ed a5 a5 c9 cf ee ef c6 d9 e6 eb e4 e5 ab d5 76 e2 93 47 2a 34 b2 84 41 c5 a3 fc 8d aa 24 2a 6d 62 8e 6d 6c 6e 31 5c 1b 6b ea fc 9d a4 72 ae 6b f6 ad f0 cd 7d 53 ec c6 da 5e de 59 a9 12 d2 55 2b 2a 82 86 91 06 d8 f5 74 d1 f8 28 f4 ba ff 00 5f 5a c3 b2 08 ec ae 75 aa 84 8a 39 3b fd 6f 6a 36 bc 92 ab c6 b5 5d 5c 30 2b 0d 5e 7a 2b 22 55 8f ac fa de ca db 25 cf 27 3a eb 1d e9 21 d1 e7 fd ce 4a d8 36 6f 35 2b e5 57 ba bb 55 3b 30 d1 e5 ba 7e c4 1e c7 d4 fd 9d e8 d5 34 39 eb 2b 2b dc d3 3c f7 ce 7f 93 9f 78 d3 c8 ec 63 ae 5a a8 e6 b2 6b a3 b1 75 ab b6 49 b5 c9 8e f1 ae 37 c3 2f d5 58 44 b4 e3 a6 9a 47 91 d4 b1 56 bf 1c Data Ascii: _B=/k,kki5\37-M2Yin[XrvG4A$mbmln1\krk}S^YU+*t(_Zu9;oj6]\0+^z+"U%':!J6o5+WU;0~49++<xcZkuI7/XDGV
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c a1 00 00 10 00 00 00 34 50 00 00 00 c8 2a b4 6c a3 5a e6 90 16 90 0c 00 01 80 7c 01 21 4c 29 a6 04 dc 0c fd 9c 85 55 9c d4 22 68 a4 0d f3 aa af ff 00 24 1b 7b 24 b9 27 43 69 5e a4 e8 f3 f5 5e b7 66 94 27 28 d2 09 69 81 a5 5f 01 95 2b 04 55 1c d9 10 7a 34 ac d0 0e 0e e6 10 e5 01 c8 14 eb c3 03 4b da be bf e4 83 0b a5 12 04 55 f2 06 89 c8 55 7b 2a 81 a6 5a db d9 40 1d ce 34 ce 1f 90 8f 3b 7e a5 aa db 5e 00 e6 6a 02 9a 41 04 05 3f 01 0d 58 29 bb 20 21 b0 24 06 90 0e 08 25 a0 10 46 bd 7e bd f6 b4 54 2b d8 ea fd 55 69 0e e0 6f db a2 c3 29 a2 03 c0 df 7b 5e ce 40 c4 00 a3 4c ed 0c 44 74 27 26 91 79 db d6 c9 99 d4 59 5e c7 5e ea f4 47 97 53 95 e9 cd 75 f5 7b 1f af Data Ascii: 4PlZ\|!L)U"h${$'Ci^^f'(i_+Uz4KUU{Z@4;~^jA?X) !$%F~T+Uio){^@LDt'&yY^^GSu{
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 9e d9 47 82 d8 33 a3 fc a0 e5 c6 e5 6d 7a 71 c2 17 2b d4 7a b4 61 5a 27 f8 99 6d 29 72 69 ce b7 c5 c3 44 ad 4a f6 7a f7 56 cd 1d 71 a7 2f 4c b5 f4 4c ef 2b cd 61 7a c1 51 c3 f6 5d 3f 7c dd 92 e4 c6 9a cb e7 ed 57 5b 34 ce 6e 88 68 2c 43 41 db 35 a6 50 f8 25 74 ca 74 a4 31 19 b0 a8 54 87 eb c8 38 de 98 ab 29 27 5b 99 43 a3 4e 01 c6 99 c2 62 b7 c6 92 dd 94 19 66 3a e8 e2 9c f9 23 3a 85 f2 18 6d 5b 06 6c 57 b1 59 b0 bd c3 3f 51 ee 56 6e 47 ee 09 f5 4d f6 70 16 61 c9 ad e4 3a 4c b0 b4 95 64 66 ed 01 b9 13 ed 2c 37 d5 36 16 9f b7 01 7a 12 90 8c b6 7e ac 39 6d 9f ec b7 f2 57 2e 0f 76 fc 83 8a 4c 06 00 03 48 06 03 ad 5b 2c 89 6f 1b 53 1f e4 dc cb 8e b6 d5 55 23 7c 73 b4 c2 1a 93 36 b7 9c da aa e6 df 93 9d db b6 7c da d7 34 8e 76 ba c8 b8 22 90 09 94 26 41 86 bb Data Ascii: G3mzq+zaZ'm)riDJzVq/LL+azQ]?\|W[4nh,CA5P%tt1T8)'[CNbf:#:m[lWY?QVnGMpa:Ldf,76z~9mW.vLH[,oSU#\|s6\|4v"&A
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: 9f d7 69 a6 1a 7e bb f8 02 fe e3 a6 af 4f d9 54 07 cf 59 3a b8 60 15 b3 ad 93 40 7b 1d 3e c2 d7 2f 4b 30 3c fe fe 1e 97 6d 78 03 8c 00 02 40 df 1b fc 1a 88 dc a8 bc af eb 63 3a 8b 1d 95 b4 9c b8 d4 74 e7 77 07 3b 1d a3 7c ed ca 33 5a 7a 19 69 15 47 2b 05 bd 49 c5 4d b6 49 72 cb c1 c5 d9 fb 2c f3 4e 1f 26 f3 e7 d4 ba e3 c6 ed 7d 96 9a b6 93 e0 f4 67 cf 8e 3a db 8d fb 59 cb 67 69 1c ed 34 8a 86 06 99 e1 7b b8 48 0f 4f a9 f5 4d c3 ba 03 d4 cb ad 4c d7 08 23 58 28 20 8a 20 02 00 20 02 00 20 28 80 08 01 41 14 e0 04 d0 1e 5f da 75 26 ae e9 04 78 8d 43 80 8d fa 5d 8b 63 b2 b2 64 b1 65 7d af d7 f6 6b b6 29 a7 c9 ca ba c7 51 14 40 04 00 9b 48 0c ef 16 ab 4c 0f 9f fb 4f ac 6e ce f4 46 e6 9a eb cb 59 59 71 1e 0e 92 33 6b b3 15 6f 43 69 c3 5a d9 5a 24 b2 31 bd 1e ba Data Ascii: i~OTY:`@{>/K0<mx@c:tw;\|3ZziG+IMIr,N&}g:Ygi4{HOML#X( (A_u&xC]cde}k)Q@HLOnFYYq3koCiZZ$1
2024-04-05 23:17:52 UTC	1369	IN	Data Raw: e8 bd 78 61 95 5a 92 b8 02 6b 4b 7c 84 5c 00 8a 11 02 65 12 c0 40 0c 08 bd 65 01 cc d4 32 b2 45 08 00 00 00 81 a2 86 45 04 52 90 82 4a 8a 2a 13 01 05 20 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a1 80 80 00 00 00 00 00 60 30 36 ca ff 00 04 1b 05 05 0c 81 14 2b 10 84 98 51 21 4e 1a 25 0d 55 b3 2a ba 64 fe 47 0e b7 ad 61 15 95 94 34 05 20 1a 20 20 a3 1e c2 8a 30 b1 e6 5b c8 e3 7d 56 55 4e c6 a3 15 d5 af a2 a2 55 f2 19 8d ba 99 36 a5 f8 05 76 7e ba b2 22 d5 10 14 92 41 0d 05 2b 55 5a b0 c2 3c 6e f7 5d d2 ed fc 14 72 01 17 a8 56 6d 90 29 0a 72 10 7b 05 12 c0 4d b0 89 0a 08 80 0e be 86 15 db 45 5b 05 77 f7 fe b1 65 92 b5 10 1c 5d 1e cd b0 d9 73 c4 81 f4 3d 8a d3 b7 d5 95 Data Ascii: xaZkK\|\e@e2EERJ* `06+Q!N%U*dGa4 0[}VUNU6v~"A+UZ<n]rVm)r{ME[we]s=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49870	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	1424	OUT	GET /webvisor/95654225?wv-part=2&wv-type=7&wmode=0&wv-hit=853926178&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&rn=1044954885&browser-info=we%3A1%3Aet%3A1712359067%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011746%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359067&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:17:53 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:52 GMT Expires: Fri, 05-Apr-2024 23:17:52 GMT Last-Modified: Fri, 05-Apr-2024 23:17:52 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49875	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	623	OUT	GET /public/css/applications/store/9424.css?contenthash=f4849e7dabab0475bc1b HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:53 UTC	412	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:53 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 21 Mar 2024 20:33:53 GMT Cache-Control: public,max-age=15552000 Expires: Tue, 17 Sep 2024 20:35:19 GMT Strict-Transport-Security: max-age=10368000 X-Cache: HIT CF-Cache-Status: HIT Age: 1305753 Server: cloudflare CF-RAY: 86fd410f0ecc4962-MIA
2024-04-05 23:17:53 UTC	957	IN	Data Raw: 37 38 33 32 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 31 57 6c 31 33 64 6f 6d 5a 76 38 37 32 5a 63 62 43 5f 50 56 62 76 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 3a 31 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 70 78 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 30 30 70 78 29 7b 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 Data Ascii: 7832.ZOBYq36SukEm_Fi_77g2q{position:relative;display:flex;flex-direction:column}.ZOBYq36SukEm_Fi_77g2q ._1Wl13domZv872ZcbC_PVbv{display:flex;flex-direction:row;flex:1;padding-top:10px}@media screen and (max-width: 700px){.ZOBYq36SukEm_Fi_77g2
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 74 61 72 74 3b 77 69 64 74 68 3a 32 30 30 70 78 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 32 5a 44 79 53 6f 54 6f 70 77 38 58 6f 66 6e 43 4b 4c 4e 78 44 4c 20 2e 5f 33 6a 79 35 52 6e 35 47 49 48 54 59 6e 53 31 31 66 36 41 78 4b 52 7b 63 6f 6c 6f 72 3a 23 31 39 39 39 66 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 6d 61 72 67 69 6e 3a 36 70 78 20 30 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 32 65 6d 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 32 5a 44 79 53 6f 54 6f 70 77 38 58 6f 66 6e 43 4b Data Ascii: tart;width:200px}.ZOBYq36SukEm_Fi_77g2q ._2ZDySoTopw8XofnCKLNxDL ._3jy5Rn5GIHTYnS11f6AxKR{color:#1999ff;font-weight:500;font-size:12px;line-height:16px;margin:6px 0px;text-transform:uppercase;letter-spacing:.02em}.ZOBYq36SukEm_Fi_77g2q ._2ZDySoTopw8XofnCK
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 35 33 63 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 32 70 78 20 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2e 30 33 65 6d 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 32 5a 44 79 53 6f 54 6f 70 77 38 58 6f 66 6e 43 4b 4c 4e 78 44 4c 20 2e 49 73 59 62 32 39 38 4d 56 46 71 4a 66 54 67 4d 43 2d 49 72 47 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 39 33 63 34 34 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 Data Ascii: :center;background-color:#32353c;border-radius:2px;border:none;padding:2px 16px;color:#fff;font-size:16px;letter-spacing:.03em}.ZOBYq36SukEm_Fi_77g2q ._2ZDySoTopw8XofnCKLNxDL .IsYb298MVFqJfTgMC-IrG:hover{background-color:#393c44}@media screen and (min-wid
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 3a 67 72 69 64 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 61 72 65 61 73 3a 22 6c 61 62 65 6c 20 68 69 6e 74 22 20 22 69 6e 70 75 74 20 69 6e 70 75 74 22 3b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 31 66 72 20 6d 69 6e 2d 63 6f 6e 74 65 6e 74 3b 67 61 70 3a 32 70 78 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 32 65 4b 56 6e 36 67 35 59 79 73 78 39 4a 6d 75 74 51 65 37 57 56 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 35 33 63 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 67 72 69 64 2d 61 Data Ascii: display:grid;grid-template-areas:"label hint" "input input";grid-template-columns:1fr min-content;gap:2px}.ZOBYq36SukEm_Fi_77g2q ._2eKVn6g5Yysx9JmutQe7WV{border-radius:2px;color:#fff;padding:10px;background-color:#32353c;outline:none;font-size:15px;grid-a
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 63 6f 6c 6f 72 3a 23 33 39 33 63 34 34 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 33 74 54 46 67 57 51 5f 53 51 6e 4f 33 58 7a 47 45 5a 6b 6a 52 6d 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 23 30 36 62 66 66 66 20 73 6f 6c 69 64 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 32 51 57 44 35 65 79 6d 41 46 55 5a 6f 51 67 32 39 72 2d 6c 51 54 3a 68 6f 76 65 72 20 2e 5f 33 74 54 46 67 57 51 5f 53 51 6e 4f 33 58 7a 47 45 5a 6b 6a 52 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 39 33 63 34 34 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 32 53 62 62 52 77 4a 38 7a 4f 51 4d 79 48 4b 70 43 7a 77 61 57 69 7b 64 69 73 70 6c 61 79 3a 66 Data Ascii: color:#393c44}.ZOBYq36SukEm_Fi_77g2q ._3tTFgWQ_SQnO3XzGEZkjRm:focus{outline:1px #06bfff solid}.ZOBYq36SukEm_Fi_77g2q ._2QWD5eymAFUZoQg29r-lQT:hover ._3tTFgWQ_SQnO3XzGEZkjRm{background-color:#393c44}.ZOBYq36SukEm_Fi_77g2q ._2SbbRwJ8zOQMyHKpCzwaWi{display:f
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 31 30 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 33 45 41 4a 6e 52 36 62 72 56 4b 67 4b 78 43 69 51 69 70 58 47 4b 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 23 30 36 42 46 46 46 20 33 30 25 2c 20 23 32 44 37 33 46 46 20 31 30 30 25 29 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 33 45 41 4a 6e 52 36 62 72 Data Ascii: dding:10px;color:#fff;font-size:14px;font-weight:400;font-family:inherit;text-align:center;cursor:pointer}.ZOBYq36SukEm_Fi_77g2q ._3EAJnR6brVKgKxCiQipXGK:hover{background:linear-gradient(90deg, #06BFFF 30%, #2D73FF 100%)}.ZOBYq36SukEm_Fi_77g2q ._3EAJnR6br
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 33 6f 6d 74 76 71 71 73 4f 5f 4d 49 76 4a 49 39 55 5f 62 58 36 53 7b 63 6f 6c 6f 72 3a 23 61 66 61 66 61 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 33 6f 6d 74 76 71 71 73 4f 5f 4d 49 76 4a 49 39 55 5f 62 58 36 53 2e 5f 31 62 6c 53 73 55 33 5f 53 68 6f 79 6d 78 76 41 72 51 79 69 39 32 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 31 63 6e 55 51 33 52 72 51 67 71 61 4c 6f 64 4a 70 30 4c 6a 6e 74 7b 63 6f 6c 6f 72 3a 23 61 66 61 66 61 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 Data Ascii: 36SukEm_Fi_77g2q ._3omtvqqsO_MIvJI9U_bX6S{color:#afafaf;font-size:12px;display:inline-block}.ZOBYq36SukEm_Fi_77g2q ._3omtvqqsO_MIvJI9U_bX6S._1blSsU3_ShoymxvArQyi92{text-align:center}.ZOBYq36SukEm_Fi_77g2q ._1cnUQ3RrQgqaLodJp0Ljnt{color:#afafaf;font-size:1
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 6c 67 42 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 32 33 35 33 63 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 32 30 70 78 20 30 70 78 20 32 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 30 70 78 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 32 61 5a 6e 6b 57 54 53 46 50 6a 4c 52 74 4b 38 71 63 5f 6c 67 42 20 2e 5f 37 4c 6d 6e 54 50 47 4e 76 48 45 66 52 56 69 7a 45 69 47 45 56 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 Data Ascii: lgB{background-color:#32353c;display:flex;flex-direction:row;padding:10px 20px 0px 20px;border-radius:2px;max-width:500px}.ZOBYq36SukEm_Fi_77g2q ._2aZnkWTSFPjLRtK8qc_lgB ._7LmnTPGNvHEfRVizEiGEV{color:#fff;font-size:18px;font-weight:500;line-height:24px;ma
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 32 54 41 67 50 4d 4a 2d 6d 50 76 32 78 4e 35 41 30 68 61 73 31 7a 20 2e 5f 31 2d 44 5f 74 5f 75 46 70 4f 51 4f 50 47 48 46 71 35 70 6e 42 79 2c 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 54 36 38 66 42 48 2d 44 31 4f 41 4f 50 2d 63 77 47 71 31 56 20 2e 5f 31 52 72 75 77 44 77 38 5f 51 5f 46 69 36 68 5a 45 56 30 50 7a 76 2c 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 54 36 38 66 42 48 2d 44 31 4f 41 4f 50 2d 63 77 47 71 31 56 20 2e 5f 31 2d 44 5f 74 5f 75 46 70 4f 51 4f 50 47 48 46 71 35 70 6e 42 79 2c 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 32 70 56 54 57 62 76 77 6c 58 54 69 44 46 51 51 6d 6a Data Ascii: ZOBYq36SukEm_Fi_77g2q ._2TAgPMJ-mPv2xN5A0has1z ._1-D_t_uFpOQOPGHFq5pnBy,.ZOBYq36SukEm_Fi_77g2q .T68fBH-D1OAOP-cwGq1V ._1RruwDw8_Q_Fi6hZEV0Pzv,.ZOBYq36SukEm_Fi_77g2q .T68fBH-D1OAOP-cwGq1V ._1-D_t_uFpOQOPGHFq5pnBy,.ZOBYq36SukEm_Fi_77g2q ._2pVTWbvwlXTiDFQQmj
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 43 4d 59 20 2e 5f 31 37 76 6c 36 50 39 53 61 56 5a 75 39 6a 4e 6b 63 72 4e 69 4e 70 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 67 61 70 3a 31 34 70 78 3b 62 6f 74 74 6f 6d 3a 38 70 78 3b 6c 65 66 74 3a 31 36 70 78 7d 2e 5a 4f 42 59 71 33 36 53 75 6b 45 6d 5f 46 69 5f 37 37 67 32 71 20 2e 5f 33 55 61 36 76 4c 68 42 59 65 33 79 44 35 2d 69 65 52 6d 43 4d 59 20 2e 5f 31 37 76 6c 36 50 39 53 61 56 5a 75 39 6a 4e 6b 63 72 4e 69 4e 70 20 2e 5f 32 48 71 4b 55 5a 64 74 59 59 64 4b 73 66 52 4b 5a 50 48 73 2d 6d 7b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 66 61 66 61 66 3b 6f Data Ascii: CMY ._17vl6P9SaVZu9jNkcrNiNp{position:absolute;display:flex;flex-direction:row;gap:14px;bottom:8px;left:16px}.ZOBYq36SukEm_Fi_77g2q ._3Ua6vLhBYe3yD5-ieRmCMY ._17vl6P9SaVZu9jNkcrNiNp ._2HqKUZdtYYdKsfRKZPHs-m{width:40px;height:2px;background-color:#afafaf;o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	49879	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	624	OUT	GET /public/css/applications/store/login.css?contenthash=308e62712ce8998ce357 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:53 UTC	468	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:53 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 13 Feb 2024 23:55:24 GMT Cache-Control: public,max-age=15552000 Expires: Sun, 11 Aug 2024 23:56:57 GMT Edge-Control: !no-store,!bypass-cache,max-age=15552000 Strict-Transport-Security: max-age=10368000 X-Cache: HIT CF-Cache-Status: HIT Age: 3307261 Server: cloudflare CF-RAY: 86fd410f1cd4741c-MIA
2024-04-05 23:17:53 UTC	235	IN	Data Raw: 65 35 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2e 5f 32 6b 4c 52 6d 52 73 4c 77 6a 47 44 6c 6d 2d 5a 66 55 70 43 68 47 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 35 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 30 30 70 78 29 7b 2e 5f 32 6b 4c 52 6d 52 73 4c 77 6a 47 44 6c 6d 2d 5a 66 55 70 43 68 47 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 70 78 7d 7d 0d 0a 0d 0a Data Ascii: e5._2kLRmRsLwjGDlm-ZfUpChG{padding-top:80px;padding-bottom:150px;display:flex;flex-direction:column;align-items:center}@media screen and (max-width: 700px){._2kLRmRsLwjGDlm-ZfUpChG{padding-top:12px;padding-bottom:0px}}
2024-04-05 23:17:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	49876	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	614	OUT	GET /public/javascript/applications/store/460.js?contenthash=e69f7790614c12c82978 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:53 UTC	419	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:53 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 02 Apr 2024 22:30:34 GMT Cache-Control: public,max-age=15552000 Expires: Sun, 29 Sep 2024 22:32:13 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 261938 Server: cloudflare CF-RAY: 86fd410f0ded7449-MIA
2024-04-05 23:17:53 UTC	950	IN	Data Raw: 37 64 66 63 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 30 5d 2c 7b 35 39 32 32 33 3a 28 65 2c 72 2c 74 29 3d 3e 7b 76 61 72 Data Ascii: 7dfc/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[460],{59223:(e,r,t)=>{var
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 7b 76 61 72 20 72 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 68 69 73 2e 6c 65 6e 67 74 68 2f 38 29 3b 74 68 69 73 2e 62 75 66 66 65 72 2e 6c 65 6e 67 74 68 3c 3d 72 26 26 74 68 69 73 2e 62 75 66 66 65 72 2e 70 75 73 68 28 30 29 2c 65 26 26 28 74 68 69 73 2e 62 75 66 66 65 72 5b 72 5d 7c 3d 31 32 38 3e 3e 3e 74 68 69 73 2e 6c 65 6e 67 74 68 25 38 29 2c 74 68 69 73 2e 6c 65 6e 67 74 68 2b 2b 7d 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 72 7d 2c 36 32 36 37 39 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 4c 3a 31 2c 4d 3a 30 2c 51 3a 33 2c 48 3a 32 7d 7d 2c 32 33 36 35 32 3a 28 65 2c 72 2c 74 29 3d 3e 7b 76 61 72 20 69 3d 74 28 37 31 34 35 35 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 72 29 7b 69 66 28 6e 75 6c 6c 3d 3d 65 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 Data Ascii: {var r=Math.floor(this.length/8);this.buffer.length<=r&&this.buffer.push(0),e&&(this.buffer[r]\|=128>>>this.length%8),this.length++}},e.exports=r},62679:e=>{e.exports={L:1,M:0,Q:3,H:2}},23652:(e,r,t)=>{var i=t(71455);function n(e,r){if(null==e.length)throw
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 65 2b 22 2c 22 2b 72 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 65 5d 5b 72 5d 7d 2c 6c 2e 67 65 74 4d 6f 64 75 6c 65 43 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 7d 2c 6c 2e 6d 61 6b 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 74 79 70 65 4e 75 6d 62 65 72 3c 31 29 7b 76 61 72 20 65 3d 31 3b 66 6f 72 28 65 3d 31 3b 65 3c 34 30 3b 65 2b 2b 29 7b 66 6f 72 28 76 61 72 20 72 3d 6e 2e 67 65 74 52 53 42 6c 6f 63 6b 73 28 65 2c 74 68 69 73 2e 65 72 72 6f 72 43 6f 72 72 65 63 74 4c 65 76 65 6c 29 2c 74 3d 6e 65 77 20 61 2c 69 3d 30 2c 6f 3d 30 3b 6f 3c 72 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 2b 3d 72 Data Ascii: hrow new Error(e+","+r);return this.modules[e][r]},l.getModuleCount=function(){return this.moduleCount},l.make=function(){if(this.typeNumber<1){var e=1;for(e=1;e<40;e++){for(var r=n.getRSBlocks(e,this.errorCorrectLevel),t=new a,i=0,o=0;o<r.length;o++)i+=r
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 28 30 3d 3d 74 7c 7c 36 3d 3d 74 29 7c 7c 32 3c 3d 74 26 26 74 3c 3d 34 26 26 32 3c 3d 69 26 26 69 3c 3d 34 29 7d 2c 6c 2e 67 65 74 42 65 73 74 4d 61 73 6b 50 61 74 74 65 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 72 3d 30 2c 74 3d 30 3b 74 3c 38 3b 74 2b 2b 29 7b 74 68 69 73 2e 6d 61 6b 65 49 6d 70 6c 28 21 30 2c 74 29 3b 76 61 72 20 69 3d 73 2e 67 65 74 4c 6f 73 74 50 6f 69 6e 74 28 74 68 69 73 29 3b 28 30 3d 3d 74 7c 7c 65 3e 69 29 26 26 28 65 3d 69 2c 72 3d 74 29 7d 72 65 74 75 72 6e 20 72 7d 2c 6c 2e 63 72 65 61 74 65 4d 6f 76 69 65 43 6c 69 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 76 61 72 20 69 3d 65 2e 63 72 65 61 74 65 45 6d 70 74 79 4d 6f 76 69 65 43 6c 69 70 28 72 2c 74 29 3b 74 68 69 73 2e 6d 61 Data Ascii: (0==t\|\|6==t)\|\|2<=t&&t<=4&&2<=i&&i<=4)},l.getBestMaskPattern=function(){for(var e=0,r=0,t=0;t<8;t++){this.makeImpl(!0,t);var i=s.getLostPoint(this);(0==t\|\|e>i)&&(e=i,r=t)}return r},l.createMovieClip=function(e,r,t){var i=e.createEmptyMovieClip(r,t);this.ma
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 69 3e 3e 6e 26 31 29 3b 6e 3c 36 3f 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 6e 5d 5b 38 5d 3d 61 3a 6e 3c 38 3f 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 6e 2b 31 5d 5b 38 5d 3d 61 3a 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 2d 31 35 2b 6e 5d 5b 38 5d 3d 61 7d 66 6f 72 28 6e 3d 30 3b 6e 3c 31 35 3b 6e 2b 2b 29 7b 61 3d 21 65 26 26 31 3d 3d 28 69 3e 3e 6e 26 31 29 3b 6e 3c 38 3f 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 38 5d 5b 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 2d 6e 2d 31 5d 3d 61 3a 6e 3c 39 3f 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 38 5d 5b 31 35 2d 6e 2d 31 2b 31 5d 3d 61 3a 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 38 5d 5b 31 35 2d 6e 2d 31 5d 3d 61 7d 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 74 68 69 Data Ascii: i>>n&1);n<6?this.modules[n][8]=a:n<8?this.modules[n+1][8]=a:this.modules[this.moduleCount-15+n][8]=a}for(n=0;n<15;n++){a=!e&&1==(i>>n&1);n<8?this.modules[8][this.moduleCount-n-1]=a:n<9?this.modules[8][15-n-1+1]=a:this.modules[8][15-n-1]=a}this.modules[thi
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 64 3c 61 5b 6c 5d 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 61 5b 6c 5d 5b 64 5d 3d 32 35 35 26 65 2e 62 75 66 66 65 72 5b 64 2b 74 5d 3b 74 2b 3d 75 3b 76 61 72 20 42 3d 73 2e 67 65 74 45 72 72 6f 72 43 6f 72 72 65 63 74 50 6f 6c 79 6e 6f 6d 69 61 6c 28 6d 29 2c 62 3d 6e 65 77 20 6f 28 61 5b 6c 5d 2c 42 2e 67 65 74 4c 65 6e 67 74 68 28 29 2d 31 29 2e 6d 6f 64 28 42 29 3b 63 5b 6c 5d 3d 6e 65 77 20 41 72 72 61 79 28 42 2e 67 65 74 4c 65 6e 67 74 68 28 29 2d 31 29 3b 66 6f 72 28 64 3d 30 3b 64 3c 63 5b 6c 5d 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 79 3d 64 2b 62 2e 67 65 74 4c 65 6e 67 74 68 28 29 2d 63 5b 6c 5d 2e 6c 65 6e 67 74 68 3b 63 5b 6c 5d 5b 64 5d 3d 79 3e 3d 30 3f 62 2e 67 65 74 28 79 29 3a 30 7d 7d 76 61 72 20 67 3d 30 3b 66 6f 72 28 64 3d Data Ascii: d<a[l].length;d++)a[l][d]=255&e.buffer[d+t];t+=u;var B=s.getErrorCorrectPolynomial(m),b=new o(a[l],B.getLength()-1).mod(B);c[l]=new Array(B.getLength()-1);for(d=0;d<c[l].length;d++){var y=d+b.getLength()-c[l].length;c[l][d]=y>=0?b.get(y):0}}var g=0;for(d=
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 2c 35 2c 33 37 2c 31 33 5d 2c 5b 35 2c 31 30 39 2c 38 37 2c 31 2c 31 31 30 2c 38 38 5d 2c 5b 35 2c 36 35 2c 34 31 2c 35 2c 36 36 2c 34 32 5d 2c 5b 35 2c 35 34 2c 32 34 2c 37 2c 35 35 2c 32 35 5d 2c 5b 31 31 2c 33 36 2c 31 32 5d 2c 5b 35 2c 31 32 32 2c 39 38 2c 31 2c 31 32 33 2c 39 39 5d 2c 5b 37 2c 37 33 2c 34 35 2c 33 2c 37 34 2c 34 36 5d 2c 5b 31 35 2c 34 33 2c 31 39 2c 32 2c 34 34 2c 32 30 5d 2c 5b 33 2c 34 35 2c 31 35 2c 31 33 2c 34 36 2c 31 36 5d 2c 5b 31 2c 31 33 35 2c 31 30 37 2c 35 2c 31 33 36 2c 31 30 38 5d 2c 5b 31 30 2c 37 34 2c 34 36 2c 31 2c 37 35 2c 34 37 5d 2c 5b 31 2c 35 30 2c 32 32 2c 31 35 2c 35 31 2c 32 33 5d 2c 5b 32 2c 34 32 2c 31 34 2c 31 37 2c 34 33 2c 31 35 5d 2c 5b 35 2c 31 35 30 2c 31 32 30 2c 31 2c 31 35 31 2c 31 32 31 5d 2c 5b Data Ascii: ,5,37,13],[5,109,87,1,110,88],[5,65,41,5,66,42],[5,54,24,7,55,25],[11,36,12],[5,122,98,1,123,99],[7,73,45,3,74,46],[15,43,19,2,44,20],[3,45,15,13,46,16],[1,135,107,5,136,108],[10,74,46,1,75,47],[1,50,22,15,51,23],[2,42,14,17,43,15],[5,150,120,1,151,121],[
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 32 34 2c 33 35 2c 35 35 2c 32 35 5d 2c 5b 31 39 2c 34 35 2c 31 35 2c 33 35 2c 34 36 2c 31 36 5d 2c 5b 31 37 2c 31 34 35 2c 31 31 35 2c 31 2c 31 34 36 2c 31 31 36 5d 2c 5b 31 34 2c 37 34 2c 34 36 2c 32 31 2c 37 35 2c 34 37 5d 2c 5b 32 39 2c 35 34 2c 32 34 2c 31 39 2c 35 35 2c 32 35 5d 2c 5b 31 31 2c 34 35 2c 31 35 2c 34 36 2c 34 36 2c 31 36 5d 2c 5b 31 33 2c 31 34 35 2c 31 31 35 2c 36 2c 31 34 36 2c 31 31 36 5d 2c 5b 31 34 2c 37 34 2c 34 36 2c 32 33 2c 37 35 2c 34 37 5d 2c 5b 34 34 2c 35 34 2c 32 34 2c 37 2c 35 35 2c 32 35 5d 2c 5b 35 39 2c 34 36 2c 31 36 2c 31 2c 34 37 2c 31 37 5d 2c 5b 31 32 2c 31 35 31 2c 31 32 31 2c 37 2c 31 35 32 2c 31 32 32 5d 2c 5b 31 32 2c 37 35 2c 34 37 2c 32 36 2c 37 36 2c 34 38 5d 2c 5b 33 39 2c 35 34 2c 32 34 2c 31 34 2c 35 35 Data Ascii: 24,35,55,25],[19,45,15,35,46,16],[17,145,115,1,146,116],[14,74,46,21,75,47],[29,54,24,19,55,25],[11,45,15,46,46,16],[13,145,115,6,146,116],[14,74,46,23,75,47],[44,54,24,7,55,25],[59,46,16,1,47,17],[12,151,121,7,152,122],[12,75,47,26,76,48],[39,54,24,14,55
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 2e 45 58 50 5f 54 41 42 4c 45 5b 65 5d 7d 2c 45 58 50 5f 54 41 42 4c 45 3a 6e 65 77 20 41 72 72 61 79 28 32 35 36 29 2c 4c 4f 47 5f 54 41 42 4c 45 3a 6e 65 77 20 41 72 72 61 79 28 32 35 36 29 7d 2c 74 3d 30 3b 74 3c 38 3b 74 2b 2b 29 72 2e 45 58 50 5f 54 41 42 4c 45 5b 74 5d 3d 31 3c 3c 74 3b 66 6f 72 28 74 3d 38 3b 74 3c 32 35 36 3b 74 2b 2b 29 72 2e 45 58 50 5f 54 41 42 4c 45 5b 74 5d 3d 72 2e 45 58 50 5f 54 41 42 4c 45 5b 74 2d 34 5d 5e 72 2e 45 58 50 5f 54 41 42 4c 45 5b 74 2d 35 5d 5e 72 2e 45 58 50 5f 54 41 42 4c 45 5b 74 2d 36 5d 5e 72 2e 45 58 50 5f 54 41 42 4c 45 5b 74 2d 38 5d 3b 66 6f 72 28 74 3d 30 3b 74 3c 32 35 35 3b 74 2b 2b 29 72 2e 4c 4f 47 5f 54 41 42 4c 45 5b 72 2e 45 58 50 5f 54 41 42 4c 45 5b 74 5d 5d 3d 74 3b 65 2e 65 78 70 6f 72 74 Data Ascii: .EXP_TABLE[e]},EXP_TABLE:new Array(256),LOG_TABLE:new Array(256)},t=0;t<8;t++)r.EXP_TABLE[t]=1<<t;for(t=8;t<256;t++)r.EXP_TABLE[t]=r.EXP_TABLE[t-4]^r.EXP_TABLE[t-5]^r.EXP_TABLE[t-6]^r.EXP_TABLE[t-8];for(t=0;t<255;t++)r.LOG_TABLE[r.EXP_TABLE[t]]=t;e.export
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 69 67 69 74 28 72 29 2d 62 2e 67 65 74 42 43 48 44 69 67 69 74 28 62 2e 47 31 38 29 3b 72 65 74 75 72 6e 20 65 3c 3c 31 32 7c 72 7d 2c 67 65 74 42 43 48 44 69 67 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 30 21 3d 65 3b 29 72 2b 2b 2c 65 3e 3e 3e 3d 31 3b 72 65 74 75 72 6e 20 72 7d 2c 67 65 74 50 61 74 74 65 72 6e 50 6f 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 62 2e 50 41 54 54 45 52 4e 5f 50 4f 53 49 54 49 4f 4e 5f 54 41 42 4c 45 5b 65 2d 31 5d 7d 2c 67 65 74 4d 61 73 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 73 3a 72 65 74 75 72 6e 28 72 2b 74 29 25 32 3d 3d 30 3b 63 61 73 65 20 6f 3a 72 65 74 75 72 6e 20 72 25 32 3d 3d 30 Data Ascii: igit(r)-b.getBCHDigit(b.G18);return e<<12\|r},getBCHDigit:function(e){for(var r=0;0!=e;)r++,e>>>=1;return r},getPatternPosition:function(e){return b.PATTERN_POSITION_TABLE[e-1]},getMask:function(e,r,t){switch(e){case s:return(r+t)%2==0;case o:return r%2==0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	49878	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	615	OUT	GET /public/javascript/applications/store/6882.js?contenthash=715a72e84664238b26c1 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:53 UTC	419	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:53 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 02 Apr 2024 22:30:33 GMT Cache-Control: public,max-age=15552000 Expires: Sun, 29 Sep 2024 22:32:15 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 261937 Server: cloudflare CF-RAY: 86fd410f2d13a56f-MIA
2024-04-05 23:17:53 UTC	950	IN	Data Raw: 34 34 61 63 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 38 38 32 5d 2c 7b 36 35 31 34 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 Data Ascii: 44ac/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6882],{6514:e=>{e.exports
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 72 63 6c 65 50 75 6c 73 65 3a 22 5f 31 6f 51 55 4f 51 72 49 35 46 36 36 32 54 4a 4b 6a 38 6a 65 6b 53 22 2c 54 68 72 6f 62 62 65 72 54 6f 70 43 69 72 63 6c 65 4c 6f 6f 70 3a 22 5f 33 6f 71 5a 45 58 68 49 47 78 72 58 76 2d 6b 30 4c 5a 64 6e 75 4c 22 2c 54 68 72 6f 62 62 65 72 42 6f 74 74 6f 6d 43 69 72 63 6c 65 4c 6f 6f 70 3a 22 5f 33 76 65 51 72 6f 4e 59 54 68 39 51 59 6e 6f 43 68 4b 52 33 69 31 22 2c 72 6f 75 6e 64 54 68 72 6f 62 62 65 72 31 35 3a 22 5f 31 67 51 74 65 46 77 47 78 6b 49 59 6a 6e 63 31 52 34 41 4c 5f 74 22 2c 72 6f 75 6e 64 54 68 72 6f 62 62 65 72 31 34 3a 22 5f 33 44 58 65 52 45 41 37 62 66 75 51 48 59 36 5a 41 4f 35 52 37 7a 22 2c 72 6f 75 6e 64 54 68 72 6f 62 62 65 72 31 33 3a 22 5f 35 56 45 79 49 63 4b 64 57 61 64 51 42 57 72 58 5f 34 Data Ascii: rclePulse:"_1oQUOQrI5F662TJKj8jekS",ThrobberTopCircleLoop:"_3oqZEXhIGxrXv-k0LZdnuL",ThrobberBottomCircleLoop:"_3veQroNYTh9QYnoChKR3i1",roundThrobber15:"_1gQteFwGxkIYjnc1R4AL_t",roundThrobber14:"_3DXeREA7bfuQHY6ZAO5R7z",roundThrobber13:"_5VEyIcKdWadQBWrX_4
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 7b 63 6c 61 73 73 4e 61 6d 65 3a 74 2c 73 69 7a 65 3a 72 2c 73 74 72 69 6e 67 3a 6c 2c 70 6f 73 69 74 69 6f 6e 3a 69 2c 73 74 61 74 69 63 3a 62 2c 6d 73 44 65 6c 61 79 41 70 70 65 61 72 3a 6d 7d 3d 65 3b 6c 65 74 20 68 3d 5b 73 28 29 2e 4c 6f 61 64 69 6e 67 57 72 61 70 70 65 72 2c 22 53 74 65 61 6d 4c 6f 67 6f 54 68 72 6f 62 62 65 72 22 2c 66 28 72 29 5d 3b 63 6f 6e 73 74 5b 75 2c 64 5d 3d 63 2e 75 73 65 53 74 61 74 65 28 21 6d 29 2c 70 3d 21 28 30 2c 61 2e 4a 29 28 29 3b 72 65 74 75 72 6e 28 30 2c 63 2e 75 73 65 45 66 66 65 63 74 29 28 28 28 29 3d 3e 7b 69 66 28 75 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 64 28 21 30 29 29 2c 6d 29 3b 72 65 74 75 72 6e Data Ascii: unction(e){const{className:t,size:r,string:l,position:i,static:b,msDelayAppear:m}=e;let h=[s().LoadingWrapper,"SteamLogoThrobber",f(r)];const[u,d]=c.useState(!m),p=!(0,a.J)();return(0,c.useEffect)((()=>{if(u)return;const e=setTimeout((()=>d(!0)),m);return
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 7b 63 6c 61 73 73 4e 61 6d 65 3a 73 28 29 2e 54 68 72 6f 62 62 65 72 54 65 78 74 7d 2c 6c 29 29 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 73 6d 61 6c 6c 22 3a 72 65 74 75 72 6e 20 73 28 29 2e 74 68 72 6f 62 62 65 72 5f 73 6d 61 6c 6c 3b 63 61 73 65 22 6d 65 64 69 75 6d 22 3a 72 65 74 75 72 6e 20 73 28 29 2e 74 68 72 6f 62 62 65 72 5f 6d 65 64 69 75 6d 3b 63 61 73 65 22 78 6c 61 72 67 65 22 3a 72 65 74 75 72 6e 20 73 28 29 2e 74 68 72 6f 62 62 65 72 5f 78 6c 61 72 67 65 3b 63 61 73 65 22 78 78 6c 61 72 67 65 22 3a 72 65 74 75 72 6e 20 73 28 29 2e 74 68 72 6f 62 62 65 72 5f 78 78 6c 61 72 67 65 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 73 28 29 2e 74 68 72 6f 62 62 65 72 5f 6c 61 72 67 65 7d 7d Data Ascii: {className:s().ThrobberText},l))}));function f(e){switch(e){case"small":return s().throbber_small;case"medium":return s().throbber_medium;case"xlarge":return s().throbber_xlarge;case"xxlarge":return s().throbber_xxlarge;default:return s().throbber_large}}
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 2e 34 34 2d 35 2e 31 32 32 2c 31 36 2e 35 38 34 2d 35 2e 31 32 32 63 30 2e 35 35 31 2c 30 2c 31 2e 30 39 38 2c 30 2e 30 31 34 2c 31 2e 36 34 32 2c 30 2e 30 34 37 20 6c 32 34 2e 38 31 35 2d 33 35 2e 39 36 38 63 30 2d 30 2e 31 37 2d 30 2e 30 30 34 2d 30 2e 33 33 38 2d 30 2e 30 30 34 2d 30 2e 35 30 39 63 30 2d 32 31 2e 36 34 37 2c 31 37 2e 36 31 2d 33 39 2e 32 36 31 2c 33 39 2e 32 36 2d 33 39 2e 32 36 31 73 33 39 2e 32 36 33 2c 31 37 2e 36 31 33 2c 33 39 2e 32 36 33 2c 33 39 2e 32 36 31 20 63 30 2c 32 31 2e 36 35 2d 31 37 2e 36 31 31 2c 33 39 2e 32 36 34 2d 33 39 2e 32 36 33 2c 33 39 2e 32 36 34 63 2d 30 2e 32 39 39 2c 30 2d 30 2e 35 39 33 2d 30 2e 30 30 37 2d 30 2e 38 38 37 2d 30 2e 30 31 34 6c 2d 33 35 2e 33 39 32 2c 32 35 2e 32 35 31 63 30 2e 30 31 38 2c Data Ascii: .44-5.122,16.584-5.122c0.551,0,1.098,0.014,1.642,0.047 l24.815-35.968c0-0.17-0.004-0.338-0.004-0.509c0-21.647,17.61-39.261,39.26-39.261s39.263,17.613,39.263,39.261 c0,21.65-17.611,39.264-39.263,39.264c-0.299,0-0.593-0.007-0.887-0.014l-35.392,25.251c0.018,
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 36 38 36 2c 30 2d 39 39 2e 34 38 37 2c 34 32 2e 31 36 37 2d 31 30 33 2e 37 34 35 2c 39 35 2e 37 35 34 6c 35 35 2e 37 39 37 2c 32 33 2e 30 36 39 63 34 2e 37 32 39 2d 33 2e 32 33 31 2c 31 30 2e 34 34 2d 35 2e 31 32 32 2c 31 36 2e 35 38 34 2d 35 2e 31 32 32 63 30 2e 35 35 31 2c 30 2c 31 2e 30 39 38 2c 30 2e 30 31 34 2c 31 2e 36 34 32 2c 30 2e 30 34 37 20 6c 32 34 2e 38 31 35 2d 33 35 2e 39 36 38 63 30 2d 30 2e 31 37 2d 30 2e 30 30 34 2d 30 2e 33 33 38 2d 30 2e 30 30 34 2d 30 2e 35 30 39 63 30 2d 32 31 2e 36 34 37 2c 31 37 2e 36 31 2d 33 39 2e 32 36 31 2c 33 39 2e 32 36 2d 33 39 2e 32 36 31 73 33 39 2e 32 36 33 2c 31 37 2e 36 31 33 2c 33 39 2e 32 36 33 2c 33 39 2e 32 36 31 20 63 30 2c 32 31 2e 36 35 2d 31 37 2e 36 31 31 2c 33 39 2e 32 36 34 2d 33 39 2e 32 36 Data Ascii: 686,0-99.487,42.167-103.745,95.754l55.797,23.069c4.729-3.231,10.44-5.122,16.584-5.122c0.551,0,1.098,0.014,1.642,0.047 l24.815-35.968c0-0.17-0.004-0.338-0.004-0.509c0-21.647,17.61-39.261,39.26-39.261s39.263,17.613,39.263,39.261 c0,21.65-17.611,39.264-39.26
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 57 69 64 74 68 3a 22 36 22 2c 73 74 72 6f 6b 65 4d 69 74 65 72 6c 69 6d 69 74 3a 22 31 30 22 2c 64 3a 22 4d 31 32 37 2e 38 32 2c 32 33 2e 38 39 35 20 63 2d 35 34 2e 36 38 36 2c 30 2d 39 39 2e 34 38 37 2c 34 32 2e 31 36 37 2d 31 30 33 2e 37 34 35 2c 39 35 2e 37 35 34 6c 35 35 2e 37 39 37 2c 32 33 2e 30 36 39 63 34 2e 37 32 39 2d 33 2e 32 33 31 2c 31 30 2e 34 34 2d 35 2e 31 32 32 2c 31 36 2e 35 38 34 2d 35 2e 31 32 32 63 30 2e 35 35 31 2c 30 2c 31 2e 30 39 38 2c 30 2e 30 31 34 2c 31 2e 36 34 32 2c 30 2e 30 34 37 20 6c 32 34 2e 38 31 35 2d 33 35 2e 39 36 38 63 30 2d 30 2e 31 37 2d 30 2e 30 30 34 2d 30 2e 33 33 38 2d 30 2e 30 30 34 2d 30 2e 35 30 39 63 30 2d 32 31 2e 36 34 37 2c 31 37 2e 36 31 2d 33 39 2e 32 36 31 2c 33 39 2e 32 36 2d 33 39 Data Ascii: strokeWidth:"6",strokeMiterlimit:"10",d:"M127.82,23.895 c-54.686,0-99.487,42.167-103.745,95.754l55.797,23.069c4.729-3.231,10.44-5.122,16.584-5.122c0.551,0,1.098,0.014,1.642,0.047 l24.815-35.968c0-0.17-0.004-0.338-0.004-0.509c0-21.647,17.61-39.261,39.26-39
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 54 68 72 6f 62 62 65 72 30 35 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 62 75 74 74 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 23 66 66 66 66 66 66 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 22 36 22 2c 73 74 72 6f 6b 65 4d 69 74 65 72 6c 69 6d 69 74 3a 22 31 30 22 2c 64 3a 22 4d 31 32 37 2e 38 32 2c 32 33 2e 38 39 35 20 63 2d 35 34 2e 36 38 36 2c 30 2d 39 39 2e 34 38 37 2c 34 32 2e 31 36 37 2d 31 30 33 2e 37 34 35 2c 39 35 2e 37 35 34 6c 35 35 2e 37 39 37 2c 32 33 2e 30 36 39 63 34 2e 37 32 39 2d 33 2e 32 33 31 2c 31 30 2e 34 34 2d 35 2e 31 32 32 2c 31 36 2e 35 38 34 2d 35 2e 31 32 32 63 30 2e 35 35 31 2c 30 2c 31 2e 30 39 38 2c 30 2e 30 31 34 2c 31 2e 36 34 32 2c 30 2e 30 34 37 20 6c 32 34 2e 38 31 35 2d 33 35 2e 39 36 38 63 Data Ascii: Throbber05,strokeLinecap:"butt",fill:"none",stroke:"#ffffff",strokeWidth:"6",strokeMiterlimit:"10",d:"M127.82,23.895 c-54.686,0-99.487,42.167-103.745,95.754l55.797,23.069c4.729-3.231,10.44-5.122,16.584-5.122c0.551,0,1.098,0.014,1.642,0.047 l24.815-35.968c
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 31 32 37 2e 38 32 2c 32 33 2e 38 39 35 7a 22 7d 29 2c 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 73 28 29 2e 72 6f 75 6e 64 54 68 72 6f 62 62 65 72 30 37 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 62 75 74 74 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 23 66 66 66 66 66 66 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 22 36 22 2c 73 74 72 6f 6b 65 4d 69 74 65 72 6c 69 6d 69 74 3a 22 31 30 22 2c 64 3a 22 4d 31 32 37 2e 38 32 2c 32 33 2e 38 39 35 20 63 2d 35 34 2e 36 38 36 2c 30 2d 39 39 2e 34 38 37 2c 34 32 2e 31 36 37 2d 31 30 33 2e 37 34 35 2c 39 35 2e 37 35 34 6c 35 35 2e 37 39 37 2c 32 33 2e 30 36 39 63 34 2e 37 32 39 2d 33 2e 32 33 31 2c 31 30 2e 34 34 2d 35 2e 31 32 32 Data Ascii: 127.82,23.895z"}),c.createElement("path",{className:s().roundThrobber07,strokeLinecap:"butt",fill:"none",stroke:"#ffffff",strokeWidth:"6",strokeMiterlimit:"10",d:"M127.82,23.895 c-54.686,0-99.487,42.167-103.745,95.754l55.797,23.069c4.729-3.231,10.44-5.122
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 37 35 2e 37 33 33 63 35 37 2e 34 39 35 2c 30 2c 31 30 34 2e 31 30 34 2d 34 36 2e 36 31 2c 31 30 34 2e 31 30 34 2d 31 30 34 2e 31 30 35 53 31 38 35 2e 33 31 34 2c 32 33 2e 38 39 35 2c 31 32 37 2e 38 32 2c 32 33 2e 38 39 35 7a 22 7d 29 2c 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 73 28 29 2e 72 6f 75 6e 64 54 68 72 6f 62 62 65 72 30 39 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 62 75 74 74 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 23 66 66 66 66 66 66 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 22 36 22 2c 73 74 72 6f 6b 65 4d 69 74 65 72 6c 69 6d 69 74 3a 22 31 30 22 2c 64 3a 22 4d 31 32 37 2e 38 32 2c 32 33 2e 38 39 35 20 63 2d 35 34 2e 36 38 36 2c 30 2d 39 39 2e 34 38 Data Ascii: 75.733c57.495,0,104.104-46.61,104.104-104.105S185.314,23.895,127.82,23.895z"}),c.createElement("path",{className:s().roundThrobber09,strokeLinecap:"butt",fill:"none",stroke:"#ffffff",strokeWidth:"6",strokeMiterlimit:"10",d:"M127.82,23.895 c-54.686,0-99.48

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	49877	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	615	OUT	GET /public/javascript/applications/store/7247.js?contenthash=b29dba9d0d5460b0cd58 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:53 UTC	418	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:53 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 02 Apr 2024 22:30:33 GMT Cache-Control: public,max-age=15552000 Expires: Sun, 29 Sep 2024 22:32:13 GMT Strict-Transport-Security: max-age=10368000 X-Cache: HIT CF-Cache-Status: HIT Age: 261937 Server: cloudflare CF-RAY: 86fd410f1e0e67b7-MIA
2024-04-05 23:17:53 UTC	951	IN	Data Raw: 35 35 34 38 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 32 34 37 5d 2c 7b 38 38 37 36 35 Data Ascii: 5548/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/"use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[7247],{88765
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 76 61 72 20 6e 3d 31 36 33 38 33 26 69 2c 68 3d 69 3e 3e 31 34 3b 2d 2d 73 3e 3d 30 3b 29 7b 76 61 72 20 75 3d 31 36 33 38 33 26 74 68 69 73 5b 74 5d 2c 61 3d 74 68 69 73 5b 74 2b 2b 5d 3e 3e 31 34 2c 66 3d 68 2a 75 2b 61 2a 6e 3b 65 3d 28 28 75 3d 6e 2a 75 2b 28 28 31 36 33 38 33 26 66 29 3c 3c 31 34 29 2b 72 5b 6f 5d 2b 65 29 3e 3e 32 38 29 2b 28 66 3e 3e 31 34 29 2b 68 2a 61 2c 72 5b 6f 2b 2b 5d 3d 32 36 38 34 33 35 34 35 35 26 75 7d 72 65 74 75 72 6e 20 65 7d 2c 6f 3d 32 38 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 42 3d 6f 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 4d 3d 28 31 3c 3c 6f 29 2d 31 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 56 3d 31 3c 3c 6f 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 56 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 35 32 29 2c 65 Data Ascii: var n=16383&i,h=i>>14;--s>=0;){var u=16383&this[t],a=this[t++]>>14,f=hu+an;e=((u=nu+((16383&f)<<14)+r[o]+e)>>28)+(f>>14)+ha,r[o++]=268435455&u}return e},o=28),e.prototype.DB=o,e.prototype.DM=(1<<o)-1,e.prototype.DV=1<<o;e.prototype.FV=Math.pow(2,52),e
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 32 29 2c 74 68 69 73 2e 6d 75 3d 74 68 69 73 2e 72 32 2e 64 69 76 69 64 65 28 74 29 2c 74 68 69 73 2e 6d 3d 74 7d 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 73 3c 30 7c 7c 74 2e 63 6f 6d 70 61 72 65 54 6f 28 74 68 69 73 2e 6d 29 3e 3d 30 3f 74 2e 6d 6f 64 28 74 68 69 73 2e 6d 29 3a 74 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 64 69 76 52 65 6d 54 6f 28 74 68 69 73 2e 6d 2c 6e 75 6c 6c 2c 74 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 75 6c 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 Data Ascii: 2),this.mu=this.r2.divide(t),this.m=t}m.prototype.convert=function(t){return t.s<0\|\|t.compareTo(this.m)>=0?t.mod(this.m):t},m.prototype.revert=function(t){return t},m.prototype.reduce=function(t){t.divRemTo(this.m,null,t)},m.prototype.mulTo=function(t,i,r
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 3b 65 6c 73 65 7b 69 66 28 34 21 3d 69 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 68 69 73 2e 66 72 6f 6d 52 61 64 69 78 28 74 2c 69 29 3b 72 3d 32 7d 74 68 69 73 2e 74 3d 30 2c 74 68 69 73 2e 73 3d 30 3b 66 6f 72 28 76 61 72 20 6f 3d 74 2e 6c 65 6e 67 74 68 2c 73 3d 21 31 2c 6e 3d 30 3b 2d 2d 6f 3e 3d 30 3b 29 7b 76 61 72 20 68 3d 38 3d 3d 72 3f 32 35 35 26 74 5b 6f 5d 3a 70 28 74 2c 6f 29 3b 68 3c 30 3f 22 2d 22 3d 3d 74 2e 63 68 61 72 41 74 28 6f 29 26 26 28 73 3d 21 30 29 3a 28 73 3d 21 31 2c 30 3d 3d 6e 3f 74 68 69 73 5b 74 68 69 73 2e 74 2b 2b 5d 3d 68 3a 6e 2b 72 3e 74 68 69 73 2e 44 42 3f 28 74 68 69 73 5b 74 68 69 73 2e 74 2d 31 5d 7c 3d 28 68 26 28 31 3c 3c 74 68 69 73 2e 44 42 2d 6e 29 2d 31 29 3c 3c 6e 2c 74 68 69 73 5b 74 68 69 73 2e 74 2b 2b Data Ascii: ;else{if(4!=i)return void this.fromRadix(t,i);r=2}this.t=0,this.s=0;for(var o=t.length,s=!1,n=0;--o>=0;){var h=8==r?255&t[o]:p(t,o);h<0?"-"==t.charAt(o)&&(s=!0):(s=!1,0==n?this[this.t++]=h:n+r>this.DB?(this[this.t-1]\|=(h&(1<<this.DB-n)-1)<<n,this[this.t++
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 2e 6d 69 6e 28 74 2e 74 2c 74 68 69 73 2e 74 29 3b 72 3c 65 3b 29 6f 2b 3d 74 68 69 73 5b 72 5d 2d 74 5b 72 5d 2c 69 5b 72 2b 2b 5d 3d 6f 26 74 68 69 73 2e 44 4d 2c 6f 3e 3e 3d 74 68 69 73 2e 44 42 3b 69 66 28 74 2e 74 3c 74 68 69 73 2e 74 29 7b 66 6f 72 28 6f 2d 3d 74 2e 73 3b 72 3c 74 68 69 73 2e 74 3b 29 6f 2b 3d 74 68 69 73 5b 72 5d 2c 69 5b 72 2b 2b 5d 3d 6f 26 74 68 69 73 2e 44 4d 2c 6f 3e 3e 3d 74 68 69 73 2e 44 42 3b 6f 2b 3d 74 68 69 73 2e 73 7d 65 6c 73 65 7b 66 6f 72 28 6f 2b 3d 74 68 69 73 2e 73 3b 72 3c 74 2e 74 3b 29 6f 2d 3d 74 5b 72 5d 2c 69 5b 72 2b 2b 5d 3d 6f 26 74 68 69 73 2e 44 4d 2c 6f 3e 3e 3d 74 68 69 73 2e 44 42 3b 6f 2d 3d 74 2e 73 7d 69 2e 73 3d 6f 3c 30 3f 2d 31 3a 30 2c 6f 3c 2d 31 3f 69 5b 72 2b 2b 5d 3d 74 68 69 73 2e 44 56 Data Ascii: .min(t.t,this.t);r<e;)o+=this[r]-t[r],i[r++]=o&this.DM,o>>=this.DB;if(t.t<this.t){for(o-=t.s;r<this.t;)o+=this[r],i[r++]=o&this.DM,o>>=this.DB;o+=this.s}else{for(o+=this.s;r<t.t;)o-=t[r],i[r++]=o&this.DM,o>>=this.DB;o-=t.s}i.s=o<0?-1:0,o<-1?i[r++]=this.DV
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 2a 79 29 3b 69 66 28 28 72 5b 54 5d 2b 3d 68 2e 61 6d 28 30 2c 44 2c 72 2c 67 2c 30 2c 70 29 29 3c 44 29 66 6f 72 28 68 2e 64 6c 53 68 69 66 74 54 6f 28 67 2c 62 29 2c 72 2e 73 75 62 54 6f 28 62 2c 72 29 3b 72 5b 54 5d 3c 2d 2d 44 3b 29 72 2e 73 75 62 54 6f 28 62 2c 72 29 7d 6e 75 6c 6c 21 3d 69 26 26 28 72 2e 64 72 53 68 69 66 74 54 6f 28 70 2c 69 29 2c 75 21 3d 61 26 26 65 2e 5a 45 52 4f 2e 73 75 62 54 6f 28 69 2c 69 29 29 2c 72 2e 74 3d 70 2c 72 2e 63 6c 61 6d 70 28 29 2c 66 3e 30 26 26 72 2e 72 53 68 69 66 74 54 6f 28 66 2c 72 29 2c 75 3c 30 26 26 65 2e 5a 45 52 4f 2e 73 75 62 54 6f 28 72 2c 72 29 7d 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 76 44 69 67 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 74 3c 31 29 72 65 74 75 Data Ascii: *y);if((r[T]+=h.am(0,D,r,g,0,p))<D)for(h.dlShiftTo(g,b),r.subTo(b,r);r[T]<--D;)r.subTo(b,r)}null!=i&&(r.drShiftTo(p,i),u!=a&&e.ZERO.subTo(i,i)),r.t=p,r.clamp(),f>0&&r.rShiftTo(f,r),u<0&&e.ZERO.subTo(r,r)}}},e.prototype.invDigit=function(){if(this.t<1)retu
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 74 68 69 73 2e 74 3b 69 66 28 30 21 3d 28 69 3d 72 2d 74 2e 74 29 29 72 65 74 75 72 6e 20 69 3b 66 6f 72 28 3b 2d 2d 72 3e 3d 30 3b 29 69 66 28 30 21 3d 28 69 3d 74 68 69 73 5b 72 5d 2d 74 5b 72 5d 29 29 72 65 74 75 72 6e 20 69 3b 72 65 74 75 72 6e 20 30 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 74 4c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 3c 3d 30 3f 30 3a 74 68 69 73 2e 44 42 2a 28 74 68 69 73 2e 74 2d 31 29 2b 6c 28 74 68 69 73 5b 74 68 69 73 2e 74 2d 31 5d 5e 74 68 69 73 2e 73 26 74 68 69 73 2e 44 4d 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 73 28 29 3b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: return i;var r=this.t;if(0!=(i=r-t.t))return i;for(;--r>=0;)if(0!=(i=this[r]-t[r]))return i;return 0},e.prototype.bitLength=function(){return this.t<=0?0:this.DB*(this.t-1)+l(this[this.t-1]^this.s&this.DM)},e.prototype.mod=function(t){var i=s();return thi
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 31 33 39 2c 31 34 39 2c 31 35 31 2c 31 35 37 2c 31 36 33 2c 31 36 37 2c 31 37 33 2c 31 37 39 2c 31 38 31 2c 31 39 31 2c 31 39 33 2c 31 39 37 2c 31 39 39 2c 32 31 31 2c 32 32 33 2c 32 32 37 2c 32 32 39 2c 32 33 33 2c 32 33 39 2c 32 34 31 2c 32 35 31 2c 32 35 37 2c 32 36 33 2c 32 36 39 2c 32 37 31 2c 32 37 37 2c 32 38 31 2c 32 38 33 2c 32 39 33 2c 33 30 37 2c 33 31 31 2c 33 31 33 2c 33 31 37 2c 33 33 31 2c 33 33 37 2c 33 34 37 2c 33 34 39 2c 33 35 33 2c 33 35 39 2c 33 36 37 2c 33 37 33 2c 33 37 39 2c 33 38 33 2c 33 38 39 2c 33 39 37 2c 34 30 31 2c 34 30 39 2c 34 31 39 2c 34 32 31 2c 34 33 31 2c 34 33 33 2c 34 33 39 2c 34 34 33 2c 34 34 39 2c 34 35 37 2c 34 36 31 2c 34 36 33 2c 34 36 37 2c 34 37 39 2c 34 38 37 2c 34 39 31 2c 34 39 39 2c 35 30 33 2c 35 30 39 Data Ascii: 139,149,151,157,163,167,173,179,181,191,193,197,199,211,223,227,229,233,239,241,251,257,263,269,271,277,281,283,293,307,311,313,317,331,337,347,349,353,359,367,373,379,383,389,397,401,409,419,421,431,433,439,443,449,457,461,463,467,479,487,491,499,503,509
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 3e 33 29 2c 69 2e 6e 65 78 74 42 79 74 65 73 28 6f 29 2c 73 3e 30 3f 6f 5b 30 5d 26 3d 28 31 3c 3c 73 29 2d 31 3a 6f 5b 30 5d 3d 30 2c 74 68 69 73 2e 66 72 6f 6d 53 74 72 69 6e 67 28 6f 2c 32 35 36 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 74 77 69 73 65 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 72 29 7b 76 61 72 20 6f 2c 65 2c 73 3d 4d 61 74 68 2e 6d 69 6e 28 74 2e 74 2c 74 68 69 73 2e 74 29 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 73 3b 2b 2b 6f 29 72 5b 6f 5d 3d 69 28 74 68 69 73 5b 6f 5d 2c 74 5b 6f 5d 29 3b 69 66 28 74 2e 74 3c 74 68 69 73 2e 74 29 7b 66 6f 72 28 65 3d 74 2e 73 26 74 68 69 73 2e 44 4d 2c 6f 3d 73 3b 6f 3c 74 68 69 73 2e 74 3b 2b 2b 6f 29 72 5b 6f 5d 3d 69 28 74 68 69 73 5b 6f 5d 2c 65 29 3b 72 2e 74 3d 74 68 69 73 2e 74 7d Data Ascii: >3),i.nextBytes(o),s>0?o[0]&=(1<<s)-1:o[0]=0,this.fromString(o,256)}},e.prototype.bitwiseTo=function(t,i,r){var o,e,s=Math.min(t.t,this.t);for(o=0;o<s;++o)r[o]=i(this[o],t[o]);if(t.t<this.t){for(e=t.s&this.DM,o=s;o<this.t;++o)r[o]=i(this[o],e);r.t=this.t}
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 2d 6f 3e 3d 30 3b 29 72 5b 6f 5d 3d 30 3b 66 6f 72 28 6f 3d 4d 61 74 68 2e 6d 61 78 28 69 2d 74 68 69 73 2e 74 2c 30 29 3b 6f 3c 74 2e 74 3b 2b 2b 6f 29 72 5b 74 68 69 73 2e 74 2b 6f 2d 69 5d 3d 74 68 69 73 2e 61 6d 28 69 2d 6f 2c 74 5b 6f 5d 2c 72 2c 30 2c 30 2c 74 68 69 73 2e 74 2b 6f 2d 69 29 3b 72 2e 63 6c 61 6d 70 28 29 2c 72 2e 64 72 53 68 69 66 74 54 6f 28 31 2c 72 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 6f 64 49 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 3c 3d 30 29 72 65 74 75 72 6e 20 30 3b 76 61 72 20 69 3d 74 68 69 73 2e 44 56 25 74 2c 72 3d 74 68 69 73 2e 73 3c 30 3f 74 2d 31 3a 30 3b 69 66 28 74 68 69 73 2e 74 3e 30 29 69 66 28 30 3d 3d 69 29 72 3d 74 68 69 73 5b 30 5d 25 74 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6f Data Ascii: -o>=0;)r[o]=0;for(o=Math.max(i-this.t,0);o<t.t;++o)r[this.t+o-i]=this.am(i-o,t[o],r,0,0,this.t+o-i);r.clamp(),r.drShiftTo(1,r)},e.prototype.modInt=function(t){if(t<=0)return 0;var i=this.DV%t,r=this.s<0?t-1:0;if(this.t>0)if(0==i)r=this[0]%t;else for(var o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	49880	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:52 UTC	615	OUT	GET /public/javascript/applications/store/9424.js?contenthash=e670f3ca9e3d01a52001 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:53 UTC	419	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:53 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 02 Apr 2024 22:30:33 GMT Cache-Control: public,max-age=15552000 Expires: Sun, 29 Sep 2024 22:32:15 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 261937 Server: cloudflare CF-RAY: 86fd410eecab0325-MIA
2024-04-05 23:17:53 UTC	950	IN	Data Raw: 33 39 65 32 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 34 32 34 5d 2c 7b 36 38 36 32 38 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 Data Ascii: 39e2/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[9424],{68628:e=>{e.export
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 69 6e 6b 3a 22 5f 31 6d 6b 34 41 65 75 6b 5f 50 59 53 35 34 61 79 48 71 67 71 48 51 22 2c 48 69 64 65 42 75 74 74 6f 6e 3a 22 75 38 38 73 63 33 4b 36 67 50 77 49 39 43 7a 74 4a 75 44 4d 54 22 2c 55 73 65 4d 6f 62 69 6c 65 41 70 70 46 6f 72 51 52 3a 22 5f 39 78 67 73 76 30 63 55 43 4c 6d 4f 45 53 36 36 79 62 50 6a 4d 22 2c 49 6e 43 6c 69 65 6e 74 3a 22 5f 32 47 52 2d 37 32 45 51 48 36 71 70 52 75 52 4e 77 32 66 49 39 66 22 2c 54 65 78 74 46 69 65 6c 64 3a 22 5f 32 4b 58 47 4b 54 6f 78 46 36 42 47 36 35 72 58 4e 5a 2d 6d 4a 58 22 2c 54 65 78 74 49 6e 70 75 74 3a 22 5f 32 65 4b 56 6e 36 67 35 59 79 73 78 39 4a 6d 75 74 51 65 37 57 56 22 2c 44 61 6e 67 65 72 3a 22 5f 31 2d 48 77 4a 41 56 59 58 51 51 50 44 49 62 6a 44 62 35 4f 30 46 22 2c 4c 6f 67 69 6e 46 6f Data Ascii: ink:"_1mk4Aeuk_PYS54ayHqgqHQ",HideButton:"u88sc3K6gPwI9CztJuDMT",UseMobileAppForQR:"_9xgsv0cUCLmOES66ybPjM",InClient:"_2GR-72EQH6qpRuRNw2fI9f",TextField:"_2KXGKToxF6BG65rXNZ-mJX",TextInput:"_2eKVn6g5Yysx9JmutQe7WV",Danger:"_1-HwJAVYXQQPDIbjDb5O0F",LoginFo
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 63 5f 6c 67 42 22 2c 41 77 61 69 74 69 6e 67 4d 6f 62 69 6c 65 43 6f 6e 66 54 65 78 74 3a 22 5f 37 4c 6d 6e 54 50 47 4e 76 48 45 66 52 56 69 7a 45 69 47 45 56 22 2c 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 45 6e 74 72 79 43 6f 6e 74 61 69 6e 65 72 3a 22 5f 32 41 6e 71 53 5a 69 63 71 35 30 67 58 61 4a 75 51 78 2d 53 64 43 22 2c 41 77 61 69 74 69 6e 67 4d 6f 62 69 6c 65 43 6f 6e 66 49 63 6f 6e 3a 22 5f 32 68 4c 43 5f 63 78 43 39 4c 65 56 31 79 35 37 42 75 58 38 6c 6d 22 2c 41 77 61 69 74 69 6e 67 45 6d 61 69 6c 43 6f 6e 66 49 63 6f 6e 3a 22 5f 33 69 4d 35 4c 75 32 66 58 57 38 78 71 32 4d 45 6b 33 30 47 50 30 22 2c 4c 69 6e 6b 43 6f 6e 74 61 69 6e 65 72 3a 22 5f 33 79 4a 48 70 66 6d 78 6b 4a 51 6c 6b 46 33 50 6e 4a 75 64 6e 38 22 2c 45 6e 74 65 72 43 6f 64 65 49 Data Ascii: c_lgB",AwaitingMobileConfText:"_7LmnTPGNvHEfRVizEiGEV",ConfirmationEntryContainer:"_2AnqSZicq50gXaJuQx-SdC",AwaitingMobileConfIcon:"_2hLC_cxC9LeV1y57BuX8lm",AwaitingEmailConfIcon:"_3iM5Lu2fXW8xq2MEk30GP0",LinkContainer:"_3yJHpfmxkJQlkF3PnJudn8",EnterCodeI
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 37 6f 74 54 4c 6b 5a 73 56 6b 4a 33 39 79 55 6a 22 2c 41 63 63 6f 75 6e 74 43 72 65 61 74 69 6f 6e 3a 22 5f 31 39 79 47 62 61 74 71 32 30 41 6a 4f 79 75 48 46 4b 6b 31 6c 64 22 2c 41 63 63 6f 75 6e 74 43 72 65 61 74 69 6f 6e 50 72 6f 6d 70 74 3a 22 5f 31 68 35 5f 78 5f 45 6f 46 33 4b 70 51 62 6e 5f 57 50 74 56 72 71 22 2c 46 61 69 6c 75 72 65 54 69 74 6c 65 3a 22 41 33 59 2d 75 33 39 78 69 72 39 44 4b 74 76 4c 45 4f 63 6e 64 22 2c 46 61 69 6c 75 72 65 44 65 73 63 72 69 70 74 69 6f 6e 3a 22 5f 33 67 46 65 73 63 4e 50 7a 52 32 61 59 70 31 56 6a 6d 47 33 77 7a 22 2c 46 61 69 6c 75 72 65 42 75 74 74 6f 6e 73 3a 22 5f 32 4f 5a 36 34 75 59 39 2d 4d 78 61 31 35 7a 58 76 79 75 6d 58 39 22 2c 4f 66 66 65 72 4f 66 66 6c 69 6e 65 3a 22 5f 32 44 50 73 74 4d 4a 37 69 Data Ascii: 7otTLkZsVkJ39yUj",AccountCreation:"_19yGbatq20AjOyuHFKk1ld",AccountCreationPrompt:"_1h5_x_EoF3KpQbn_WPtVrq",FailureTitle:"A3Y-u39xir9DKtvLEOcnd",FailureDescription:"_3gFescNPzR2aYp1VjmG3wz",FailureButtons:"_2OZ64uY9-Mxa15zXvyumX9",OfferOffline:"_2DPstMJ7i
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4e 5a 3a 28 29 3d 3e 72 2c 54 47 3a 28 29 3d 3e 61 2c 69 6f 3a 28 29 3d 3e 43 2c 71 4f 3a 28 29 3d 3e 45 2c 74 59 3a 28 29 3d 3e 67 7d 29 3b 76 61 72 20 72 2c 61 2c 6f 3d 6e 28 38 35 35 35 36 29 2c 73 3d 6e 28 35 34 38 34 32 29 2c 69 3d 6e 28 38 30 37 35 31 29 2c 6c 3d 6e 2e 6e 28 69 29 2c 63 3d 6e 28 37 39 35 34 35 29 2c 6d 3d 6e 28 31 36 39 39 37 29 2c 75 3d 6e 28 33 37 35 36 33 29 2c 64 3d 6e 28 35 34 39 30 29 2c 68 3d 6e 28 35 30 30 36 30 29 2c 5f 3d 6e 28 39 37 32 34 37 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 63 6f 6e 73 74 7b 73 68 61 72 65 64 5f 73 65 63 72 65 74 3a 74 2c 69 64 65 6e 74 69 74 79 5f 73 65 63 72 65 74 3a 6e 2c 73 65 63 72 65 74 5f 31 3a 72 2c 73 74 61 74 75 Data Ascii: =>{"use strict";n.d(t,{NZ:()=>r,TG:()=>a,io:()=>C,qO:()=>E,tY:()=>g});var r,a,o=n(85556),s=n(54842),i=n(80751),l=n.n(i),c=n(79545),m=n(16997),u=n(37563),d=n(5490),h=n(50060),_=n(97247);function g(e){const{shared_secret:t,identity_secret:n,secret_1:r,statu
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 74 69 76 65 54 69 6d 65 72 49 44 3d 76 6f 69 64 20 30 7d 50 6f 6c 6c 46 6f 72 55 70 64 61 74 65 28 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 74 72 79 7b 63 6f 6e 73 74 20 65 3d 63 2e 67 41 2e 49 6e 69 74 28 64 2e 55 79 29 3b 65 2e 53 65 74 45 4d 73 67 28 39 38 30 34 29 2c 65 2e 42 6f 64 79 28 29 2e 73 65 74 5f 63 6c 69 65 6e 74 5f 69 64 28 74 68 69 73 2e 6d 5f 73 74 72 43 6c 69 65 6e 74 49 44 29 2c 65 2e 42 6f 64 79 28 29 2e 73 65 74 5f 72 65 71 75 65 73 74 5f 69 64 28 74 68 69 73 2e 6d 5f 72 67 52 65 71 75 65 73 74 49 44 29 2c 74 68 69 73 2e 6d 5f 73 74 72 54 6f 6b 65 6e 54 6f 52 65 76 6f 6b 65 26 26 65 2e 42 6f 64 79 28 29 2e 73 65 74 5f 74 6f 6b 65 Data Ascii: tiveTimerID=void 0}PollForUpdate(){return(0,o.mG)(this,void 0,void 0,(function*(){try{const e=c.gA.Init(d.Uy);e.SetEMsg(9804),e.Body().set_client_id(this.m_strClientID),e.Body().set_request_id(this.m_rgRequestID),this.m_strTokenToRevoke&&e.Body().set_toke
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 65 73 68 54 6f 6b 65 6e 3a 73 2c 73 74 72 41 63 63 65 73 73 54 6f 6b 65 6e 3a 69 2c 73 74 72 41 63 63 6f 75 6e 74 4e 61 6d 65 3a 6c 2c 73 74 72 4e 65 77 47 75 61 72 64 44 61 74 61 3a 75 7d 29 2c 6e 29 3a 28 61 26 26 28 74 68 69 73 2e 6d 5f 73 74 72 43 68 61 6c 6c 65 6e 67 65 55 52 4c 3d 61 29 2c 6f 26 26 28 74 68 69 73 2e 6d 5f 73 74 72 43 6c 69 65 6e 74 49 44 3d 6f 29 2c 74 68 69 73 2e 6d 5f 61 63 74 69 76 65 54 69 6d 65 72 49 44 3d 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 50 6f 6c 6c 46 6f 72 55 70 64 61 74 65 2c 74 68 69 73 2e 6d 5f 6d 73 50 6f 6c 6c 49 6e 74 65 72 76 61 6c 29 2c 6e 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 5f 2e 46 30 29 28 60 46 61 69 6c 65 64 20 74 6f 20 70 6f 6c 6c 20 61 75 74 68 20 73 Data Ascii: eshToken:s,strAccessToken:i,strAccountName:l,strNewGuardData:u}),n):(a&&(this.m_strChallengeURL=a),o&&(this.m_strClientID=o),this.m_activeTimerID=window.setTimeout(this.PollForUpdate,this.m_msPollInterval),n)}catch(e){return(0,_.F0)(`Failed to poll auth s
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 65 74 75 72 6e 28 30 2c 6f 2e 6d 47 29 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 63 6f 6e 73 74 20 6e 3d 6e 65 77 20 55 52 4c 28 65 29 3b 6c 65 74 20 72 3d 21 30 3b 74 72 79 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 46 6f 72 6d 44 61 74 61 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 61 2e 61 70 70 65 6e 64 28 65 2c 74 5b 65 5d 29 29 29 3b 63 6f 6e 73 74 20 6f 3d 79 69 65 6c 64 20 6c 28 29 2e 70 6f 73 74 28 65 2c 61 2c 7b 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 21 30 2c 74 69 6d 65 6f 75 74 3a 31 65 34 7d 29 3b 32 30 30 21 3d 3d 6f 2e 73 74 61 74 75 73 3f 28 28 30 2c 5f 2e 46 30 29 28 60 54 72 61 6e 73 66 65 72 20 6c 6f 67 69 6e 20 74 6f 20 24 7b 6e 2e 68 Data Ascii: eturn(0,o.mG)(this,void 0,void 0,(function*(){const n=new URL(e);let r=!0;try{const a=new FormData;Object.keys(t).forEach((e=>a.append(e,t[e])));const o=yield l().post(e,a,{withCredentials:!0,timeout:1e4});200!==o.status?((0,_.F0)(`Transfer login to ${n.h
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 32 29 2c 69 3d 6e 28 38 30 37 35 31 29 2c 6c 3d 6e 2e 6e 28 69 29 2c 63 3d 6e 28 33 37 35 36 33 29 2c 6d 3d 6e 28 37 39 35 34 35 29 2c 75 3d 6e 28 33 35 37 39 31 29 2c 64 3d 6e 28 37 37 39 33 36 29 2c 68 3d 6e 28 33 30 37 35 30 29 2c 5f 3d 6e 28 32 30 34 31 37 29 2c 67 3d 6e 28 39 37 32 34 37 29 2c 43 3d 6e 28 35 34 39 30 29 2c 45 3d 6e 28 37 37 35 38 31 29 2c 70 3d 6e 28 34 36 39 34 35 29 3b 63 6c 61 73 73 20 66 20 65 78 74 65 6e 64 73 20 75 2e 69 6f 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 2e 74 72 61 6e 73 70 6f 72 74 2c 28 65 3d 3e 74 68 69 73 2e 6f 6e 41 75 74 68 43 6f 6d 70 6c 65 74 65 28 65 29 29 2c 65 2e 6f 6e 44 65 76 69 63 65 44 65 74 61 69 6c 73 2c 65 2e 6f 6e 53 68 6f 77 41 67 72 65 65 6d 65 6e 74 29 2c 74 68 69 73 Data Ascii: 2),i=n(80751),l=n.n(i),c=n(37563),m=n(79545),u=n(35791),d=n(77936),h=n(30750),_=n(20417),g=n(97247),C=n(5490),E=n(77581),p=n(46945);class f extends u.io{constructor(e){super(e.transport,(e=>this.onAuthComplete(e)),e.onDeviceDetails,e.onShowAgreement),this
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 63 4b 65 79 28 65 2c 6e 29 3b 69 66 28 74 2e 44 45 42 55 47 5f 4c 6f 67 54 6f 43 6f 6e 73 6f 6c 65 28 29 2c 31 21 3d 3d 74 2e 47 65 74 45 52 65 73 75 6c 74 28 29 29 72 65 74 75 72 6e 28 30 2c 67 2e 46 30 29 28 60 46 61 69 6c 65 64 20 74 6f 20 67 65 74 20 52 53 41 20 6b 65 79 20 77 69 74 68 20 45 52 65 73 75 6c 74 3a 20 24 7b 74 2e 47 65 74 45 52 65 73 75 6c 74 28 29 7d 60 29 2c 6e 75 6c 6c 3b 63 6f 6e 73 74 7b 70 75 62 6c 69 63 6b 65 79 5f 65 78 70 3a 72 2c 70 75 62 6c 69 63 6b 65 79 5f 6d 6f 64 3a 61 2c 74 69 6d 65 73 74 61 6d 70 3a 6f 7d 3d 74 2e 42 6f 64 79 28 29 2e 74 6f 4f 62 6a 65 63 74 28 29 3b 72 65 74 75 72 6e 20 72 26 26 61 26 26 6f 3f 7b 70 75 62 6c 69 63 6b 65 79 5f 65 78 70 3a 72 2c 70 75 62 6c 69 63 6b 65 79 5f 6d 6f 64 3a 61 2c 74 69 6d 65 Data Ascii: cKey(e,n);if(t.DEBUG_LogToConsole(),1!==t.GetEResult())return(0,g.F0)(`Failed to get RSA key with EResult: ${t.GetEResult()}`),null;const{publickey_exp:r,publickey_mod:a,timestamp:o}=t.Body().toObject();return r&&a&&o?{publickey_exp:r,publickey_mod:a,time

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	49881	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:53 UTC	616	OUT	GET /public/javascript/applications/store/login.js?contenthash=0a2de2771eef68b1e7bd HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:53 UTC	419	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:53 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 02 Apr 2024 22:30:33 GMT Cache-Control: public,max-age=15552000 Expires: Sun, 29 Sep 2024 22:32:13 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 261937 Server: cloudflare CF-RAY: 86fd41129e4809ba-MIA
2024-04-05 23:17:53 UTC	899	IN	Data Raw: 33 37 63 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 35 33 35 5d 2c 7b 32 34 31 32 35 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 Data Ascii: 37c/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[4535],{24125:e=>{e.exports
2024-04-05 23:17:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	49882	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:53 UTC	620	OUT	GET /public/javascript/applications/store/navevents.js?contenthash=f90db20908eeaa871cf2 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:53 UTC	419	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:17:53 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 02 Apr 2024 22:30:33 GMT Cache-Control: public,max-age=15552000 Expires: Sun, 29 Sep 2024 22:32:13 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 261939 Server: cloudflare CF-RAY: 86fd4112bbc00a22-MIA
2024-04-05 23:17:53 UTC	950	IN	Data Raw: 33 37 64 61 0d 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 2f 2a 2a 2a 2a 20 28 63 29 20 56 61 6c 76 65 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 55 73 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 20 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 73 75 62 73 63 72 69 62 65 72 5f 61 67 72 65 65 6d 65 6e 74 2f 2e 20 0d 0a 2a 2a 2a 2a 2f 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 73 74 6f 72 65 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 31 30 33 5d 2c 7b 31 39 39 3a 65 Data Ascii: 37da/** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. **/"use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[4103],{199:e
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 66 65 61 74 75 72 65 64 2d 77 69 6e 2d 67 61 6d 65 73 22 3a 31 30 31 2c 22 66 65 61 74 75 72 65 64 2d 6d 61 63 2d 67 61 6d 65 73 22 3a 31 30 32 2c 22 74 61 62 2d 4e 65 77 52 65 6c 65 61 73 65 73 22 3a 31 30 33 2c 22 74 61 62 2d 54 6f 70 53 65 6c 6c 65 72 73 22 3a 31 30 34 2c 22 74 61 62 2d 43 6f 6d 69 6e 67 53 6f 6f 6e 22 3a 31 30 35 2c 22 74 61 62 2d 44 69 73 63 6f 75 6e 74 73 22 3a 31 30 36 2c 22 73 6d 61 6c 6c 63 61 70 2d 76 69 64 65 6f 73 22 3a 31 30 37 2c 22 73 6d 61 6c 6c 63 61 70 2d 64 65 6d 6f 73 22 3a 31 30 38 2c 22 68 6f 6d 65 2d 68 65 61 64 6c 69 6e 65 73 22 3a 31 30 39 2c 22 63 6f 6d 6d 75 6e 69 74 79 2d 61 63 74 69 76 69 74 79 22 3a 31 31 30 2c 22 68 6f 6d 65 2d 75 6e 64 65 72 74 65 6e 22 3a 31 31 31 2c 22 68 6f 6d 65 2d 73 70 65 63 69 61 6c Data Ascii: featured-win-games":101,"featured-mac-games":102,"tab-NewReleases":103,"tab-TopSellers":104,"tab-ComingSoon":105,"tab-Discounts":106,"smallcap-videos":107,"smallcap-demos":108,"home-headlines":109,"community-activity":110,"home-underten":111,"home-special
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 22 66 72 69 65 6e 64 2d 61 63 74 69 76 69 74 79 22 3a 32 30 33 2c 22 73 70 65 63 69 61 6c 73 22 3a 32 33 30 30 2c 22 62 72 65 61 64 63 72 75 6d 62 73 22 3a 32 30 35 2c 22 66 72 65 65 73 74 75 66 66 22 3a 32 32 30 2c 22 64 65 6d 6f 73 22 3a 31 39 30 30 2c 22 74 61 62 2d 4e 65 77 44 65 6d 6f 73 22 3a 32 32 32 2c 22 74 61 62 2d 54 6f 70 44 65 6d 6f 73 22 3a 32 32 33 2c 22 62 72 6f 77 73 65 2d 64 65 6d 6f 73 22 3a 32 32 34 2c 22 76 69 64 65 6f 73 22 3a 31 30 30 30 30 32 2c 22 70 6f 70 75 6c 61 72 2d 76 69 64 65 6f 73 22 3a 32 32 36 2c 22 74 61 62 2d 4e 65 77 56 69 64 65 6f 73 22 3a 32 32 37 2c 22 62 72 6f 77 73 65 22 3a 32 33 30 2c 22 6d 61 63 22 3a 32 33 31 2c 22 75 6e 64 65 72 31 30 22 3a 32 33 32 2c 22 75 6e 64 65 72 35 22 3a 32 33 33 2c 22 70 75 62 6c 69 Data Ascii: "friend-activity":203,"specials":2300,"breadcrumbs":205,"freestuff":220,"demos":1900,"tab-NewDemos":222,"tab-TopDemos":223,"browse-demos":224,"videos":100002,"popular-videos":226,"tab-NewVideos":227,"browse":230,"mac":231,"under10":232,"under5":233,"publi
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 2c 22 64 6c 63 2d 70 61 72 65 6e 74 2d 61 70 70 2d 6c 69 6e 6b 22 3a 34 31 33 2c 22 73 69 6d 69 6c 61 72 2d 72 65 63 65 6e 74 2d 61 70 70 73 22 3a 34 31 34 2c 22 70 61 63 6b 61 67 65 2d 70 75 72 63 68 61 73 65 22 3a 34 32 30 2c 22 70 61 63 6b 61 67 65 2d 63 6f 6e 74 65 6e 74 73 22 3a 34 32 31 2c 22 70 61 63 6b 61 67 65 2d 64 65 74 61 69 6c 73 22 3a 34 32 32 2c 22 63 61 74 65 67 6f 72 79 2d 6c 69 73 74 22 3a 34 32 33 2c 22 62 75 6e 64 6c 65 22 3a 34 33 30 2c 22 62 75 6e 64 6c 65 2d 63 6f 6e 74 65 6e 74 73 22 3a 34 33 31 2c 22 63 61 72 74 2d 72 65 6d 6f 76 65 2d 69 74 65 6d 22 3a 35 30 30 2c 22 63 61 72 74 2d 69 74 65 6d 73 22 3a 35 30 31 2c 22 63 61 72 74 2d 63 6f 6e 74 69 6e 75 65 2d 73 68 6f 70 70 69 6e 67 22 3a 35 30 32 2c 22 63 61 72 74 2d 70 75 72 63 Data Ascii: ,"dlc-parent-app-link":413,"similar-recent-apps":414,"package-purchase":420,"package-contents":421,"package-details":422,"category-list":423,"bundle":430,"bundle-contents":431,"cart-remove-item":500,"cart-items":501,"cart-continue-shopping":502,"cart-purc
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 65 72 6f 2d 74 61 67 73 22 3a 36 35 31 2c 22 73 61 6c 65 2d 68 65 72 6f 2d 69 72 22 3a 36 35 32 2c 22 61 75 74 75 6d 6e 73 61 6c 65 22 3a 36 36 30 2c 22 77 69 6e 74 65 72 73 61 6c 65 22 3a 36 36 31 2c 22 79 65 61 72 69 6e 72 65 76 69 65 77 22 3a 36 36 32 2c 22 6d 6f 62 69 6c 65 61 70 70 22 3a 37 30 30 2c 22 73 75 6d 6d 61 72 79 22 3a 37 30 31 2c 22 6d 6f 62 69 6c 65 73 74 6f 72 65 66 72 6f 6e 74 22 3a 37 30 32 2c 22 68 6f 6d 65 22 3a 37 30 33 2c 22 77 69 6e 74 65 72 32 30 31 32 2d 74 6f 64 61 79 2d 73 71 75 61 72 65 22 3a 38 30 30 2c 22 77 69 6e 74 65 72 32 30 31 32 2d 74 6f 64 61 79 2d 73 71 75 61 72 65 2d 62 75 74 74 6f 6e 22 3a 38 30 31 2c 22 77 69 6e 74 65 72 32 30 31 32 2d 68 69 72 65 73 22 3a 38 30 32 2c 22 77 69 6e 74 65 72 32 30 31 32 2d 68 69 72 Data Ascii: ero-tags":651,"sale-hero-ir":652,"autumnsale":660,"wintersale":661,"yearinreview":662,"mobileapp":700,"summary":701,"mobilestorefront":702,"home":703,"winter2012-today-square":800,"winter2012-today-square-button":801,"winter2012-hires":802,"winter2012-hir
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 6e 64 61 74 69 6f 6e 73 22 3a 31 30 35 33 2c 22 61 6a 61 78 67 65 74 63 6f 6d 62 69 6e 65 64 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 22 3a 31 30 35 34 2c 22 63 75 72 61 74 6f 72 6c 69 73 74 22 3a 31 30 35 35 2c 22 63 75 72 61 74 6f 72 22 3a 31 30 35 36 2c 22 63 75 72 61 74 6f 72 66 65 61 74 75 72 65 64 6c 69 73 74 22 3a 31 30 35 37 2c 22 63 75 72 61 74 6f 72 5f 66 65 61 74 75 72 65 64 5f 6c 69 73 74 22 3a 31 30 35 37 2c 22 6d 79 63 75 72 61 74 6f 72 73 72 65 76 69 65 77 69 6e 67 22 3a 31 30 35 38 2c 22 63 72 65 61 74 6f 72 66 65 61 74 75 72 65 64 72 65 63 73 22 3a 31 30 35 39 2c 22 6e 65 77 5f 64 6c 63 22 3a 31 30 36 30 2c 22 62 72 6f 77 73 65 2d 64 6c 63 22 3a 31 30 36 31 2c 22 77 69 64 67 65 74 22 3a 31 31 30 30 2c 22 61 70 70 76 69 73 69 62 69 6c Data Ascii: ndations":1053,"ajaxgetcombinedrecommendations":1054,"curatorlist":1055,"curator":1056,"curatorfeaturedlist":1057,"curator_featured_list":1057,"mycuratorsreviewing":1058,"creatorfeaturedrecs":1059,"new_dlc":1060,"browse-dlc":1061,"widget":1100,"appvisibil
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 74 2d 6e 65 77 72 65 6c 65 61 73 65 22 3a 31 34 30 31 2c 22 67 72 65 65 6e 6c 69 67 68 74 2d 6e 65 77 72 65 6c 65 61 73 65 22 3a 31 34 30 32 2c 22 73 61 6c 65 73 2d 65 76 65 6e 74 2d 65 6e 68 61 6e 63 65 64 22 3a 31 34 30 33 2c 22 63 72 65 61 74 6f 72 2d 6e 65 77 72 65 6c 65 61 73 65 22 3a 31 34 30 34 2c 22 67 65 6e 65 72 69 63 2d 6f 6e 73 61 6c 65 22 3a 31 34 30 35 2c 22 74 6f 70 73 65 6c 6c 65 72 73 2d 6f 6e 73 61 6c 65 22 3a 31 34 30 36 2c 22 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 6f 6e 73 61 6c 65 22 3a 31 34 30 37 2c 22 46 72 65 65 20 74 6f 20 50 6c 61 79 22 3a 31 34 32 30 2c 22 74 61 62 2d 6d 6f 73 74 70 6c 61 79 65 64 6e 65 77 72 65 6c 65 61 73 65 73 22 3a 31 34 32 31 2c 22 74 61 62 2d 6d 6f 73 74 70 6c 61 79 65 64 22 3a 31 34 32 32 2c 22 74 61 62 2d Data Ascii: t-newrelease":1401,"greenlight-newrelease":1402,"sales-event-enhanced":1403,"creator-newrelease":1404,"generic-onsale":1405,"topsellers-onsale":1406,"recommended-onsale":1407,"Free to Play":1420,"tab-mostplayednewreleases":1421,"tab-mostplayed":1422,"tab-
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 3a 31 35 32 31 2c 22 68 75 62 2d 65 61 72 6c 79 61 63 63 65 73 73 2d 73 70 65 63 69 61 6c 73 22 3a 31 35 32 32 2c 22 68 75 62 2d 65 61 72 6c 79 61 63 63 65 73 73 2d 66 65 61 74 75 72 65 64 22 3a 31 35 32 33 2c 22 68 75 62 2d 65 61 72 6c 79 61 63 63 65 73 73 2d 74 61 6b 65 6f 76 65 72 22 3a 31 35 32 34 2c 22 70 63 63 61 66 65 22 3a 31 35 33 30 2c 22 68 75 62 2d 70 63 63 61 66 65 2d 72 65 63 6f 6d 6d 65 6e 64 65 64 22 3a 31 35 33 31 2c 22 68 75 62 2d 70 63 63 61 66 65 2d 73 70 65 63 69 61 6c 73 22 3a 31 35 33 32 2c 22 68 75 62 2d 70 63 63 61 66 65 2d 66 65 61 74 75 72 65 64 22 3a 31 35 33 33 2c 22 68 75 62 2d 70 63 63 61 66 65 2d 74 61 6b 65 6f 76 65 72 22 3a 31 35 33 34 2c 22 72 65 6d 6f 74 65 70 6c 61 79 70 68 6f 6e 65 22 3a 31 35 34 30 2c 22 68 75 62 2d Data Ascii: :1521,"hub-earlyaccess-specials":1522,"hub-earlyaccess-featured":1523,"hub-earlyaccess-takeover":1524,"pccafe":1530,"hub-pccafe-recommended":1531,"hub-pccafe-specials":1532,"hub-pccafe-featured":1533,"hub-pccafe-takeover":1534,"remoteplayphone":1540,"hub-
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 22 3a 31 37 30 37 2c 22 74 61 62 2d 41 6c 6c 55 70 63 6f 6d 69 6e 67 22 3a 31 37 30 38 2c 22 69 6e 2d 6c 69 62 72 61 72 79 2d 67 61 6d 65 2d 65 76 65 6e 74 2d 75 70 64 61 74 65 22 3a 31 38 30 30 2c 22 6f 6e 2d 77 69 73 68 6c 69 73 74 2d 67 61 6d 65 2d 65 76 65 6e 74 2d 75 70 64 61 74 65 22 3a 31 38 30 31 2c 22 69 6e 2d 6c 69 62 72 61 72 79 2d 67 61 6d 65 2d 72 65 6d 69 6e 64 2d 6d 65 22 3a 31 38 30 32 2c 22 68 75 62 2d 64 65 6d 6f 73 2d 72 65 63 6f 6d 6d 65 6e 64 65 64 22 3a 31 39 30 31 2c 22 68 75 62 2d 64 65 6d 6f 73 2d 73 70 65 63 69 61 6c 73 22 3a 31 39 30 32 2c 22 68 75 62 2d 64 65 6d 6f 73 2d 66 65 61 74 75 72 65 64 22 3a 31 39 30 33 2c 22 68 75 62 2d 64 65 6d 6f 73 2d 74 61 6b 65 6f 76 65 72 22 3a 31 39 30 34 2c 22 63 72 65 61 74 6f 72 2d 68 6f 6d Data Ascii: ":1707,"tab-AllUpcoming":1708,"in-library-game-event-update":1800,"on-wishlist-game-event-update":1801,"in-library-game-remind-me":1802,"hub-demos-recommended":1901,"hub-demos-specials":1902,"hub-demos-featured":1903,"hub-demos-takeover":1904,"creator-hom
2024-04-05 23:17:53 UTC	1369	IN	Data Raw: 6e 64 61 74 69 6f 6e 73 22 3a 32 36 30 32 2c 22 6c 75 6e 61 72 6e 65 77 79 65 61 72 32 30 32 30 22 3a 32 37 30 30 2c 22 6c 75 6e 61 72 6e 65 77 79 65 61 72 22 3a 32 37 30 31 2c 22 6c 75 6e 61 72 6e 65 77 79 65 61 72 6d 61 72 6b 65 74 22 3a 32 37 30 32 2c 22 73 74 65 61 6d 2d 6c 6f 67 6f 22 3a 32 37 35 30 2c 22 73 61 6c 65 2d 62 61 6e 6e 65 72 22 3a 32 37 35 31 2c 22 73 61 6c 65 2d 62 75 74 74 6f 6e 2d 74 6f 70 22 3a 32 37 35 32 2c 22 73 61 6c 65 2d 62 75 74 74 6f 6e 2d 62 6f 74 74 6f 6d 22 3a 32 37 35 33 2c 22 77 69 73 68 6c 69 73 74 2d 62 75 74 74 6f 6e 2d 62 6f 74 74 6f 6d 22 3a 32 37 35 34 2c 22 66 6f 6f 74 65 72 2d 73 74 65 61 6d 2d 6c 6f 67 6f 22 3a 32 37 35 35 2c 22 73 74 65 61 6d 63 6c 69 65 6e 74 22 3a 35 30 30 30 2c 22 6c 69 62 72 61 72 79 22 3a Data Ascii: ndations":2602,"lunarnewyear2020":2700,"lunarnewyear":2701,"lunarnewyearmarket":2702,"steam-logo":2750,"sale-banner":2751,"sale-button-top":2752,"sale-button-bottom":2753,"wishlist-button-bottom":2754,"footer-steam-logo":2755,"steamclient":5000,"library":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	49884	23.46.213.117	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:54 UTC	785	OUT	GET /favicon.ico HTTP/1.1 Host: store.steampowered.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0
2024-04-05 23:17:54 UTC	309	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/x-icon Cache-Control: public,max-age=86400 Expires: Fri, 13 Oct 2023 10:01:16 GMT Last-Modified: Wed, 28 Jun 2023 04:07:18 GMT Strict-Transport-Security: max-age=10368000 Content-Length: 38554 Date: Fri, 05 Apr 2024 23:17:54 GMT Connection: close
2024-04-05 23:17:54 UTC	16075	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 04 52 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a7 75 13 00 a6 74 13 07 a9 77 13 48 ac 7a 13 a8 ae 7c 13 e4 af 7d 13 fb af 7d 13 fb ae 7c 13 e4 ac 7a 13 a8 a9 77 13 49 a6 74 13 07 a7 75 13 00 00 00 00 00 00 00 00 00 a3 70 13 00 99 66 13 00 98 65 13 18 9c 6a 13 92 9e 6b 11 ee 9e 6b 0f ff 9f 6c 11 ff a0 6d 13 ff a0 6e 13 ff a0 6e 13 ff a0 6e 13 ff 9f 6d 13 ee 9c 6a 13 92 98 65 13 18 99 66 13 00 a3 71 12 00 8d Data Ascii: hV F00 % RD( utwHz\|}}\|zwItupfejkklmnnnmjefq
2024-04-05 23:17:54 UTC	8501	IN	Data Raw: 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b e2 34 1a 0a 5e 35 1a 0a 04 35 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 1a 0b 00 35 18 0b 01 33 1b 0b 3b 33 1b 0c be 33 1b 0c fc 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff Data Ascii: 44444444444444444444444444^55453;3333333333333333333
2024-04-05 23:17:54 UTC	13978	IN	Data Raw: 72 38 2b 9f c6 96 bd ea 3c 3e 0a 8a ca 82 aa 23 21 3e e6 84 f5 13 33 fa 96 1a 87 92 74 81 83 27 fe f4 94 bb 15 40 c6 80 04 b7 64 6c 11 26 08 22 1a b1 31 c1 45 fe 29 af a8 c6 eb 0b 34 f9 fb d4 94 44 62 63 4d 5b e5 0e 9a c8 48 27 3d 9b 8c 8d 28 78 7d 7e ca 2b aa 83 aa 23 36 36 ba de 35 da ac 81 55 7a 8a 92 b1 a7 d6 7f 4c 01 44 66 ce c6 1d e7 10 8c a0 1f c1 c7 8a b2 08 0b 34 4d 70 3a 83 db 9a ab 71 b9 f1 07 1a 77 ff 55 0a e2 62 a3 3a ec fc 1f c0 6e b3 11 17 13 d5 c4 14 00 02 fe 00 35 b5 75 41 d5 11 e1 74 98 16 0f a1 9e 28 84 49 75 c9 09 12 99 79 f1 b1 1f 1e 93 48 74 88 aa f6 25 02 13 cd 94 d2 22 b4 88 48 d0 9d d3 e7 f3 1b 81 3f 9a 18 bc a2 22 23 cc 88 80 1b 32 6c 36 8d a8 a8 88 26 7f af 2b 85 cf e7 0b aa 0e bb dd 66 46 da b0 53 99 10 55 5e 99 28 27 68 ba e3 Data Ascii: r8+<>#!>3t'@dl&"1E)4DbcM[H'=(x}~+#665UzLDf4Mp:qwUb:n5uAt(IuyHt%"H?"#2l6&+fFSU^('h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	49883	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:54 UTC	2057	OUT	POST /watch/95654225/1?page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&charset=utf-8&hittoken=1712359058_82b80063bb241a203d7098cda84393298948c5e3569863a72b584621b4c1835f&browser-info=nb%3A1%3Acl%3A590%3Aar%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A1%3Als%3A1173339980762%3Ahid%3A853926178%3Az%3A120%3Ai%3A20240406011752%3Aet%3A1712359073%3Ac%3A1%3Arn%3A651615610%3Arqn%3A9%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C554%2C%2C%2C%2C9%2C1%2C3802%2C3802%2C0%2C2620%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1712359055011%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359073&t=gdpr(14)clc(0-0-0)rqnt(2)eco(21037572)lt(22400)aw(0)rcm(0)cdl(na)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:54 UTC	757	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:54 GMT Expires: Fri, 05-Apr-2024 23:17:54 GMT Last-Modified: Fri, 05-Apr-2024 23:17:54 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	49885	23.61.62.148	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:54 UTC	714	OUT	POST /jwt/ajaxrefresh HTTP/1.1 Host: login.steampowered.com Connection: keep-alive Content-Length: 175 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryWUpnN0gx5BDoIaDR sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://store.steampowered.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:54 UTC	175	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 57 55 70 6e 4e 30 67 78 35 42 44 6f 49 61 44 52 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 72 65 64 69 72 22 0d 0a 0d 0a 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 57 55 70 6e 4e 30 67 78 35 42 44 6f 49 61 44 52 2d 2d 0d 0a Data Ascii: ------WebKitFormBoundaryWUpnN0gx5BDoIaDRContent-Disposition: form-data; name="redir"https://store.steampowered.com/account/------WebKitFormBoundaryWUpnN0gx5BDoIaDR--
2024-04-05 23:17:54 UTC	1036	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://store.steampowered.com Access-Control-Allow-Methods: POST, GET, HEAD, OPTIONS Access-Control-Allow-Credentials: true Access-Control-Max-Age: 604800 Access-Control-Expose-Headers: X-NotLoggedIn Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Length: 28 Date: Fri, 05 Apr 2024 23:17:54 GMT Connection: close Set-Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; Domain=.steampowered.com; Path=/; Expires=Sat, 06 Apr 2024 01:17:54 GMT; Max-Age=7200; HttpOnly
2024-04-05 23:17:54 UTC	28	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 32 31 7d Data Ascii: {"success":false,"error":21}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	49887	96.17.60.195	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:54 UTC	969	OUT	GET /favicon.ico HTTP/1.1 Host: store.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0; ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
2024-04-05 23:17:55 UTC	309	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/x-icon Cache-Control: public,max-age=86400 Expires: Thu, 23 Nov 2023 10:29:59 GMT Last-Modified: Wed, 28 Jun 2023 04:07:18 GMT Strict-Transport-Security: max-age=10368000 Content-Length: 38554 Date: Fri, 05 Apr 2024 23:17:55 GMT Connection: close
2024-04-05 23:17:55 UTC	16075	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 04 52 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a7 75 13 00 a6 74 13 07 a9 77 13 48 ac 7a 13 a8 ae 7c 13 e4 af 7d 13 fb af 7d 13 fb ae 7c 13 e4 ac 7a 13 a8 a9 77 13 49 a6 74 13 07 a7 75 13 00 00 00 00 00 00 00 00 00 a3 70 13 00 99 66 13 00 98 65 13 18 9c 6a 13 92 9e 6b 11 ee 9e 6b 0f ff 9f 6c 11 ff a0 6d 13 ff a0 6e 13 ff a0 6e 13 ff a0 6e 13 ff 9f 6d 13 ee 9c 6a 13 92 98 65 13 18 99 66 13 00 a3 71 12 00 8d Data Ascii: hV F00 % RD( utwHz\|}}\|zwItupfejkklmnnnmjefq
2024-04-05 23:17:55 UTC	8501	IN	Data Raw: 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b e2 34 1a 0a 5e 35 1a 0a 04 35 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 1a 0b 00 35 18 0b 01 33 1b 0b 3b 33 1b 0c be 33 1b 0c fc 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff Data Ascii: 44444444444444444444444444^55453;3333333333333333333
2024-04-05 23:17:55 UTC	13978	IN	Data Raw: 72 38 2b 9f c6 96 bd ea 3c 3e 0a 8a ca 82 aa 23 21 3e e6 84 f5 13 33 fa 96 1a 87 92 74 81 83 27 fe f4 94 bb 15 40 c6 80 04 b7 64 6c 11 26 08 22 1a b1 31 c1 45 fe 29 af a8 c6 eb 0b 34 f9 fb d4 94 44 62 63 4d 5b e5 0e 9a c8 48 27 3d 9b 8c 8d 28 78 7d 7e ca 2b aa 83 aa 23 36 36 ba de 35 da ac 81 55 7a 8a 92 b1 a7 d6 7f 4c 01 44 66 ce c6 1d e7 10 8c a0 1f c1 c7 8a b2 08 0b 34 4d 70 3a 83 db 9a ab 71 b9 f1 07 1a 77 ff 55 0a e2 62 a3 3a ec fc 1f c0 6e b3 11 17 13 d5 c4 14 00 02 fe 00 35 b5 75 41 d5 11 e1 74 98 16 0f a1 9e 28 84 49 75 c9 09 12 99 79 f1 b1 1f 1e 93 48 74 88 aa f6 25 02 13 cd 94 d2 22 b4 88 48 d0 9d d3 e7 f3 1b 81 3f 9a 18 bc a2 22 23 cc 88 80 1b 32 6c 36 8d a8 a8 88 26 7f af 2b 85 cf e7 0b aa 0e bb dd 66 46 da b0 53 99 10 55 5e 99 28 27 68 ba e3 Data Ascii: r8+<>#!>3t'@dl&"1E)4DbcM[H'=(x}~+#665UzLDf4Mp:qwUb:n5uAt(IuyHt%"H?"#2l6&+fFSU^('h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	49889	23.61.62.148	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:54 UTC	744	OUT	POST /IAuthenticationService/BeginAuthSessionViaQR/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive Content-Length: 321 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundarycJfMRD2Gu9P3imja sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://store.steampowered.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:17:54 UTC	321	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 63 4a 66 4d 52 44 32 47 75 39 50 33 69 6d 6a 61 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 6e 70 75 74 5f 70 72 6f 74 6f 62 75 66 5f 65 6e 63 6f 64 65 64 22 0d 0a 0d 0a 47 6e 4d 4b 62 30 31 76 65 6d 6c 73 62 47 45 76 4e 53 34 77 49 43 68 58 61 57 35 6b 62 33 64 7a 49 45 35 55 49 44 45 77 4c 6a 41 37 49 46 64 70 62 6a 59 30 4f 79 42 34 4e 6a 51 70 49 45 46 77 63 47 78 6c 56 32 56 69 53 32 6c 30 4c 7a 55 7a 4e 79 34 7a 4e 69 41 6f 53 30 68 55 54 55 77 73 49 47 78 70 61 32 55 67 52 32 56 6a 61 32 38 70 49 45 4e 6f 63 6d 39 74 5a 53 38 78 4d 54 63 75 4d 43 34 77 4c 6a 41 67 55 32 46 6d 59 58 4a 70 4c 7a 55 7a Data Ascii: ------WebKitFormBoundarycJfMRD2Gu9P3imjaContent-Disposition: form-data; name="input_protobuf_encoded"GnMKb01vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUz
2024-04-05 23:17:55 UTC	338	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 85 Access-Control-Allow-Origin: https://store.steampowered.com Vary: Origin Access-Control-Expose-Headers: X-eresult, X-error_message X-eresult: 1 Expires: Fri, 05 Apr 2024 23:17:55 GMT Date: Fri, 05 Apr 2024 23:17:55 GMT Connection: close
2024-04-05 23:17:55 UTC	85	IN	Data Raw: 08 eb f9 dc bf a3 be 8b cf ac 01 12 27 68 74 74 70 73 3a 2f 2f 73 2e 74 65 61 6d 2f 71 2f 31 2f 31 32 34 33 38 34 32 39 37 33 39 31 38 38 31 37 34 30 35 39 1a 10 fb ce e6 bb d7 79 e1 c1 7e 16 9e 3c 6b a3 46 51 25 00 00 a0 40 2a 02 08 04 2a 02 08 03 30 01 Data Ascii: 'https://s.team/q/1/12438429739188174059y~<kFQ%@**0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	49888	23.47.27.74	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:55 UTC	831	OUT	GET /jwt/ajaxrefresh HTTP/1.1 Host: login.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
2024-04-05 23:17:55 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/json; charset=utf-8 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Length: 27 Date: Fri, 05 Apr 2024 23:17:55 GMT Connection: close
2024-04-05 23:17:55 UTC	27	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 38 7d Data Ascii: {"success":false,"error":8}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	49801	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:55 UTC	766	OUT	GET /pages/faq/ HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
2024-04-05 23:17:56 UTC	298	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:17:56 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding
2024-04-05 23:17:56 UTC	16086	IN	Data Raw: 31 65 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c Data Ascii: 1ee8<!DOCTYPE html><html> <head itemscope="" itemtype="http://schema.org/"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width,initial
2024-04-05 23:17:56 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 d0 ad d1 82 d0 b0 20 d1 83 d1 81 d0 bb d1 83 d0 b3 d0 b0 20 d0 bf d1 80 d0 b5 d0 b4 d0 bd d0 b0 d0 b7 d0 bd d0 b0 d1 87 d0 b5 d0 bd d0 b0 20 d0 b4 d0 bb d1 8f 20 d0 b0 d0 ba d0 ba d0 b0 d1 83 d0 bd d1 82 d0 be d0 b2 20 53 74 65 61 6d 2c 20 d0 b7 d0 b0 d1 80 d0 b5 d0 b3 d0 b8 d1 81 d1 82 d1 80 d0 b8 d1 80 d0 be d0 b2 d0 b0 d0 bd d0 bd d1 8b d1 85 20 d0 b2 20 d0 a0 d0 be d1 81 d1 81 d0 b8 d0 b8 2c 20 d0 a2 d1 83 d1 80 d1 86 d0 b8 d0 b8 2c 20 d0 9a d0 b0 d0 b7 d0 b0 d1 85 d1 81 d1 82 d0 b0 d0 bd d0 b5 2c 20 d0 90 d1 80 d0 b3 d0 b5 d0 bd d1 82 d0 b8 d0 bd d0 b5 20 d0 b8 20 d0 bb d1 8e d0 b1 d0 be d0 b9 20 d0 b4 d0 be d0 bb d0 bb d0 b0 d1 80 d0 be d0 b2 d1 8b d0 b9 20 d0 b0 d0 ba d0 ba d0 b0 d1 83 d0 bd d1 82 2c 20 d0 b8 20 Data Ascii: Steam, , , , ,
2024-04-05 23:17:57 UTC	16384	IN	Data Raw: 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d0 b8 20 d0 bf d1 80 d0 b5 d0 b4 d0 be d1 81 d1 82 d0 b0 d0 b2 d0 bb d0 b5 d0 bd d0 bd d1 8b d1 85 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 2e 20 d0 ad d1 82 d0 be 20 d0 bc d0 be d0 b6 d0 b5 d1 82 20 d0 b2 d0 ba d0 bb d1 8e d1 87 d0 b0 d1 82 d1 8c 20 d0 bc d0 b5 d0 b6 d0 b4 d1 83 d0 bd d0 b0 d1 80 d0 be d0 b4 d0 bd d1 8b d0 b9 20 d0 be d0 b1 d0 bc d0 b5 d0 bd 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d0 b5 d0 b9 2e 20 d0 a1 d0 b2 d0 be d0 b4 d0 bd d1 8b d0 b5 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d0 b5 2c 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd d0 bd d1 8b d0 b5 20 d0 b2 20 d1 85 d0 be d0 b4 d0 b5 20 d0 bf d1 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d0 b8 20 d0 b1 d0 b5 d0 b7 d0 be d0 bf d0 b0 d1 81 d0 bd d0 be d1 81 Data Ascii: . . ,
2024-04-05 23:17:57 UTC	16384	IN	Data Raw: d0 bf d0 be d1 81 d0 bb d0 b5 d0 b4 d0 bd d0 b5 d0 b3 d0 be 20 d0 be d0 b1 d0 bd d0 be d0 b2 d0 bb d0 b5 d0 bd d0 b8 d1 8f 3a 20 37 2e 30 36 2e 32 30 32 32 20 3c 62 72 3e 3c 62 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 20 d0 b8 20 d0 bb d0 b8 d1 86 d0 be 2c 20 d0 bf d1 80 d0 b8 d0 bd d1 8f d0 b2 d1 88 d0 b5 d0 b5 20 d0 be d1 84 d0 b5 d1 80 d1 82 d1 83 2c 20 d0 be d0 bf d1 83 d0 b1 d0 bb d0 b8 d0 ba d0 be d0 b2 d0 b0 d0 bd d0 bd d1 83 d1 8e 20 d0 bd d0 b0 20 d0 bf d0 be d1 81 d1 82 d0 be d1 8f d0 bd d0 bd d0 be d0 bc 20 d0 b0 d0 b4 d1 80 d0 b5 d1 81 d0 b5 20 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 2c 20 d1 81 Data Ascii: : 7.06.2022 <br><br> https://steamfiller.ru/ , , https://steamfiller.ru/,
2024-04-05 23:17:57 UTC	6013	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 92 d0 be 20 d0 b2 d1 81 d1 91 d0 bc 2c 20 d1 87 d1 82 d0 be 20 d0 bd d0 b5 20 d0 be d1 85 d0 b2 d0 b0 d1 87 d0 b5 d0 bd d0 be 20 d0 a1 d0 be d0 b3 d0 bb d0 b0 d1 88 d0 b5 d0 bd d0 b8 d0 b5 d0 bc 2c 20 d0 a1 d1 82 d0 be d1 80 d0 be d0 bd d1 8b 20 d1 80 d1 83 d0 ba d0 be d0 b2 d0 be d0 b4 d1 81 d1 82 d0 b2 d1 83 d1 8e d1 82 d1 81 d1 8f 20 d0 b7 d0 b0 d0 ba d0 be d0 bd d0 be d0 b4 d0 b0 d1 82 d0 b5 d0 bb d1 8c d1 81 d1 82 d0 b2 d0 be d0 bc 20 d0 ad d1 81 d1 82 d0 be d0 bd d0 b8 d0 b8 2c 20 d0 bd d0 b5 20 d0 bf d1 80 d0 b8 d0 bc d0 b5 d0 bd d1 8f d1 8f 20 d0 ba d0 be d0 bb d0 bb d0 b8 d0 b7 d0 b8 d0 be d0 bd d0 bd d1 8b d0 b5 20 d0 bd d0 be d1 80 d0 bc d1 8b 2e 20 3c 62 72 3e 0a 20 20 Data Ascii: , , , . <br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	49890	23.47.27.74	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:55 UTC	861	OUT	GET /IAuthenticationService/BeginAuthSessionViaQR/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
2024-04-05 23:17:56 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Content-Type: text/html; charset=UTF-8 Content-Length: 147 Allow: POST Expires: Fri, 05 Apr 2024 23:17:56 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Apr 2024 23:17:56 GMT Connection: close
2024-04-05 23:17:56 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 54 68 69 73 20 41 50 49 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 61 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Method Not Allowed</title></head><body><h1>Method Not Allowed</h1>This API must be called with a HTTP POST request</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	49892	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:57 UTC	1609	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=442277962&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&rn=141212650&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359076%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011755%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359076&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 139507 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:57 UTC	16384	OUT	Data Raw: 0a ef c1 08 08 00 10 00 18 1b 20 00 4a e3 c1 08 0a 0f 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 12 69 d0 9f d0 be d0 bf d0 be d0 bb d0 bd d0 b5 d0 bd d0 b8 d0 b5 20 d0 b1 d0 b0 d0 bb d0 b0 d0 bd d1 81 d0 b0 20 53 74 65 61 6d 20 d0 a2 d1 83 d1 80 d1 86 d0 b8 d1 8f 20 d0 b8 20 47 6c 6f 62 61 6c 20 d0 be d1 82 20 31 35 20 55 53 44 20 2d 20 d0 9f d0 be d0 bf d0 be d0 bb d0 bd d0 b5 d0 bd d0 b8 d0 b5 20 53 74 65 61 6d 1a 1b 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 74 72 79 2f 22 6f 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 Data Ascii: J<!DOCTYPE html>i Steam Global 15 USD - Steamhttps://steamfiller.ru/try/"oMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chr
2024-04-05 23:17:57 UTC	16384	OUT	Data Raw: 2e 32 38 33 36 36 20 31 32 2e 36 33 36 33 20 36 2e 32 34 35 30 37 20 31 32 2e 34 35 38 34 20 36 2e 32 35 32 31 37 43 31 32 2e 32 38 30 36 20 36 2e 32 35 39 32 38 20 31 32 2e 31 30 37 35 20 36 2e 33 31 31 38 34 20 31 31 2e 39 35 35 38 20 36 2e 34 30 34 38 34 43 31 31 2e 38 30 34 20 36 2e 34 39 37 38 34 20 31 31 2e 36 37 38 36 20 36 2e 36 32 38 31 38 20 31 31 2e 35 39 31 35 20 36 2e 37 38 33 34 33 43 31 31 2e 35 30 34 34 20 36 2e 39 33 38 36 37 20 31 31 2e 34 35 38 36 20 37 2e 31 31 33 36 33 20 31 31 2e 34 35 38 34 20 37 2e 32 39 31 36 33 43 31 31 2e 34 35 38 34 20 37 2e 35 36 37 38 39 20 31 31 2e 33 34 38 36 20 37 2e 38 33 32 38 35 20 31 31 2e 31 35 33 33 20 38 2e 30 32 38 32 43 31 30 2e 39 35 37 39 20 38 2e 32 32 33 35 35 20 31 30 2e 36 39 33 20 38 2e 33 Data Ascii: .28366 12.6363 6.24507 12.4584 6.25217C12.2806 6.25928 12.1075 6.31184 11.9558 6.40484C11.804 6.49784 11.6786 6.62818 11.5915 6.78343C11.5044 6.93867 11.4586 7.11363 11.4584 7.29163C11.4584 7.56789 11.3486 7.83285 11.1533 8.0282C10.9579 8.22355 10.693 8.3
2024-04-05 23:17:57 UTC	16384	OUT	Data Raw: 33 63 31 2e 36 20 30 2d 32 2e 36 20 31 32 2e 38 2d 35 2e 33 20 31 37 2e 38 2d 32 2e 36 20 35 2d 35 2e 37 20 37 2e 35 2d 35 20 38 2e 36 2e 38 20 31 20 38 2e 36 2d 35 2e 35 20 31 31 2e 33 2d 31 30 2e 33 20 32 2e 36 2d 34 2e 39 20 35 2e 31 2d 39 2e 32 20 35 2e 36 2d 38 2e 33 61 33 34 20 33 34 20 30 20 30 31 2d 36 2e 37 20 31 36 2e 31 63 2d 34 2e 32 20 34 2e 38 2d 39 2e 32 20 38 2e 33 2d 38 2e 34 20 39 20 2e 37 2e 38 20 36 2e 34 20 31 2e 36 20 31 32 2e 33 2d 32 2e 34 20 36 2d 34 2e 31 20 36 2e 36 2d 31 30 20 37 2e 33 2d 39 2e 37 2e 38 2e 33 2d 2e 37 20 38 2e 34 2d 36 2e 34 20 31 33 2e 34 73 2d 31 33 2e 32 20 35 2e 35 2d 31 33 20 36 2e 36 63 2e 34 20 31 20 31 36 2e 33 2d 34 2e 36 20 31 36 2d 33 2e 33 2d 2e 33 20 31 2e 32 2d 32 30 2e 36 20 39 2e 32 2d 32 30 2e Data Ascii: 3c1.6 0-2.6 12.8-5.3 17.8-2.6 5-5.7 7.5-5 8.6.8 1 8.6-5.5 11.3-10.3 2.6-4.9 5.1-9.2 5.6-8.3a34 34 0 01-6.7 16.1c-4.2 4.8-9.2 8.3-8.4 9 .7.8 6.4 1.6 12.3-2.4 6-4.1 6.6-10 7.3-9.7.8.3-.7 8.4-6.4 13.4s-13.2 5.5-13 6.6c.4 1 16.3-4.6 16-3.3-.3 1.2-20.6 9.2-20.
2024-04-05 23:17:57 UTC	16384	OUT	Data Raw: 20 31 36 2e 33 34 33 20 32 32 2e 35 20 31 35 2e 37 35 43 32 32 2e 35 20 31 35 2e 31 34 35 38 20 32 32 2e 33 35 38 38 20 31 34 2e 35 37 35 20 32 32 2e 31 31 34 37 20 31 34 2e 30 36 32 35 48 32 34 2e 37 35 56 31 37 2e 34 33 37 35 5a 4d 31 36 2e 38 37 35 20 31 35 2e 37 35 43 31 36 2e 38 37 35 20 31 34 2e 38 31 39 37 20 31 37 2e 36 33 32 32 20 31 34 2e 30 36 32 35 20 31 38 2e 35 36 32 35 20 31 34 2e 30 36 32 35 43 31 39 2e 34 39 32 38 20 31 34 2e 30 36 32 35 20 32 30 2e 32 35 20 31 34 2e 38 31 39 37 20 32 30 2e 32 35 20 31 35 2e 37 35 43 32 30 2e 32 35 20 31 36 2e 32 30 30 34 20 32 30 2e 30 37 33 39 20 31 36 2e 36 32 37 20 31 39 2e 37 36 32 32 20 31 36 2e 39 34 31 35 43 31 39 2e 34 33 39 35 20 31 37 2e 32 36 31 34 20 31 39 2e 30 31 32 39 20 31 37 2e 34 33 37 Data Ascii: 16.343 22.5 15.75C22.5 15.1458 22.3588 14.575 22.1147 14.0625H24.75V17.4375ZM16.875 15.75C16.875 14.8197 17.6322 14.0625 18.5625 14.0625C19.4928 14.0625 20.25 14.8197 20.25 15.75C20.25 16.2004 20.0739 16.627 19.7622 16.9415C19.4395 17.2614 19.0129 17.437
2024-04-05 23:17:57 UTC	16384	OUT	Data Raw: 69 6e 22 29 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 20 3d 20 22 23 34 65 37 35 31 36 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 73 75 62 6d 69 74 6d 61 69 6e 22 29 2e 73 74 79 6c 65 2e 63 6f 6c 6f 72 20 3d 20 27 23 66 32 66 33 66 34 27 3b 0a 0a 69 66 20 28 69 73 48 61 72 64 43 68 65 63 6b 4c 6f 67 69 6e 73 29 0a 7b 0a 20 20 20 20 72 65 73 70 6f 6e 73 65 20 3d 20 61 77 61 69 74 20 66 65 74 63 68 28 75 72 6c 29 3b 0a 0a 7d 0a 65 6c 73 65 0a 7b 0a 20 20 20 20 72 65 73 70 6f 6e 73 65 20 3d 20 61 77 61 69 74 20 66 65 74 63 68 28 75 72 6c 2c 20 7b 0a 20 20 20 20 20 20 20 20 73 69 67 6e 61 6c 3a 20 63 6f 6e 74 72 6f 6c 6c 65 72 2e 73 69 67 6e 61 6c 0a 20 20 20 20 7d 29 3b 0a Data Ascii: in").style.background = "#4e7516"; document.getElementById("submitmain").style.color = '#f2f3f4';if (isHardCheckLogins){ response = await fetch(url);}else{ response = await fetch(url, { signal: controller.signal });
2024-04-05 23:17:57 UTC	16384	OUT	Data Raw: 65 20 ad 04 30 cc 04 38 ca 04 6a 2a 08 cc 04 12 05 23 74 65 78 74 20 ad 04 2a 15 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 cd 04 38 cb 04 6a 28 08 cd 04 12 06 62 75 74 74 6f 6e 1a 15 0a 05 63 6c 61 73 73 12 0c 70 6f 70 75 70 5f 5f 63 6c 6f 73 65 20 ad 04 38 cc 04 6a 26 08 ce 04 12 05 23 74 65 78 74 20 ac 04 2a 11 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 cf 04 38 ad 04 6a 28 08 cf 04 12 06 62 75 74 74 6f 6e 1a 15 0a 05 63 6c 61 73 73 12 0c 70 6f 70 75 70 5f 5f 63 6c 6f 73 65 20 ac 04 38 ce 04 6a 25 08 d0 04 12 05 23 74 65 78 74 20 3b 2a 11 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 d1 04 38 ab 04 6a 47 08 d1 04 12 06 66 6f 6f 74 65 72 1a 0f 0a 05 63 6c 61 73 73 12 06 66 6f 6f 74 65 72 1a 21 0a 05 73 74 79 6c Data Ascii: e 08j#text 08j(buttonclasspopup__close 8j&#text * 08j(buttonclasspopup__close 8j%#text ;* 08jGfooterclassfooter!styl
2024-04-05 23:17:57 UTC	16384	OUT	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 bf d1 80 d0 be d0 b2 d0 b5 d0 b4 d0 b5 d0 bd d0 b8 d0 b5 20 d0 bf d1 80 d0 be d0 b2 d0 b5 d1 80 d0 be d0 ba 20 d0 b1 d0 b5 d0 b7 d0 be d0 bf d0 b0 d1 81 d0 bd d0 be d1 81 d1 82 d0 b8 20 d0 b8 20 d0 b8 d0 b4 d0 b5 d0 bd d1 82 d0 b8 d1 84 d0 b8 d0 ba d0 b0 d1 86 d0 b8 d0 b8 3b 20 30 f9 05 38 f7 05 6a 10 08 f9 05 12 02 62 72 20 eb 05 30 fa 05 38 f8 05 6a 97 01 08 fa 05 12 05 23 74 65 78 74 20 eb 05 2a 81 01 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b8 d1 80 d0 be d0 b2 d0 b0 d0 bd d0 b8 d0 b5 20 d0 be 20 d1 80 d0 b5 d0 ba d0 bb d0 b0 d0 bc d0 bd d1 8b d1 85 20 d0 b0 d0 ba d1 86 d0 Data Ascii: ; 08jbr 08j#text *
2024-04-05 23:17:57 UTC	16384	OUT	Data Raw: 20 6d 61 61 6b 6f 6e 64 20 31 30 31 35 32 20 30 ae 07 38 ac 07 6a 10 08 ae 07 12 02 62 72 20 a6 07 30 af 07 38 ad 07 6a e6 01 08 af 07 12 05 23 74 65 78 74 20 a6 07 2a d0 01 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 c2 ab d0 9f d0 be d0 bb d1 8c d0 b7 d0 be d0 b2 d0 b0 d1 82 d0 b5 d0 bb d1 8c c2 bb 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 a7 d0 b5 d0 bb d0 be d0 b2 d0 b5 d0 ba 20 d1 81 20 d0 b0 d0 ba d0 ba d0 b0 d1 83 d0 bd d1 82 d0 be d0 bc 20 53 74 65 61 6d 2c 20 d0 ba d0 be d1 82 d0 be d1 80 d1 8b d0 b9 20 d0 b7 d0 b0 d0 ba d0 bb d1 8e d1 87 d0 b8 d0 bb 20 d0 a1 d0 be d0 b3 d0 bb d0 b0 d1 88 d0 b5 d0 bd d0 b8 d0 b5 20 d1 81 20 d0 92 d0 bb d0 b0 d0 b4 d0 b5 d0 Data Ascii: maakond 10152 08jbr 08j#text * Steam,
2024-04-05 23:17:57 UTC	8435	OUT	Data Raw: 8b d0 b5 20 d1 81 20 d0 b0 d0 b4 d1 80 d0 b5 d1 81 d0 b0 20 d0 be d0 b4 d0 bd d0 be d0 b9 20 d0 b8 d0 b7 20 d0 a1 d1 82 d0 be d1 80 d0 be d0 bd 2c 20 d1 81 d1 87 d0 b8 d1 82 d0 b0 d1 8e d1 82 d1 81 d1 8f 20 d1 81 d0 be d0 b2 d0 b5 d1 80 d1 88 d0 b5 d0 bd d0 bd d1 8b d0 bc d0 b8 20 d1 8d d1 82 d0 be d0 b9 20 d0 a1 d1 82 d0 be d1 80 d0 be d0 bd d0 be d0 b9 2c 20 d0 b4 d0 b0 d0 b6 d0 b5 20 d0 b5 d1 81 d0 bb d0 b8 20 d0 be d0 bd d0 b8 20 d0 b1 d1 8b d0 bb d0 b8 20 d0 b2 d1 8b d0 bf d0 be d0 bb d0 bd d0 b5 d0 bd d1 8b 20 d0 b8 d0 bb d0 b8 20 d0 be d1 82 d0 bf d1 80 d0 b0 d0 b2 d0 bb d0 b5 d0 bd d1 8b 20 d0 b4 d1 80 d1 83 d0 b3 d0 b8 d0 bc d0 b8 20 d0 bb d0 b8 d1 86 d0 b0 d0 bc d0 b8 2e 30 c4 08 38 c2 08 6a 10 08 c4 08 12 02 62 72 20 ba 08 30 c5 08 38 c3 08 6a Data Ascii: , , .08jbr 08j
2024-04-05 23:17:58 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:58 GMT Expires: Fri, 05-Apr-2024 23:17:58 GMT Last-Modified: Fri, 05-Apr-2024 23:17:58 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	49893	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:58 UTC	2415	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A825216580%3Az%3A120%3Ai%3A20240406011756%3Aet%3A1712359077%3Ac%3A1%3Arn%3A584610710%3Arqn%3A10%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1401%3Awv%3A2%3Ads%3A0%2C0%2C1145%2C291%2C3%2C0%2C%2C58%2C1%2C%2C%2C%2C1536%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359074991%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359077%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:59 UTC	1359	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:17:58 GMT Expires: Fri, 05-Apr-2024 23:17:58 GMT Last-Modified: Fri, 05-Apr-2024 23:17:58 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:17:58 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Sat, 05-Apr-2025 23:17:58 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:17:59 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 2f 4b 75 44 76 51 75 63 31 65 55 65 2b 6d 51 59 48 68 59 43 79 52 6e 71 4e 77 49 6b 4d 34 37 4e 6a 63 41 71 30 66 6d 6d 77 73 6f 43 55 2f 70 6c 73 58 37 32 35 38 70 76 6a 43 72 72 30 72 32 63 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"/KuDvQuc1eUe+mQYHhYCyRnqNwIkM47NjcAq0fmmwsoCU/plsX7258pvjCrr0r2c"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	49894	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:58 UTC	2070	OUT	POST /watch/95654225/1?page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&charset=utf-8&hittoken=1712359063_e215b1ae4a4ac2c8c3c4c0c7ffc8755648a5f42bf64097381d6c0119d69050d7&browser-info=nb%3A1%3Acl%3A1108%3Aar%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A1%3Als%3A1173339980762%3Ahid%3A442277962%3Az%3A120%3Ai%3A20240406011756%3Aet%3A1712359077%3Ac%3A1%3Arn%3A1070706445%3Arqn%3A11%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A916%3Awv%3A2%3Ads%3A%2C%2C%2C552%2C%2C%2C%2C7%2C1%2C1388%2C1389%2C0%2C1339%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1712359060975%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359077&t=gdpr(14)clc(0-0-0)rqnt(2)eco(21037572)lt(9300)aw(0)rcm(0)cdl(na)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:17:59 UTC	757	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:58 GMT Expires: Fri, 05-Apr-2024 23:17:58 GMT Last-Modified: Fri, 05-Apr-2024 23:17:58 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	49895	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:59 UTC	1432	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=442277962&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&rn=141212650&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359076%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011755%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359076&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:17:59 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:17:59 GMT Expires: Fri, 05-Apr-2024 23:17:59 GMT Last-Modified: Fri, 05-Apr-2024 23:17:59 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:17:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	49896	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:17:59 UTC	2289	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A825216580%3Az%3A120%3Ai%3A20240406011756%3Aet%3A1712359077%3Ac%3A1%3Arn%3A584610710%3Arqn%3A10%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1401%3Awv%3A2%3Ads%3A0%2C0%2C1145%2C291%2C3%2C0%2C%2C58%2C1%2C%2C%2C%2C1536%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359074991%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359077%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:00 UTC	875	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:18:00 GMT Expires: Fri, 05-Apr-2024 23:18:00 GMT Last-Modified: Fri, 05-Apr-2024 23:18:00 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:18:00 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:18:00 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 4c 6a 51 30 54 4e 69 64 4c 4c 4c 66 4a 63 52 54 63 54 74 4a 4c 6d 31 32 68 78 6b 68 33 44 70 39 7a 6c 75 57 6e 79 58 44 32 4f 4e 4b 45 71 77 69 35 42 61 6c 67 61 37 69 36 50 2b 71 42 38 5a 49 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"LjQ0TNidLLLfJcRTcTtJLm12hxkh3Dp9zluWnyXD2ONKEqwi5Balga7i6P+qB8ZI"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	49898	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:00 UTC	1625	OUT	POST /webvisor/95654225?wv-part=1&wv-check=24687&wv-type=0&wmode=0&wv-hit=1056222005&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&rn=977289180&browser-info=we%3A1%3Aet%3A1712359079%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011758%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359079&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 12 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:00 UTC	12	OUT	Data Raw: 77 76 2d 64 61 74 61 3d 44 31 45 5f Data Ascii: wv-data=D1E_
2024-04-05 23:18:00 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:00 GMT Expires: Fri, 05-Apr-2024 23:18:00 GMT Last-Modified: Fri, 05-Apr-2024 23:18:00 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	49899	23.61.62.148	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:00 UTC	744	OUT	POST /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive Content-Length: 193 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundary5IGmxy76Bsy3wliy sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://store.steampowered.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:00 UTC	193	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 35 49 47 6d 78 79 37 36 42 73 79 33 77 6c 69 79 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 6e 70 75 74 5f 70 72 6f 74 6f 62 75 66 5f 65 6e 63 6f 64 65 64 22 0d 0a 0d 0a 43 4f 76 35 33 4c 2b 6a 76 6f 76 50 72 41 45 53 45 50 76 4f 35 72 76 58 65 65 48 42 66 68 61 65 50 47 75 6a 52 6c 45 3d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 35 49 47 6d 78 79 37 36 42 73 79 33 77 6c 69 79 2d 2d 0d 0a Data Ascii: ------WebKitFormBoundary5IGmxy76Bsy3wliyContent-Disposition: form-data; name="input_protobuf_encoded"COv53L+jvovPrAESEPvO5rvXeeHBfhaePGujRlE=------WebKitFormBoundary5IGmxy76Bsy3wliy--
2024-04-05 23:18:01 UTC	337	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 2 Access-Control-Allow-Origin: https://store.steampowered.com Vary: Origin Access-Control-Expose-Headers: X-eresult, X-error_message X-eresult: 1 Expires: Fri, 05 Apr 2024 23:18:01 GMT Date: Fri, 05 Apr 2024 23:18:01 GMT Connection: close
2024-04-05 23:18:01 UTC	2	IN	Data Raw: 28 00 Data Ascii: (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	49900	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:01 UTC	1596	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=442277962&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&rn=648745000&browser-info=we%3A1%3Aet%3A1712359080%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011759%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359080&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 89 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:01 UTC	89	OUT	Data Raw: 0a 17 08 00 10 01 18 13 20 00 8a 01 0c 08 f6 09 10 8b 07 18 f6 09 20 dd 0a 0a 1b 08 00 10 01 18 04 20 00 62 11 08 00 10 00 18 01 20 ff ff ff ff ff ff ff ff ff 01 0a 0e 08 aa 01 10 01 18 08 20 00 aa 01 02 08 01 0a 09 08 bd 01 10 01 18 05 20 00 0a 06 10 04 e0 01 a8 02 Data Ascii: b
2024-04-05 23:18:01 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:01 GMT Expires: Fri, 05-Apr-2024 23:18:01 GMT Last-Modified: Fri, 05-Apr-2024 23:18:01 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	49901	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:01 UTC	1452	OUT	GET /webvisor/95654225?wv-part=1&wv-check=24687&wv-type=0&wmode=0&wv-hit=1056222005&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffeedback%2F&rn=977289180&browser-info=we%3A1%3Aet%3A1712359079%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011758%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359079&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:01 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:01 GMT Expires: Fri, 05-Apr-2024 23:18:01 GMT Last-Modified: Fri, 05-Apr-2024 23:18:01 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	49902	23.47.27.74	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:01 UTC	861	OUT	GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
2024-04-05 23:18:02 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Content-Type: text/html; charset=UTF-8 Content-Length: 147 Allow: POST Expires: Fri, 05 Apr 2024 23:18:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Apr 2024 23:18:02 GMT Connection: close
2024-04-05 23:18:02 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 54 68 69 73 20 41 50 49 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 61 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Method Not Allowed</title></head><body><h1>Method Not Allowed</h1>This API must be called with a HTTP POST request</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	49904	23.61.62.148	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:01 UTC	740	OUT	POST /IClientMetricsService/ReportClientError/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive Content-Length: 1353 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryIrPXRRnuEDiCtjP4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://store.steampowered.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:01 UTC	1353	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 49 72 50 58 52 52 6e 75 45 44 69 43 74 6a 50 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 6e 70 75 74 5f 70 72 6f 74 6f 62 75 66 5f 65 6e 63 6f 64 65 64 22 0d 0a 0d 0a 43 67 56 54 64 47 39 79 5a 52 49 48 4f 44 67 77 4f 44 45 78 4f 42 72 77 42 67 70 42 49 43 41 67 49 47 46 30 49 45 68 55 54 55 78 45 62 32 4e 31 62 57 56 75 64 43 34 38 59 57 35 76 62 6e 6c 74 62 33 56 7a 50 69 41 6f 4c 32 78 76 5a 32 6c 75 4c 7a 6f 79 4e 6a 55 36 4d 7a 41 70 49 47 59 79 4f 44 5a 6a 4d 6d 5a 68 4e 47 49 33 5a 6a 51 33 59 54 63 53 71 41 5a 62 49 6c 52 35 63 47 56 46 63 6e 4a 76 63 6a 6f 67 51 32 46 75 62 6d 39 30 49 48 4a 6c Data Ascii: ------WebKitFormBoundaryIrPXRRnuEDiCtjP4Content-Disposition: form-data; name="input_protobuf_encoded"CgVTdG9yZRIHODgwODExOBrwBgpBICAgIGF0IEhUTUxEb2N1bWVudC48YW5vbnltb3VzPiAoL2xvZ2luLzoyNjU6MzApIGYyODZjMmZhNGI3ZjQ3YTcSqAZbIlR5cGVFcnJvcjogQ2Fubm90IHJl
2024-04-05 23:18:02 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 0 Access-Control-Allow-Origin: https://store.steampowered.com Vary: Origin Access-Control-Expose-Headers: X-eresult, X-error_message Expires: Fri, 05 Apr 2024 23:18:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Apr 2024 23:18:02 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	49903	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:02 UTC	1616	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=907255817&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359081%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011800%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359081&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 84775 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:02 UTC	16384	OUT	Data Raw: 0a a3 96 05 08 00 10 00 18 1b 20 00 4a 97 96 05 0a 0f 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 12 42 d0 9c d0 be d0 bc d0 b5 d0 bd d1 82 d0 b0 d0 bb d1 8c d0 bd d0 be d0 b5 20 d0 bf d0 be d0 bf d0 be d0 bb d0 bd d0 b5 d0 bd d0 b8 d0 b5 20 d0 b1 d0 b0 d0 bb d0 b0 d0 bd d1 81 d0 b0 20 53 74 65 61 6d 1a 21 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 70 61 67 65 73 2f 66 61 71 2f 22 6f 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 2a 00 32 00 38 00 Data Ascii: J<!DOCTYPE html>B Steam!https://steamfiller.ru/pages/faq/"oMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36*28
2024-04-05 23:18:02 UTC	16384	OUT	Data Raw: 31 31 38 34 20 31 31 2e 39 35 35 38 20 36 2e 34 30 34 38 34 43 31 31 2e 38 30 34 20 36 2e 34 39 37 38 34 20 31 31 2e 36 37 38 36 20 36 2e 36 32 38 31 38 20 31 31 2e 35 39 31 35 20 36 2e 37 38 33 34 33 43 31 31 2e 35 30 34 34 20 36 2e 39 33 38 36 37 20 31 31 2e 34 35 38 36 20 37 2e 31 31 33 36 33 20 31 31 2e 34 35 38 34 20 37 2e 32 39 31 36 33 43 31 31 2e 34 35 38 34 20 37 2e 35 36 37 38 39 20 31 31 2e 33 34 38 36 20 37 2e 38 33 32 38 35 20 31 31 2e 31 35 33 33 20 38 2e 30 32 38 32 43 31 30 2e 39 35 37 39 20 38 2e 32 32 33 35 35 20 31 30 2e 36 39 33 20 38 2e 33 33 33 32 39 20 31 30 2e 34 31 36 37 20 38 2e 33 33 33 32 39 43 31 30 2e 31 34 30 34 20 38 2e 33 33 33 32 39 20 39 2e 38 37 35 34 37 20 38 2e 32 32 33 35 35 20 39 2e 36 38 30 31 32 20 38 2e 30 32 38 Data Ascii: 1184 11.9558 6.40484C11.804 6.49784 11.6786 6.62818 11.5915 6.78343C11.5044 6.93867 11.4586 7.11363 11.4584 7.29163C11.4584 7.56789 11.3486 7.83285 11.1533 8.0282C10.9579 8.22355 10.693 8.33329 10.4167 8.33329C10.1404 8.33329 9.87547 8.22355 9.68012 8.028
2024-04-05 23:18:02 UTC	16384	OUT	Data Raw: be d0 b1 d1 85 d0 be d0 b4 d0 b8 d0 bc d1 8b d0 b5 20 d0 b4 d0 bb d1 8f 20 d0 be d1 81 d1 83 d1 89 d0 b5 d1 81 d1 82 d0 b2 d0 bb d0 b5 d0 bd d0 b8 d1 8f 20 d0 bf d0 bb d0 b0 d1 82 d0 b5 d0 b6 d0 b5 d0 b9 2c 20 d0 b8 20 d0 b4 d0 b5 d0 b9 d1 81 d1 82 d0 b2 d1 83 d0 b5 d1 82 20 d0 ba d0 b0 d0 ba 20 d0 ba d0 be d0 bd d1 82 d1 80 d0 be d0 bb d0 bb d0 b5 d1 80 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 20 28 c2 ab d0 9a d0 be d0 bd d1 82 d1 80 d0 be d0 bb d0 bb d0 b5 d1 80 20 d0 bf d0 bb d0 b0 d1 82 d0 b5 d0 b6 d0 bd d1 8b d1 85 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 c2 bb 29 20 d0 b4 d0 bb d1 8f 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d0 b8 2c 20 d0 bd d0 b5 d0 be d0 b1 d1 85 d0 be d0 b4 d0 b8 d0 bc d0 be d0 b9 20 d0 b4 d0 bb d1 8f 20 d0 b0 d0 bd Data Ascii: , ( ) ,
2024-04-05 23:18:02 UTC	16384	OUT	Data Raw: e7 03 d0 a1 d0 be d0 b3 d0 bb d0 b0 d1 81 d0 bd d0 be 20 47 44 50 52 2c 20 d0 b2 d0 b0 d1 88 d0 b5 20 d1 81 d0 be d0 b3 d0 bb d0 b0 d1 81 d0 b8 d0 b5 20 d0 bd d0 b0 20 d0 be d0 b1 d1 80 d0 b0 d0 b1 d0 be d1 82 d0 ba d1 83 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 20 d0 b4 d0 be d0 bb d0 b6 d0 bd d0 be 20 d0 b1 d1 8b d1 82 d1 8c 20 d1 8f d0 b2 d0 bd d1 8b d0 bc 20 d0 b8 20 d0 be d1 81 d0 be d0 b7 d0 bd d0 b0 d0 bd d0 bd d1 8b d0 bc 2e 20 d0 95 d0 b2 d1 80 d0 be d0 bf d0 b5 d0 b9 d1 81 d0 ba d0 b0 d1 8f 20 d0 b4 d0 b8 d1 80 d0 b5 d0 ba d1 82 d0 b8 d0 b2 d0 b0 20 d0 be 20 d0 b7 d0 b0 d1 89 d0 b8 d1 82 d0 b5 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 20 d0 be d0 bf d1 80 d0 b5 d0 b4 d0 b5 d0 bb d1 8f d0 b5 d1 82 20 d1 81 d0 be d0 b3 d0 bb d0 b0 d1 81 d0 b8 d0 b5 20 Data Ascii: GDPR, .
2024-04-05 23:18:02 UTC	16384	OUT	Data Raw: 8c 20 d0 b2 d1 8b d1 88 d0 b5 d1 83 d0 ba d0 b0 d0 b7 d0 b0 d0 bd d0 bd d1 8b d0 b5 20 d0 b4 d0 b5 d0 b9 d1 81 d1 82 d0 b2 d0 b8 d1 8f 20 d0 ba 20 d0 bb d1 8e d0 b1 d0 be d0 b9 20 d1 87 d0 b0 d1 81 d1 82 d0 b8 20 d0 a1 d0 b0 d0 b9 d1 82 d0 b0 2e 30 a8 05 38 a6 05 6a 10 08 a8 05 12 02 62 72 20 98 05 30 a9 05 38 a7 05 6a 2f 08 a9 05 12 05 23 74 65 78 74 20 98 05 2a 1d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 a8 05 6a 2b 08 aa 05 12 05 23 74 65 78 74 20 96 05 2a 19 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 98 05 6a 27 08 ab 05 12 05 23 74 65 78 74 20 92 05 2a 15 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 96 05 6a 2a 08 ac 05 12 05 23 74 65 78 74 20 e2 Data Ascii: .08jbr 08j/#text * 8j+#text * 8j'#text * 8j*#text
2024-04-05 23:18:02 UTC	2855	OUT	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 70 6f 70 75 70 5f 5f 68 32 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 63 6c 6f 73 65 2d 70 6f 70 75 70 20 7b 0a Data Ascii: ; -webkit-transform: translate(-50%, -50%); transform: translate(-50%, -50%); z-index: 999; } .popup__h2 { text-align: center; font-size: 30px; } .close-popup {
2024-04-05 23:18:03 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:03 GMT Expires: Fri, 05-Apr-2024 23:18:03 GMT Last-Modified: Fri, 05-Apr-2024 23:18:03 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	49905	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:02 UTC	1423	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=442277962&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&rn=648745000&browser-info=we%3A1%3Aet%3A1712359080%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011759%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359080&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:02 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:02 GMT Expires: Fri, 05-Apr-2024 23:18:02 GMT Last-Modified: Fri, 05-Apr-2024 23:18:02 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	49907	23.47.27.74	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:02 UTC	856	OUT	GET /IClientMetricsService/ReportClientError/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
2024-04-05 23:18:02 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Content-Type: text/html; charset=UTF-8 Content-Length: 147 Allow: POST Expires: Fri, 05 Apr 2024 23:18:02 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Apr 2024 23:18:02 GMT Connection: close
2024-04-05 23:18:02 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 54 68 69 73 20 41 50 49 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 61 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Method Not Allowed</title></head><body><h1>Method Not Allowed</h1>This API must be called with a HTTP POST request</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	49906	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:02 UTC	1605	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=909386357&browser-info=we%3A1%3Aet%3A1712359081%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011801%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359081&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 160 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:02 UTC	160	OUT	Data Raw: 0a 17 08 00 10 01 18 13 20 00 8a 01 0c 08 f6 09 10 8b 07 18 f6 09 20 d2 07 0a 1b 08 00 10 01 18 04 20 00 62 11 08 00 10 00 18 01 20 ff ff ff ff ff ff ff ff ff 01 0a 0e 08 e5 05 10 01 18 08 20 00 aa 01 02 08 01 0a 0e 08 e6 05 10 01 18 07 20 00 aa 01 02 08 01 0a 14 08 e8 05 10 01 18 00 20 00 5a 09 08 8e 05 10 c1 03 18 9a 01 0a 09 08 eb 05 10 01 18 05 20 00 0a 09 08 ec 05 10 01 18 06 20 00 0a 14 08 cd 06 10 01 18 00 20 00 5a 09 08 8e 05 10 c1 03 18 9a 01 0a 06 10 04 e0 01 d0 03 Data Ascii: b Z Z
2024-04-05 23:18:03 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:02 GMT Expires: Fri, 05-Apr-2024 23:18:02 GMT Last-Modified: Fri, 05-Apr-2024 23:18:02 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	49908	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:03 UTC	1431	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=909386357&browser-info=we%3A1%3Aet%3A1712359081%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011801%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359081&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:04 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:04 GMT Expires: Fri, 05-Apr-2024 23:18:04 GMT Last-Modified: Fri, 05-Apr-2024 23:18:04 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	49909	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:03 UTC	1440	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=907255817&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359081%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011800%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359081&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:04 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:04 GMT Expires: Fri, 05-Apr-2024 23:18:04 GMT Last-Modified: Fri, 05-Apr-2024 23:18:04 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	49910	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:05 UTC	1619	OUT	POST /webvisor/95654225?wv-part=1&wv-check=24944&wv-type=0&wmode=0&wv-hit=310184681&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=649098613&browser-info=we%3A1%3Aet%3A1712359084%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011803%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359084&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 12 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:05 UTC	12	OUT	Data Raw: 77 76 2d 64 61 74 61 3d 44 31 49 5f Data Ascii: wv-data=D1I_
2024-04-05 23:18:05 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:05 GMT Expires: Fri, 05-Apr-2024 23:18:05 GMT Last-Modified: Fri, 05-Apr-2024 23:18:05 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	49912	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:06 UTC	1446	OUT	GET /webvisor/95654225?wv-part=1&wv-check=24944&wv-type=0&wmode=0&wv-hit=310184681&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=649098613&browser-info=we%3A1%3Aet%3A1712359084%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011803%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359084&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:06 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:06 GMT Expires: Fri, 05-Apr-2024 23:18:06 GMT Last-Modified: Fri, 05-Apr-2024 23:18:06 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	49913	23.61.62.148	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:06 UTC	744	OUT	POST /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive Content-Length: 193 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundarybqc2vDmibFhOrF1A sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://store.steampowered.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:06 UTC	193	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 62 71 63 32 76 44 6d 69 62 46 68 4f 72 46 31 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 6e 70 75 74 5f 70 72 6f 74 6f 62 75 66 5f 65 6e 63 6f 64 65 64 22 0d 0a 0d 0a 43 4f 76 35 33 4c 2b 6a 76 6f 76 50 72 41 45 53 45 50 76 4f 35 72 76 58 65 65 48 42 66 68 61 65 50 47 75 6a 52 6c 45 3d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 62 71 63 32 76 44 6d 69 62 46 68 4f 72 46 31 41 2d 2d 0d 0a Data Ascii: ------WebKitFormBoundarybqc2vDmibFhOrF1AContent-Disposition: form-data; name="input_protobuf_encoded"COv53L+jvovPrAESEPvO5rvXeeHBfhaePGujRlE=------WebKitFormBoundarybqc2vDmibFhOrF1A--
2024-04-05 23:18:07 UTC	337	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 2 Access-Control-Allow-Origin: https://store.steampowered.com Vary: Origin Access-Control-Expose-Headers: X-eresult, X-error_message X-eresult: 1 Expires: Fri, 05 Apr 2024 23:18:07 GMT Date: Fri, 05 Apr 2024 23:18:07 GMT Connection: close
2024-04-05 23:18:07 UTC	2	IN	Data Raw: 28 00 Data Ascii: (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	49915	23.47.27.74	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:07 UTC	861	OUT	GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
2024-04-05 23:18:08 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Content-Type: text/html; charset=UTF-8 Content-Length: 147 Allow: POST Expires: Fri, 05 Apr 2024 23:18:08 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Apr 2024 23:18:08 GMT Connection: close
2024-04-05 23:18:08 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 54 68 69 73 20 41 50 49 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 61 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Method Not Allowed</title></head><body><h1>Method Not Allowed</h1>This API must be called with a HTTP POST request</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	49914	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:07 UTC	1606	OUT	POST /webvisor/95654225?wv-part=2&wv-type=7&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=1044244577&browser-info=we%3A1%3Aet%3A1712359087%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011806%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359087&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:07 UTC	118	OUT	Data Raw: 0a 14 08 a3 36 10 01 18 00 20 00 5a 09 08 8d 05 10 c0 03 18 9a 01 0a 14 08 c8 37 10 01 18 00 20 00 5a 09 08 84 05 10 b7 03 18 9a 01 0a 14 08 f3 39 10 01 18 00 20 00 5a 09 08 84 05 10 b7 03 18 9a 01 0a 14 08 e4 3a 10 01 18 00 20 00 5a 09 08 80 05 10 b3 03 18 9a 01 0a 14 08 d4 3b 10 01 18 00 20 00 5a 09 08 80 05 10 b3 03 18 9a 01 0a 06 10 04 e0 01 da 03 Data Ascii: 6 Z7 Z9 Z: Z; Z
2024-04-05 23:18:08 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:08 GMT Expires: Fri, 05-Apr-2024 23:18:08 GMT Last-Modified: Fri, 05-Apr-2024 23:18:08 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	49891	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:08 UTC	766	OUT	GET /pages/faq/ HTTP/1.1 Host: steamfiller.ru Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
2024-04-05 23:18:09 UTC	298	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:18:08 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding
2024-04-05 23:18:09 UTC	16086	IN	Data Raw: 31 65 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c Data Ascii: 1ee8<!DOCTYPE html><html> <head itemscope="" itemtype="http://schema.org/"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width,initial
2024-04-05 23:18:09 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 d0 ad d1 82 d0 b0 20 d1 83 d1 81 d0 bb d1 83 d0 b3 d0 b0 20 d0 bf d1 80 d0 b5 d0 b4 d0 bd d0 b0 d0 b7 d0 bd d0 b0 d1 87 d0 b5 d0 bd d0 b0 20 d0 b4 d0 bb d1 8f 20 d0 b0 d0 ba d0 ba d0 b0 d1 83 d0 bd d1 82 d0 be d0 b2 20 53 74 65 61 6d 2c 20 d0 b7 d0 b0 d1 80 d0 b5 d0 b3 d0 b8 d1 81 d1 82 d1 80 d0 b8 d1 80 d0 be d0 b2 d0 b0 d0 bd d0 bd d1 8b d1 85 20 d0 b2 20 d0 a0 d0 be d1 81 d1 81 d0 b8 d0 b8 2c 20 d0 a2 d1 83 d1 80 d1 86 d0 b8 d0 b8 2c 20 d0 9a d0 b0 d0 b7 d0 b0 d1 85 d1 81 d1 82 d0 b0 d0 bd d0 b5 2c 20 d0 90 d1 80 d0 b3 d0 b5 d0 bd d1 82 d0 b8 d0 bd d0 b5 20 d0 b8 20 d0 bb d1 8e d0 b1 d0 be d0 b9 20 d0 b4 d0 be d0 bb d0 bb d0 b0 d1 80 d0 be d0 b2 d1 8b d0 b9 20 d0 b0 d0 ba d0 ba d0 b0 d1 83 d0 bd d1 82 2c 20 d0 b8 20 Data Ascii: Steam, , , , ,
2024-04-05 23:18:09 UTC	16384	IN	Data Raw: 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d0 b8 20 d0 bf d1 80 d0 b5 d0 b4 d0 be d1 81 d1 82 d0 b0 d0 b2 d0 bb d0 b5 d0 bd d0 bd d1 8b d1 85 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 2e 20 d0 ad d1 82 d0 be 20 d0 bc d0 be d0 b6 d0 b5 d1 82 20 d0 b2 d0 ba d0 bb d1 8e d1 87 d0 b0 d1 82 d1 8c 20 d0 bc d0 b5 d0 b6 d0 b4 d1 83 d0 bd d0 b0 d1 80 d0 be d0 b4 d0 bd d1 8b d0 b9 20 d0 be d0 b1 d0 bc d0 b5 d0 bd 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d0 b5 d0 b9 2e 20 d0 a1 d0 b2 d0 be d0 b4 d0 bd d1 8b d0 b5 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d0 b5 2c 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd d0 bd d1 8b d0 b5 20 d0 b2 20 d1 85 d0 be d0 b4 d0 b5 20 d0 bf d1 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d0 b8 20 d0 b1 d0 b5 d0 b7 d0 be d0 bf d0 b0 d1 81 d0 bd d0 be d1 81 Data Ascii: . . ,
2024-04-05 23:18:09 UTC	16384	IN	Data Raw: d0 bf d0 be d1 81 d0 bb d0 b5 d0 b4 d0 bd d0 b5 d0 b3 d0 be 20 d0 be d0 b1 d0 bd d0 be d0 b2 d0 bb d0 b5 d0 bd d0 b8 d1 8f 3a 20 37 2e 30 36 2e 32 30 32 32 20 3c 62 72 3e 3c 62 72 3e 0a 20 20 20 20 20 20 20 20 20 20 0d 0a 35 37 32 36 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 20 d0 b8 20 d0 bb d0 b8 d1 86 d0 be 2c 20 d0 bf d1 80 d0 b8 d0 bd d1 8f d0 b2 d1 88 d0 b5 d0 b5 20 d0 be d1 84 d0 b5 d1 80 d1 82 d1 83 2c 20 d0 be d0 bf d1 83 d0 b1 d0 bb d0 b8 d0 ba d0 be d0 b2 d0 b0 d0 bd d0 bd d1 83 d1 8e 20 d0 bd d0 b0 20 d0 bf d0 be d1 81 d1 82 d0 be d1 8f d0 bd d0 bd d0 be d0 bc 20 d0 b0 d0 b4 d1 80 d0 b5 d1 81 d0 b5 20 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 Data Ascii: : 7.06.2022 <br><br> 5726 https://steamfiller.ru/ , , https://steamfiller
2024-04-05 23:18:09 UTC	6013	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 92 d0 be 20 d0 b2 d1 81 d1 91 d0 bc 2c 20 d1 87 d1 82 d0 be 20 d0 bd d0 b5 20 d0 be d1 85 d0 b2 d0 b0 d1 87 d0 b5 d0 bd d0 be 20 d0 a1 d0 be d0 b3 d0 bb d0 b0 d1 88 d0 b5 d0 bd d0 b8 d0 b5 d0 bc 2c 20 d0 a1 d1 82 d0 be d1 80 d0 be d0 bd d1 8b 20 d1 80 d1 83 d0 ba d0 be d0 b2 d0 be d0 b4 d1 81 d1 82 d0 b2 d1 83 d1 8e d1 82 d1 81 d1 8f 20 d0 b7 d0 b0 d0 ba d0 be d0 bd d0 be d0 b4 d0 b0 d1 82 d0 b5 d0 bb d1 8c d1 81 d1 82 d0 b2 d0 be d0 bc 20 d0 ad d1 81 d1 82 d0 be d0 bd d0 b8 d0 b8 2c 20 d0 bd d0 b5 20 d0 bf d1 80 d0 b8 d0 bc d0 b5 d0 bd d1 8f d1 8f 20 d0 ba d0 be d0 bb d0 bb d0 b8 d0 b7 d0 b8 d0 be d0 bd d0 bd d1 8b d0 b5 20 d0 bd d0 be d1 80 d0 bc d1 8b 2e 20 3c 62 72 3e 0a 20 20 Data Ascii: , , , . <br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	49918	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:09 UTC	1611	OUT	POST /webvisor/95654225?wv-part=1&wv-check=34967&wv-type=0&wmode=0&wv-hit=853926178&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&rn=963682877&browser-info=we%3A1%3Aet%3A1712359088%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011807%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359088&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 12 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:09 UTC	12	OUT	Data Raw: 77 76 2d 64 61 74 61 3d 44 33 6b 5f Data Ascii: wv-data=D3k_
2024-04-05 23:18:09 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:09 GMT Expires: Fri, 05-Apr-2024 23:18:09 GMT Last-Modified: Fri, 05-Apr-2024 23:18:09 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	49919	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:09 UTC	1432	OUT	GET /webvisor/95654225?wv-part=2&wv-type=7&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=1044244577&browser-info=we%3A1%3Aet%3A1712359087%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011806%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359087&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:10 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:09 GMT Expires: Fri, 05-Apr-2024 23:18:09 GMT Last-Modified: Fri, 05-Apr-2024 23:18:09 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	49921	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:11 UTC	1438	OUT	GET /webvisor/95654225?wv-part=1&wv-check=34967&wv-type=0&wmode=0&wv-hit=853926178&page-url=https%3A%2F%2Fsteamfiller.ru%2Fkzt%2F&rn=963682877&browser-info=we%3A1%3Aet%3A1712359088%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011807%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359088&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:11 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:11 GMT Expires: Fri, 05-Apr-2024 23:18:11 GMT Last-Modified: Fri, 05-Apr-2024 23:18:11 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	49920	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:11 UTC	2418	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A906334581%3Az%3A120%3Ai%3A20240406011809%3Aet%3A1712359090%3Ac%3A1%3Arn%3A246901983%3Arqn%3A12%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1780%3Awv%3A2%3Ads%3A0%2C0%2C1163%2C633%2C41%2C38%2C1%2C88%2C1%2C%2C%2C%2C1927%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359087549%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359090%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:11 UTC	1359	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:18:11 GMT Expires: Fri, 05-Apr-2024 23:18:11 GMT Last-Modified: Fri, 05-Apr-2024 23:18:11 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:18:11 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Sat, 05-Apr-2025 23:18:11 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:18:11 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 6c 30 4f 62 71 73 5a 4d 74 2f 61 50 66 46 37 67 6d 43 47 39 6f 63 31 56 55 47 4d 79 72 47 57 65 47 64 35 4c 37 6b 53 58 59 4a 6e 4d 51 38 68 52 58 76 66 50 35 43 4e 2f 4d 6c 53 53 41 50 33 46 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"l0ObqsZMt/aPfF7gmCG9oc1VUGMyrGWeGd5L7kSXYJnMQ8hRXvfP5CN/MlSSAP3F"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	49922	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:12 UTC	1603	OUT	POST /webvisor/95654225?wv-part=3&wv-type=7&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=36618891&browser-info=we%3A1%3Aet%3A1712359091%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011810%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359091&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 35 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:12 UTC	35	OUT	Data Raw: 0a 0e 08 d0 47 10 01 18 08 20 00 aa 01 02 08 01 0a 09 08 d5 47 10 01 18 05 20 00 0a 06 10 04 e0 01 80 06 Data Ascii: G G
2024-04-05 23:18:12 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:12 GMT Expires: Fri, 05-Apr-2024 23:18:12 GMT Last-Modified: Fri, 05-Apr-2024 23:18:12 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	49923	23.46.213.117	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:12 UTC	1265	OUT	GET /account/ HTTP/1.1 Host: store.steampowered.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0; ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
2024-04-05 23:18:12 UTC	1620	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Content-Type: text/html; charset=UTF-8 Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.cloudflare.steamstatic.com/ https://store.cloudflare.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.cloudflare.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.cloudflare.steamstatic.com/ https://checkout.steampowered.com/; frame-src 'self' steam: http://www.youtube.com https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://steamcommunity.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://steamcommunity.com/; frame-ancestors 'none'; Location: https://store.steampowered.com/login/?redir=account%2F&redir_ssl=1 Content-Encoding: gzip Vary: Accept-Encoding Strict-Transport-Security: max-age=10368000 Content-Length: 20 Date: Fri, 05 Apr 2024 23:18:12 GMT Connection: close
2024-04-05 23:18:12 UTC	20	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 03 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	49924	23.46.213.117	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:12 UTC	1292	OUT	GET /login/?redir=account%2F&redir_ssl=1 HTTP/1.1 Host: store.steampowered.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0; ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
2024-04-05 23:18:13 UTC	1518	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.cloudflare.steamstatic.com/ https://store.cloudflare.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.cloudflare.steamstatic.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.cloudflare.steamstatic.com/ https://checkout.steampowered.com/ https://store.steampowered.com/; frame-src 'self' steam: http://www.youtube.com https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://steamcommunity.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://steamcommunity.com/ https://help.steampowered.com/; frame-ancestors 'none'; Strict-Transport-Security: max-age=10368000 Date: Fri, 05 Apr 2024 23:18:13 GMT Content-Length: 28505 Connection: close
2024-04-05 23:18:13 UTC	14866	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-04-05 23:18:13 UTC	9710	IN	Data Raw: 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 64 61 6e 69 73 68 26 72 65 64 69 72 3d 61 63 63 6f 75 6e 74 25 32 46 26 72 65 64 69 72 5f 73 73 6c 3d 31 22 20 6f 6e 63 6c 69 63 6b 3d 22 43 68 61 6e 67 65 4c 61 6e 67 75 61 67 65 28 20 27 64 61 6e 69 73 68 27 20 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 3e 44 61 6e 73 6b 20 28 44 61 6e 69 73 68 29 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 20 74 69 67 68 74 22 20 68 72 65 66 3d 22 3f 6c 3d 67 65 72 6d 61 6e 26 72 65 64 69 72 3d 61 63 63 Data Ascii: <a class="popup_menu_item tight" href="?l=danish&redir=account%2F&redir_ssl=1" onclick="ChangeLanguage( 'danish' ); return false;">Dansk (Danish)</a><a class="popup_menu_item tight" href="?l=german&redir=acc
2024-04-05 23:18:13 UTC	3929	IN	Data Raw: 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 6a 6f 69 6e 2f 3f 72 65 64 69 72 3d 61 63 63 6f 75 6e 74 25 32 46 26 73 6e 72 3d 31 5f 36 30 5f 34 5f 5f 36 32 22 20 63 6c 61 73 73 3d 22 6c 6f 67 69 6e 5f 63 72 65 61 74 65 5f 62 74 6e 20 62 74 6e 5f 62 6c 75 65 5f 73 74 65 61 6d 75 69 20 62 74 6e 5f 6d 65 64 69 75 6d 22 3e 0d 0a 09 09 09 09 09 3c 73 70 61 6e 3e 43 72 65 61 74 65 20 61 6e 20 61 63 63 6f 75 6e 74 3c 2f 73 70 61 6e 3e 0d 0a 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 67 69 6e 5f 62 6f 74 74 6f 6d 5f 72 6f 77 5f 69 74 65 6d 22 3e 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 75 62 74 65 78 74 22 3e 49 74 27 73 20 66 72 65 65 20 Data Ascii: ps://store.steampowered.com/join/?redir=account%2F&snr=1_60_4__62" class="login_create_btn btn_blue_steamui btn_medium"><span>Create an account</span></a></div><div class="login_bottom_row_item"><div class="subtext">It's free

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	49927	23.61.62.148	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:13 UTC	744	OUT	POST /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive Content-Length: 193 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryiQPfIkt5QsM9A1b5 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://store.steampowered.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:13 UTC	193	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 69 51 50 66 49 6b 74 35 51 73 4d 39 41 31 62 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 6e 70 75 74 5f 70 72 6f 74 6f 62 75 66 5f 65 6e 63 6f 64 65 64 22 0d 0a 0d 0a 43 4f 76 35 33 4c 2b 6a 76 6f 76 50 72 41 45 53 45 50 76 4f 35 72 76 58 65 65 48 42 66 68 61 65 50 47 75 6a 52 6c 45 3d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 69 51 50 66 49 6b 74 35 51 73 4d 39 41 31 62 35 2d 2d 0d 0a Data Ascii: ------WebKitFormBoundaryiQPfIkt5QsM9A1b5Content-Disposition: form-data; name="input_protobuf_encoded"COv53L+jvovPrAESEPvO5rvXeeHBfhaePGujRlE=------WebKitFormBoundaryiQPfIkt5QsM9A1b5--
2024-04-05 23:18:13 UTC	337	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 2 Access-Control-Allow-Origin: https://store.steampowered.com Vary: Origin Access-Control-Expose-Headers: X-eresult, X-error_message X-eresult: 1 Expires: Fri, 05 Apr 2024 23:18:13 GMT Date: Fri, 05 Apr 2024 23:18:13 GMT Connection: close
2024-04-05 23:18:13 UTC	2	IN	Data Raw: 28 00 Data Ascii: (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	49926	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:13 UTC	2292	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A906334581%3Az%3A120%3Ai%3A20240406011809%3Aet%3A1712359090%3Ac%3A1%3Arn%3A246901983%3Arqn%3A12%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1780%3Awv%3A2%3Ads%3A0%2C0%2C1163%2C633%2C41%2C38%2C1%2C88%2C1%2C%2C%2C%2C1927%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359087549%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359090%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(1)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:14 UTC	875	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:18:13 GMT Expires: Fri, 05-Apr-2024 23:18:13 GMT Last-Modified: Fri, 05-Apr-2024 23:18:13 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:18:13 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:18:14 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 77 66 46 31 51 48 32 33 51 38 54 6c 30 4e 50 4d 70 79 68 66 38 42 6f 49 62 55 55 62 50 4f 67 52 61 57 35 64 42 32 4e 2b 50 32 37 61 47 34 42 68 4d 75 57 32 4c 6c 58 79 39 59 46 73 61 4b 2f 6f 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"wfF1QH23Q8Tl0NPMpyhf8BoIbUUbPOgRaW5dB2N+P27aG4BhMuW2LlXy9YFsaK/o"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	49928	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:13 UTC	1430	OUT	GET /webvisor/95654225?wv-part=3&wv-type=7&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=36618891&browser-info=we%3A1%3Aet%3A1712359091%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011810%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359091&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:14 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:14 GMT Expires: Fri, 05-Apr-2024 23:18:14 GMT Last-Modified: Fri, 05-Apr-2024 23:18:14 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	49929	23.61.62.148	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:15 UTC	1184	OUT	POST /jwt/ajaxrefresh HTTP/1.1 Host: login.steampowered.com Connection: keep-alive Content-Length: 175 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryTuYAb7F7Z5B0vpwB sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://store.steampowered.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
2024-04-05 23:18:15 UTC	175	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 54 75 59 41 62 37 46 37 5a 35 42 30 76 70 77 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 72 65 64 69 72 22 0d 0a 0d 0a 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 54 75 59 41 62 37 46 37 5a 35 42 30 76 70 77 42 2d 2d 0d 0a Data Ascii: ------WebKitFormBoundaryTuYAb7F7Z5B0vpwBContent-Disposition: form-data; name="redir"https://store.steampowered.com/account/------WebKitFormBoundaryTuYAb7F7Z5B0vpwB--
2024-04-05 23:18:15 UTC	879	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://store.steampowered.com Access-Control-Allow-Methods: POST, GET, HEAD, OPTIONS Access-Control-Allow-Credentials: true Access-Control-Max-Age: 604800 Access-Control-Expose-Headers: X-NotLoggedIn Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Length: 28 Date: Fri, 05 Apr 2024 23:18:15 GMT Connection: close Set-Cookie: bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1; Domain=.steampowered.com; Path=/; Expires=Sat, 06 Apr 2024 01:18:15 GMT; Max-Age=7200; Secure
2024-04-05 23:18:15 UTC	28	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 32 31 7d Data Ascii: {"success":false,"error":21}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	49932	23.47.27.74	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:15 UTC	861	OUT	GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p
2024-04-05 23:18:15 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Content-Type: text/html; charset=UTF-8 Content-Length: 147 Allow: POST Expires: Fri, 05 Apr 2024 23:18:15 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Apr 2024 23:18:15 GMT Connection: close
2024-04-05 23:18:15 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 54 68 69 73 20 41 50 49 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 61 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Method Not Allowed</title></head><body><h1>Method Not Allowed</h1>This API must be called with a HTTP POST request</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	49930	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:15 UTC	1611	OUT	POST /webvisor/95654225?wv-part=1&wv-check=15178&wv-type=0&wmode=0&wv-hit=442277962&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&rn=404172621&browser-info=we%3A1%3Aet%3A1712359094%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011814%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359094&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 12 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:15 UTC	12	OUT	Data Raw: 77 76 2d 64 61 74 61 3d 44 79 77 5f Data Ascii: wv-data=Dyw_
2024-04-05 23:18:16 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:16 GMT Expires: Fri, 05-Apr-2024 23:18:16 GMT Last-Modified: Fri, 05-Apr-2024 23:18:16 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	49931	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:15 UTC	2058	OUT	POST /watch/95654225/1?page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&hittoken=1712359078_61930c0d3eb79a647e801da4fb717f8c97495a88e192069e45ff99a19de36eb7&browser-info=nb%3A1%3Acl%3A1126%3Aar%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A1%3Als%3A1173339980762%3Ahid%3A825216580%3Az%3A120%3Ai%3A20240406011814%3Aet%3A1712359094%3Ac%3A1%3Arn%3A388961451%3Arqn%3A13%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2342%2C2342%2C0%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1712359074991%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359094&t=gdpr(14)clc(0-0-0)rqnt(2)eco(21037572)lt(62400)aw(0)rcm(0)cdl(na)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:16 UTC	757	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:16 GMT Expires: Fri, 05-Apr-2024 23:18:16 GMT Last-Modified: Fri, 05-Apr-2024 23:18:16 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	49933	23.61.62.148	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:16 UTC	744	OUT	POST /IAuthenticationService/BeginAuthSessionViaQR/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive Content-Length: 321 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryKuhPAHDpvR5dFsL9 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://store.steampowered.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:16 UTC	321	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 4b 75 68 50 41 48 44 70 76 52 35 64 46 73 4c 39 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 6e 70 75 74 5f 70 72 6f 74 6f 62 75 66 5f 65 6e 63 6f 64 65 64 22 0d 0a 0d 0a 47 6e 4d 4b 62 30 31 76 65 6d 6c 73 62 47 45 76 4e 53 34 77 49 43 68 58 61 57 35 6b 62 33 64 7a 49 45 35 55 49 44 45 77 4c 6a 41 37 49 46 64 70 62 6a 59 30 4f 79 42 34 4e 6a 51 70 49 45 46 77 63 47 78 6c 56 32 56 69 53 32 6c 30 4c 7a 55 7a 4e 79 34 7a 4e 69 41 6f 53 30 68 55 54 55 77 73 49 47 78 70 61 32 55 67 52 32 56 6a 61 32 38 70 49 45 4e 6f 63 6d 39 74 5a 53 38 78 4d 54 63 75 4d 43 34 77 4c 6a 41 67 55 32 46 6d 59 58 4a 70 4c 7a 55 7a Data Ascii: ------WebKitFormBoundaryKuhPAHDpvR5dFsL9Content-Disposition: form-data; name="input_protobuf_encoded"GnMKb01vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUz
2024-04-05 23:18:16 UTC	338	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 85 Access-Control-Allow-Origin: https://store.steampowered.com Vary: Origin Access-Control-Expose-Headers: X-eresult, X-error_message X-eresult: 1 Expires: Fri, 05 Apr 2024 23:18:16 GMT Date: Fri, 05 Apr 2024 23:18:16 GMT Connection: close
2024-04-05 23:18:16 UTC	85	IN	Data Raw: 08 9b f6 9d f2 9e c0 ab d9 c0 01 12 27 68 74 74 70 73 3a 2f 2f 73 2e 74 65 61 6d 2f 71 2f 31 2f 31 33 38 38 35 33 35 31 39 32 34 34 35 32 35 32 32 37 37 39 1a 10 c9 f8 1a 9e 90 db 78 30 25 59 fa 78 71 64 8e cd 25 00 00 a0 40 2a 02 08 04 2a 02 08 03 30 01 Data Ascii: 'https://s.team/q/1/13885351924452522779x0%Yxqd%@**0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	49934	23.47.27.74	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:16 UTC	1138	OUT	GET /jwt/ajaxrefresh HTTP/1.1 Host: login.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
2024-04-05 23:18:16 UTC	230	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/json; charset=utf-8 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Content-Length: 27 Date: Fri, 05 Apr 2024 23:18:16 GMT Connection: close
2024-04-05 23:18:16 UTC	27	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 38 7d Data Ascii: {"success":false,"error":8}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	49936	23.47.27.74	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:16 UTC	1168	OUT	GET /IAuthenticationService/BeginAuthSessionViaQR/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
2024-04-05 23:18:17 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Content-Type: text/html; charset=UTF-8 Content-Length: 147 Allow: POST Expires: Fri, 05 Apr 2024 23:18:16 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Apr 2024 23:18:16 GMT Connection: close
2024-04-05 23:18:17 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 54 68 69 73 20 41 50 49 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 61 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Method Not Allowed</title></head><body><h1>Method Not Allowed</h1>This API must be called with a HTTP POST request</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	49935	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:16 UTC	1438	OUT	GET /webvisor/95654225?wv-part=1&wv-check=15178&wv-type=0&wmode=0&wv-hit=442277962&page-url=https%3A%2F%2Fsteamfiller.ru%2Ftry%2F&rn=404172621&browser-info=we%3A1%3Aet%3A1712359094%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011814%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359094&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:17 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:17 GMT Expires: Fri, 05-Apr-2024 23:18:17 GMT Last-Modified: Fri, 05-Apr-2024 23:18:17 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	49917	85.193.90.99	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:17 UTC	766	OUT	GET /pages/faq/ HTTP/1.1 Host: steamfiller.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=r052e61nuferdbg7tfc3p1ms4l; _ym_uid=1712359037123674141; _ym_d=1712359037; _ym_isad=2; _ym_visorc=w
2024-04-05 23:18:18 UTC	298	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Fri, 05 Apr 2024 23:18:18 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding
2024-04-05 23:18:18 UTC	16086	IN	Data Raw: 31 65 65 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c Data Ascii: 1ee8<!DOCTYPE html><html> <head itemscope="" itemtype="http://schema.org/"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width,initial
2024-04-05 23:18:18 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 d0 ad d1 82 d0 b0 20 d1 83 d1 81 d0 bb d1 83 d0 b3 d0 b0 20 d0 bf d1 80 d0 b5 d0 b4 d0 bd d0 b0 d0 b7 d0 bd d0 b0 d1 87 d0 b5 d0 bd d0 b0 20 d0 b4 d0 bb d1 8f 20 d0 b0 d0 ba d0 ba d0 b0 d1 83 d0 bd d1 82 d0 be d0 b2 20 53 74 65 61 6d 2c 20 d0 b7 d0 b0 d1 80 d0 b5 d0 b3 d0 b8 d1 81 d1 82 d1 80 d0 b8 d1 80 d0 be d0 b2 d0 b0 d0 bd d0 bd d1 8b d1 85 20 d0 b2 20 d0 a0 d0 be d1 81 d1 81 d0 b8 d0 b8 2c 20 d0 a2 d1 83 d1 80 d1 86 d0 b8 d0 b8 2c 20 d0 9a d0 b0 d0 b7 d0 b0 d1 85 d1 81 d1 82 d0 b0 d0 bd d0 b5 2c 20 d0 90 d1 80 d0 b3 d0 b5 d0 bd d1 82 d0 b8 d0 bd d0 b5 20 d0 b8 20 d0 bb d1 8e d0 b1 d0 be d0 b9 20 d0 b4 d0 be d0 bb d0 bb d0 b0 d1 80 d0 be d0 b2 d1 8b d0 b9 20 d0 b0 d0 ba d0 ba d0 b0 d1 83 d0 bd d1 82 2c 20 d0 b8 20 Data Ascii: Steam, , , , ,
2024-04-05 23:18:19 UTC	16384	IN	Data Raw: 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d0 b8 20 d0 bf d1 80 d0 b5 d0 b4 d0 be d1 81 d1 82 d0 b0 d0 b2 d0 bb d0 b5 d0 bd d0 bd d1 8b d1 85 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 2e 20 d0 ad d1 82 d0 be 20 d0 bc d0 be d0 b6 d0 b5 d1 82 20 d0 b2 d0 ba d0 bb d1 8e d1 87 d0 b0 d1 82 d1 8c 20 d0 bc d0 b5 d0 b6 d0 b4 d1 83 d0 bd d0 b0 d1 80 d0 be d0 b4 d0 bd d1 8b d0 b9 20 d0 be d0 b1 d0 bc d0 b5 d0 bd 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d0 b5 d0 b9 2e 20 d0 a1 d0 b2 d0 be d0 b4 d0 bd d1 8b d0 b5 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d0 b5 2c 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd d0 bd d1 8b d0 b5 20 d0 b2 20 d1 85 d0 be d0 b4 d0 b5 20 d0 bf d1 80 d0 be d0 b2 d0 b5 d1 80 d0 ba d0 b8 20 d0 b1 d0 b5 d0 b7 d0 be d0 bf d0 b0 d1 81 d0 bd d0 be d1 81 Data Ascii: . . ,
2024-04-05 23:18:19 UTC	16384	IN	Data Raw: d0 bf d0 be d1 81 d0 bb d0 b5 d0 b4 d0 bd d0 b5 d0 b3 d0 be 20 d0 be d0 b1 d0 bd d0 be d0 b2 d0 bb d0 b5 d0 bd d0 b8 d1 8f 3a 20 37 2e 30 36 2e 32 30 32 32 20 3c 62 72 3e 3c 62 72 3e 0a 20 20 20 20 20 20 20 20 20 20 0d 0a 35 37 32 36 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 20 d0 b8 20 d0 bb d0 b8 d1 86 d0 be 2c 20 d0 bf d1 80 d0 b8 d0 bd d1 8f d0 b2 d1 88 d0 b5 d0 b5 20 d0 be d1 84 d0 b5 d1 80 d1 82 d1 83 2c 20 d0 be d0 bf d1 83 d0 b1 d0 bb d0 b8 d0 ba d0 be d0 b2 d0 b0 d0 bd d0 bd d1 83 d1 8e 20 d0 bd d0 b0 20 d0 bf d0 be d1 81 d1 82 d0 be d1 8f d0 bd d0 bd d0 be d0 bc 20 d0 b0 d0 b4 d1 80 d0 b5 d1 81 d0 b5 20 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 Data Ascii: : 7.06.2022 <br><br> 5726 https://steamfiller.ru/ , , https://steamfiller
2024-04-05 23:18:19 UTC	6013	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 d0 92 d0 be 20 d0 b2 d1 81 d1 91 d0 bc 2c 20 d1 87 d1 82 d0 be 20 d0 bd d0 b5 20 d0 be d1 85 d0 b2 d0 b0 d1 87 d0 b5 d0 bd d0 be 20 d0 a1 d0 be d0 b3 d0 bb d0 b0 d1 88 d0 b5 d0 bd d0 b8 d0 b5 d0 bc 2c 20 d0 a1 d1 82 d0 be d1 80 d0 be d0 bd d1 8b 20 d1 80 d1 83 d0 ba d0 be d0 b2 d0 be d0 b4 d1 81 d1 82 d0 b2 d1 83 d1 8e d1 82 d1 81 d1 8f 20 d0 b7 d0 b0 d0 ba d0 be d0 bd d0 be d0 b4 d0 b0 d1 82 d0 b5 d0 bb d1 8c d1 81 d1 82 d0 b2 d0 be d0 bc 20 d0 ad d1 81 d1 82 d0 be d0 bd d0 b8 d0 b8 2c 20 d0 bd d0 b5 20 d0 bf d1 80 d0 b8 d0 bc d0 b5 d0 bd d1 8f d1 8f 20 d0 ba d0 be d0 bb d0 bb d0 b8 d0 b7 d0 b8 d0 be d0 bd d0 bd d1 8b d0 b5 20 d0 bd d0 be d1 80 d0 bc d1 8b 2e 20 3c 62 72 3e 0a 20 20 Data Ascii: , , , . <br>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	49939	23.45.135.116	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:18 UTC	673	OUT	GET /q/1/13885351924452522779 HTTP/1.1 Host: s.team Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:18 UTC	303	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Content-Type: text/html Content-Length: 138 Location: https://store.steampowered.com/about/qrlogin/1/13885351924452522779 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload Date: Fri, 05 Apr 2024 23:18:18 GMT Connection: close
2024-04-05 23:18:18 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	49940	23.46.213.117	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:18 UTC	1620	OUT	GET /about/qrlogin/1/13885351924452522779 HTTP/1.1 Host: store.steampowered.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0; ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
2024-04-05 23:18:19 UTC	1478	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://store.cloudflare.steamstatic.com/ https://store.cloudflare.steamstatic.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' http://store.steampowered.com https://store.steampowered.com http://127.0.0.1:27060 ws://127.0.0.1:27060 https://community.cloudflare.steamstatic.com/ https://steamcommunity.com/ https://steamcommunity.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://shared.cloudflare.steamstatic.com/ https://checkout.steampowered.com/; frame-src 'self' steam: http://www.youtube.com https://www.youtube.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://steamcommunity.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'none'; X-Frame-Options: DENY Strict-Transport-Security: max-age=10368000 Date: Fri, 05 Apr 2024 23:18:19 GMT Content-Length: 45485 Connection: close
2024-04-05 23:18:19 UTC	14906	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0d 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0d 0a 09 09 3c Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><
2024-04-05 23:18:19 UTC	9670	IN	Data Raw: 6c 70 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 65 6e 2f 22 3e 0d 0a 09 09 53 55 50 50 4f 52 54 09 3c 2f 61 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 09 09 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 09 09 09 24 28 27 23 67 6c 6f 62 61 6c 5f 68 65 61 64 65 72 20 2e 73 75 70 65 72 6e 61 76 27 29 2e 76 5f 74 6f 6f 6c 74 69 70 28 7b 27 6c 6f 63 61 74 69 6f 6e 27 3a 27 62 6f 74 74 6f 6d 27 2c 20 27 64 65 73 74 72 6f 79 57 68 65 6e 44 6f 6e 65 27 3a 20 66 61 6c 73 65 2c 20 27 74 6f 6f 6c 74 69 70 43 6c 61 73 73 27 3a 20 27 73 75 70 65 72 6e 61 76 5f 63 6f 6e 74 65 6e 74 27 2c 20 27 6f 66 66 73 65 74 59 27 3a 2d 36 2c 20 27 6f 66 66 Data Ascii: lp.steampowered.com/en/">SUPPORT</a></div><script type="text/javascript">jQuery(function($) {$('#global_header .supernav').v_tooltip({'location':'bottom', 'destroyWhenDone': false, 'tooltipClass': 'supernav_content', 'offsetY':-6, 'off
2024-04-05 23:18:19 UTC	16384	IN	Data Raw: 09 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 0d 0a 09 09 09 09 0d 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 62 6f 75 74 5f 69 6e 73 74 61 6c 6c 5f 77 72 61 70 70 65 72 22 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 62 6f 75 74 5f 69 6e 73 74 61 6c 6c 20 77 69 6e 20 22 3e 0d 0a 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 63 6c 69 65 6e 74 2f 69 6e 73 74 61 6c 6c 65 72 2f 53 74 65 61 6d 53 65 74 75 70 2e 65 78 65 22 20 63 6c 61 73 73 3d 22 61 62 6f 75 74 5f 69 6e 73 74 61 6c 6c 5f 73 74 65 61 6d 5f 6c 69 6e 6b 22 3e 49 6e 73 74 61 6c 6c 20 53 74 65 61 6d 3c 2f 61 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 Data Ascii: </div><div class="about_install_wrapper"><div class="about_install win "><a href="https://cdn.cloudflare.steamstatic.com/client/installer/SteamSetup.exe" class="about_install_steam_link">Install Steam</a></div>
2024-04-05 23:18:19 UTC	4525	IN	Data Raw: 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6c 61 74 66 6f 72 6d 5f 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 63 6c 69 65 6e 74 2f 69 6e 73 74 61 6c 6c 65 72 2f 73 74 65 61 6d 2e 64 65 62 22 3e 0d 0a 09 09 09 09 09 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 6f 72 65 2f 61 62 6f 75 74 2f 69 63 6f 6e 2d 73 74 65 61 6d 6f 73 2e 73 76 67 22 3e 0d 0a 09 09 09 09 3c 2f 61 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 70 6c 61 74 66 6f 72 6d 5f 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f Data Ascii: <a class="platform_icon" href="https://cdn.cloudflare.steamstatic.com/client/installer/steam.deb"><img src="https://cdn.cloudflare.steamstatic.com/store/about/icon-steamos.svg"></a><a class="platform_icon" href="https:/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	49925	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:19 UTC	620	OUT	GET /public/css/styles_about.css?v=KuY6YbIF4rkW&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:19 UTC	437	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:19 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Sat, 11 May 2024 04:13:57 GMT ETag: W/"KuY6YbIF4rkW" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3307206 Server: cloudflare CF-RAY: 86fd41b3aee6dab5-MIA
2024-04-05 23:18:19 UTC	932	IN	Data Raw: 37 64 64 65 0d 0a 0d 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 0d 0a 2f 2a 66 69 78 20 67 6c 6f 62 61 6c 20 68 65 61 64 65 72 20 7a 2d 69 6e 64 65 78 20 77 69 74 68 20 76 69 64 65 6f 20 69 73 73 75 65 20 2a 2f 0d 0a 23 67 6c 6f 62 61 6c 5f 68 65 61 64 65 72 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 39 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 62 6f 64 79 2e 76 36 20 23 66 6f 6f 74 65 72 5f 73 70 61 63 65 72 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 32 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 76 36 2e 63 68 69 6e 61 61 62 6f 75 74 20 23 66 6f 6f 74 65 72 5f 73 70 61 63 65 72 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 32 36 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 2e 72 65 Data Ascii: 7dde/* CSS Document //fix global header z-index with video issue */#global_header {position: relative;z-index: 9;}body.v6 #footer_spacer {height: 210px;}body.v6.chinaabout #footer_spacer {height: 265px;}body .re
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 69 76 65 5f 70 61 67 65 5f 74 65 6d 70 6c 61 74 65 5f 63 6f 6e 74 65 6e 74 20 68 32 2c 20 62 6f 64 79 2e 76 36 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 74 65 6d 70 6c 61 74 65 5f 63 6f 6e 74 65 6e 74 20 68 31 20 7b 0d 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 35 70 78 3b 0d 0a 09 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0d 0a 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 37 30 70 78 29 20 7b 0d 0a 09 62 6f 64 79 2e 76 36 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 74 65 6d 70 6c 61 74 65 5f 63 6f 6e 74 65 6e 74 20 68 32 2c 20 62 6f 64 79 2e 76 36 20 2e 72 65 73 70 6f 6e Data Ascii: ive_page_template_content h2, body.v6 .responsive_page_template_content h1 {font-size: 35px;margin-bottom: 10px;line-height: 1;}}@media only screen and (min-width: 970px) {body.v6 .responsive_page_template_content h2, body.v6 .respon
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 20 37 36 38 70 78 29 20 7b 0d 0a 09 2e 61 62 6f 75 74 5f 73 75 62 74 69 74 6c 65 20 7b 0d 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 09 7d 0d 0a 09 2e 63 74 61 5f 74 65 78 74 2c 20 2e 66 65 61 74 75 72 65 5f 74 65 78 74 20 7b 0d 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 37 30 70 78 29 20 7b 0d 0a 09 2e 61 62 6f 75 74 5f 73 75 62 74 69 74 6c 65 20 7b 0d 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0d 0a 09 7d 0d 0a 09 2e 63 74 61 5f 74 65 78 74 20 7b 0d 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 Data Ascii: 768px) {.about_subtitle {font-size: 18px;}.cta_text, .feature_text {font-size: 15px;}}@media only screen and (min-width: 970px) {.about_subtitle {font-size: 20px;}.cta_text {font-size: 18px;}}@media only sc
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 63 69 72 63 6c 65 20 63 6c 6f 73 65 73 74 2d 73 69 64 65 2c 20 72 67 62 61 28 30 2c 20 31 31 31 2c 20 32 35 35 2c 20 30 2e 31 33 29 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 29 3b 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 30 30 25 3b 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 37 30 70 78 29 20 7b 0d 0a 09 23 61 62 6f 75 74 5f Data Ascii: background-image: radial-gradient(circle closest-side, rgba(0, 111, 255, 0.13), transparent);background-size: 100%;background-repeat: no-repeat;background-position: center center;}}@media only screen and (min-width: 970px) {#about_
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 30 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 39 63 37 66 66 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 62 6f 75 74 5f 63 68 72 6f 6d 65 62 6f 6f 6b 5f 62 65 74 61 5f 6c 69 6e 6b 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 39 63 37 66 66 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 74 65 61 6d 5f 6c 6f 67 6f 20 7b 0d 0a 09 77 69 64 74 68 3a 20 35 30 76 77 3b 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 09 2e 73 74 65 61 6d 5f 6c 6f 67 6f 20 7b 0d 0a 09 09 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 Data Ascii: 0px;color: #79c7ff;}.about_chromebook_beta_link {text-decoration: underline;color: #79c7ff;}.steam_logo {width: 50vw;}@media only screen and (min-width: 768px) {.steam_logo {width: 70%;}}@media only screen and (mi
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 76 77 3b 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 09 2e 6f 6e 6c 69 6e 65 5f 73 74 61 74 73 20 7b 0d 0a 09 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 38 70 78 3b 0d 0a 09 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 35 70 78 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 2e 6f 6e 6c 69 6e 65 5f 73 74 61 74 73 3a 61 66 74 65 72 20 7b 0d 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 2e 6f 6e 6c 69 6e 65 5f 73 74 61 74 20 7b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 Data Ascii: margin-top: 5vw;}@media only screen and (min-width: 768px) {.online_stats {margin-top: 18px;margin-bottom: 25px;}}.online_stats:after {content: "";display: table;clear: both;}.online_stat {font-family: "Motiv
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 6c 5f 77 72 61 70 70 65 72 20 7b 0d 0a 09 09 77 69 64 74 68 3a 20 38 30 25 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 37 30 70 78 29 20 7b 0d 0a 09 2e 61 62 6f 75 74 5f 69 6e 73 74 61 6c 6c 5f 77 72 61 70 70 65 72 20 7b 0d 0a 09 09 77 69 64 74 68 3a 20 32 36 30 70 78 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 2e 61 62 6f 75 74 5f 69 6e 73 74 61 6c 6c 5f 73 74 65 61 6d 5f 6c 69 6e 6b 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0d 0a 09 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2d 20 37 35 70 78 29 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 35 30 70 Data Ascii: l_wrapper {width: 80%;}}@media only screen and (min-width: 970px) {.about_install_wrapper {width: 260px;}}.about_install_steam_link {display: block;text-transform: uppercase;width: calc(100% - 75px);padding: 15px 50p
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 6c 65 29 20 2e 61 62 6f 75 74 5f 69 6e 73 74 61 6c 6c 5f 73 74 65 61 6d 5f 6c 69 6e 6b 3a 61 66 74 65 72 20 7b 0d 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 74 6f 70 20 72 69 67 68 74 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 61 75 74 6f 20 31 30 30 25 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 09 77 69 64 74 68 3a 20 31 38 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 72 69 67 68 74 3a 20 32 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 62 6f 75 74 5f 69 6e 73 74 61 6c 6c 2e 77 69 6e 3a 6e 6f 74 28 2e 6d 6f 62 69 6c 65 29 20 Data Ascii: le) .about_install_steam_link:after {content: "";background-position: top right;background-size: auto 100%;background-repeat: no-repeat;width: 18px;height: 18px;position: absolute;right: 25px;}.about_install.win:not(.mobile)
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 3b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 30 2e 38 30 3b 0d 0a 09 09 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 65 6e 64 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 2e 69 6e 73 74 61 6c 6c 65 72 5f 6c 69 73 74 20 2e 61 76 61 69 6c 61 62 6c 65 5f 70 6c 61 74 66 6f 72 6d 73 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 0d 0a 2e 69 6e 73 74 61 6c 6c 65 72 5f 6c 69 73 74 20 2e 70 6c 61 74 66 6f 72 6d 5f 69 63 6f 6e 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 77 69 64 74 68 3a 20 34 76 77 3b 0d 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 76 77 3b 0d 0a 7d 0d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e Data Ascii: ;opacity: 0.80;justify-content: end;}}.installer_list .available_platforms {display: inline-block;}.installer_list .platform_icon {display: inline-block;width: 4vw;height: auto;margin-left: 3vw;}@media only screen
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 62 6f 75 74 5f 67 61 6d 65 73 5f 63 74 61 5f 61 72 65 61 20 2e 61 62 6f 75 74 5f 67 61 6d 65 73 5f 63 74 61 5f 62 67 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 65 6c 6c 69 70 73 65 20 66 61 72 74 68 65 73 74 2d 73 69 64 65 2c 20 72 67 62 61 28 30 2c 20 31 31 31 2c 20 32 35 35 2c 20 30 2e 31 35 29 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 29 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 30 30 25 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 Data Ascii: bout_games_cta_area .about_games_cta_bg {background-image: radial-gradient(ellipse farthest-side, rgba(0, 111, 255, 0.15), transparent);background-size: 100%;background-repeat: no-repeat;background-position: center center;position: absolute

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	49943	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:19 UTC	626	OUT	GET /public/css/promo/newstore2016.css?v=zveyQLrdu9JU&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:19 UTC	437	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:19 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Mon, 27 May 2024 03:42:52 GMT ETag: W/"zveyQLrdu9JU" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3307206 Server: cloudflare CF-RAY: 86fd41b64b683352-MIA
2024-04-05 23:18:19 UTC	932	IN	Data Raw: 31 32 38 31 0d 0a 0d 0a 62 6f 64 79 2e 76 36 2e 70 72 6f 6d 6f 61 6e 6e 6f 75 6e 63 65 20 7b 0d 0a 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 76 36 2e 70 72 6f 6d 6f 61 6e 6e 6f 75 6e 63 65 20 2e 70 61 67 65 5f 63 6f 6e 74 65 6e 74 5f 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 70 2c 20 72 67 62 61 28 20 30 2c 20 30 2c 20 30 2c 20 31 20 29 20 35 35 35 70 78 2c 20 72 67 62 61 28 20 32 37 2c 20 34 30 2c 20 35 36 2c 20 31 20 29 20 31 33 31 37 70 78 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 20 62 6f 74 74 6f 6d 2c Data Ascii: 1281body.v6.promoannounce {}body.v6.promoannounce .page_content_container {background-image: none;background: -webkit-linear-gradient( top, rgba( 0, 0, 0, 1 ) 555px, rgba( 27, 40, 56, 1 ) 1317px);background: linear-gradient( to bottom,
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 61 6c 6c 6f 75 74 73 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 37 32 33 70 78 3b 0d 0a 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 73 74 6f 72 65 2f 70 72 6f 6d 6f 2f 6e 65 77 73 74 6f 72 65 32 30 31 36 2f 68 6f 6d 65 70 61 67 65 5f 6c 6f 6e 67 5f 30 31 2e 6a 70 67 3f 76 3d 31 29 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: allouts { position: relative; height: 3723px; background: url(https://cdn.cloudflare.steamstatic.com/store/promo/newstore2016/homepage_long_01.jpg?v=1); background-repeat: no-repeat; background-position: center; background-
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 20 77 69 64 74 68 3a 20 33 31 30 70 78 3b 0d 0a 7d 0d 0a 23 63 61 6c 6c 6f 75 74 5f 62 6c 75 65 5f 62 75 74 74 6f 6e 73 20 7b 0d 0a 09 74 6f 70 3a 20 31 34 38 33 70 78 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 35 30 70 78 3b 0d 0a 7d 0d 0a 23 63 61 6c 6c 6f 75 74 5f 74 6f 70 5f 6e 65 77 5f 72 65 6c 65 61 73 65 73 20 7b 0d 0a 20 20 20 20 74 6f 70 3a 20 31 35 32 33 70 78 3b 0d 0a 20 20 20 20 72 69 67 68 74 3a 20 30 70 78 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 33 35 70 78 3b 0d 0a 7d 0d 0a 23 63 61 6c 6c 6f 75 74 5f 63 75 72 61 74 6f 72 73 20 7b 0d 0a 09 74 6f 70 3a 20 31 36 37 39 70 78 3b 0d 0a 09 72 69 67 68 74 3a 20 30 70 78 3b 0d 0a 20 20 20 20 20 77 69 64 74 68 3a 20 32 33 35 70 78 3b 0d 0a 7d 0d 0a 23 63 61 6c 6c 6f 75 74 5f 79 6f 75 72 5f 75 Data Ascii: width: 310px;}#callout_blue_buttons {top: 1483px; width: 150px;}#callout_top_new_releases { top: 1523px; right: 0px; width: 235px;}#callout_curators {top: 1679px;right: 0px; width: 235px;}#callout_your_u
2024-04-05 23:18:19 UTC	1075	IN	Data Raw: 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 30 2c 30 2c 30 2c 31 29 20 35 25 2c 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 20 35 30 25 29 3b 0a 7d 0d 0a 0d 0a 23 72 65 63 65 6e 74 5f 75 70 64 61 74 65 73 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 32 35 25 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 73 6f 6c 69 64 3b 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f Data Ascii: background: linear-gradient( to bottom, rgba(0,0,0,1) 5%, rgba(0,0,0,0) 50%);}#recent_updates:before { left: 25%; border: transparent solid; content: " "; height: 0; width: 0; position: absolute; pointer-events: no
2024-04-05 23:18:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	49942	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:19 UTC	619	OUT	GET /public/css/slick/slick.css?v=ZSVHTEnT3WNW&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:19 UTC	437	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:19 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Sun, 26 May 2024 12:38:08 GMT ETag: W/"ZSVHTEnT3WNW" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3302989 Server: cloudflare CF-RAY: 86fd41b63b12db29-MIA
2024-04-05 23:18:19 UTC	932	IN	Data Raw: 37 33 30 0d 0a 0d 0a 2f 2a 20 53 6c 69 64 65 72 20 2a 2f 0d 0a 2e 73 6c 69 63 6b 2d 73 6c 69 64 65 72 0d 0a 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0d 0a Data Ascii: 730/* Slider */.slick-slider{ position: relative; display: block; -moz-box-sizing: border-box; box-sizing: border-box; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none;
2024-04-05 23:18:19 UTC	915	IN	Data Raw: 6c 61 74 65 33 64 28 30 2c 20 30 2c 20 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 2c 20 30 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6c 69 63 6b 2d 74 72 61 63 6b 0d 0a 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 7d 0d 0a 2e 73 6c 69 63 6b 2d 74 72 61 63 6b 3a 62 65 66 6f 72 65 2c 0d 0a 2e 73 6c 69 63 6b 2d 74 72 61 63 6b 3a 61 66 74 65 72 0d 0a 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0d 0a 7d 0d 0a 2e 73 Data Ascii: late3d(0, 0, 0); transform: translate3d(0, 0, 0);}.slick-track{ position: relative; top: 0; left: 0; display: block;}.slick-track:before,.slick-track:after{ display: table; content: '';}.s
2024-04-05 23:18:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	49945	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:19 UTC	604	OUT	GET /public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:19 UTC	443	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:19 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Mon, 30 Sep 2024 18:58:50 GMT ETag: W/".a38iP7Khdmyy" Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 92529 Server: cloudflare CF-RAY: 86fd41b6590d67b7-MIA
2024-04-05 23:18:19 UTC	926	IN	Data Raw: 37 64 65 34 0d 0a 0d 0a 2f 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 4a 61 76 61 53 63 72 69 70 74 20 66 72 61 6d 65 77 6f 72 6b 2c 20 76 65 72 73 69 6f 6e 20 31 2e 37 0d 0a 20 2a 20 20 28 63 29 20 32 30 30 35 2d 32 30 31 30 20 53 61 6d 20 53 74 65 70 68 65 6e 73 6f 6e 0d 0a 20 2a 0d 0a 20 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 69 73 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 20 46 6f 72 20 64 65 74 61 69 6c 73 2c 20 73 65 65 20 74 68 65 20 50 72 6f 74 6f 74 79 70 65 20 77 65 62 20 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 70 72 6f 74 6f 74 79 70 65 6a 73 2e 6f 72 67 2f 0d 0a 20 2a 0d 0a 20 2a Data Ascii: 7de4/* Prototype JavaScript framework, version 1.7 * (c) 2005-2010 Sam Stephenson * * Prototype is freely distributable under the terms of an MIT-style license. * For details, see the Prototype web site: http://www.prototypejs.org/ * *
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 0d 0a 0d 0a 20 20 20 20 45 6c 65 6d 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 3a 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 77 69 6e 64 6f 77 2e 45 6c 65 6d 65 6e 74 20 7c 7c 20 77 69 6e 64 6f 77 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 3b 0d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 21 21 28 63 6f 6e 73 74 72 75 63 74 6f 72 20 26 26 20 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 29 3b 0d 0a 20 20 20 20 7d 29 28 29 2c 0d 0a 20 20 20 20 53 70 65 63 69 66 69 63 45 6c 65 6d 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 3a 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 48 54 4d 4c 44 69 76 45 6c 65 6d 65 6e Data Ascii: ElementExtensions: (function() { var constructor = window.Element \|\| window.HTMLElement; return !!(constructor && constructor.prototype); })(), SpecificElementExtensions: (function() { if (typeof window.HTMLDivElemen
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 7b 20 74 6f 53 74 72 69 6e 67 3a 20 31 20 7d 29 20 7b 0d 0a 20 20 20 20 20 20 69 66 20 28 70 20 3d 3d 3d 20 27 74 6f 53 74 72 69 6e 67 27 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 7d 29 28 29 3b 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 75 62 63 6c 61 73 73 28 29 20 7b 7d 3b 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 70 61 72 65 6e 74 20 3d 20 6e 75 6c 6c 2c 20 70 72 6f 70 65 72 74 69 65 73 20 3d 20 24 41 28 61 72 67 75 6d 65 6e 74 73 29 3b 0d 0a 20 20 20 20 69 66 20 28 4f 62 6a 65 63 74 2e 69 73 46 75 6e 63 74 69 6f 6e 28 70 72 6f 70 65 72 74 69 65 73 5b 30 5d 29 29 0d 0a 20 20 20 20 20 20 70 61 72 65 6e Data Ascii: { toString: 1 }) { if (p === 'toString') return false; } return true; })(); function subclass() {}; function create() { var parent = null, properties = $A(arguments); if (Object.isFunction(properties[0])) paren
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 20 76 61 6c 75 65 20 3d 20 73 6f 75 72 63 65 5b 70 72 6f 70 65 72 74 79 5d 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 61 6e 63 65 73 74 6f 72 20 26 26 20 4f 62 6a 65 63 74 2e 69 73 46 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 2e 61 72 67 75 6d 65 6e 74 4e 61 6d 65 73 28 29 5b 30 5d 20 3d 3d 20 22 24 73 75 70 65 72 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 65 74 68 6f 64 20 3d 20 76 61 6c 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 75 65 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 6d 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 61 6e 63 65 73 74 6f 72 5b 6d 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 Data Ascii: value = source[property]; if (ancestor && Object.isFunction(value) && value.argumentNames()[0] == "$super") { var method = value; value = (function(m) { return function() { return ancestor[m].apply(this, arg
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 5f 54 59 50 45 3b 0d 0a 20 20 20 20 20 20 63 61 73 65 20 28 76 6f 69 64 20 30 29 3a 20 72 65 74 75 72 6e 20 55 4e 44 45 46 49 4e 45 44 5f 54 59 50 45 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 76 61 72 20 74 79 70 65 20 3d 20 74 79 70 65 6f 66 20 6f 3b 0d 0a 20 20 20 20 73 77 69 74 63 68 28 74 79 70 65 29 20 7b 0d 0a 20 20 20 20 20 20 63 61 73 65 20 27 62 6f 6f 6c 65 61 6e 27 3a 20 72 65 74 75 72 6e 20 42 4f 4f 4c 45 41 4e 5f 54 59 50 45 3b 0d 0a 20 20 20 20 20 20 63 61 73 65 20 27 6e 75 6d 62 65 72 27 3a 20 20 72 65 74 75 72 6e 20 4e 55 4d 42 45 52 5f 54 59 50 45 3b 0d 0a 20 20 20 20 20 20 63 61 73 65 20 27 73 74 72 69 6e 67 27 3a 20 20 72 65 74 75 72 6e 20 53 54 52 49 4e 47 5f 54 59 50 45 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 4f Data Ascii: _TYPE; case (void 0): return UNDEFINED_TYPE; } var type = typeof o; switch(type) { case 'boolean': return BOOLEAN_TYPE; case 'number': return NUMBER_TYPE; case 'string': return STRING_TYPE; } return O
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 6c 75 65 3b 0d 0a 20 20 20 20 73 77 69 74 63 68 20 28 74 79 70 65 29 20 7b 0d 0a 20 20 20 20 20 20 63 61 73 65 20 27 73 74 72 69 6e 67 27 3a 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 76 61 6c 75 65 2e 69 6e 73 70 65 63 74 28 74 72 75 65 29 3b 0d 0a 20 20 20 20 20 20 63 61 73 65 20 27 6e 75 6d 62 65 72 27 3a 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 76 61 6c 75 65 29 20 3f 20 53 74 72 69 6e 67 28 76 61 6c 75 65 29 20 3a 20 27 6e 75 6c 6c 27 3b 0d 0a 20 20 20 20 20 20 63 61 73 65 20 27 6f 62 6a 65 63 74 27 3a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 2c 20 6c 65 6e 67 74 68 20 3d 20 73 74 61 63 6b 2e 6c 65 6e 67 74 68 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b Data Ascii: lue; switch (type) { case 'string': return value.inspect(true); case 'number': return isFinite(value) ? String(value) : 'null'; case 'object': for (var i = 0, length = stack.length; i < length; i++) {
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 72 69 6e 67 2e 69 6e 74 65 72 70 72 65 74 28 6f 62 6a 65 63 74 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6b 65 79 73 28 6f 62 6a 65 63 74 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 54 79 70 65 28 6f 62 6a 65 63 74 29 20 21 3d 3d 20 4f 42 4a 45 43 54 5f 54 59 50 45 29 20 7b 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 29 3b 20 7d 0d 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 73 20 3d 20 5b 5d 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 72 6f 70 65 72 74 79 20 69 6e 20 6f 62 6a 65 63 74 29 20 7b 0d 0a 20 20 20 20 20 20 69 66 20 28 6f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 70 72 6f 70 65 72 74 79 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 73 75 6c 74 73 2e 70 75 73 68 28 70 72 6f 70 Data Ascii: ring.interpret(object); } function keys(object) { if (Type(object) !== OBJECT_TYPE) { throw new TypeError(); } var results = []; for (var property in object) { if (object.hasOwnProperty(property)) { results.push(prop
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 20 6f 62 6a 65 63 74 20 3d 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 65 78 74 65 6e 64 28 4f 62 6a 65 63 74 2c 20 7b 0d 0a 20 20 20 20 65 78 74 65 6e 64 3a 20 20 20 20 20 20 20 20 65 78 74 65 6e 64 2c 0d 0a 20 20 20 20 69 6e 73 70 65 63 74 3a 20 20 20 20 20 20 20 69 6e 73 70 65 63 74 2c 0d 0a 20 20 20 20 74 6f 4a 53 4f 4e 3a 20 20 20 20 20 20 20 20 4e 41 54 49 56 45 5f 4a 53 4f 4e 5f 53 54 52 49 4e 47 49 46 59 5f 53 55 50 50 4f 52 54 20 3f 20 73 74 72 69 6e 67 69 66 79 20 3a 20 74 6f 4a 53 4f 4e 2c 0d 0a 20 20 20 20 74 6f 51 75 65 72 79 53 74 72 69 6e 67 3a 20 74 6f 51 75 65 72 79 53 74 72 69 6e 67 2c 0d 0a 20 20 20 20 74 6f 48 54 4d 4c 3a 20 20 20 20 20 20 20 20 74 6f 48 54 4d 4c 2c 0d 0a 20 20 20 20 6b 65 79 73 3a 20 Data Ascii: object === "undefined"; } extend(Object, { extend: extend, inspect: inspect, toJSON: NATIVE_JSON_STRINGIFY_SUPPORT ? stringify : toJSON, toQueryString: toQueryString, toHTML: toHTML, keys:
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 65 74 68 6f 64 20 3d 20 74 68 69 73 2c 20 61 72 67 73 20 3d 20 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 20 31 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 61 20 3d 20 6d 65 72 67 65 28 61 72 67 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 5f 5f 6d 65 74 68 6f 64 2e 61 70 70 6c 79 28 63 6f 6e 74 65 78 74 2c 20 61 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 62 69 6e 64 41 73 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 63 6f 6e 74 65 78 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 5f 5f 6d 65 74 68 6f 64 20 3d 20 74 68 69 73 2c 20 61 72 67 73 20 3d 20 73 6c 69 63 65 2e 63 61 6c 6c 28 61 Data Ascii: ethod = this, args = slice.call(arguments, 1); return function() { var a = merge(args, arguments); return __method.apply(context, a); } } function bindAsEventListener(context) { var __method = this, args = slice.call(a
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 73 29 3b 0d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 5f 5f 6d 65 74 68 6f 64 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 20 61 29 3b 0d 0a 20 20 20 20 7d 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 72 65 74 75 72 6e 20 7b 0d 0a 20 20 20 20 61 72 67 75 6d 65 6e 74 4e 61 6d 65 73 3a 20 20 20 20 20 20 20 61 72 67 75 6d 65 6e 74 4e 61 6d 65 73 2c 0d 0a 20 20 20 20 62 69 6e 64 3a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 69 6e 64 2c 0d 0a 20 20 20 20 62 69 6e 64 41 73 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 20 62 69 6e 64 41 73 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 0d 0a 20 20 20 20 63 75 72 72 79 3a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 75 72 72 79 2c 0d 0a 20 20 20 20 64 65 6c 61 79 3a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 6c 61 79 2c Data Ascii: s); return __method.apply(null, a); }; } return { argumentNames: argumentNames, bind: bind, bindAsEventListener: bindAsEventListener, curry: curry, delay: delay,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	49946	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:19 UTC	652	OUT	GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&_cdn=cloudflare&load=effects,controls,slider HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:19 UTC	443	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:19 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Tue, 28 May 2024 01:47:08 GMT ETag: W/"Me1IBxzktiwk" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 166768 Server: cloudflare CF-RAY: 86fd41b669f574a6-MIA
2024-04-05 23:18:19 UTC	926	IN	Data Raw: 37 64 65 34 0d 0a 2f 2f 20 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 20 73 63 72 69 70 74 61 63 75 6c 6f 75 73 2e 6a 73 20 76 31 2e 38 2e 31 2c 20 54 68 75 20 4a 61 6e 20 30 33 20 32 32 3a 30 37 3a 31 32 20 2d 30 35 30 30 20 32 30 30 38 0d 0a 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 35 2d 32 30 30 37 20 54 68 6f 6d 61 73 20 46 75 63 68 73 20 28 68 74 74 70 3a 2f 2f 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 2c 20 68 74 74 70 3a 2f 2f 6d 69 72 2e 61 63 75 6c 6f 2e 75 73 29 0d 0a 2f 2f 20 0d 0a 2f 2f 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 0d 0a 2f 2f 20 61 20 Data Ascii: 7de4// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)// // Permission is hereby granted, free of charge, to any person obtaining// a
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 43 48 41 4e 54 41 42 49 4c 49 54 59 2c 20 46 49 54 4e 45 53 53 20 46 4f 52 20 41 20 50 41 52 54 49 43 55 4c 41 52 20 50 55 52 50 4f 53 45 20 41 4e 44 0d 0a 2f 2f 20 4e 4f 4e 49 4e 46 52 49 4e 47 45 4d 45 4e 54 2e 20 49 4e 20 4e 4f 20 45 56 45 4e 54 20 53 48 41 4c 4c 20 54 48 45 20 41 55 54 48 4f 52 53 20 4f 52 20 43 4f 50 59 52 49 47 48 54 20 48 4f 4c 44 45 52 53 20 42 45 0d 0a 2f 2f 20 4c 49 41 42 4c 45 20 46 4f 52 20 41 4e 59 20 43 4c 41 49 4d 2c 20 44 41 4d 41 47 45 53 20 4f 52 20 4f 54 48 45 52 20 4c 49 41 42 49 4c 49 54 59 2c 20 57 48 45 54 48 45 52 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 0d 0a 2f 2f 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 45 2c 20 41 52 49 53 49 4e 47 20 46 52 4f 4d 2c 20 4f 55 54 20 Data Ascii: CHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND// NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE// LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION// OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 74 75 72 6e 20 28 73 2e 73 72 63 20 26 26 20 73 2e 73 72 63 2e 6d 61 74 63 68 28 2f 73 63 72 69 70 74 61 63 75 6c 6f 75 73 5c 2e 6a 73 28 5c 3f 2e 2a 29 3f 24 2f 29 29 0d 0a 20 20 20 20 7d 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 73 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 70 61 74 68 20 3d 20 73 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 73 63 72 69 70 74 61 63 75 6c 6f 75 73 5c 2e 6a 73 28 5c 3f 2e 2a 29 3f 24 2f 2c 27 27 29 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 69 6e 63 6c 75 64 65 73 20 3d 20 73 2e 73 72 63 2e 6d 61 74 63 68 28 2f 5c 3f 2e 2a 6c 6f 61 64 3d 28 5b 61 2d 7a 2c 5d 2a 29 2f 29 3b 0d 0a 20 20 20 20 20 20 28 69 6e 63 6c 75 64 65 73 20 3f 20 69 6e 63 6c 75 64 65 73 5b 31 5d 20 3a 20 27 62 75 69 6c 64 65 72 2c 65 66 66 65 63 74 Data Ascii: turn (s.src && s.src.match(/scriptaculous\.js(\?.)?$/)) }).each( function(s) { var path = s.src.replace(/scriptaculous\.js(\?.)?$/,''); var includes = s.src.match(/\?.load=([a-z,])/); (includes ? includes[1] : 'builder,effect
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 20 0d 0a 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 6c 65 6e 67 74 68 3d 3d 37 29 20 63 6f 6c 6f 72 20 3d 20 74 68 69 73 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 20 0d 0a 20 20 20 20 7d 20 20 0d 0a 20 20 7d 20 20 0d 0a 20 20 72 65 74 75 72 6e 20 28 63 6f 6c 6f 72 2e 6c 65 6e 67 74 68 3d 3d 37 20 3f 20 63 6f 6c 6f 72 20 3a 20 28 61 72 67 75 6d 65 6e 74 73 5b 30 5d 20 7c 7c 20 74 68 69 73 29 29 3b 20 20 0d 0a 7d 3b 0d 0a 0d 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0d 0a 0d 0a 45 6c 65 6d 65 6e 74 2e 63 6f Data Ascii: ).toLowerCase(); if (this.length==7) color = this.toLowerCase(); } } return (color.length==7 ? color : (arguments[0] \|\| this)); };/--------------------------------------------------------------------------/Element.co
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 0a 20 20 7d 20 63 61 74 63 68 28 65 29 20 7b 20 7d 0d 0a 7d 3b 0d 0a 0d 0a 2f 2a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0d 0a 0d 0a 76 61 72 20 45 66 66 65 63 74 20 3d 20 7b 0d 0a 20 20 5f 65 6c 65 6d 65 6e 74 44 6f 65 73 4e 6f 74 45 78 69 73 74 45 72 72 6f 72 3a 20 7b 0d 0a 20 20 20 20 6e 61 6d 65 3a 20 27 45 6c 65 6d 65 6e 74 44 6f 65 73 4e 6f 74 45 78 69 73 74 45 72 72 6f 72 27 2c 0d 0a 20 20 20 20 6d 65 73 73 61 67 65 3a 20 27 54 68 65 20 73 70 65 63 69 66 69 65 64 20 44 4f 4d 20 65 6c 65 6d 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2c 20 62 75 74 20 69 Data Ascii: } catch(e) { }};/--------------------------------------------------------------------------/var Effect = { _elementDoesNotExistError: { name: 'ElementDoesNotExistError', message: 'The specified DOM element does not exist, but i
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 20 74 72 75 65 20 66 6f 72 20 63 6f 6d 62 69 6e 69 6e 67 0d 0a 20 20 20 20 66 72 6f 6d 3a 20 20 20 20 20 20 20 30 2e 30 2c 0d 0a 20 20 20 20 74 6f 3a 20 20 20 20 20 20 20 20 20 31 2e 30 2c 0d 0a 20 20 20 20 64 65 6c 61 79 3a 20 20 20 20 20 20 30 2e 30 2c 0d 0a 20 20 20 20 71 75 65 75 65 3a 20 20 20 20 20 20 27 70 61 72 61 6c 6c 65 6c 27 0d 0a 20 20 7d 2c 0d 0a 20 20 74 61 67 69 66 79 54 65 78 74 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 74 61 67 69 66 79 53 74 79 6c 65 20 3d 20 27 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 27 3b 0d 0a 20 20 20 20 69 66 20 28 50 72 6f 74 6f 74 79 70 65 2e 42 72 6f 77 73 65 72 2e 49 45 29 20 74 61 67 69 66 79 53 74 79 6c 65 20 2b 3d 20 27 3b 7a 6f 6f 6d 3a 31 27 3b Data Ascii: true for combining from: 0.0, to: 1.0, delay: 0.0, queue: 'parallel' }, tagifyText: function(element) { var tagifyStyle = 'position:relative'; if (Prototype.Browser.IE) tagifyStyle += ';zoom:1';
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 5b 27 41 70 70 65 61 72 27 2c 27 46 61 64 65 27 5d 0d 0a 20 20 7d 2c 0d 0a 20 20 74 6f 67 67 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 65 66 66 65 63 74 29 20 7b 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 24 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 65 66 66 65 63 74 20 3d 20 28 65 66 66 65 63 74 20 7c 7c 20 27 61 70 70 65 61 72 27 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0d 0a 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 20 3d 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 0d 0a 20 20 20 20 20 20 71 75 65 75 65 3a 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 27 65 6e 64 27 2c 20 73 63 6f 70 65 3a 28 65 6c 65 6d 65 6e 74 2e 69 64 20 7c 7c 20 27 67 6c 6f 62 61 6c 27 29 2c 20 6c 69 6d 69 74 3a 20 31 20 7d 0d 0a 20 20 20 20 Data Ascii: ['Appear','Fade'] }, toggle: function(element, effect) { element = $(element); effect = (effect \|\| 'appear').toLowerCase(); var options = Object.extend({ queue: { position:'end', scope:(element.id \|\| 'global'), limit: 1 }
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 27 3a 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 73 74 61 72 74 20 65 66 66 65 63 74 20 61 66 74 65 72 20 6c 61 73 74 20 71 75 65 75 65 64 20 65 66 66 65 63 74 20 68 61 73 20 66 69 6e 69 73 68 65 64 0d 0a 20 20 20 20 20 20 20 20 74 69 6d 65 73 74 61 6d 70 20 3d 20 74 68 69 73 2e 65 66 66 65 63 74 73 2e 70 6c 75 63 6b 28 27 66 69 6e 69 73 68 4f 6e 27 29 2e 6d 61 78 28 29 20 7c 7c 20 74 69 6d 65 73 74 61 6d 70 3b 0d 0a 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 0d 0a 20 20 20 20 65 66 66 65 63 74 2e 73 74 61 72 74 4f 6e 20 20 2b 3d 20 74 69 6d 65 73 74 61 6d 70 3b 0d 0a 20 20 20 20 65 66 66 65 63 74 2e 66 69 6e 69 73 68 4f 6e 20 2b 3d 20 74 69 6d 65 73 74 61 6d 70 3b 0d 0a 0d 0a 20 20 20 20 69 66 20 28 21 65 66 66 65 63 74 Data Ascii: ': // start effect after last queued effect has finished timestamp = this.effects.pluck('finishOn').max() \|\| timestamp; break; } effect.startOn += timestamp; effect.finishOn += timestamp; if (!effect
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 65 6e 74 4e 61 6d 65 2b 27 49 6e 74 65 72 6e 61 6c 28 74 68 69 73 29 3b 27 20 3a 20 27 27 29 20 2b 0d 0a 20 20 20 20 20 20 20 20 28 6f 70 74 69 6f 6e 73 5b 65 76 65 6e 74 4e 61 6d 65 5d 20 3f 20 27 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 27 2b 65 76 65 6e 74 4e 61 6d 65 2b 27 28 74 68 69 73 29 3b 27 20 3a 20 27 27 29 0d 0a 20 20 20 20 20 20 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 20 26 26 20 6f 70 74 69 6f 6e 73 2e 74 72 61 6e 73 69 74 69 6f 6e 20 3d 3d 3d 20 66 61 6c 73 65 29 20 6f 70 74 69 6f 6e 73 2e 74 72 61 6e 73 69 74 69 6f 6e 20 3d 20 45 66 66 65 63 74 2e 54 72 61 6e 73 69 74 69 6f 6e 73 2e 6c 69 6e 65 61 72 3b 0d 0a 20 20 20 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 20 20 20 20 20 20 3d 20 4f 62 6a 65 63 74 2e 65 Data Ascii: entName+'Internal(this);' : '') + (options[eventName] ? 'this.options.'+eventName+'(this);' : '') ); } if (options && options.transition === false) options.transition = Effect.Transitions.linear; this.options = Object.e
2024-04-05 23:18:19 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 27 67 6c 6f 62 61 6c 27 20 3a 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 71 75 65 75 65 2e 73 63 6f 70 65 29 2e 61 64 64 28 74 68 69 73 29 3b 0d 0a 20 20 7d 2c 0d 0a 20 20 6c 6f 6f 70 3a 20 66 75 6e 63 74 69 6f 6e 28 74 69 6d 65 50 6f 73 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 69 6d 65 50 6f 73 20 3e 3d 20 74 68 69 73 2e 73 74 61 72 74 4f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 69 66 20 28 74 69 6d 65 50 6f 73 20 3e 3d 20 74 68 69 73 2e 66 69 6e 69 73 68 4f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 72 65 6e 64 65 72 28 31 2e 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 63 61 6e 63 65 6c 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 28 27 62 65 66 6f 72 65 46 69 6e 69 73 68 27 29 3b 0d Data Ascii: 'global' : this.options.queue.scope).add(this); }, loop: function(timePos) { if (timePos >= this.startOn) { if (timePos >= this.finishOn) { this.render(1.0); this.cancel(); this.event('beforeFinish');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	49944	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:19 UTC	605	OUT	GET /public/javascript/about.js?v=T9HhtJ81mJgN&l=english&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:19 UTC	444	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:19 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: public,max-age=15552000 Expires: Tue, 28 May 2024 03:49:17 GMT ETag: W/"T9HhtJ81mJgN" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 X-Cache: MISS CF-Cache-Status: HIT Age: 3292452 Server: cloudflare CF-RAY: 86fd41b66f1ba53c-MIA
2024-04-05 23:18:19 UTC	925	IN	Data Raw: 38 61 35 0d 0a 0d 0a 24 4a 28 20 64 6f 63 75 6d 65 6e 74 20 29 2e 72 65 61 64 79 28 0d 0a 09 66 75 6e 63 74 69 6f 6e 28 20 29 0d 0a 09 7b 0d 0a 09 09 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 72 65 61 64 79 27 29 3b 0d 0a 0d 0a 09 09 66 75 6e 63 74 69 6f 6e 20 65 6c 46 61 64 65 49 6e 28 73 65 6c 65 63 74 65 64 5f 65 6c 29 0d 0a 09 09 7b 0d 0a 09 09 09 76 61 72 20 77 69 6e 64 6f 77 48 65 69 67 68 74 20 3d 20 24 4a 28 20 77 69 6e 64 6f 77 20 29 2e 68 65 69 67 68 74 28 29 3b 0d 0a 09 09 09 24 4a 28 20 73 65 6c 65 63 74 65 64 5f 65 6c 20 29 2e 65 61 63 68 28 0d 0a 09 09 09 09 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 09 09 09 7b 0d 0a 09 09 09 09 09 76 61 72 20 74 68 69 73 50 6f 73 20 3d 20 24 4a 28 20 74 68 69 73 20 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 0d Data Ascii: 8a5$J( document ).ready(function( ){console.log('ready');function elFadeIn(selected_el){var windowHeight = $J( window ).height();$J( selected_el ).each(function(){var thisPos = $J( this ).offset().top;
2024-04-05 23:18:19 UTC	1295	IN	Data Raw: 68 65 69 67 68 74 27 2c 20 73 6c 69 63 6b 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 68 65 69 67 68 74 28 29 20 2b 20 27 70 78 20 27 29 3b 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 24 4a 28 20 77 69 6e 64 6f 77 20 29 2e 6f 6e 28 0d 0a 09 09 09 27 72 65 73 69 7a 65 27 2c 0d 0a 09 09 09 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 69 66 20 28 20 24 4a 28 20 77 69 6e 64 6f 77 20 29 2e 77 69 64 74 68 28 29 20 3e 20 37 35 30 20 29 0d 0a 09 09 09 09 7b 0d 0a 09 09 09 09 09 69 66 20 28 20 24 73 6c 69 63 6b 5f 73 6c 69 64 65 72 2e 68 61 73 43 6c 61 73 73 28 20 27 73 6c 69 63 6b 2d 69 6e 69 74 69 61 6c 69 7a 65 64 27 20 29 20 29 0d 0a 09 09 09 09 09 7b 0d 0a 09 09 09 09 09 09 24 73 6c 69 63 6b 5f 73 6c 69 64 65 72 Data Ascii: height', slick.$slideTrack.height() + 'px ');});}$J( window ).on('resize',function(){if ( $J( window ).width() > 750 ){if ( $slick_slider.hasClass( 'slick-initialized' ) ){$slick_slider
2024-04-05 23:18:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	49941	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:19 UTC	2393	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A106143261%3Az%3A120%3Ai%3A20240406011818%3Aet%3A1712359098%3Ac%3A1%3Arn%3A801127397%3Arqn%3A14%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C1157%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359097013%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359099%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(0)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:20 UTC	1359	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:18:20 GMT Expires: Fri, 05-Apr-2024 23:18:20 GMT Last-Modified: Fri, 05-Apr-2024 23:18:20 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:18:20 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; Expires=Sat, 05-Apr-2025 23:18:20 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:18:20 UTC	393	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 75 4d 73 4c 79 38 45 5a 61 4e 6c 2f 64 67 44 50 73 64 4b 65 4b 73 55 45 4c 44 31 38 62 74 47 59 4b 54 65 38 71 7a 64 33 71 54 74 50 36 65 4f 73 6a 72 43 43 70 37 45 31 49 6a 4b 4e 39 33 67 4c 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"uMsLy8EZaNl/dgDPsdKeKsUELD18btGYKTe8qzd3qTtP6eOsjrCCp7E1IjKN93gL"
2024-04-05 23:18:20 UTC	54	IN	Data Raw: 64 35 36 36 63 35 36 31 37 35 65 31 62 62 33 34 32 61 34 30 61 34 61 66 32 35 36 30 35 38 22 2c 22 63 66 22 3a 31 7d 2c 22 75 73 65 72 44 61 74 61 22 3a 7b 7d 7d Data Ascii: d566c56175e1bb342a40a4af256058","cf":1},"userData":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	49947	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:19 UTC	602	OUT	GET /public/javascript/slick/slick.js?v=.UvbXNQdQm-AJ&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:20 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=10368000 X-Cache: MISS Last-Modified: Fri, 05 Apr 2024 22:16:23 GMT CF-Cache-Status: HIT Age: 219 Server: cloudflare CF-RAY: 86fd41b75bd931e9-MIA
2024-04-05 23:18:20 UTC	1038	IN	Data Raw: 37 65 35 34 0d 0a 2f 2a 0d 0a 20 20 20 20 20 5f 20 5f 20 20 20 20 20 20 5f 20 20 20 20 20 20 20 5f 0d 0a 20 5f 5f 5f 7c 20 28 5f 29 20 5f 5f 5f 7c 20 7c 20 5f 5f 20 20 28 5f 29 5f 5f 5f 0d 0a 2f 20 5f 5f 7c 20 7c 20 7c 2f 20 5f 5f 7c 20 7c 2f 20 2f 20 20 7c 20 2f 20 5f 5f 7c 0d 0a 5c 5f 5f 20 5c 20 7c 20 7c 20 28 5f 5f 7c 20 20 20 3c 20 5f 20 7c 20 5c 5f 5f 20 5c 0d 0a 7c 5f 5f 5f 2f 5f 7c 5f 7c 5c 5f 5f 5f 7c 5f 7c 5c 5f 28 5f 29 2f 20 7c 5f 5f 5f 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 5f 5f 2f 0d 0a 0d 0a 20 56 65 72 73 69 6f 6e 3a 20 31 2e 35 2e 30 0d 0a 20 20 41 75 74 68 6f 72 3a 20 4b 65 6e 20 57 68 65 65 6c 65 72 0d 0a 20 57 65 62 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 6b 65 6e 77 68 65 65 6c 65 72 2e 67 69 74 68 75 62 Data Ascii: 7e54/* _ _ _ _ ___\| (_) ___\| \| __ (_)___/ __\| \| \|/ __\| \|/ / \| / __\|\__ \ \| \| (__\| < _ \| \__ \\|___/_\|_\|\___\|_\|\_(_)/ \|___/ \|__/ Version: 1.5.0 Author: Ken Wheeler Website: http://kenwheeler.github
2024-04-05 23:18:20 UTC	1369	IN	Data Raw: 70 6f 69 6e 74 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 64 65 66 61 75 6c 74 73 20 3d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 63 63 65 73 73 69 62 69 6c 69 74 79 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 64 61 70 74 69 76 65 48 65 69 67 68 74 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 41 72 72 6f 77 73 3a 20 24 28 65 6c 65 6d 65 6e 74 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 70 70 65 6e 64 44 6f 74 73 3a 20 24 28 65 6c 65 6d 65 6e 74 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 72 6f 77 73 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 73 4e 61 76 46 6f 72 Data Ascii: point; _.defaults = { accessibility: true, adaptiveHeight: false, appendArrows: $(element), appendDots: $(element), arrows: true, asNavFor
2024-04-05 23:18:20 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 70 6f 6e 73 69 76 65 3a 20 6e 75 6c 6c 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 77 73 3a 20 31 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 74 6c 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 3a 20 27 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 50 65 72 52 6f 77 3a 20 31 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 54 6f 53 68 6f 77 3a 20 31 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 6c 69 64 65 73 54 6f 53 63 72 6f 6c 6c 3a 20 31 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 70 65 65 64 3a 20 35 30 30 2c 0d 0a 20 20 Data Ascii: responsive: null, rows: 1, rtl: false, slide: '', slidesPerRow: 1, slidesToShow: 1, slidesToScroll: 1, speed: 500,
2024-04-05 23:18:20 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 73 45 6e 61 62 6c 65 64 3a 20 66 61 6c 73 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 2e 65 78 74 65 6e 64 28 5f 2c 20 5f 2e 69 6e 69 74 69 61 6c 73 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 61 63 74 69 76 65 42 72 65 61 6b 70 6f 69 6e 74 20 3d 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 61 6e 69 6d 54 79 70 65 20 3d 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 61 6e 69 6d 50 72 6f 70 20 3d 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 62 72 65 61 6b 70 6f 69 6e 74 73 20 3d 20 5b 5d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 62 72 65 61 6b Data Ascii: transformsEnabled: false }; $.extend(_, _.initials); _.activeBreakpoint = null; _.animType = null; _.animProp = null; _.breakpoints = []; _.break
2024-04-05 23:18:20 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 62 72 65 61 6b 70 6f 69 6e 74 73 2e 70 75 73 68 28 72 65 73 70 6f 6e 73 69 76 65 53 65 74 74 69 6e 67 73 5b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 70 6f 69 6e 74 5d 2e 62 72 65 61 6b 70 6f 69 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 62 72 65 61 6b 70 6f 69 6e 74 53 65 74 74 69 6e 67 73 5b 72 65 73 70 6f 6e 73 69 76 65 53 65 74 74 69 6e 67 73 5b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 70 6f 69 6e 74 5d 2e 62 72 65 61 6b 70 6f 69 6e 74 5d 20 3d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: _.breakpoints.push(responsiveSettings[ breakpoint].breakpoint); _.breakpointSettings[responsiveSettings[ breakpoint].breakpoint] =
2024-04-05 23:18:20 UTC	1369	IN	Data Raw: 6c 65 72 2c 20 5f 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 73 65 6c 65 63 74 48 61 6e 64 6c 65 72 20 3d 20 24 2e 70 72 6f 78 79 28 5f 2e 73 65 6c 65 63 74 48 61 6e 64 6c 65 72 2c 20 5f 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 73 65 74 50 6f 73 69 74 69 6f 6e 20 3d 20 24 2e 70 72 6f 78 79 28 5f 2e 73 65 74 50 6f 73 69 74 69 6f 6e 2c 20 5f 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 73 77 69 70 65 48 61 6e 64 6c 65 72 20 3d 20 24 2e 70 72 6f 78 79 28 5f 2e 73 77 69 70 65 48 61 6e 64 6c 65 72 2c 20 5f 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 64 72 61 67 48 61 6e 64 6c 65 72 20 3d 20 24 2e 70 72 6f 78 79 28 5f 2e 64 72 61 67 48 61 6e 64 6c 65 72 2c 20 5f 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 6b Data Ascii: ler, _); _.selectHandler = $.proxy(_.selectHandler, _); _.setPosition = $.proxy(_.setPosition, _); _.swipeHandler = $.proxy(_.swipeHandler, _); _.dragHandler = $.proxy(_.dragHandler, _); _.k
2024-04-05 23:18:20 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 6d 61 72 6b 75 70 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 5f 2e 24 73 6c 69 64 65 73 2e 65 71 28 69 6e 64 65 78 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 64 64 42 65 66 6f 72 65 20 3d 3d 3d 20 74 72 75 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 6d 61 72 6b 75 70 29 2e 70 72 65 70 65 6e 64 54 6f 28 5f 2e 24 73 6c 69 64 65 54 72 61 63 6b 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 6d 61 72 6b 75 70 29 2e 61 70 70 65 6e 64 54 6f 28 5f 2e 24 73 6c 69 64 65 54 72 61 Data Ascii: $(markup).insertAfter(_.$slides.eq(index)); } } else { if (addBefore === true) { $(markup).prependTo(_.$slideTrack); } else { $(markup).appendTo(_.$slideTra
2024-04-05 23:18:20 UTC	1369	IN	Data Raw: 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 5f 2e 6f 70 74 69 6f 6e 73 2e 76 65 72 74 69 63 61 6c 20 3d 3d 3d 20 66 61 6c 73 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 61 6e 69 6d 61 74 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 74 61 72 67 65 74 4c 65 66 74 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 5f 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 2c 20 5f 2e 6f 70 74 69 6f 6e 73 2e 65 61 73 69 6e 67 2c 20 63 61 6c 6c 62 61 63 6b 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 2e 24 73 6c 69 64 65 54 72 61 63 6b 2e 61 6e 69 6d 61 74 Data Ascii: { if (_.options.vertical === false) { _.$slideTrack.animate({ left: targetLeft }, _.options.speed, _.options.easing, callback); } else { _.$slideTrack.animat
2024-04-05 23:18:20 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6d 70 6c 65 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 61 6c 6c 62 61 63 6b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 Data Ascii: } }, complete: function() { if (callback) { callback.call(); } } });
2024-04-05 23:18:20 UTC	1369	IN	Data Raw: 3d 20 66 61 6c 73 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 5b 5f 2e 74 72 61 6e 73 69 74 69 6f 6e 54 79 70 65 5d 20 3d 20 5f 2e 74 72 61 6e 73 66 6f 72 6d 54 79 70 65 20 2b 20 27 20 27 20 2b 20 5f 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 20 2b 20 27 6d 73 20 27 20 2b 20 5f 2e 6f 70 74 69 6f 6e 73 2e 63 73 73 45 61 73 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 5b 5f 2e 74 72 61 6e 73 69 74 69 6f 6e 54 79 70 65 5d 20 3d 20 27 6f 70 61 63 69 74 79 20 27 20 2b 20 5f 2e 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 20 2b 20 27 6d 73 20 27 20 2b 20 5f 2e 6f 70 74 69 6f 6e 73 2e 63 73 73 45 61 73 65 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d Data Ascii: = false) { transition[_.transitionType] = _.transformType + ' ' + _.options.speed + 'ms ' + _.options.cssEase; } else { transition[_.transitionType] = 'opacity ' + _.options.speed + 'ms ' + _.options.cssEase; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	49948	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:20 UTC	608	OUT	GET /public/javascript/rellax/rellax.min.js?v=.KbIxshHXB6Um&_cdn=cloudflare HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:20 UTC	332	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=10368000 X-Cache: MISS Last-Modified: Fri, 05 Apr 2024 20:43:39 GMT CF-Cache-Status: HIT Age: 5080 Server: cloudflare CF-RAY: 86fd41b9ce6f67c2-MIA
2024-04-05 23:18:20 UTC	1037	IN	Data Raw: 64 63 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 67 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 67 28 29 3a 68 2e 52 65 6c 6c 61 78 3d 67 28 29 7d 29 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 20 21 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 20 3f 20 77 69 6e 64 6f 77 20 3a 20 67 6c 6f 62 61 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6e 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 68 2e 70 72 6f 74 6f 74 79 Data Ascii: dce(function(h,g){"function"===typeof define&&define.amd?define([],g):"object"===typeof module&&module.exports?module.exports=g():h.Rellax=g()})(typeof window !== "undefined" ? window : global,function(){var h=function(g,n){var a=Object.create(h.prototy
2024-04-05 23:18:20 UTC	1369	IN	Data Raw: 3b 69 66 28 61 2e 6f 70 74 69 6f 6e 73 2e 77 72 61 70 70 65 72 26 26 0d 0a 21 61 2e 6f 70 74 69 6f 6e 73 2e 77 72 61 70 70 65 72 2e 6e 6f 64 65 54 79 70 65 29 69 66 28 6d 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 2e 6f 70 74 69 6f 6e 73 2e 77 72 61 70 70 65 72 29 29 61 2e 6f 70 74 69 6f 6e 73 2e 77 72 61 70 70 65 72 3d 6d 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 54 68 65 20 77 72 61 70 70 65 72 20 79 6f 75 27 72 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 64 6f 6e 27 74 20 65 78 69 73 74 2e 22 29 3b 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 65 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 2e 65 6c 65 6d 73 5b 63 5d 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d Data Ascii: ;if(a.options.wrapper&&!a.options.wrapper.nodeType)if(m=document.querySelector(a.options.wrapper))a.options.wrapper=m;else throw Error("The wrapper you're trying to use don't exist.");var u=function(){for(var c=0;c<e.length;c++)a.elems[c].style.cssText=
2024-04-05 23:18:20 UTC	1135	IN	Data Raw: 72 65 73 69 7a 65 22 2c 75 29 2c 72 3d 21 31 29 3b 78 28 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 6b 2c 62 3d 6c 3b 6b 3d 61 2e 6f 70 74 69 6f 6e 73 2e 77 72 61 70 70 65 72 3f 61 2e 6f 70 74 69 6f 6e 73 2e 77 72 61 70 70 65 72 2e 73 63 72 6f 6c 6c 54 6f 70 3a 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 73 63 72 6f 6c 6c 54 6f 70 7c 7c 77 69 6e 64 6f 77 2e 70 61 67 65 59 4f 66 66 73 65 74 3b 0d 0a 6c 3d 61 2e 6f 70 74 69 6f 6e 73 2e 77 72 61 70 70 65 72 3f 61 2e 6f 70 74 69 6f 6e 73 2e 77 72 61 70 70 65 72 2e 73 63 72 6f 6c 6c 4c 65 66 74 3a 28 64 6f 63 75 6d 65 6e 74 2e 64 Data Ascii: resize",u),r=!1);x()},v=function(){var c=k,b=l;k=a.options.wrapper?a.options.wrapper.scrollTop:(document.documentElement\|\|document.body.parentNode\|\|document.body).scrollTop\|\|window.pageYOffset;l=a.options.wrapper?a.options.wrapper.scrollLeft:(document.d
2024-04-05 23:18:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	49950	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:20 UTC	638	OUT	GET /store/about/videos/about_hero_loop_web.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:20 GMT Content-Type: image/png Content-Length: 35255 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-89b7" CF-Cache-Status: HIT Age: 4795 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41bcdf46b3da-MIA
2024-04-05 23:18:21 UTC	1072	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 78 00 00 03 1a 08 02 00 00 00 5b 30 73 48 00 00 00 09 70 48 59 73 00 00 00 01 00 00 00 01 00 4f 25 c4 d6 00 00 00 24 7a 54 58 74 43 72 65 61 74 6f 72 00 00 08 99 73 4c c9 4f 4a 55 70 4c 2b 49 2d 52 70 4d 4b 4b 4d 2e 29 06 00 41 7a 06 ce 6a 7a 15 c5 00 00 20 00 49 44 41 54 78 9c ec dd c9 92 24 59 be e7 f5 ff ff a8 da e0 53 8c 39 45 45 56 d7 9c d5 42 23 4d d3 34 0f 80 b0 80 2d c2 8a 0d 0f 00 22 48 f7 93 f4 33 20 0d 08 1b d8 b0 66 c7 02 56 88 c0 e5 4e 75 ab 6e 0d 39 47 66 cc 3e d8 a4 87 85 9e 59 d5 cc cd 3d 5c dd c2 3c be 1f c9 8c 30 53 3d aa a6 66 16 99 f1 f3 ff 19 54 7f fa f3 5f 0b 00 00 00 70 d3 cc ae 2f 00 00 00 00 77 13 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 Data Ascii: PNGIHDRx[0sHpHYsO%$zTXtCreatorsLOJUpL+I-RpMKKM.)Azjz IDATx$YS9EEVB#M4-"H3 fVNun9Gf>Y=\<0S=fT_p/wA h`MA
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 00 00 00 18 04 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 10 34 01 00 00 30 08 82 26 00 00 00 06 41 d0 04 00 00 c0 20 08 9a 00 00 00 18 04 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 10 34 01 00 00 30 08 82 26 00 00 00 06 41 d0 04 00 00 c0 20 08 9a 00 00 00 18 04 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 10 34 01 00 00 30 08 82 26 00 00 00 06 41 d0 04 00 00 c0 20 08 9a 00 00 00 18 04 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 10 34 01 00 00 30 08 82 26 00 00 00 06 41 d0 04 00 00 c0 20 08 9a 00 00 00 18 04 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 10 34 01 00 00 30 08 82 26 00 00 00 Data Ascii: A h`MA40&A A h`MA40&A A h`MA40&A A h`MA40&A A h`MA40&
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: d7 7f b0 d6 8a 88 b5 76 fe 75 5f 83 6f ff d0 0e 7e d0 fc e5 92 d7 fd a3 6d ff cc 58 db f3 2e 44 16 3f 7c d9 8e 8e b0 ab e5 a2 53 d6 dd 17 fa d3 9f ff 7a d7 d7 00 00 c0 fe 73 45 2c 15 b1 76 b5 ec 1f a3 59 8f d5 18 db 34 76 39 5f 3b 88 d3 54 62 9b de 41 9c a2 6a c6 53 37 04 73 5d 83 c9 81 56 23 bb 5a 34 b3 f3 35 0d 0e dd 19 66 67 3d 0d 44 cc c1 b1 d6 b5 5d 2e 7b a3 6a db c0 d4 e3 66 31 eb 8e 9e cc ce b0 58 ac 6d 30 3d d4 d1 c4 2e 66 dd de 7f d7 60 72 a0 a3 b1 5d cc bb 23 38 b7 6c a0 e3 a9 56 b5 5d 2d bb 23 10 5c 83 7a ac e3 89 9d cf 6c 92 ef f3 06 a3 f6 22 bb 03 55 5d 83 aa 6a 07 71 f6 8c 85 6d 1b 98 4a ea 91 2c e7 dd e1 b6 be 85 b6 7f 1e 7a bf 88 ad 1a bc f7 08 9a 00 00 00 18 04 5d e7 00 00 00 18 04 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c Data Ascii: vu_o~mX.D?\|SzsE,vY4v9_;TbAjS7s]V#Z45fg=D].{jf1Xm0=.f`r]#8lV]-#\zl"U]jqmJ,z]A h`M
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 1e b5 f7 1c ea 5e 43 75 ff e3 c9 d3 5f 89 a9 64 b5 9c 7d fd fb ee db ac ef 3d ae 3f fb 99 31 95 5d 2d 7b 3f a8 ea e4 41 fd f8 a9 56 55 7b cf a1 d5 db f2 bb 78 4f 50 d1 04 00 60 70 21 65 8a aa 19 4f 7b 1a 4c 5c ca 14 51 73 70 d8 6d 50 1d 1c b7 37 d4 56 a3 e6 e0 a4 a7 c1 d1 03 6b 8c 88 88 d1 ea f8 61 4f 83 7b 8f 54 8c 88 a8 56 f5 83 8f ba 0d da 94 29 22 6a ea fa e1 a7 dd 06 f5 a3 cf a4 32 22 62 4d 35 7a fc a4 a7 c1 e3 a7 6a 2a 11 51 53 8d 3e f9 27 dd 06 2e 65 8a 68 55 d7 4f 7e de 73 0d 4f 7e a1 55 2d 22 a6 1e 4d 9e fc a2 dc ad 3a f9 c9 af da 06 52 d5 d3 cf 3b 77 37 54 1d 3f fd 8d d6 a3 f6 0c e3 cf bf e8 39 c3 e7 5f b4 0d b4 aa 27 fd 0d 7e ab 75 2d 22 5a d7 93 cf 7f bb a6 c1 48 44 b4 1e 4d 7e da d3 a0 4d 99 22 62 46 e3 f1 d3 df f4 9c e1 69 7c 17 93 27 bf ec Data Ascii: ^Cu_d}=?1]-{?AVU{xOP`p!eO{L\QspmP7VkaO{TV)"j2"bM5zj*QS>'.ehUO~sO~U-"M:R;w7T?9_'~u-"ZHDM~M"bFi\|'
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 68 62 3f c5 72 a6 64 53 7f d4 4c 8f 1f 87 94 69 6d 33 3b 7d b5 b8 78 13 8f 12 69 96 f3 e5 4c 66 22 f5 e4 70 72 f4 c8 18 23 aa d5 68 7a 70 ef 93 b3 57 df 89 34 7e 81 a4 36 71 ee b8 a8 59 d7 a3 f1 78 ba 9b d7 06 00 bc 8f f4 f0 e4 d1 eb 1f bf d9 f5 65 6c 65 6f c6 7b 01 5e b7 9c a9 a2 2a c6 88 ea 68 72 3c 3a 70 29 b3 59 2d 4f 5f 7c e3 52 a6 b5 7e 6a 79 23 4d d3 d6 26 97 b3 b3 d3 17 5f ad 16 73 11 11 d5 6a 3c 1d 1f 3d 10 f5 63 3d a5 bb fa e6 0e c2 66 3d a6 96 09 00 c8 8c 26 7b 53 80 20 68 62 3f 95 e5 cc f6 69 35 39 7e d8 ce 37 6f 9a e5 e9 cb 6f ed 6a 25 d6 4a b3 12 bb 12 bb 92 66 95 3f 6e c4 da b3 57 df ae 96 6d d6 34 93 e9 89 ba fe 74 bf 2e 92 fa 97 db d1 5c 20 5d b7 08 28 00 e0 43 b5 47 7f 35 d0 75 8e bd a6 69 bf f9 f8 f0 9e 9a 4a 44 c4 da b3 57 cf a4 69 c4 Data Ascii: hb?rdSLim3;}xiLf"pr#hzpW4~6qYxeleo{^*hr<:p)Y-O_\|R~jy#M&_sj<=c=f=&{S hb?i59~7ooj%Jf?nWm4t.\ ](CG5uiJDWi
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 53 66 d3 88 34 b1 d3 7c 9f cb 99 b2 f5 78 ca ce 51 3d d9 d4 54 d5 35 3e 89 eb 5d 00 00 e0 6e 20 68 62 9f a9 c4 0e 74 2b a2 8d bb d5 64 63 45 8d 48 23 ab f9 c5 9b 1f da 15 da eb d1 44 b5 12 11 6b 9b e5 72 2e ab a5 4b 93 36 fc d3 b8 5a 66 58 d8 28 a4 cc fd 2c 67 02 00 b0 5b 04 4d ec ad 36 62 16 59 53 1a 51 e3 1e 58 7f 73 20 11 69 9a e5 6c 95 1e 9c cf 2e f7 bf 92 32 01 00 b8 39 04 4d ec b3 75 59 b3 bd a7 b9 a8 58 7f d3 73 95 bc eb dc fa 31 9a e1 f6 42 69 dc 24 65 02 00 70 03 08 9a d8 73 3d 59 d3 8a aa 58 75 b7 3b 6f 6c b9 88 66 76 6c 91 32 93 ed 42 ca 04 00 e0 9d 10 34 b1 ff d2 ac 29 22 aa 2e 3b ba b8 e9 6e 4b 29 e9 d2 8f b1 72 29 65 c4 14 21 65 02 00 70 23 08 9a b8 13 42 c4 94 64 42 ba 4b 93 2a 22 a2 b6 2c 6a da ec 37 7f 60 72 36 00 00 f0 6e 08 9a d8 03 5b Data Ascii: Sf4\|xQ=T5>]n hbt+dcEH#Dkr.K6ZfX(,g[M6bYSQXs il.29MuYXs1Bi$eps=YXu;olfvl2B4)".;nK)r)e!ep#BdBK*",j7`r6n[
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 1b 71 6d 04 4d ec 01 6b 49 99 d8 3f 6a aa 6a 72 b8 eb ab 78 6f f5 a4 cc 0d 09 70 cb a1 8d ed 38 6e 71 dd c3 9d b1 8c 57 ba be 6b 87 49 2d 1f 6b ef ae ee 41 6b 62 57 52 47 cc aa 96 9a c4 b9 98 e9 fa 8a 9f 79 0b 7f fa 24 29 6a f7 c0 24 d4 ae c9 8b 9d 57 d2 ce fb f5 69 79 43 d6 5c ff 34 df f8 8e e1 32 3f d6 5a ad c6 9f ca d5 67 37 e2 1a 08 9a d8 03 0c 53 c4 3e aa 46 57 5b 58 ea 43 72 49 ca dc 5c ce 2c 9b d9 24 5f 6e d3 7e fd ff 52 d2 cd 7d b5 be 8d 5b 92 ed fd 95 c4 75 25 3b 9f 81 92 6e eb ce 09 d2 5e f1 7c ab cf 88 59 0a d5 a4 ee 98 16 28 35 a4 46 95 e4 c5 f3 46 69 6a cd 5f 37 3d ad ff 55 8b d7 f5 a7 49 c2 71 5e 96 ed f9 14 d6 7d 46 ea 23 f0 b5 13 61 37 b5 ab ff c7 4c 4d 35 bd e6 69 71 15 04 4d 00 18 c6 87 34 c1 7c bd fe 4c 77 bd 1f 1e b3 f9 3d d6 47 cc 4e Data Ascii: qmMkI?jjrxop8nqWkI-kAkbWRGy$)j$WiyC\42?Zg7S>FW[XCrI\,$_n~R}[u%;n^\|Y(5FFij_7=UIq^}F#a7LM5iqM4\|Lw=GN
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: b5 4b 60 fa 33 6e a8 77 6e 48 99 9d aa 5b ff b3 6c 53 4f 99 4d e3 6f 79 73 1f a2 e2 ce e2 e8 7c 47 96 b0 f2 b5 32 25 7d dc 4e db 89 d3 7e fc 8c 9e b0 dd 3f 68 7f 13 b7 9c 92 c9 9f a6 f3 89 d2 89 41 f9 a4 a0 30 c5 28 99 21 94 ac aa 19 f6 97 cb 79 fa 37 ad f1 60 77 8d 49 83 f0 3e 92 7f fa b6 64 d2 95 8c 36 2b 97 3d c2 6d a2 a2 09 dc 71 a7 a7 a7 67 67 67 75 5d 5f 3e 48 b1 69 16 1b 23 e9 6c 36 ff f2 cb af ea ba 36 97 ad 10 69 ad 5d 2e 97 ef 5b 6f 35 ae eb c6 fe 66 ee ed 45 5f db 75 de 19 92 d9 6d 59 fe 09 f3 c3 2e fb c3 e5 9a 0e f4 75 17 d0 a7 ef a3 88 b9 2b b6 ea f4 98 6b df aa 46 f9 2b 86 41 9c 31 6b da a2 28 68 5d c1 b1 1c 87 e9 fb b2 fd d4 17 df 11 de 96 28 7d 97 79 7b b8 3b c8 88 34 c5 a8 4c eb df 8b 1b 8e 19 6a 8a be 50 2a be 2f 5e e2 60 cd 38 31 c8 15 Data Ascii: K`3nwnH[lSOMoys\|G2%}N~?hA0(!y7`wI>d6+=mqgggu]_>Hi#l66i].[o5fE_umY.u+kF+A1k(h](}y{;4LjP*/^`81
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 10 aa fc 6e 8d 6d c4 77 1e c7 7c b9 4d cd 4b bb 4f bb 87 69 cf b3 58 c8 2c 2b 71 e9 39 d6 f4 a1 6b 5e 7e b5 3e 7b 86 f8 da 26 c6 b4 34 5a 94 36 35 e6 d5 b6 62 da bd 53 a4 75 c7 b5 4b 61 9a b2 a3 5c 44 c4 48 32 1a d3 65 cd 70 bc a4 e1 d2 fa 9b 65 16 a5 d0 f0 2e fb a2 a7 f4 e6 c2 3c 88 c7 4f 4a 8b ef 37 6f 6e 93 63 b0 43 04 4d e0 8e 7b fc e8 d1 bd fb f7 b6 fc 7f ad b5 f6 f9 f3 17 2f 5f bd 1a f6 9a d6 bb de 4d 3b b8 d5 c7 1e e9 cd 9d 3d 11 33 f9 ad b7 de 19 1f 94 75 ca a4 85 a6 27 70 91 27 0d 1e 97 14 bb 74 cd e3 75 2d dd af 5a 6c 4e 1e e5 85 4f c9 cb 99 22 fe 56 3b dd 17 c8 f2 70 5e ce 4c fa a1 55 7c e5 32 cd 97 6d f5 32 19 2e 90 d6 04 c3 7c a0 10 fb 54 ad bb 67 65 3e 87 bd d3 45 ee 4f 21 2a e2 57 2f 8a 7d f4 6a c3 54 1e 4d 5f dc 9f b0 88 89 59 55 b2 f8 f1 Data Ascii: nmw\|MKOiX,+q9k^~>{&4Z65bSuKa\DH2epe.<OJ7oncCM{/_M;=3u'p'tu-ZlNO"V;p^LU\|2m2.\|Tge>EO!*W/}jTM_YU
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: cf 92 dd da 8a a6 ae 6f 93 8f ba 8b bd e1 5b d4 35 37 6f 2f 95 9d da bd fb 63 49 2e e9 3d ef 8b 9e a1 45 b7 de 19 1e 6a fa a4 73 25 49 0a 8b f1 ca d7 0f d3 72 66 5c 7d c8 15 1d ad b4 f7 26 f7 87 f9 55 8a c4 da b6 3e e9 13 aa 0d 99 d5 aa aa 55 69 ac 15 db ae e5 2e a6 1d 9c 29 e1 88 76 ee 79 d2 9f 2e b1 9e 69 25 ce 51 0f d7 da de 8d 5d 44 54 93 9f 0d fa f8 1a e6 fa a9 eb c9 98 d4 de a3 93 de f3 2c be 62 68 04 4d 00 c0 0e ac 2b 5b f6 ef da d8 69 1e 5b 76 2b 63 92 d7 35 7b 1b 6c 77 b5 9b 47 71 e6 9d e5 c5 06 97 f7 5c 4f 74 db 24 3c f6 31 34 e9 2a cf 42 6d 7c d5 9e d7 2f d3 55 7b 53 1f f7 30 4c cd 71 29 d3 cd f2 49 17 bf 8c 63 2b e3 0b c6 1a 67 ec 46 77 11 52 8c fa 3a a5 0d d9 d4 85 57 db 46 47 0d f1 33 bc f1 a4 3e 19 0b 9c 7d 6f c1 df 80 3d af 39 4b 5b 2d 4d Data Ascii: o[57o/cI.=Ejs%Irf\}&U>Ui.)vy.i%Q]DT,bhM+[i[v+c5{lwGq\Ot$<14*Bm\|/U{S0Lq)Ic+gFwR:WFG3>}o=9K[-M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	49951	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:20 UTC	623	OUT	GET /store//about/logo_steam.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:20 GMT Content-Type: image/svg+xml Content-Length: 2557 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-9fd" CF-Cache-Status: HIT Age: 6278 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41bce902da93-MIA
2024-04-05 23:18:21 UTC	1070	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 2c 36 33 2e 36 7a 22 2f 3e 0d 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 36 36 2e 31 2c 33 31 2e 31 63 30 2d 35 2e 38 2d 34 2e 37 2d 31 30 2e 35 2d 31 30 2e 35 2d 31 30 2e 35 73 2d 31 30 2e 35 2c 34 2e 37 2d 31 30 2e 35 2c 31 30 2e 35 73 34 2e 37 2c 31 30 2e 35 2c 31 30 2e 35 2c 31 30 2e 35 53 36 36 2e 31 2c 33 36 2e 39 2c 36 36 2e 31 2c 33 31 2e 31 7a 0d 0a 09 09 09 20 4d 34 37 2e 37 2c 33 31 2e 31 63 30 2d 34 2e 34 2c 33 2e 35 2d 37 2e 39 2c 37 2e 39 2d 37 2e 39 63 34 2e 34 2c 30 2c 37 2e 39 2c 33 2e 35 2c 37 2e 39 2c 37 2e 39 63 30 2c 34 2e 34 2d 33 2e 35 2c 37 2e 39 2d 37 2e 39 2c 37 2e 39 43 35 31 2e 32 2c 33 39 2c 34 37 2e 37 2c 33 35 2e 35 2c 34 37 2e 37 2c 33 31 2e 31 7a 22 2f 3e 0d 0a 09 3c 2f 67 3e 0d 0a 09 3c 67 Data Ascii: ,63.6z"/><path class="st1" d="M66.1,31.1c0-5.8-4.7-10.5-10.5-10.5s-10.5,4.7-10.5,10.5s4.7,10.5,10.5,10.5S66.1,36.9,66.1,31.1z M47.7,31.1c0-4.4,3.5-7.9,7.9-7.9c4.4,0,7.9,3.5,7.9,7.9c0,4.4-3.5,7.9-7.9,7.9C51.2,39,47.7,35.5,47.7,31.1z"/></g><g
2024-04-05 23:18:21 UTC	118	IN	Data Raw: 2d 30 2e 37 76 2d 34 2e 33 48 32 37 33 2e 37 7a 20 4d 32 37 32 2e 39 2c 32 39 2e 39 68 30 2e 38 0d 0a 09 09 09 63 30 2e 35 2c 30 2c 30 2e 38 2d 30 2e 33 2c 30 2e 38 2d 30 2e 37 63 30 2d 30 2e 34 2d 30 2e 32 2d 30 2e 37 2d 30 2e 38 2d 30 2e 37 68 2d 30 2e 38 56 32 39 2e 39 7a 22 2f 3e 0d 0a 09 3c 2f 67 3e 0d 0a 3c 2f 67 3e 0d 0a 3c 2f 73 76 67 3e 0d 0a Data Ascii: -0.7v-4.3H273.7z M272.9,29.9h0.8c0.5,0,0.8-0.3,0.8-0.7c0-0.4-0.2-0.7-0.8-0.7h-0.8V29.9z"/></g></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	49953	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:20 UTC	634	OUT	GET /store/about/icon-windows.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.cloudflare.steamstatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/svg+xml Content-Length: 761 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-2f9" CF-Cache-Status: HIT Age: 1828 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41bd5da0a582-MIA
2024-04-05 23:18:21 UTC	761	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	49956	23.46.213.117	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:20 UTC	1542	OUT	GET /dynamicstore/saledata/?cc=US HTTP/1.1 Host: store.steampowered.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/about/qrlogin/1/13885351924452522779 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0; ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
2024-04-05 23:18:21 UTC	360	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/json; charset=utf-8 X-Frame-Options: DENY Cache-Control: public,max-age=300 Expires: Fri, 05 Apr 2024 23:19:24 GMT Last-Modified: Fri, 05 Apr 2024 23:10:00 GMT Strict-Transport-Security: max-age=10368000 Vary: origin Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Length: 29 Connection: close
2024-04-05 23:18:21 UTC	29	IN	Data Raw: 7b 22 62 41 6c 6c 6f 77 41 70 70 49 6d 70 72 65 73 73 69 6f 6e 73 22 3a 74 72 75 65 7d Data Ascii: {"bAllowAppImpressions":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	49952	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:20 UTC	622	OUT	GET /store/about/icon-macos.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/svg+xml Content-Length: 1212 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-4bc" CF-Cache-Status: HIT Age: 1828 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41bd79ac21b5-MIA
2024-04-05 23:18:21 UTC	1070	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:21 UTC	142	IN	Data Raw: 2e 31 2c 31 2e 35 63 30 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2d 30 2e 34 63 30 2d 31 2c 30 2e 34 2d 32 2c 31 2e 32 2d 32 2e 38 63 30 2e 34 2d 30 2e 34 2c 30 2e 38 2d 30 2e 38 2c 31 2e 34 2d 31 2e 31 43 31 33 2e 31 2c 30 2e 32 2c 31 33 2e 37 2c 30 2c 31 34 2e 32 2c 30 0d 0a 09 43 31 34 2e 32 2c 30 2e 31 2c 31 34 2e 32 2c 30 2e 33 2c 31 34 2e 32 2c 30 2e 34 4c 31 34 2e 32 2c 30 2e 34 7a 22 2f 3e 0d 0a 3c 2f 73 76 67 3e 0d 0a Data Ascii: .1,1.5c0-0.1,0-0.2,0-0.4c0-1,0.4-2,1.2-2.8c0.4-0.4,0.8-0.8,1.4-1.1C13.1,0.2,13.7,0,14.2,0C14.2,0.1,14.2,0.3,14.2,0.4L14.2,0.4z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	49955	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:20 UTC	624	OUT	GET /store/about/icon-steamos.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/svg+xml Content-Length: 1243 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-4db" CF-Cache-Status: HIT Age: 5043 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41bd6b810a0e-MIA
2024-04-05 23:18:21 UTC	1070	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:21 UTC	173	IN	Data Raw: 2c 31 30 2e 38 2c 37 2e 34 73 31 2e 31 2c 32 2e 35 2c 32 2e 35 2c 32 2e 35 53 31 35 2e 38 2c 38 2e 38 2c 31 35 2e 38 2c 37 2e 34 7a 20 4d 31 31 2e 34 2c 37 2e 34 0d 0a 09 09 09 63 30 2d 31 2c 30 2e 38 2d 31 2e 39 2c 31 2e 39 2d 31 2e 39 63 31 2c 30 2c 31 2e 39 2c 30 2e 38 2c 31 2e 39 2c 31 2e 39 63 30 2c 31 2d 30 2e 38 2c 31 2e 39 2d 31 2e 39 2c 31 2e 39 43 31 32 2e 32 2c 39 2e 33 2c 31 31 2e 34 2c 38 2e 35 2c 31 31 2e 34 2c 37 2e 34 7a 22 2f 3e 0d 0a 09 3c 2f 67 3e 0d 0a 3c 2f 67 3e 0d 0a 3c 2f 73 76 67 3e 0d 0a Data Ascii: ,10.8,7.4s1.1,2.5,2.5,2.5S15.8,8.8,15.8,7.4z M11.4,7.4c0-1,0.8-1.9,1.9-1.9c1,0,1.9,0.8,1.9,1.9c0,1-0.8,1.9-1.9,1.9C12.2,9.3,11.4,8.5,11.4,7.4z"/></g></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	49954	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:20 UTC	625	OUT	GET /store/about/icon-chromeos.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/svg+xml Content-Length: 940 Connection: close Last-Modified: Tue, 07 Nov 2023 18:01:49 GMT ETag: "654a7b8d-3ac" CF-Cache-Status: HIT Age: 6352 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41bd7cc9a54b-MIA
2024-04-05 23:18:21 UTC	940	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 69 64 3d 22 4c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 30 20 35 30 30 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 500 500"> <defs> <style> .cls-2 { stroke-width: 0px; fill: #fff; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	49957	23.61.62.148	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:20 UTC	744	OUT	POST /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive Content-Length: 193 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryg332856T7LKHKvM7 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://store.steampowered.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:20 UTC	193	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 67 33 33 32 38 35 36 54 37 4c 4b 48 4b 76 4d 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 6e 70 75 74 5f 70 72 6f 74 6f 62 75 66 5f 65 6e 63 6f 64 65 64 22 0d 0a 0d 0a 43 4f 76 35 33 4c 2b 6a 76 6f 76 50 72 41 45 53 45 50 76 4f 35 72 76 58 65 65 48 42 66 68 61 65 50 47 75 6a 52 6c 45 3d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 67 33 33 32 38 35 36 54 37 4c 4b 48 4b 76 4d 37 2d 2d 0d 0a Data Ascii: ------WebKitFormBoundaryg332856T7LKHKvM7Content-Disposition: form-data; name="input_protobuf_encoded"COv53L+jvovPrAESEPvO5rvXeeHBfhaePGujRlE=------WebKitFormBoundaryg332856T7LKHKvM7--
2024-04-05 23:18:21 UTC	338	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 54 Access-Control-Allow-Origin: https://store.steampowered.com Vary: Origin Access-Control-Expose-Headers: X-eresult, X-error_message X-eresult: 1 Expires: Fri, 05 Apr 2024 23:18:21 GMT Date: Fri, 05 Apr 2024 23:18:21 GMT Connection: close
2024-04-05 23:18:21 UTC	54	IN	Data Raw: 08 88 fa e9 fd 8b cf db ef c4 01 12 27 68 74 74 70 73 3a 2f 2f 73 2e 74 65 61 6d 2f 71 2f 31 2f 31 34 31 38 36 31 37 38 38 31 36 31 33 32 31 35 32 35 38 34 28 00 Data Ascii: 'https://s.team/q/1/14186178816132152584(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	49949	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:20 UTC	2267	OUT	GET /watch/95654225?wmode=7&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A0%3Als%3A1173339980762%3Ahid%3A106143261%3Az%3A120%3Ai%3A20240406011818%3Aet%3A1712359098%3Ac%3A1%3Arn%3A801127397%3Arqn%3A14%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C1157%2C%2C3%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1712359097013%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359099%3At%3A%D0%9C%D0%BE%D0%BC%D0%B5%D0%BD%D1%82%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B5%20%D0%BF%D0%BE%D0%BF%D0%BE%D0%BB%D0%BD%D0%B5%D0%BD%D0%B8%D0%B5%20%D0%B1%D0%B0%D0%BB%D0%B0%D0%BD%D1%81%D0%B0%20Steam&t=gdpr(14)clc(0-0-0)rqnt(1)eco(21037572)aw(0)rcm(0)cdl(na)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:21 UTC	875	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 447 Content-Type: application/json; charset=utf-8 Date: Fri, 05 Apr 2024 23:18:21 GMT Expires: Fri, 05-Apr-2024 23:18:21 GMT Last-Modified: Fri, 05-Apr-2024 23:18:21 GMT Pragma: no-cache Set-Cookie: receive-cookie-deprecation=1; Expires=Sat, 05-Apr-2025 23:18:21 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-05 23:18:21 UTC	447	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 30 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 30 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 33 2d 31 31 2d 32 32 20 32 33 3a 33 39 3a 34 38 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 44 4c 59 4b 49 4e 6e 69 38 2f 6f 70 61 46 50 4c 67 67 51 2f 2f 54 6d 48 72 63 56 42 50 41 30 51 44 51 33 6d 48 64 6f 7a 77 4e 69 6c 53 51 72 67 6b 4b 77 64 7a 31 49 78 6b 6a 77 2f 74 7a 58 41 22 Data Ascii: {"settings":{"auto_goals":0,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"0","webvisor":{"arch_type":"none","date":"2023-11-22 23:39:48","forms":1,"recp":"1.00000"},"sbp": {"a":"DLYKINni8/opaFPLggQ//TmHrcVBPA0QDQ3mHdozwNilSQrgkKwdz1Ixkjw/tzXA"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	49958	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	1616	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=906334581&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=153530237&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359100%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011819%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359100&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 84775 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:21 UTC	16384	OUT	Data Raw: 0a a3 96 05 08 00 10 00 18 1b 20 00 4a 97 96 05 0a 0f 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 12 42 d0 9c d0 be d0 bc d0 b5 d0 bd d1 82 d0 b0 d0 bb d1 8c d0 bd d0 be d0 b5 20 d0 bf d0 be d0 bf d0 be d0 bb d0 bd d0 b5 d0 bd d0 b8 d0 b5 20 d0 b1 d0 b0 d0 bb d0 b0 d0 bd d1 81 d0 b0 20 53 74 65 61 6d 1a 21 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 66 69 6c 6c 65 72 2e 72 75 2f 70 61 67 65 73 2f 66 61 71 2f 22 6f 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 2a 00 32 00 38 00 Data Ascii: J<!DOCTYPE html>B Steam!https://steamfiller.ru/pages/faq/"oMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36*28
2024-04-05 23:18:21 UTC	16384	OUT	Data Raw: 31 31 38 34 20 31 31 2e 39 35 35 38 20 36 2e 34 30 34 38 34 43 31 31 2e 38 30 34 20 36 2e 34 39 37 38 34 20 31 31 2e 36 37 38 36 20 36 2e 36 32 38 31 38 20 31 31 2e 35 39 31 35 20 36 2e 37 38 33 34 33 43 31 31 2e 35 30 34 34 20 36 2e 39 33 38 36 37 20 31 31 2e 34 35 38 36 20 37 2e 31 31 33 36 33 20 31 31 2e 34 35 38 34 20 37 2e 32 39 31 36 33 43 31 31 2e 34 35 38 34 20 37 2e 35 36 37 38 39 20 31 31 2e 33 34 38 36 20 37 2e 38 33 32 38 35 20 31 31 2e 31 35 33 33 20 38 2e 30 32 38 32 43 31 30 2e 39 35 37 39 20 38 2e 32 32 33 35 35 20 31 30 2e 36 39 33 20 38 2e 33 33 33 32 39 20 31 30 2e 34 31 36 37 20 38 2e 33 33 33 32 39 43 31 30 2e 31 34 30 34 20 38 2e 33 33 33 32 39 20 39 2e 38 37 35 34 37 20 38 2e 32 32 33 35 35 20 39 2e 36 38 30 31 32 20 38 2e 30 32 38 Data Ascii: 1184 11.9558 6.40484C11.804 6.49784 11.6786 6.62818 11.5915 6.78343C11.5044 6.93867 11.4586 7.11363 11.4584 7.29163C11.4584 7.56789 11.3486 7.83285 11.1533 8.0282C10.9579 8.22355 10.693 8.33329 10.4167 8.33329C10.1404 8.33329 9.87547 8.22355 9.68012 8.028
2024-04-05 23:18:21 UTC	16384	OUT	Data Raw: be d0 b1 d1 85 d0 be d0 b4 d0 b8 d0 bc d1 8b d0 b5 20 d0 b4 d0 bb d1 8f 20 d0 be d1 81 d1 83 d1 89 d0 b5 d1 81 d1 82 d0 b2 d0 bb d0 b5 d0 bd d0 b8 d1 8f 20 d0 bf d0 bb d0 b0 d1 82 d0 b5 d0 b6 d0 b5 d0 b9 2c 20 d0 b8 20 d0 b4 d0 b5 d0 b9 d1 81 d1 82 d0 b2 d1 83 d0 b5 d1 82 20 d0 ba d0 b0 d0 ba 20 d0 ba d0 be d0 bd d1 82 d1 80 d0 be d0 bb d0 bb d0 b5 d1 80 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 20 28 c2 ab d0 9a d0 be d0 bd d1 82 d1 80 d0 be d0 bb d0 bb d0 b5 d1 80 20 d0 bf d0 bb d0 b0 d1 82 d0 b5 d0 b6 d0 bd d1 8b d1 85 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 c2 bb 29 20 d0 b4 d0 bb d1 8f 20 d0 b8 d0 bd d1 84 d0 be d1 80 d0 bc d0 b0 d1 86 d0 b8 d0 b8 2c 20 d0 bd d0 b5 d0 be d0 b1 d1 85 d0 be d0 b4 d0 b8 d0 bc d0 be d0 b9 20 d0 b4 d0 bb d1 8f 20 d0 b0 d0 bd Data Ascii: , ( ) ,
2024-04-05 23:18:21 UTC	16384	OUT	Data Raw: e7 03 d0 a1 d0 be d0 b3 d0 bb d0 b0 d1 81 d0 bd d0 be 20 47 44 50 52 2c 20 d0 b2 d0 b0 d1 88 d0 b5 20 d1 81 d0 be d0 b3 d0 bb d0 b0 d1 81 d0 b8 d0 b5 20 d0 bd d0 b0 20 d0 be d0 b1 d1 80 d0 b0 d0 b1 d0 be d1 82 d0 ba d1 83 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 20 d0 b4 d0 be d0 bb d0 b6 d0 bd d0 be 20 d0 b1 d1 8b d1 82 d1 8c 20 d1 8f d0 b2 d0 bd d1 8b d0 bc 20 d0 b8 20 d0 be d1 81 d0 be d0 b7 d0 bd d0 b0 d0 bd d0 bd d1 8b d0 bc 2e 20 d0 95 d0 b2 d1 80 d0 be d0 bf d0 b5 d0 b9 d1 81 d0 ba d0 b0 d1 8f 20 d0 b4 d0 b8 d1 80 d0 b5 d0 ba d1 82 d0 b8 d0 b2 d0 b0 20 d0 be 20 d0 b7 d0 b0 d1 89 d0 b8 d1 82 d0 b5 20 d0 b4 d0 b0 d0 bd d0 bd d1 8b d1 85 20 d0 be d0 bf d1 80 d0 b5 d0 b4 d0 b5 d0 bb d1 8f d0 b5 d1 82 20 d1 81 d0 be d0 b3 d0 bb d0 b0 d1 81 d0 b8 d0 b5 20 Data Ascii: GDPR, .
2024-04-05 23:18:21 UTC	16384	OUT	Data Raw: 8c 20 d0 b2 d1 8b d1 88 d0 b5 d1 83 d0 ba d0 b0 d0 b7 d0 b0 d0 bd d0 bd d1 8b d0 b5 20 d0 b4 d0 b5 d0 b9 d1 81 d1 82 d0 b2 d0 b8 d1 8f 20 d0 ba 20 d0 bb d1 8e d0 b1 d0 be d0 b9 20 d1 87 d0 b0 d1 81 d1 82 d0 b8 20 d0 a1 d0 b0 d0 b9 d1 82 d0 b0 2e 30 a8 05 38 a6 05 6a 10 08 a8 05 12 02 62 72 20 98 05 30 a9 05 38 a7 05 6a 2f 08 a9 05 12 05 23 74 65 78 74 20 98 05 2a 1d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 a8 05 6a 2b 08 aa 05 12 05 23 74 65 78 74 20 96 05 2a 19 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 98 05 6a 27 08 ab 05 12 05 23 74 65 78 74 20 92 05 2a 15 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 38 96 05 6a 2a 08 ac 05 12 05 23 74 65 78 74 20 e2 Data Ascii: .08jbr 08j/#text * 8j+#text * 8j'#text * 8j*#text
2024-04-05 23:18:21 UTC	2855	OUT	Data Raw: 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 70 6f 70 75 70 5f 5f 68 32 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 63 6c 6f 73 65 2d 70 6f 70 75 70 20 7b 0a Data Ascii: ; -webkit-transform: translate(-50%, -50%); transform: translate(-50%, -50%); z-index: 999; } .popup__h2 { text-align: center; font-size: 30px; } .close-popup {
2024-04-05 23:18:22 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:22 GMT Expires: Fri, 05-Apr-2024 23:18:22 GMT Last-Modified: Fri, 05-Apr-2024 23:18:22 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	49959	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	645	OUT	GET /steam/apps/553850/capsule_231x87.jpg?t=1709666906 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/jpeg Content-Length: 14527 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "64ff7692-38bf" Expires: Wed, 03 Apr 2024 18:00:03 GMT Last-Modified: Mon, 11 Sep 2023 20:20:34 GMT CF-Cache-Status: HIT Age: 272976 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c0cef85c5f-MIA
2024-04-05 23:18:21 UTC	928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 00 03 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 03 00 02 09 01 ff c4 00 43 10 00 01 03 03 03 02 05 03 02 03 03 09 08 03 00 00 01 02 03 04 05 06 11 00 12 21 07 31 13 22 41 51 61 08 14 71 15 23 32 81 91 42 Data Ascii: JFIFCCWC!1"AQaq#2B
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 64 e2 0e ce a4 69 bc 13 07 6f 5a 67 7a 16 fe 1e fa 54 3f a4 fe 7f 85 0d 57 fa d2 db f4 0b 6a 9f 6d 39 11 da dd 4a 92 c4 a7 ea 12 0f ec 53 90 59 4a 8a 94 07 f6 b9 c0 1d 81 29 1d ce ba 6f 86 7f c3 46 4d dd c6 25 8f 12 5b 0e 2f 86 d2 4f db 19 8c 29 64 6b 07 fc a2 24 6e 79 57 3b c6 3c 5a f9 0d e1 b8 49 01 65 23 3b 87 fa 34 d8 72 cd dc cc 69 a4 9a 13 ea c7 d3 7d f7 7c 55 9d b8 6d aa 6c e9 f4 57 d3 fb 51 a4 ca 1e 32 f0 00 0a 64 15 12 b0 a0 0a cf 6c 15 60 6b bd da e2 4d 5a 5b 8b 74 80 84 8d 92 84 c0 f9 08 1a 6d 58 6b 9f 0f b8 fb ca b8 b7 41 51 3c d6 a9 27 bc a8 92 67 78 ea 74 8a ca 57 43 b2 ad c9 52 60 bd be 9e e3 07 0b 0f 36 50 bc e4 8e c7 19 e4 11 9e dc 1d 16 8b f0 f2 02 d9 d4 7a fc c1 e8 47 31 bd 08 8c 3f 2b 85 2f 27 5e 9f be 54 11 3a f1 ac 46 51 08 a8 c9 46 Data Ascii: dioZgzT?Wjm9JSYJ)oFM%[/O)dk$nyW;<ZIe#;4ri}\|UmlWQ2dl`kMZ[tmXkAQ<'gxtWCR`6PzG1?+/'^T:FQF
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 47 66 3a 32 03 ce af 68 57 b0 cb 4c ff 00 ef 3a 2a de ed 2e b5 c5 0a 81 5c da f2 c5 e6 81 65 c6 ca 96 e2 a7 41 33 1b 4f b9 3b d1 15 c1 1e 8f d3 9a 4a ee 7b e9 f8 f4 cb 66 03 88 12 1b 65 2a 7a 44 87 54 15 e1 c6 6c 0e 0b 8b 23 b7 6c 03 9f 4d 64 6f 3c 4e a7 c1 63 0b 92 b3 a1 51 d2 07 54 f7 ee 76 de b6 78 47 82 1b 0a f8 9c 61 29 e1 88 21 23 59 3d 15 a4 14 c6 e0 6e 74 a0 5b a7 a8 35 3a 90 fd 7e f2 8f 0a d0 15 07 9a 5d 1a dc 5c ef 0d e7 62 6c 01 0d bf 90 54 d2 13 bc 3a e1 4f c2 46 30 a3 ac 83 38 95 f5 b3 2a b0 b1 70 e5 24 95 28 0d 41 3b c2 b7 24 ed ad 74 3b 9c 0f 0c bd ba 46 25 7c c8 52 d2 02 52 95 1d 20 6d e5 d8 46 fa 55 7d f7 d5 db 2a 9b 6d 4f 99 56 ab c7 ae 35 21 c8 e2 0c c5 be b6 0d 4f 6e e4 a9 c6 92 d9 ff 00 43 88 8f 32 5b 03 2b 74 9d ca 24 60 9b b0 f6 af Data Ascii: Gf:2hWL:.\eA3O;J{fezDTl#lMdo<NcQTvxGa)!#Y=nt[5:~]\blT:OF08p$(A;$t;F%\|RR mFU}mOV5!OnC2[+t$`
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 98 a9 9b 3e 52 58 98 e0 25 08 8e c2 44 66 5c c0 e4 80 50 e1 00 72 49 c7 ae b9 8a b1 bb ce 35 b6 16 09 cc 10 8c fc b5 50 ce af 90 20 56 c1 9b 06 56 1c b9 20 41 51 8f 40 60 7d c6 a1 d8 7d 2c 71 1f 61 59 b9 9a 54 fa 95 31 44 db f0 aa 2f ad f4 d2 9a da 51 e2 b9 93 fb b2 9e ce f7 56 a0 4a 72 94 23 01 3a c8 63 de 25 4b 93 6f 68 e4 34 74 51 4e 85 66 75 f4 48 d9 31 b8 d4 ef 4e 2d ec f5 cc e0 db 61 d3 f5 3b 9a 50 fd 4c 74 3a b7 53 af 7f 9f 70 e5 c9 ac 3c 11 1e 04 d6 14 d8 71 42 37 0d e3 68 1b 96 80 4e ed a0 fa 92 72 75 a9 f0 d7 8a 53 7e bf 81 50 09 80 3c d2 00 48 d8 12 4e 93 b0 fd 6a db ab 1b 70 d2 ae 49 25 49 fe 9e 4a 1d a3 5d 37 22 b2 1d eb 6c d2 66 cc 8b 1e 24 d4 a2 74 42 e2 24 35 cf 82 85 02 52 71 9e 72 70 31 f1 f8 d7 53 c3 5c ba 60 b8 2e 12 4a 67 43 cc d2 2c Data Ascii: >RX%Df\PrI5P VV AQ@`}},qaYT1D/QVJr#:c%Koh4tQNfuH1N-a;PLt:Sp<qB7hNruS~P<HNjpI%IJ]7"lf$tB$5Rqrp1S\`.JgC,
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 2b 00 e5 57 62 26 52 7b 7c 89 ad 65 ad c5 b6 26 ce 52 98 23 97 4f 7d 8d 2d 2e 6e 91 b9 d2 0e a6 5a b7 84 32 67 50 e2 4c f1 1c 7b c3 c2 a3 bb b1 61 09 5a 47 64 a8 94 80 ae d9 38 e3 8d 6a 30 cf 13 23 c5 78 65 ce 0f 71 0d bc a4 81 13 a2 92 14 92 a2 09 e6 00 32 3a 6a 26 93 5d e1 a9 b3 7d 37 28 12 91 f4 30 45 39 2b eb a4 74 bb a5 74 21 5a 6d e9 0c 53 15 18 a2 9b 1f 6a 9f 9b 2d 39 73 60 0a 20 6d f1 0a 96 54 7c a3 68 c9 d6 0f 0f 6f 11 f1 2d fd fd ed aa c2 1b 51 52 4a d5 3e 50 b3 a0 48 1a 93 90 47 40 3d 69 b0 43 76 6c 34 c9 12 40 1a 0e dc cf bd 5e 74 ef a9 14 9e a9 5a ad d7 e9 0a 5b 4c a9 e5 c6 93 1e 49 4f 8b 15 f4 1c 2d a7 30 48 c8 c8 39 07 04 10 46 b2 18 d6 11 75 80 dd 8b 47 fc d9 80 52 4a 41 85 24 f4 11 32 36 23 91 a6 16 cf b7 70 82 53 a4 6e 3a 57 bd 6f a8 d6 Data Ascii: +Wb&R{\|e&R#O}-.nZ2gPL{aZGd8j0#xeq2:j&]}7(0E9+tt!ZmSj-9s` mT\|ho-QRJ>PHG@=iCvl4@^tZ[LIO-0H9FuGRJA$26#pSn:Wo
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: a2 ab b9 43 45 b5 82 46 6d bd ba 7e fa d3 1f e9 22 f7 a4 f5 0b a3 10 2c fa 8c b4 cd a9 c1 88 a8 d2 22 04 29 bc 47 2a 3e 1a 52 b2 4f 88 b4 8c 92 a4 e3 b0 e3 03 59 ff 00 19 59 5f e1 78 b7 f1 cb 54 65 4c a4 85 0d 61 40 6a a5 0f e9 0a db 5d 37 aa 2c 56 d3 ec 7c 2a cf 68 ed d0 7a 52 83 af 5d 2a b1 7a 2d 44 99 01 ba fc ea d5 eb 3c 95 33 05 a0 db 2d 42 69 4b c9 7a 4e dc 9c e3 f8 53 90 54 79 c0 4e b7 18 16 33 8a 63 59 6e 2e 2d d2 cd b8 fb 3b 95 2c f5 4c c4 20 75 23 5d 87 5a 01 fb 76 98 24 21 59 94 77 3f be 74 1f 46 6a 88 fc 08 d1 6a 54 a7 91 20 b1 e2 8d 89 c3 ee 95 8c a1 43 70 f2 a0 8c 9c 8e e3 91 a7 b7 46 e1 04 a9 0a 81 a6 fb 45 7a c0 65 40 05 09 3f 59 a6 2f 4e 3a c5 23 a6 29 b4 eb f7 cd 61 ca 65 9b 4b 8f 32 93 4b 7d 11 5c 75 e9 a9 75 68 51 86 07 01 41 a2 8f 10 Data Ascii: CEFm~",")G>ROYY_xTeLa@j]7,V\|hzR]*z-D<3-BiKzNSTyN3cYn.-;,L u#]Zv$!Yw?tFjjT CpFEze@?Y/N:#)aeK2K}\uuhQA
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: ac fd 45 59 55 09 29 90 dd d7 71 52 9b 29 00 33 16 03 7b 09 e7 9f 3b 2a 39 fe 7a d2 2b c4 58 6a d4 72 be 44 74 03 f1 06 97 7c 13 e3 74 d0 5d a9 d7 ba 1d a5 d3 aa ed 2e 8f 21 c9 d5 9f d5 25 3f 0d 33 e2 a9 68 75 a7 24 95 25 4e 11 b4 64 b6 49 c7 18 3e 9e 9a 58 71 fb 6b 4b 45 86 55 2b 92 44 8d c4 f3 db 95 5a 9b 45 ad c0 14 34 e7 52 af 3e a0 41 ea 25 83 67 aa 5b 55 07 2b 71 6a 6d be eb 14 40 a8 e1 3b 4a f7 14 12 4a 42 92 9c 10 4f ae 70 46 4e 80 3e 28 b3 bc 69 b6 dc 24 3a 0e a1 20 f7 db 7d 63 5a 92 ec 56 85 2a 36 ef 46 54 9e bd 59 d1 26 36 ea ae ea fd 41 08 24 16 24 c3 6f 62 b8 23 07 63 49 3c 77 e0 f7 1a 7a 3c 47 87 36 42 d4 fa 88 e8 40 fc a8 6f 85 74 e9 96 93 35 8a ab 77 45 e5 56 ab c4 8c 62 b1 2e 4a 9d 6d a2 00 20 7b 9c 7a 9e e7 e4 fa eb 89 e3 78 93 57 57 6e Data Ascii: EYU)qR)3{;9z+XjrDt\|t].!%?3hu$%NdI>XqkKEU+DZE4R>A%g[U+qjm@;JJBOpFN>(i$: }cZV6FTY&6A$$ob#cI<wz<G6B@ot5wEVb.Jm {zxWWn
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 62 b8 be 58 ea 0c ee 01 d5 2b 86 97 85 0c 67 d7 4e b1 57 53 71 66 a6 12 d9 52 9c 42 88 91 a0 31 3a ce c7 5d 3b d2 db 74 96 dc cf 98 79 48 e7 be bc ba d0 ec 5b 9a c8 9b 11 87 c5 b7 6a 20 3a 80 b0 db d2 a2 21 69 c8 ce 0a 4a 72 0f c1 d2 46 af f0 e7 10 16 86 1a 00 ff 00 a9 00 fb 82 34 a2 0a 2e 24 82 b5 7d 6a 41 ad 59 ad 8d eb b7 2d 26 d3 8c 95 19 90 f1 ff 00 0e a7 f1 d8 76 dc 16 7f bd bf ca a3 95 e3 b2 d5 f2 35 d1 35 9b 3d 6e 6c 4d bb 6a a8 f7 ff 00 bd c3 e7 fc 35 0f 8d c3 62 4b 0c ff 00 7b 7f 95 7b 95 f8 9c ea f9 1a ea d4 cb 39 9c ad cb 72 d5 8e a3 dc fd c4 4f f7 ed d4 57 89 e1 a0 42 99 66 3f de dd 40 36 fa 8f 90 a8 fb 1a 9b 1e ab 6a 21 2a 6d 9a 4d b4 86 dc 1e 60 dc a8 d8 57 f2 03 9d 0f fc 5f 09 4c 9e 13 1d ff 00 98 d5 5a 6d ee 4e a4 af 4e ca a8 35 ba fd 9b Data Ascii: bX+gNWSqfRB1:];tyH[j :!iJrF4.$}jAY-&v55=nlMj5bK{{9rOWBf?@6j!*mM`W_LZmNN5
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 35 2a 28 5e c3 c0 c2 01 c1 ec 40 23 3a ae f7 05 50 65 4f 26 e5 d2 b4 82 53 e6 1b c1 ec 0e be b5 eb 37 a0 ac 20 b6 90 09 13 a7 7f 5a 5e da 37 35 d1 d6 aa ea 2d da eb 2e db f4 a5 32 eb d2 9f a4 34 b8 eb 94 ad a1 38 70 a8 a9 24 10 47 04 1e df 8c 66 ac ee af 31 e7 85 a5 d0 2d 22 09 56 50 52 54 62 35 26 47 d3 f4 39 fb 76 6c 90 5d 6c e6 3a 44 c1 8a 6d 33 d2 57 18 00 22 f7 bb 42 40 da 13 f7 ed e0 0f c7 85 ad 9f f0 63 11 f1 4e ff 00 70 ff 00 eb 49 be 28 1f fc 69 f9 1f ce 90 9d 54 95 78 d3 2e f9 f4 78 95 8a dc ba 6c 37 9a 5b 4e c8 52 9d 2a 50 4a 56 15 e5 48 04 85 1f 6e 08 1e da e5 18 d3 b8 95 ad eb 96 cd b8 e2 d0 92 08 99 3c 81 e9 1a 1d ab 47 66 dd ba d9 0e 29 22 4c d5 03 1d 52 bd 23 c9 43 32 6e 2a 9a 56 83 85 07 1d 29 24 fe 34 81 78 e6 2e 09 1c 75 83 d2 4d 12 2c Data Ascii: 5(^@#:PeO&S7 Z^75-.248p$Gf1-"VPRTb5&G9vl]l:Dm3W"B@cNpI(iTx.xl7[NRPJVHn<Gf)"LR#C2n*V)$4x.uM,
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: a8 6c c7 c3 cf fc bf eb 44 0c 1e 7f f2 7d 3f 5a 9a 8f ab 8d c9 ca ad 50 9f f6 96 7f fc 5a 1c f8 e8 f2 b5 9f f9 ff 00 d6 bd fe 0c 06 ee 7d 3f 5a 55 d6 aa e8 bd 2e 9a 8d 6d 51 8c 6f ba 77 c4 f0 42 f7 ec e0 71 9c 0c f6 ef 8d 73 2c 5a f7 e3 ee 5c b8 cb 97 31 98 99 fa e9 4e 18 67 82 80 89 98 ab ea 1b e2 29 d8 49 28 59 c0 e3 58 eb a6 8a d3 3d 29 8a 34 ab f4 38 14 a0 a2 ad 89 27 19 27 19 f8 1a 05 8b 72 e6 a7 6a f9 46 2b ac 87 59 7e 22 f6 14 b9 b1 38 4e 15 ca 7e 3e 74 cd e0 85 20 81 ca a9 48 20 d2 82 f7 af 31 72 db 75 5a 64 58 c2 4b 32 50 ec 64 38 fe 52 da dc 48 38 58 c7 25 21 78 03 d0 e0 fa 68 cb 26 1c b0 7d 0e ad 50 44 13 1a 90 27 6e c4 8d 4f b0 a6 09 48 71 0a ac 4d 73 46 b8 69 ed 2e 8d 50 65 50 93 bf 98 bd c1 38 00 9c fa 27 80 40 d7 68 b7 72 d5 d5 7c 43 47 37 Data Ascii: lD}?ZPZ}?ZU.mQowBqs,Z\1Ng)I(YX=)48''rjF+Y~"8N~>t H 1ruZdXK2Pd8RH8X%!xh&}PD'nOHqMsFi.PeP8'@hr\|CG7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	49960	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	646	OUT	GET /steam/apps/1675200/capsule_231x87.jpg?t=1699990406 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/jpeg Content-Length: 10095 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "6553cabb-276f" Expires: Wed, 03 Apr 2024 15:33:31 GMT Last-Modified: Tue, 14 Nov 2023 19:30:03 GMT CF-Cache-Status: HIT Age: 283256 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c118190291-MIA
2024-04-05 23:18:21 UTC	928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 00 01 08 09 0a ff c4 00 42 10 00 01 03 02 05 02 04 03 06 04 02 08 07 00 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 22 41 51 09 14 61 23 32 71 81 91 Data Ascii: JFIFHHCCWB!1"AQa#2q
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 13 eb e3 47 6d d4 8f cc 14 9c 28 53 0e 08 c6 a8 b4 99 57 11 b3 3c 0b fa 26 5b 2e b1 fb ed 23 f7 c1 08 04 23 51 91 6a 52 7f e0 9d a7 54 87 b4 3a 83 4b 3f a1 20 fe d8 4a 43 b2 4d 2f 25 57 a1 24 a9 fa 24 f4 24 73 b8 47 52 93 fa a6 e3 02 61 a5 32 3e d7 80 4a 5c 49 69 5f d2 e0 da 7f 7c 09 11 d5 15 e1 85 72 9b 28 7d 30 42 8c 22 d4 d1 17 e3 02 21 03 c3 c2 94 a1 04 a0 e1 ca 21 6b 67 d3 02 50 b5 b7 ea 30 24 b5 b7 0e 51 0b 36 e0 94 a1 66 d3 82 52 4b c2 71 24 21 06 f0 26 02 10 6f f6 c0 9c 29 9e 8a d3 62 d5 75 93 21 41 9d 19 99 b0 a4 d7 e0 32 fc 69 08 0b 6d d6 d5 21 01 48 5a 4f 05 24 12 08 3d c1 c0 85 ee ee 71 e8 0f a7 fc ed 11 d6 25 e9 8d 16 9c 56 2c 1d a2 b6 aa 7a 90 6f 7b a7 c1 29 17 fc 8e 05 15 c2 bd 4d 7c 21 2b 19 52 1c dc c1 a4 35 39 19 9a 0b 40 ba bc b9 51 29 Data Ascii: Gm(SW<&[.##QjRT:K? JCM/%W$$$sGRa2>J\Ii_\|r(}0B"!!kgP0$Q6fRKq$!&o)bu!A2im!HZO$=q%V,zo{)M\|!+R59@Q)
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 84 a0 91 e5 b2 6c 67 0a 32 d5 a9 b9 53 45 24 16 c3 19 9a 6c 58 e8 79 ed ce b0 f9 71 d5 c6 f0 8b 88 75 c0 f3 49 4a 5c 42 81 47 84 d8 56 f2 a4 27 75 f7 28 35 08 07 65 37 e9 f3 a5 7a ce 71 cb d4 1c c1 16 4c 68 ce d5 16 14 e9 5a 7e d2 0c 75 5c 36 a6 c9 f2 95 ae ca 27 f9 92 2d 61 c9 c7 17 75 c7 9f 52 ee af 0f b3 a2 e7 39 98 9f f1 9e 60 fa 7d 7e 0b af b2 e0 96 f6 b4 69 df 71 1a a1 a1 c0 90 3f c8 f4 0d f5 ea 76 1d d7 58 e6 6e 9b 28 b9 1e 8b 54 cc b9 7a a9 51 a6 57 20 c4 0a 8f 32 24 c2 d8 8d b0 1d eb 3e aa 05 3d ee 7d cd f1 99 63 42 e6 d2 d8 0b 97 ea 7e e4 fa ad 1f 1b e2 4f af 70 ea f6 d4 a2 98 80 1a 33 85 c4 39 f9 fa de 7a a1 50 e9 ad 44 7a 55 7a b5 57 43 34 a6 96 85 25 4f 78 a9 3b 94 90 af 37 86 a2 5b 55 fb 73 7c 6c e8 dc 53 a7 e6 3d cf 1a 5a 32 67 02 37 9f 45 Data Ascii: lg2SE$lXyquIJ\BGV'u(5e7zqLhZ~u\6'-auR9`}~iq?vXn(TzQW 2$>=}cB~Op39zPDzUzWC4%Ox;7[Us\|lS=Z2g7E
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 5a cf df 0d ed 4f d3 cd 58 c9 79 06 64 fc bd 2e 76 6e 75 f6 a9 73 63 4f 5f 80 4b 48 de b2 e2 4b 61 c4 00 9b 72 10 45 cd af 86 1d cd 56 5a e9 80 ac 4f fc 1a b5 a9 d0 52 ba f6 4f 48 3f d3 51 90 7f fa d8 35 84 83 6a 0d a1 74 fe 93 e8 b6 75 a3 3b 4f d1 6c c8 dd 0e 4d 6a 85 42 8d 55 f1 e2 4c 5f 82 e3 69 74 b4 cb 89 bb 69 52 5c 0a 6c 92 40 36 b7 7e 40 3c f3 6c 0d 3a af 0c f7 5c 4b ba 19 ea b7 4f bb 65 76 b4 d4 f7 da 00 8d c4 05 6d e6 4d 28 cf 39 47 2c 55 ab 0f 8a 75 5d b8 10 de 94 e3 06 62 90 a7 82 10 a5 14 dc b4 47 20 5a e4 7a f6 c6 69 65 73 ec 60 83 cc 9c fc a3 3f 45 8c 0d 21 2e 26 23 a0 fd 67 1f 55 c1 fd 1e 51 73 36 b6 ea 6d 43 54 aa ac 32 ba ec c7 5c a7 65 98 2f 2f 63 31 d4 ab f8 8e 82 41 fb a9 b8 dc 06 e2 02 c8 1c 01 8e 07 8d 53 6b 59 4b c3 7c 3c c3 aa 65 Data Ascii: ZOXyd.vnuscO_KHKarEVZOROH?Q5jtu;OlMjBUL_itiR\l@6~@<l:\KOevmM(9G,Uu]bG Zzies`?E!.&#gUQs6mCT2\e//c1ASkYK\|<e
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: cb b5 d5 28 a8 5b d3 9e 31 59 03 56 14 db ab 4e 77 55 3f c2 33 3b 57 33 d7 53 39 aa 7e 61 ac cc ae cf 46 51 75 a4 ca a8 3e b7 9e 08 13 23 10 9d ca 27 8b 92 6d f5 c2 22 10 cc ee ad 9e ac 35 0b 47 28 19 4f 56 e9 d4 3d 65 cc ab cf 8f 3f 3d a5 50 97 35 f7 59 66 63 8f 6c 90 cb 65 4c d9 29 4d 96 84 a4 39 b5 00 10 9b 62 87 b4 3a 26 71 9c 63 e6 a7 a4 3b 08 7f 0c 6a 34 6c ff 00 2a 56 75 6a 9b 32 95 41 c9 f0 45 12 97 4b f1 50 fc 75 4a 71 21 4f 48 4a c2 42 d4 e8 6c 04 9d dd 83 e6 dd ce 39 de 19 c2 9f 67 75 5e ee b3 83 df 50 ce a8 20 ff 00 d6 36 00 72 85 9b 56 a0 2c 6b 1b 80 15 a7 d4 b6 9a d4 f5 f3 a4 53 5c d4 1a 61 a2 e6 dc ba d4 ba a3 f1 a2 ad 71 50 1b 40 74 16 d4 a2 49 0d 16 c3 4e 2b 9b 12 d0 f4 c6 55 f3 ef 1d 67 e6 50 64 54 04 63 0e c6 a1 3b 6e 74 c9 1d d2 a4 e1 Data Ascii: ([1YVNwU?3;W3S9~aFQu>#'m"5G(OV=e?=P5YfcleL)M9b:&qc;j4l*Vuj2AEKPuJq!OHJBl9gu^P 6rV,kS\aqP@tIN+UgPdTc;nt
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 37 3b 35 b9 35 9a 85 31 ea 5a a9 35 34 3c c4 56 c2 9f 69 d4 2d 32 59 43 ca 3c 34 12 42 9b 1c ab bf 1c eb 8e 56 70 5d 20 bf 89 ed 53 58 f2 f6 69 a7 d1 74 06 8d 2e 53 f1 9c 8a f3 e9 cc 0c f8 e1 4f 25 68 4b 88 6d 71 d2 b7 79 24 9d bf 4b da f8 5a 53 95 51 e4 fe ba f3 cf 4c fd 35 0d 2c a0 69 9c fc 91 5f 25 6e 2b 38 4f 71 61 c5 c8 5b c1 6b 77 c0 71 8d 84 f8 60 34 3c e6 c1 29 3c da d8 61 a0 a5 25 1f a3 3f 16 5d 47 c9 74 dc c3 4e d4 7a 62 35 66 15 51 08 6d a6 e7 48 6a 0f cb 22 cb 4b a8 3e 1b 0a 0e 25 61 49 b8 23 8d bf 53 87 a1 47 52 80 e4 1e b9 4e 9d 74 c7 9e b4 62 95 92 08 83 98 a5 4c 7a 3d 59 55 75 07 61 21 fd 81 29 d8 1a fb 45 20 20 79 b7 26 e7 d0 60 d1 3b a0 39 2c 73 e2 61 ab 33 b2 e6 98 50 a7 2a 23 94 fc 97 36 24 a9 0e 30 54 89 35 a4 47 29 08 6e 4b 8a 2a ee Data Ascii: 7;551Z54<Vi-2YC<4BVp] SXit.SO%hKmqy$KZSQL5,i_%n+8Oqa[kwq`4<)<a%?]GtNzb5fQmHj"K>%aI#SGRNtbLz=YUua!)E y&`;9,sa3P#6$0T5G)nK
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 3d 28 c8 fa a4 e5 42 9f 2d 92 da 60 ce 76 44 54 38 d2 d2 6c 9d 8a f1 1b b9 04 da f6 c7 3e fb 56 b4 b8 32 a0 c2 f4 0a 1c 70 d4 63 1f 56 dd ed 0f 00 82 04 83 39 1d c4 ee 26 17 36 67 0e 8f f5 8f 22 a1 d5 d4 32 05 52 44 66 cd be 62 96 94 cd 41 1e ff 00 64 54 7f 51 8a 7c 97 81 b4 fa 2d a3 38 85 b3 ce 9d 70 7a 1c 1f aa a9 a7 c2 7e 95 25 71 a6 c7 7a 14 84 fd e6 a4 b6 a6 d6 3f 25 00 71 4e db ac e6 90 e1 2d ca 4f 70 47 d3 0e 14 96 b8 c1 08 44 2c 2d f7 90 cb 69 dc b5 10 94 a4 77 24 f6 18 c7 79 e4 15 cd 0a e9 a7 51 5f cb d4 88 70 e1 7c bb 8e 32 92 5f 4b c4 80 e2 cd 8a 88 50 ec 41 16 fc 31 52 92 c5 54 24 37 73 22 94 f8 1e aa 8c b4 bc 3f 4b 83 fb 62 29 82 89 15 da 72 97 b5 6f fc ba ff 00 a6 4a 14 d9 ff 00 dc 2d fb e0 42 4a e3 ac 55 66 36 d4 75 87 98 65 5e 2b ae 23 94 Data Ascii: =(B-`vDT8l>V2pcV9&6g"2RDfbAdTQ\|-8pz~%qz?%qN-OpGD,-iw$yQ_p\|2_KPA1RT$7s"?Kb)roJ-BJUf6ue^+#
2024-04-05 23:18:21 UTC	953	IN	Data Raw: 8f cb 02 13 95 3d c4 95 7d 70 21 3f b5 16 3c c6 f6 bc cb 6f 8e 3e fa 41 c0 85 83 28 43 51 df 1d 6f c1 5f f5 47 70 db f4 38 42 50 8c 45 3a bb 04 de 2d 4d 99 60 76 4c 94 6d 57 fd 43 0d 10 94 ab 36 d6 a1 b5 b2 ab 48 75 f6 3b 6e 40 0f b6 7f 23 7c 08 48 be 6b 25 d7 4d 9f 86 cc 37 af c9 68 aa 3a 81 fc 39 4e 0d 94 72 a5 d9 5e b1 99 f2 7b 89 91 93 75 0e b5 46 52 6c 52 95 3c 5c 6c 01 d8 5d 24 8f db 19 4d ba ac d1 01 d8 ef 9f ba c3 75 95 bb ce a2 c0 0f 51 83 f3 10 ac 3a 6f 54 3a b1 47 ca 73 72 fc ea 36 5b cd f4 d9 b3 d1 51 98 f9 60 09 52 96 92 0e d5 ac 28 12 92 52 09 16 bf 26 c4 5c e3 2d 9c 41 e2 a8 aa f1 24 08 11 88 f9 61 60 bf 85 52 34 5d 42 99 80 e3 a8 cf b5 3d 8c e6 3e 28 b8 7d 53 53 1a cc 34 cf f7 4d 77 49 0b d3 da 35 3a 8e 5f 9a fb 89 4b 1b 8e f2 dc 75 28 02 Data Ascii: =}p!?<o>A(CQo_Gp8BPE:-M`vLmWC6Hu;n@#\|Hk%M7h:9Nr^{uFRlR<\l]$MuQ:oT:Gsr6[Q`R(R&\-A$a`R4]B=>(}SS4MwI5:_Ku(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	49962	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	646	OUT	GET /steam/apps/1938090/capsule_231x87.jpg?t=1712178612 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/jpeg Content-Length: 9294 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "652f28b0-244e" Expires: Wed, 10 Apr 2024 21:10:53 GMT Last-Modified: Wed, 18 Oct 2023 00:37:04 GMT CF-Cache-Status: HIT Age: 180439 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c1387f6db5-MIA
2024-04-05 23:18:21 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 04 05 06 07 02 03 08 09 ff c4 00 48 10 00 01 03 02 05 02 04 03 03 07 08 08 07 00 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 22 41 51 09 61 71 14 16 32 15 23 42 Data Ascii: JFIFCCWH!1"AQaq2#B
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: b3 00 03 1c 35 7d 51 18 47 e9 82 46 93 bc e8 45 81 3d cd 87 cf 0e b5 b2 a1 d5 a8 1b 00 f3 5a 59 52 3c d6 3c 0e 0f cb 0b 20 a8 94 9c dc c1 d9 23 ab a4 86 7c 82 de 83 9b 5b 0f d0 39 ca ad e2 6c 22 9f 83 d8 a3 92 5d 2e 12 b5 12 05 ac 46 2c 98 23 01 61 ee 2a 1a 84 b9 c9 1a 50 95 a1 4a 16 fa fa e1 f9 23 0a ad ad 6b 9a 5c 3e 68 78 27 60 01 5d cf a7 ae 06 ac a1 dd 1d 30 0a d1 29 2e a9 44 36 cf 07 8b 8e c3 0e 30 b4 0c 95 0a e1 b5 5c 62 9b 3f 44 89 e6 9f 65 2b de 9d e4 f6 b0 c4 86 96 bb 65 57 56 9d 7a 41 da c4 ad 0d 47 21 ad ee 25 44 9f ea fe 1f 9f ee c3 85 d9 80 a1 d3 a2 43 35 d4 07 3d 36 f3 fe e9 c2 33 b1 12 ad cb 65 4f 14 59 b0 e3 7e 84 f3 db f5 62 33 85 48 80 63 9a ba a1 52 d1 a7 53 d8 5c 44 36 47 29 ce df 84 fb 52 7a c5 6a 2b 2d 3a ea 23 b9 e2 b4 76 80 b1 6f Data Ascii: 5}QGFE=ZYR<< #\|[9l"].F,#a*PJ#k\>hx'`]0).D60\b?De+eWVzAG!%DC5=63eOY~b3HcRS\D6G)Rzj+-:#vo
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: f2 97 98 71 e6 12 ea de fc 27 7d 8a 88 08 ba 40 00 73 8b fa 36 b4 69 b0 43 65 72 3e 21 c7 b8 95 ed 7a a1 f5 8b 40 26 00 30 31 fd 96 e6 7a 29 d1 0d 38 cd 3a fb 9d 1f c9 51 f3 54 0a 05 39 35 0a 7e 5f a8 bc 55 0e 35 a1 aa 4b 8d b5 c1 db bd 69 00 13 bb 68 e0 0b 5c 19 a1 ad 6c c0 59 a7 d7 ab 52 03 9d 2b 4e 5d e9 83 44 35 66 97 d3 8e a3 c6 d2 ea 4e 5b 6f 33 cd 71 b9 f4 08 ea 2e c4 7d 97 69 53 9f 08 74 10 37 94 39 1d b5 25 56 1e bc 1e 2c 60 04 d9 7b b3 25 52 4e 74 ff 00 a7 09 f8 b4 35 a7 43 26 d2 86 48 34 ef 14 d0 bc 0f e4 db bf 25 17 6f b7 df 7f 9b eb 82 8c a3 0f 3a 54 63 59 3a 15 a3 ea 5f 57 3a bb 42 ca b5 7a 46 9c 65 ac bf 3b 2e d3 22 42 4c 17 5e 6d 72 6a 10 9b 2d a1 09 47 e1 05 c4 ac a9 44 d8 15 fd 6c 92 dc a7 99 54 b5 a2 54 4f 22 f4 59 4f d3 4d 5e d0 61 9b Data Ascii: q'}@s6iCer>!z@&01z)8:QT95~_U5Kih\lYR+N]D5fN[o3q.}iSt79%V,`{%RNt5C&H4%o:TcY:_W:BzFe;."BL^mrj-GDlTTO"YOM^a
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 52 1a bc 8e a9 53 9e a4 d4 65 42 90 12 1f 8e ea 99 73 69 b8 dc 95 14 9b 1f 5e 41 c2 53 b1 d5 26 f4 c0 44 85 87 1c df df e5 80 8e 06 10 09 be 02 00 4a 3d b7 1c 02 4f d3 01 1c 63 0b 73 0d 36 a4 af 72 c0 3c 79 48 ef 84 38 9e 41 49 a3 4e 99 07 53 b3 d1 3f e5 d8 aa 71 e4 a4 21 2b f7 0a 17 e3 e5 8a eb 97 80 d9 95 b3 e0 56 ee 7d 40 d0 d0 7d 44 e1 58 54 78 61 24 33 b2 c0 0e 55 f2 c6 6a b3 e7 c5 2b b7 70 cb 60 df e0 e9 4f 82 9a 96 85 d2 9e 08 1d 85 f1 03 bd 25 6b 3e c0 da 62 5a 31 f8 a9 4f 8a 39 27 8b 9f 5e 0e 2a 00 5d 13 bc 03 25 26 97 2b 62 48 07 be 1d a6 c9 50 2e ae 34 88 07 74 cd 22 aa 90 14 14 d8 1c f3 cf 38 9a da 27 91 59 8a bc 45 a0 1d 6d 8f 8a b0 34 b3 a6 0d 51 d7 ac bf 2e bd 91 b2 a9 ae d2 62 cc 54 07 5f fc a3 12 3e c7 d2 84 2d 49 da eb a9 51 b2 5c 41 b8 Data Ascii: RSeBsi^AS&DJ=Ocs6r<yH8AINS?q!+V}@}DXTxa$3Uj+p`O%k>bZ1O9'^*]%&+bHP.4t"8'YEm4Q.bT_>-IQ\A
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 45 1a 9b a3 14 08 b5 fc e1 97 7f 24 51 65 ca 44 46 24 aa 7c 57 fc 47 54 85 b8 94 ed 69 c5 28 79 5b 59 b9 16 e3 de d7 91 52 bd 5a 4c d5 51 b0 aa 6c 78 55 8d fd c9 a1 67 5b 51 19 c8 22 40 f5 03 65 17 a0 65 ef b3 ed 0e 14 11 7f 20 47 60 3f 7d b1 9e b8 b9 d5 30 bb 07 06 e0 9d c4 0a 84 79 47 d6 48 53 48 50 11 7b 8b aa de aa 1c e2 8d f5 0e cb a9 da 59 b0 99 19 8e a9 72 58 ee 79 1e 86 fc 62 3e a5 70 da 3b 9d bd df 5e 5d 42 d4 65 0b 28 de e9 03 9b 61 61 8a 29 b9 10 4c c8 4d 33 6b 21 b5 ac 6e 48 50 e4 6e 1d b1 32 9d 02 42 ce 5d f1 40 c7 38 48 91 d5 57 99 97 31 2d b5 a9 29 75 48 28 24 6c 47 af d4 e3 4b 69 6c 08 92 17 13 e3 fc 71 ec 71 6b 5c 41 1c 87 e6 76 5e b4 fc 1a ea 6b 77 a5 9c dd 25 f2 54 1a cd f2 cf 1d ec 20 c1 38 d1 52 a6 da 6d 86 ae 35 7f 75 52 f2 af 79 54 Data Ascii: E$QeDF$\|WGTi(y[YRZLQlxUg[Q"@ee G`?}0yGHSHP{YrXyb>p;^]Be(aa)LM3k!nHPn2B]@8HW1-)uH($lGKilqqk\Av^kw%T 8Rm5uRyT
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: b4 94 a8 b8 fb 6a dc 14 ca 89 f2 91 62 39 ee 04 d6 88 59 ca af 35 0c 9e 4b 95 7a 67 ea 6f 39 74 b9 a8 4c 66 8c a7 2b 73 2b da dd 46 92 fa 8f d9 aa 2c 03 72 db 83 d0 8e 4a 56 39 49 3c 70 48 21 37 c9 49 3a bf eb 23 37 f5 6f 9d 85 46 ae 4d 27 2c c1 52 85 27 2f 32 e9 5b 31 52 78 2b 59 b0 f1 1d 50 ee b2 07 b0 00 71 80 80 10 ba ef a7 2f 89 46 87 74 eb a3 b1 29 94 ec a1 9d ab 99 f9 74 a8 cd d4 aa 75 06 e2 94 4d 94 cb 09 6d b6 7c 73 20 ad 11 5b b0 6d b4 86 fc 88 17 d8 54 55 73 94 50 b8 1f 5d f5 df 37 75 13 a8 95 0c e5 9c aa 06 5d 42 49 d8 cc 76 ee 18 86 c8 24 a1 96 51 73 b5 09 b9 f9 92 49 24 92 49 24 a0 17 52 f4 1d f1 2c 9f d3 4d 35 cc 9b 9f 23 54 f3 3e 40 4a 54 b8 09 81 b1 c9 b4 d7 3b ec 68 38 b4 25 4d 28 f7 41 50 da 4d d3 ea 08 05 11 08 ba e9 eb a7 21 75 33 9d Data Ascii: jb9Y5Kzgo9tLf+s+F,rJV9I<pH!7I:#7oFM',R'/2[1Rx+YPq/Ft)tuMm\|s [mTUsP]7u]BIv$QsI$I$R,M5#T>@JT;h8%M(APM!u3
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 0a 11 ca 2c 04 68 c6 09 18 43 01 1a 3b 60 23 84 61 37 f4 c0 4a 01 64 94 e1 32 9c 0d 5b 50 8c 26 53 ed 6a da 94 e1 12 a4 35 a8 f6 60 4a 56 85 81 45 b0 60 a6 8b 61 6b 29 c2 81 4c 96 ad 8d c7 52 d0 57 fa 03 d7 df 09 2e 00 c2 79 94 5c e6 97 f2 4b 29 f4 89 32 ca 4b 76 46 e2 36 97 3c a9 3f 3b fb 61 8a 95 98 c9 05 5a d9 70 cb 9b 92 0d 3c 4e d3 81 eb 3d 06 67 e6 a7 79 63 23 f8 e9 71 c7 a4 f8 b2 0d ee 96 d2 53 63 7e 6e 4f 70 47 6c 67 ae f8 86 9c 35 b0 17 62 ec ff 00 64 3b e0 ea 95 aa ea a8 67 00 11 99 cc 93 b8 23 6c 6d 90 9c 55 94 63 bb 0d d4 29 b4 59 0b 29 4a 92 82 14 a5 0b 8b ab df fe f8 8c 2f 5e 1e 08 3b fd 61 5e bb b3 16 f5 2d dc c7 34 78 49 00 81 04 91 22 5d d6 3f 03 95 14 73 2e c4 fb 42 a3 f8 49 0e 0e 77 8e 46 df 53 c7 ae 2e 05 cd 4d 3a e7 0b 9a d4 e0 76 9d Data Ascii: ,hC;`#a7Jd2[P&Sj5`JVE`ak)LRW.y\K)2KvF6<?;aZp<N=gyc#qSc~nOpGlg5bd;g#lmUc)Y)J/^;a^-4xI"]?s.BIwFS.M:v
2024-04-05 23:18:21 UTC	151	IN	Data Raw: 35 75 56 6c a2 60 68 30 02 53 15 6c 30 e1 49 2a dc 40 24 02 79 3d af 86 9e 1c e1 2a c2 d9 d4 29 3c b4 ef ed 4a 8a d6 84 a5 24 8d df 2e d8 64 00 64 ab 12 e7 b4 06 93 94 7e 38 55 81 04 fd 7b 60 69 47 de 83 ba 73 81 15 52 4a ad 6b 5b 8f 96 22 d4 7e 85 7d 67 6e ea f3 1b 42 90 53 c7 d9 59 1b 85 af e9 7b df e7 8a da 9e 33 85 b4 b2 9b 7a 43 5e 12 a5 9d a4 9b 71 86 86 55 83 ce 9c f2 4a 5b 46 d1 c6 19 25 4e 63 43 42 d9 84 a7 c2 2b f3 6f 5c 1a 4c c1 85 ff d9 Data Ascii: 5uVl`h0Sl0I@$y=)<J$.dd~8U{`iGsRJk["~}gnBSY{3zC^qUJ[F%NcCB+o\L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	49963	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	645	OUT	GET /steam/apps/359550/capsule_231x87.jpg?t=1711470437 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/jpeg Content-Length: 8231 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "6307785d-2027" Expires: Tue, 09 Apr 2024 16:27:20 GMT Last-Modified: Thu, 25 Aug 2022 13:25:49 GMT CF-Cache-Status: HIT Age: 283860 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c1492331f5-MIA
2024-04-05 23:18:21 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 01 01 01 01 01 00 00 00 00 00 00 00 00 04 02 03 05 06 07 08 01 09 00 0a ff c4 00 3f 10 00 02 01 03 02 04 04 04 04 03 06 05 05 01 00 00 01 02 03 04 05 11 00 06 07 12 21 31 08 13 41 51 14 22 61 71 09 32 81 91 42 Data Ascii: JFIFCCW?!1AQ"aq2B
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 2b 73 e1 4f b3 13 83 f4 d5 a2 18 62 db 64 31 02 63 50 87 b1 f3 0e 3f ae b6 49 90 da 32 a5 4c fa eb cd 3b 05 2a 28 cf 5d 34 84 38 b8 00 f5 c6 a8 91 5d 3d ff 00 6d 30 0f 8a c7 70 36 66 bb 8a 1a a6 b5 2d 40 a4 6a ef 25 bc 81 31 52 c2 33 26 39 79 ca a9 3c b9 ce 01 3a 04 32 89 cd d8 11 aa a1 0e 2c 79 38 c1 ce a9 21 0e 88 71 ea da 28 2c 50 04 76 cf db 1d f4 c4 2a 35 66 3f 31 23 db 1a 02 c2 11 18 1c 06 6c 9e 80 6a 92 15 86 d2 d3 31 f9 5a 47 0c 7d 3d f5 6a 3e c9 b0 a0 9e 43 72 87 2f f4 38 d3 a4 84 9d 84 a2 c1 22 0c 33 07 c7 52 3a e8 54 16 c7 69 69 c7 39 32 2b c8 b9 ee 70 00 fd 75 51 48 96 d9 25 4f 48 cf 1b 05 94 a7 b7 40 73 fa e3 57 42 15 1d 25 5c bc cb e7 90 83 b8 0a 3a 8d 2d c7 b2 09 af b4 9a 42 07 98 c3 ff 00 10 72 3d fa 68 68 13 b1 90 83 18 49 70 0f 7e 80 60 Data Ascii: +sObd1cP?I2L;(]48]=m0p6f-@j%1R3&9y<:2,y8!q(,Pv5f?1#lj1ZG}=j>Cr/8"3R:Tii92+puQH%OH@sWB%\:-Br=hhIp~`
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 56 50 ca 66 40 41 19 04 73 0d 31 1f 6f b8 a1 55 c1 6d 9f e2 83 62 70 42 b7 80 7b 32 ba 9f 78 5b 9e a8 5e a3 b5 d2 46 69 58 79 e0 27 94 20 c9 cf 91 f9 83 a9 1c dd ba 75 e7 49 b4 e5 66 bb 5d 51 41 f0 9b e1 1f 61 6c ff 00 15 9e 21 ed f5 bb 6e d7 75 da d6 39 ed b4 56 9a 5b cd 2c 75 71 c1 f1 71 fc 49 44 f3 43 75 40 63 40 4f cc 43 0e a7 27 35 29 3d 28 51 8a b6 23 c3 47 87 bd 9b 6f f1 63 e2 97 6f de f6 6d 8a e9 6f a0 9e 8a ba d9 4d 5f 6c 86 78 a9 23 a9 59 e7 0b 0a ba 91 18 c3 a8 c2 e3 a2 81 e9 aa 94 9e 94 d0 a2 95 b2 c1 c7 3f 0b bb 33 73 f8 15 b4 dd ac 5b 2a c5 6f dc d6 eb 25 aa f6 6b e8 6d 90 c3 51 30 8e 38 9e a7 9e 45 50 cc 1a 23 29 20 9e a7 04 e9 46 4f 5d 30 71 5a 4d 98 70 1b 85 d4 9c 60 dd 31 9e 19 ed 09 29 29 76 c5 be a6 3a 63 62 a5 f2 c4 86 a2 bf 99 82 f9 Data Ascii: VPf@As1oUmbpB{2x[^FiXy' uIf]QAal!nu9V[,uqqIDCu@c@OC'5)=(Q#GocomoM_lx#Y?3s[*o%kmQ08EP#) FO]0qZMp`1))v:cb
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: ff 00 84 e3 56 ee a8 0a 1f cb da 96 e7 e5 6e c7 15 37 13 83 a9 ff 00 11 f9 39 fb c3 a7 16 8f 8c 0f 0e 89 7b af b2 53 ec b7 b0 6f 6b 78 4a 3b 14 cd 1d 34 a6 9a a6 8e a4 73 2f 62 ad e6 10 50 e4 65 43 77 03 1a 4e 3a 25 5f 44 45 ea 46 53 e2 1e 9d db f1 5d e1 23 00 c4 1a 2a 12 30 3d 03 d5 64 ff 00 bf ae b4 87 f6 99 2f f5 a3 ab f6 64 94 7b d7 8b 5c 70 d9 f5 d8 96 9e 82 f5 63 ba b4 7d fa b5 0d 23 a8 3f 42 d4 83 f9 eb 07 b2 4c d1 6e da 24 78 5b bb a8 78 d1 7c dd 75 15 0c 25 97 63 6f 8a db 7d 2a 8c 7c 92 45 47 e4 1f e5 53 2f eb 9d 26 b4 af ca 1a 76 73 3f 89 0e 08 70 ff 00 c5 5e fd dc 17 ee 0c 6f 08 a8 38 e5 b3 f0 f5 c9 45 e6 c2 b3 c9 13 18 d5 5e 4e 50 12 65 64 e4 59 15 8e 30 03 74 c3 2e b0 93 82 ee 5b 10 d2 97 1c 9c 91 e2 13 c4 fd eb c4 77 86 cd 93 1e e7 4c 6e bd Data Ascii: Vn79{SokxJ;4s/bPeCwN:%_DEFS]#0=d/d{\pc}#?BLn$x[x\|u%co}\|EGS/&vs?p^o8E^NPedY0t.[wLn
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: f6 e2 df dc 37 7b ff 00 0c 6b 37 1b 49 25 d2 96 86 f0 58 4a f2 1e 69 39 64 8d 63 60 ae e3 9c ab 73 7c c4 90 7b 01 71 85 2a 96 e2 bb 76 88 6b ce ea db 95 7c 25 b2 ec eb 45 9a b2 8a e1 0d ca 4b 95 c6 f1 57 58 b2 fc 5b 34 42 35 44 8c 46 be 5a 20 04 80 59 8e 59 ba fb 5a 8b bb b2 76 aa 35 7d 8b e2 66 d5 45 b9 38 cf 7c dd fb 3e 4d cb 5f c4 78 26 a4 69 56 e0 20 fe cf 86 46 76 28 99 89 8b 60 f9 3c bd b1 e4 2f e9 3d 27 b2 4f 82 b5 73 6b 91 cf 0f de 29 b7 2f 03 ae 3b 4e 7a 58 62 bc 52 58 d2 b6 8d a8 e6 7e 41 3d 15 4c 91 ca d1 64 0f 90 ac b1 97 0d 83 d5 ba 82 33 9d 25 8a 33 4f ec 85 27 13 af ab 7f 16 3d ab 15 b5 9e 9f 61 5e 65 af 0b 91 0c 95 71 2c 59 f6 2e 32 71 ff 00 86 b9 bf a4 97 b3 5e b2 f4 67 1c 1d fc 48 61 b1 6e 8d ed b9 77 be df ae b8 dd 2f f3 53 2d 34 36 b7 Data Ascii: 7{k7I%XJi9dc`s\|{q*vk\|%EKWX[4B5DFZ YYZv5}fE8\|>M_x&iV Fv(`</='Osk)/;NzXbRX~A=Ld3%3O'=a^eq,Y.2q^gHanw/S-46
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 9c f7 bb 70 ae c8 93 ca 9a a6 34 f9 1b a8 2b d8 f2 90 73 d7 af 7f 5d 4f 6b e7 90 dd 70 f6 24 27 dc f6 0a e9 43 c9 72 b1 ba b7 4c ad 4c 6c 31 f5 1d c6 31 fe f1 a9 ed 35 8b f6 7c aa 56 27 3d f0 35 f3 48 f5 07 10 8c 64 83 f7 d5 a2 47 51 c1 eb 9e 9f 6d 34 21 f5 91 4f 4e 63 fa 0d 51 23 81 82 f7 24 6a 84 3d 1b 03 8c 02 7f 4d 52 24 7a 32 98 20 f3 1f b8 3a 6a 83 70 b8 7c bc 0e b8 fb 03 9d 52 10 50 e5 e4 f9 00 63 eb cc 0e 34 c4 1b 4e 63 5f 40 3e f9 d5 70 04 95 3c cc 92 f3 a2 46 e3 1d c6 a9 09 87 c7 5d f2 f2 89 22 55 f5 e5 88 96 ff 00 5d 3d 42 d2 26 56 86 49 48 59 a4 c9 ee 65 8f 19 3f a6 8b 1a 5e 85 43 18 42 07 36 47 a1 51 d0 e8 48 4e 43 b1 d3 ca ae 18 f3 b0 f7 44 cf 4d 3a 16 af 44 8d ba 94 16 e6 90 3b 96 fc c1 87 2e 3f 4d 5c 51 0d 92 33 50 48 23 63 41 11 91 98 0c Data Ascii: p4+s]Okp$'CrLLl115\|V'=5HdGQm4!ONcQ#$j=MR$z2 :jp\|RPc4Nc_@>p<F]"U]=B&VIHYe?^CB6GQHNCDM:D;.?M\Q3PH#cA
2024-04-05 23:18:21 UTC	457	IN	Data Raw: d7 56 f8 e4 49 6e 05 47 4b 1d 43 1f 36 ac d3 73 10 a1 4c 7c ec dd 7a 9e 98 03 53 18 af 2c 6d bf 08 b5 d2 ed b8 a2 a7 59 2a 99 84 7d 0c 63 3d 58 1f b7 d8 f4 d7 52 c4 92 b6 73 bc 8d bd 81 da 73 96 48 87 93 8c a8 03 a1 5f db 59 37 e8 b4 81 8c 32 bc a4 32 b4 8c 7f 88 b0 3c de bd 75 83 7b ee 6e 96 db 0f 2c 2e c5 c2 04 40 7b e7 40 c9 4b 5d 4b 53 1e 92 15 95 b0 4f 32 e7 27 24 f7 fb 8f 5d 5a 95 70 27 1b e4 b8 41 0d 4c a8 89 25 50 8d 90 1e 4f ee f9 97 ae 07 4f d8 77 d5 eb 6b 94 0b 1d f0 cb 15 ba 91 27 f2 21 a9 a7 76 a9 5f ef 01 82 4e 45 61 8f 97 23 af 4f 5c 7e 9a 16 47 e0 7d 18 f9 03 ab a4 05 ff 00 e6 2b 29 cf cb 83 95 03 07 19 f5 e8 75 6a 4d 99 38 24 35 4f 04 6d 2e 7c e6 55 61 dc 2e 40 ff 00 79 1a b5 56 43 e0 3a db 6b 92 54 22 79 3e 1a 42 ff 00 28 8b ae 41 19 c7 Data Ascii: VInGKC6sL\|zS,mY*}c=XRssH_Y722<u{n,.@{@K]KSO2'$]Zp'AL%POOwk'!v_NEa#O\~G}+)ujM8$5Om.\|Ua.@yVC:kT"y>B(A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	49961	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	646	OUT	GET /steam/apps/2054970/capsule_231x87.jpg?t=1711745105 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/jpeg Content-Length: 14104 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "64706e43-3718" Expires: Fri, 05 Apr 2024 20:45:06 GMT Last-Modified: Fri, 26 May 2023 08:30:59 GMT CF-Cache-Status: HIT Age: 92981 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c15b54335f-MIA
2024-04-05 23:18:21 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 00 03 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 03 00 02 09 01 ff c4 00 3e 10 00 02 01 03 03 03 02 05 01 06 04 04 06 03 00 00 01 02 03 04 05 11 06 12 21 00 07 31 13 41 08 14 22 51 61 71 15 23 32 42 81 91 Data Ascii: JFIFCCW>!1A"Qaq#2B
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 40 6d a7 6d 7a 9e 20 24 ee ad b3 53 a5 ee aa 68 a9 f1 0c d2 bc 91 82 30 18 92 77 00 df af 81 fd 3a eb e1 91 d9 00 25 4c 92 36 48 d2 46 ae df bf c7 d1 74 b3 52 c9 b6 38 e2 75 a7 03 89 0b 1c 20 3e fc 9f 1c 63 a5 65 22 c9 3a aa 58 56 ba 83 76 1c 54 81 6a 85 ea a3 69 66 57 88 48 b9 db ca cd cf 8c 8f bf df a1 e7 39 4d 0f e9 1b aa 69 70 24 d8 bf 3f f6 a8 75 04 0d 16 a6 ab a6 8a 08 92 98 3b 3c 61 07 8f 72 80 ff 00 df aa fd 1e fb 63 73 6f 4a 1f 4b b3 47 35 a0 0b 37 5e c1 47 b3 d2 55 5f ae d4 94 50 07 aa a8 92 45 67 0c 73 85 1c 0f 3e df ec 3a b6 c8 fe a0 1a 35 3e ab 94 32 e8 5f 21 ba 1f 61 b2 71 5f 22 d3 ba 3e 05 6a cb 9b 0f 4a 1d ef 14 51 e1 d7 27 09 80 78 cb 9c e3 df 00 93 d7 41 6c c3 b3 21 3b 28 62 37 62 a4 74 97 a1 28 2e 5f 88 db 6d aa 5a 78 e8 34 ad 13 49 1c Data Ascii: @mmz $Sh0w:%L6HFtR8u >ce":XVvTjifWH9Mip$?u;<arcsoJKG57^GU_PEgs>:5>2_!aq_">jJQ'xAl!;(b7bt(._mZx4I
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: b5 b2 49 f5 54 ce 6a 1d 07 80 0f f0 28 ff 00 f1 5c 0f ef d4 cc 43 8c 8e be d4 f4 2d 11 37 20 e4 82 ea ab cc 8c 72 4f d5 e7 a5 68 ad d8 53 2d 89 53 20 8d a3 7f 4d 26 7f 4a 3f bc 8d 9e 71 fa 7b 9e b2 40 bd 51 1a 2e f5 5b f3 52 76 64 e8 4d 19 da 5b fa 54 d4 94 be db 66 b6 dd e8 27 1f 42 d5 c4 9e ad 3c a9 f6 0d 19 65 3f 7d aa 7c e7 ab b8 67 90 f6 93 dc 54 cc 5b 03 a2 73 79 6a 3c 10 05 55 82 17 91 e9 c1 8e 24 90 10 dc 95 c7 b9 c9 ea de cb 9f 1a 80 15 43 5a 1a 5a 56 8e 14 20 c4 0a 2a bf 19 c9 ce 7f 4e 3a fb 40 b2 2c 84 21 7a d3 a2 31 21 70 24 51 fc 4c 30 31 ff 00 c3 d0 ce a8 ad 26 d0 2d ce 80 98 84 81 07 a5 9c 6e ce 3e af d3 a0 90 8e 0d 21 da 9a 4c 86 fa 7e ac fb f4 2a 46 05 5e 8b 72 d5 50 b5 41 88 6f 12 ab 2b aa f8 c0 39 52 3e dd 72 1b 1d 17 63 b8 56 9a 5a d6 Data Ascii: ITj(\C-7 rOhS-S M&J?q{@Q.[RvdM[Tf'B<e?}\|gT[syj<U$CZZV N:@,!z1!p$QL01&-n>!L~F^rPAo+9R>rcVZ
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: a4 77 a2 4e 37 47 bc 78 24 7f 30 1f 63 c7 58 40 26 b5 47 2f 0c f7 29 5e b2 69 16 49 66 93 24 46 02 8c 93 ce 31 81 d7 81 bc 10 89 b3 67 74 c7 d3 56 a3 0a 44 b2 06 4c 1c 80 7d cf 46 63 46 c9 77 3c 92 51 de a8 d1 d6 2d 51 a0 6e d4 f7 2d 37 49 a9 0a d2 4b 1d 2c 35 31 86 68 a6 91 76 9f 48 f9 0c c3 e9 c8 20 f2 3a dc b4 c8 c9 21 09 8e 2d 78 20 d2 f9 c3 ab f4 fc d6 ed 43 71 b0 9d 39 55 a6 da 86 91 a6 34 75 9b bd 60 bb 94 e4 e4 9e 31 c0 3d 4a 88 e6 21 d7 c6 97 42 e2 0b 01 0e cd 7c 54 bb 35 82 36 9b 7c b2 18 f2 c2 26 50 84 92 ac a4 12 31 f6 e0 fe 7d ba 2b 45 b6 be 6e 86 f3 5a a2 69 34 25 c3 4f 24 35 ad 1e fa 59 3e a8 ea e9 98 4b 0b e3 dd 24 5e 0e 3d c7 91 ee 07 59 0f 63 fe 83 bf 6a 18 7f 10 54 7d 37 f1 0f 47 f0 ef dd 4a 6d 4c b4 e6 e6 b5 30 49 0d 75 a2 17 db eb 43 Data Ascii: wN7Gx$0cX@&G/)^iIf$F1gtVDL}FcFw<Q-Qn-7IK,51hvH :!-x Cq9U4u`1=J!B\|T56\|&P1}+EnZi4%O$5Y>K$^=YcjT}7GJmL0IuC
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: b2 42 78 9f 11 d0 e9 cd 15 69 bb 75 f2 e9 b1 e9 b4 dd de aa 86 44 59 62 96 0a 37 91 5d 08 ca 95 90 0d 8c 0e 41 04 12 39 f3 d1 5b 3c 24 d0 76 df 36 42 30 48 07 d4 13 1e 86 ae 3a 3a 3f 95 af a2 ad b3 d5 46 04 89 4f 5f 4c f0 99 36 32 96 2a 48 c3 e3 23 3b 49 c6 46 71 91 92 3c c7 34 6e 0d 3b 6e 97 7b 1e dd c2 45 77 ff 00 b4 d5 fd c6 ee c5 b2 f7 a7 6c d7 2b c5 34 76 ca eb 1d dd e8 68 e4 91 60 90 c6 26 a7 66 60 39 cf a8 a3 03 38 0c 09 ea 73 a1 ea b3 8e e2 3b d3 18 47 b8 47 5c 2f fd a5 b7 6b 7b 73 15 2d 6b 5d f5 15 ba a2 aa 96 0a 7a 7a 9a 3b 75 29 3e a5 74 93 9d 94 d0 8c 02 c4 c9 cb 6d 51 bb 68 e0 65 87 5a 6b 49 61 ce 2a be ff 00 d7 14 cc b2 93 4d 8c ef c7 92 26 d7 7a 02 e9 a4 ae d1 d3 6b 3e e1 69 4e de 43 71 8b d4 a7 d3 75 33 33 b2 23 65 44 8f 1c 08 52 26 04 70 Data Ascii: BxiuDYb7]A9[<$v6B0H::?FO_L62H#;IFq<4n;n{Ewl+4vh`&f`98s;GG\/k{s-k]zz;u)>tmQheZkIaM&zk>iNCqu33#eDR&p
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: d4 cd 0b 02 db e3 86 45 91 83 80 79 52 40 04 7b f8 1c f5 f6 25 c0 47 5f 29 6f 08 df ae fc 15 9f 76 04 f5 9d c1 be d4 d4 c8 2a 1e b2 71 5e b2 ef 24 4b 1c aa 1e 37 53 e7 05 58 01 e7 00 63 db ad e6 05 a0 ac 06 3b 31 00 59 4e 9a 1b 52 34 22 34 0c c8 06 d3 91 83 e3 cf 5c 48 14 6d 75 cf 93 30 a5 73 db 2b 74 f0 77 4f 4a 0b 7c 60 56 1a 89 91 3f 76 64 1c d3 4d 9c ae 3e a1 8c e7 a0 62 ef f6 ef f0 f5 0b 38 72 3a d1 7d be 85 0f 55 53 b5 4e bd bb 04 56 58 5a f3 5e 02 88 7d 33 8d b4 7c 6c f2 b8 e0 60 f5 bc 0b 6e 26 f7 0f 57 2f b1 a6 9c 7b cf a0 4e 1d 2b dc 01 a2 3b 73 dc 2d 3f 31 95 ed 6f 05 51 48 77 6d 14 d2 bd 1a 30 7f c0 de a1 f8 f2 dc f9 e9 0c 73 8c 7d 21 10 69 de af cf 4f b2 3e 11 9d 66 11 e5 dc 2e bc 95 75 c3 52 50 de 34 b7 6f ed 77 aa 84 b4 47 6f b7 4c d1 cc f4 Data Ascii: EyR@{%G_)ov*q^$K7SXc;1YNR4"4\Hmu0s+twOJ\|`V?vdM>b8r:}USNVXZ^}3\|l`n&W/{N+;s-?1oQHwm0s}!iO>f.uRP4owGoL
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 2f 69 a8 75 92 f7 5f fc 57 a5 6b 2a 24 a7 a5 a1 87 4f 4c 1d e7 91 76 c8 88 8f 38 09 23 0a 7c 17 3b 46 22 19 6c 28 ea 9c 3d 29 3b a7 30 33 0e 3a ce d7 70 ed d3 6d 7e e9 39 30 31 b6 31 23 a5 39 3b 07 a2 71 76 53 bc d3 68 2e c6 ea 0a ba 3b 6d 16 a8 4b 9e a2 c5 6d 9e 6d a2 27 86 5a 7a 48 4c 60 30 01 81 f0 77 00 0e df 6e 0f 52 71 e2 47 74 88 85 8e a2 e1 77 da 2c f8 05 57 0a 18 ec 27 5a f6 e8 34 d3 c0 7b fa a2 bd 25 dc ce d9 e8 ad 57 6a b6 69 0b 6b df ae 3a 92 57 13 dd 6f 13 ee 5b 24 5b 19 d6 97 91 92 72 9c a1 3e a6 42 99 59 b0 80 2f 8a 93 17 3e 19 d2 e2 db 42 3a 1a 8d cd d5 d7 1e ff 00 25 f4 2c c3 c7 2e 48 0d e6 17 a7 9f c1 e6 81 fb 77 6d b7 ea ef 8a bd 43 71 b9 3a 57 d9 6c b7 ba eb 93 b6 57 15 52 fc c4 86 99 54 78 2c 64 1e a0 03 83 e8 91 e0 f4 f6 2b 1d d4 f4 Data Ascii: /iu_Wk*$OLv8#\|;F"l(=);03:pm~9011#9;qvSh.;mKmm'ZzHL`0wnRqGtw,W'Z4{%Wjik:Wo[$[r>BY/>B:%,.HwmCq:WlWRTx,d+
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: ad 2d 1c b1 c5 12 c4 ac 1a 66 2e c4 93 23 65 70 d8 c2 81 ef 9e 93 c7 61 4e 35 82 00 e0 1b a1 d6 ef b0 05 eb 25 2d d6 b5 db f2 9b f6 1d 65 db dd 65 56 f7 4a 5e d2 54 c9 76 86 73 0b 8a ab eb a2 bb 33 7a ac 31 10 cb 06 77 2c 72 d9 e7 1c 74 91 c3 e3 23 19 0c e2 ab fe be 1e c9 86 30 97 68 dd 6e b7 f1 43 1d eb ba df f5 ad 9e 6b 54 d4 94 d6 8b 55 26 cf f9 0a 18 bf 74 a1 01 44 dd 9c 0c aa b6 d1 80 3c 93 c9 c1 14 fa 37 05 1c 6f eb 01 cc e3 c4 f6 a4 3a 42 43 13 0b 1c 36 e0 86 b4 af 7a 35 6e 91 d2 09 a5 e2 92 8a f3 a7 a1 45 8e 1b 7d ea 90 55 47 0a 03 9d 8a 49 07 6e 79 c1 24 0f 6c 74 de 27 a1 b0 d3 cb d7 8b 6b f9 b4 d5 a8 70 74 94 8c 19 1c 03 87 22 83 b5 de ac bf eb fa e8 6b 2f 55 42 4f 95 8b d2 a6 a7 81 04 30 52 a7 f9 62 41 c2 8e 07 3e 4e 07 3c 0c 35 87 c1 c5 84 61 Data Ascii: -f.#epaN5%-eeVJ^Tvs3z1w,rt#0hnCkTU&tD<7o:BC6z5nE}UGIny$lt'kpt"k/UBO0RbA>N<5a
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: d4 f1 5c 35 2d 2d 0e 9f d4 57 08 69 a1 8a 1f 91 a9 58 64 a5 a7 50 91 88 c2 8f ee d8 3e 7e fd 6e 22 e7 c4 0d dd 8e 2a 3f 4f c7 14 1d 27 3c 31 34 34 46 40 00 00 05 50 f3 3a ee 78 a6 8f 6f f4 57 ca d7 5b e9 6e 34 12 3c f6 8b 35 55 c2 e9 4b 02 19 24 57 ad ca c5 4e ca 0e 77 08 3e ac 7b 6e 1d 73 b8 cc 43 a8 f5 6e fe 4e 01 bf fc 77 3d d7 a2 43 05 1b 25 23 30 b0 01 27 c7 40 3c b5 4c 1f 87 ad 02 34 05 05 34 95 b0 b4 15 15 15 0d 34 91 4e db de 35 6e 10 33 67 19 03 04 fe b8 f6 ea a4 ee 76 26 37 65 d7 4f 45 43 0d 13 70 a0 67 14 7f 3f 84 67 dc 1d 13 3a e8 bd 47 73 a9 23 74 bb 47 a3 18 c8 5f de 0c 12 47 bf 56 ba 3e 3a 73 1a b8 ae 97 9f 38 91 c9 11 51 66 a6 fd 9f 25 33 d0 6d a9 49 01 86 af 7e 00 5f e6 57 1e 1b f0 7d ba b6 61 7e 7c e1 df 49 dc 57 91 1c 97 3c 26 66 43 19 Data Ascii: \5--WiXdP>~n"*?O'<144F@P:xoW[n4<5UK$WNw>{nsCnNw=C%#0'@<L444N5n3gv&7eOECpg?g:Gs#tG_GV>:s8Qf%3mI~_W}a~\|IW<&fC
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 83 f4 bd 90 75 c6 d0 c4 ec 61 82 a7 24 7e 7e dd 2f 23 6d 37 1b a9 51 9b 32 cd 55 86 56 25 b0 23 54 f7 72 46 01 fc 7f ed d4 b9 23 a3 63 6e 3d ca b4 6f b1 5c 78 77 a9 14 f1 54 58 ae 42 a6 24 e5 5f 0e 8c 38 e0 e0 82 3f a1 e8 b1 9c b4 e6 ea 12 d2 83 64 15 ab 7b 19 dc 63 43 6d 7b 9d 1c 7f 33 66 8c 88 ae 56 a2 09 96 91 4f 89 22 3e f1 fb ed f6 39 f1 ef 58 16 bc 58 52 5c d2 34 3b 27 7d e2 8e 99 9a 86 6a 69 12 7a 59 99 67 8b 2d f4 14 61 9d e0 9e 07 1f db 1d 6c 6a 09 40 b2 c2 1a 76 b4 bb ba 27 f8 a6 39 f5 44 2a cb 4b 3c 4f 4b 69 5f e6 34 fb b1 34 d8 ff 00 34 c4 0c 67 18 45 5f f3 75 88 80 26 ce bc bf 29 a7 3c b4 53 4d 73 fc 24 8e af a0 96 8a 3a 88 a5 59 52 36 20 6c 03 22 41 b8 e3 23 f5 ea 81 68 22 d4 e6 ba 9d 49 7a 69 60 78 ce d2 00 65 db b4 9c e4 03 cf 23 df a4 5e Data Ascii: ua$~~/#m7Q2UV%#TrF#cn=o\xwTXB$_8?d{cCm{3fVO">9XXR\4;'}jizYg-alj@v'9D*K<OKi_444gE_u&)<SMs$:YR6 l"A#h"Izi`xe#^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	49965	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	645	OUT	GET /steam/apps/230410/capsule_231x87.jpg?t=1711638801 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/jpeg Content-Length: 11929 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "660434cf-2e99" Expires: Thu, 11 Apr 2024 15:13:27 GMT Last-Modified: Wed, 27 Mar 2024 15:01:35 GMT CF-Cache-Status: HIT Age: 115475 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c1eecf746f-MIA
2024-04-05 23:18:21 UTC	928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 03 02 00 01 09 ff c4 00 40 10 00 02 01 03 03 02 05 02 03 06 04 04 05 05 00 00 01 02 03 04 05 11 06 12 21 00 07 08 13 31 41 51 22 61 14 32 71 15 16 23 42 81 Data Ascii: JFIFCCW@!1AQ"a2q#B
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: e1 52 79 66 f5 c2 28 39 27 e3 27 a9 c2 55 93 29 d5 da 52 de d2 d5 6c 5b 6c 96 da 7b a5 ed eb e2 2f 0a 3d 38 a6 fa 83 b2 fa 65 ce 78 07 04 7a 30 ea 41 98 12 45 6f 29 38 48 00 93 b4 a0 ae b9 57 7e 29 16 6b 44 0c 63 5c 49 02 d5 1e 7f fa 88 24 12 3e df d4 75 c2 ce d3 ca a8 06 c6 43 9e 9f f6 bb 10 64 fc 34 f8 c0 86 a1 41 5c 7f 85 08 fa 4f e8 76 92 78 00 f4 a2 36 ae 23 14 57 10 6e 6a 69 32 cf 51 33 4d 29 e0 2e 3e 84 fb 7f f1 d4 c0 1e d1 d6 24 65 a7 c1 0a a3 2c c4 01 9f 73 d1 d4 e8 da 45 92 12 59 0e df a5 89 2a 7d 88 e4 67 fb 1e 97 7c c3 13 a5 34 45 95 b2 7d 09 3c fa fa f4 53 93 b4 71 17 c9 f4 03 dc fa 74 42 72 4e a2 a4 dc 09 94 ed 51 e8 47 bf 46 ab 66 29 8d 49 6f 71 8a 98 62 9e 30 a4 71 b9 b9 3d 34 10 a2 2b 49 3c ce f4 75 ed e6 e2 69 36 07 52 a5 be 38 e8 cf 1b Data Ascii: Ryf(9''U)Rl[l{/=8exz0AEo)8HW~)kDc\I$>uCd4A\Ovx6#Wnji2Q3M).>$e,sEY*}g\|4E}<SqtBrNQGFf)Ioqb0q=4+I<ui6R8
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: fc 81 d7 48 ae 26 56 41 91 ac 9f ee 05 6a db fd 5e 93 59 a0 a3 92 6a 4a 2a 92 ab 52 23 7c 2c 35 86 51 13 c2 c0 70 a8 48 0c 49 18 01 41 5c ee e9 25 45 dd 7c a0 f8 5c 81 fd 07 a4 9b da 9d 13 a3 ee bd ae d5 f7 fa 4b 55 33 ea 2a 4a 89 a6 92 e3 08 fa f0 3f 8a a3 00 e3 f2 1d 9c 7c 1f 7e a5 70 06 45 03 83 34 3c cc 95 91 8d 82 b5 5f 2f cb 99 b7 5a 77 46 a6 d3 a7 a7 d3 f6 f7 96 4b 9a c6 69 ea a9 a9 24 92 29 e9 80 0b 22 ce fb 41 f3 63 01 83 16 fa 58 16 23 24 64 75 03 b6 9b 07 a4 fa 1c 4b ac 07 1d 67 be c4 f7 1d ac 15 77 dd 35 1b bd 7d 4e a1 b2 4d 43 4d 31 28 a9 1c b9 c2 6f 0b e8 a1 4c 8d 91 fa 0c 9e 9f fa 6e 61 95 98 11 d8 cc 2f d7 3c 1b 52 e4 53 ed fb c7 2d eb 5f 5e 1a 25 8e 7a f6 12 2c 0b 03 24 47 09 80 31 c0 e0 7d fd 3a fa 70 c1 05 4c 4c 5e 13 19 e4 45 85 d6 e0 Data Ascii: H&VAj^YjJR#\|,5QpHIA\%E\|\KU3J?\|~pE4<_/ZwFKi$)"AcX#$duKgw5}NMCM1(oLna/<RS-_^%z,$G1}:pLL^E
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 86 3d 24 98 29 2b aa 74 f5 82 f9 3d 14 b0 c7 70 81 92 49 59 19 56 56 43 b3 cc 53 e8 73 b4 67 3c e7 90 7d 7a af 1b e8 7a 3c 18 b7 4d 69 ee 24 aa 1a 29 aa 24 fc 3c 48 d2 4b 21 c2 aa 0c 9f d0 0e b4 8c 80 6d 28 ea 6c cd 55 ad 51 23 90 11 43 1a ac ac 87 2b 9d d9 29 9f b1 6c 1f b8 3f 1d 45 85 bc e6 2c 38 e9 ef ff 00 bf d6 f2 bc 83 ca 4d 27 98 46 f4 05 5c 3a a9 28 0e 09 c7 a7 07 1f ed d5 65 68 c9 03 5c 02 9a 16 c3 2a e3 6e 79 3e e7 93 fd ba 9e 34 19 fb 0c 05 62 27 20 8c f1 d1 88 04 cf 71 65 01 c9 1c f4 c5 f7 8b 26 45 94 91 9d a4 f3 d1 4f 7c e4 6a 82 a4 ec 1c 2a fd 4c c3 e7 ff 00 7c 75 e2 6b 61 38 3b 99 f9 f8 90 23 11 aa e3 24 65 b3 9e 3a ee a3 55 04 0b 37 2d a8 24 53 b0 27 32 12 30 07 03 3d 30 30 20 54 51 07 73 19 7a 4f 4d 5d f5 ae a0 b3 e8 bd 2f 45 35 ee f9 58 Data Ascii: =$)+t=pIYVVCSsg<}zz<Mi$)$<HK!m(lUQ#C+)l?E,8M'F\:(eh\ny>4b' qe&EO\|jL\|uka8;#$e:U7-$S'20=00 TQszOM]/E5X
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: b7 48 57 cc ab 2d 3c 9c f1 14 a5 8a e0 8c 15 0c d8 fc df 58 23 cb 14 ae 66 c4 74 e4 fd e4 fe 52 e5 05 b1 fe d1 07 0d 05 d3 49 5e aa 6d 17 aa 1a ab 65 ce 94 84 96 92 b2 06 86 54 24 02 32 8c 01 19 04 1f b8 20 fa 1e b4 d1 c1 16 0c 81 94 83 47 68 45 5a ed 72 b3 55 d3 43 29 8e 49 20 64 05 78 3e 9d 38 92 54 88 b0 34 91 03 fb 6f 71 9e 6a 4a f8 5b ea c4 6a e7 fc aa 18 ae 4f f5 60 3a 9f 03 51 ae f2 8c c2 c4 bc 1b a5 52 e0 e4 9c 0e 7a ac 1b 90 d5 4b 9b 3c a2 3a 3a 84 7a 79 2a 49 51 e5 ac 55 5f 87 2a c0 f0 db f6 39 18 3f 00 1e 3d 47 5e b6 1b ac 1d 20 8a 30 26 fb ad ae 96 1a 99 41 d3 f7 39 63 89 40 6b a4 ae 24 a8 ab 6c a9 8c c8 aa c5 17 9f 31 59 c6 59 83 21 3c 8e a5 2f 91 49 b5 da 55 e4 e3 70 3d 42 75 ae d7 36 08 b5 3d a2 4b 55 d9 2e 11 54 52 08 ab aa 77 2a 2a 33 65 Data Ascii: HW-<X#ftRI^meT$2 GhEZrUC)I dx>8T4oqjJ[jO`:QRzK<::zyIQU_9?=G^ 0&A9c@k$l1YY!</IUp=Bu6=KU.TRw**3e
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: db 18 a8 6c 6e 8d 99 73 83 cf 3c 1c 83 82 08 ea dc 6f ac 6a 1c 49 1d 0a 9a 30 56 eb 4d 53 a4 2f f1 de 28 14 35 2d 48 2f 2c 2f 9d ab bb 21 95 c0 fe 56 f9 fe 52 7e 3a 53 02 0d 88 68 43 0d 26 1e d2 69 1a ba b8 a0 96 44 4b 24 53 2f 98 21 bc cf 1d 34 8a bf e3 da e4 16 4f 86 00 83 d3 53 3a d5 1e 62 5b 0b 74 e2 13 d9 b4 ce 9a 86 3c d5 ea 15 7c 20 6f 32 8a 9f 2a df 38 32 3a 31 ff 00 f0 c7 df a7 79 96 36 11 3e 59 1c 99 ce e3 a6 28 ee 27 cb d3 f7 28 ee 2e 7e 8f c2 57 46 29 a5 61 f2 a7 71 46 18 ff 00 38 6f f2 f4 1a af 99 ed 35 14 da ef b1 f6 ad 41 51 51 43 5d 6e 86 cb 77 2a 73 5f 1f f0 96 16 c7 05 f9 da e3 9e 73 ea 32 01 ce 0f 49 6c 78 f2 6e 63 d3 33 e3 f8 4f d2 01 f6 cf bb 37 7e da d6 ae 8d d5 25 85 25 ba 63 4d 24 f9 25 a9 54 93 82 48 c9 68 8e 41 56 00 fd 24 63 23 Data Ascii: lns<ojI0VMS/(5-H/,/!VR~:ShC&iDK$S/!4OS:b[t<\| o282:1y6>Y('(.~WF)aqF8o5AQQC]nws_s2Ilxnc3O7~%%cM$%THhAV$c#
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: bc 82 ac 3d 41 07 a6 2e 60 37 8b 38 2c 54 5f f7 86 4b 06 b4 4a 7b fe 9d ac 67 bf 5b 80 a3 b8 5a c4 64 cc f4 d8 25 66 0d c0 94 2e 42 90 06 76 e0 63 09 92 19 99 33 6f d4 7e 7f 10 f0 a3 e2 24 74 3f 9f cc 09 d0 1d eb ab d0 37 28 5b 68 aa b6 93 b6 a2 94 9c 89 17 d0 32 e7 d1 c7 f4 c8 00 13 e8 44 b8 72 9c 0d 63 71 1f 97 08 ce b4 79 9c 35 35 de 7d 43 5f 72 36 4a da ed 44 d5 99 9a a6 a1 60 63 53 32 92 58 46 e0 0c 85 51 8c 8f ca 48 27 d3 1d 77 26 42 e4 84 37 7c fb fd 84 e6 3c 61 05 be d5 c7 b7 dc c7 67 60 74 7c fa 27 41 46 2a 1e 9a 7d 65 af 2e 14 b4 d4 56 c1 54 15 a8 28 a3 de e2 69 d9 79 84 33 90 fb 7d 4a c3 e9 f5 0e 8b 12 14 a2 db 5f e7 de 0e 56 0f 74 2e b9 9a 9b c3 35 86 ab 4a 4f a9 f5 1d 5c 2f 09 d4 17 7a 69 e2 8e ac 6d 97 c8 50 d1 c6 24 1e c5 a3 db 29 5f 55 f3 Data Ascii: =A.`78,T_KJ{g[Zd%f.Bvc3o~$t?7([h2Drcqy55}C_r6JD`cS2XFQH'w&B7\|<ag`t\|'AF*}e.VT(iy3}J_Vt.5JO\/zimP$)_U
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 29 f5 82 46 3d 42 f4 43 68 31 10 da b7 1f 54 8f b5 47 f2 fa b1 fd 3a ee a9 ea 13 8d be eb 51 74 99 05 1c 72 fe d2 92 a7 fe 59 a0 24 cd b8 e0 2a 20 50 49 63 c7 03 e7 ae 82 7a 41 20 0b 26 6a 5d 0f e0 fa fd 59 a7 2a 2a 7b 8b 0d 0d 25 ee 5d b2 5b 6c 72 a4 92 56 b1 63 96 33 fe 1c 82 a4 8c 00 84 92 0b 7d 5b 71 cd b8 f0 6a 5d 4f 33 b2 78 a0 1b 4a 6f 18 57 6a 99 fb 7b 66 a6 b2 45 a2 2d 3d bf b5 b2 a4 35 f5 f4 75 30 9a 89 76 82 54 54 81 b6 48 51 8f 19 28 e4 e7 ea 6e 9c ad a5 eb 19 00 57 d6 2c 28 75 bc 96 4d f5 e0 77 a8 88 83 5f 7e e4 eb 8b 1e ae a0 8e 99 a4 33 1a f8 6d ae 03 ce c3 90 bb a2 fe 40 72 58 33 9c e7 0d 83 e9 d6 71 c8 cd ea 6f 9c d4 08 a0 14 5d fa 43 75 f1 35 78 ac d5 96 8b ed ee 9e 3b 35 12 a8 b7 18 28 dd a5 82 df 49 23 12 d5 2c 84 e6 6a 8f 38 ac ae c7 Data Ascii: )F=BCh1TG:QtrY$* PIczA &j]Y**{%][lrVc3}[qj]O3xJoWj{fE-=5u0vTTHQ(nW,(uMw_~3m@rX3qo]Cu5x;5(I#,j8
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 24 7c f2 ce c7 80 07 ff 00 c1 93 c7 46 a8 5b 65 80 ce 10 5b 4d a1 d9 dd 0b a6 7b 3b 55 0c 1a 52 b6 92 e7 a9 c3 b5 3d 7e b0 99 95 1e 29 4a e5 a0 a2 0f f4 c2 8a a7 0f 31 cb 92 c5 46 3d 06 96 2c 23 15 96 3f 9f 9f 9d b1 b3 e6 6c db 05 db f3 73 fe 7e 11 0e ec f8 a0 fd c6 9e a6 cf a6 2e b5 33 5c 03 15 a9 ac a0 9c c4 ec 79 0c 86 6e 58 83 cf 2a 41 e7 20 83 cf 48 cb 9b 55 86 e3 b7 fb fe 4a 30 60 23 7e bd ff 00 c1 fe cc e9 7b ef 15 fa e7 18 14 f5 62 dc cf 93 2a 51 46 a9 bc fc b4 84 19 1c fc 97 76 cf ae 7a 97 50 03 d3 b4 d0 09 bd b6 ff 00 39 06 c5 ad 6a ad ae 6a 6a 6d 94 b5 91 96 c3 39 53 1c 85 be 77 29 1f fe ba f5 86 d9 87 ed b4 2a 23 e1 30 82 fa d1 d5 19 de db 3d 44 36 f9 22 66 64 9e 41 26 e2 47 2b f4 fb 93 9e 4e 3e fd 20 63 0a e7 5d 6d c7 fd 46 ea 2c a3 4f 5f c3 Data Ascii: $\|F[e[M{;UR=~)J1F=,#?ls~.3\ynXA HUJ0`#~{bQFvzP9jjjm9Sw)*#0=D6"fdA&G+N> c]mF,O_
2024-04-05 23:18:21 UTC	49	IN	Data Raw: 63 e6 c2 19 a0 64 d6 f6 a1 21 5e 32 8c ac 01 24 83 cf 59 a3 0e 96 bb 9b 9e 60 23 88 33 5d 0b c7 51 28 94 61 c3 1c e0 fb f4 3d 37 95 21 db 69 ff d9 Data Ascii: cd!^2$Y`#3]Q(a=7!i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	49968	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	396	OUT	GET /store/about/videos/about_hero_loop_web.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/png Content-Length: 35255 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-89b7" CF-Cache-Status: HIT Age: 4796 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c1ff8e8d96-MIA
2024-04-05 23:18:21 UTC	1072	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 78 00 00 03 1a 08 02 00 00 00 5b 30 73 48 00 00 00 09 70 48 59 73 00 00 00 01 00 00 00 01 00 4f 25 c4 d6 00 00 00 24 7a 54 58 74 43 72 65 61 74 6f 72 00 00 08 99 73 4c c9 4f 4a 55 70 4c 2b 49 2d 52 70 4d 4b 4b 4d 2e 29 06 00 41 7a 06 ce 6a 7a 15 c5 00 00 20 00 49 44 41 54 78 9c ec dd c9 92 24 59 be e7 f5 ff ff a8 da e0 53 8c 39 45 45 56 d7 9c d5 42 23 4d d3 34 0f 80 b0 80 2d c2 8a 0d 0f 00 22 48 f7 93 f4 33 20 0d 08 1b d8 b0 66 c7 02 56 88 c0 e5 4e 75 ab 6e 0d 39 47 66 cc 3e d8 a4 87 85 9e 59 d5 cc cd 3d 5c dd c2 3c be 1f c9 8c 30 53 3d aa a6 66 16 99 f1 f3 ff 19 54 7f fa f3 5f 0b 00 00 00 70 d3 cc ae 2f 00 00 00 00 77 13 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 Data Ascii: PNGIHDRx[0sHpHYsO%$zTXtCreatorsLOJUpL+I-RpMKKM.)Azjz IDATx$YS9EEVB#M4-"H3 fVNun9Gf>Y=\<0S=fT_p/wA h`MA
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 00 00 00 18 04 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 10 34 01 00 00 30 08 82 26 00 00 00 06 41 d0 04 00 00 c0 20 08 9a 00 00 00 18 04 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 10 34 01 00 00 30 08 82 26 00 00 00 06 41 d0 04 00 00 c0 20 08 9a 00 00 00 18 04 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 10 34 01 00 00 30 08 82 26 00 00 00 06 41 d0 04 00 00 c0 20 08 9a 00 00 00 18 04 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 10 34 01 00 00 30 08 82 26 00 00 00 06 41 d0 04 00 00 c0 20 08 9a 00 00 00 18 04 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c 82 a0 09 00 00 80 41 10 34 01 00 00 30 08 82 26 00 00 00 Data Ascii: A h`MA40&A A h`MA40&A A h`MA40&A A h`MA40&A A h`MA40&
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: d7 7f b0 d6 8a 88 b5 76 fe 75 5f 83 6f ff d0 0e 7e d0 fc e5 92 d7 fd a3 6d ff cc 58 db f3 2e 44 16 3f 7c d9 8e 8e b0 ab e5 a2 53 d6 dd 17 fa d3 9f ff 7a d7 d7 00 00 c0 fe 73 45 2c 15 b1 76 b5 ec 1f a3 59 8f d5 18 db 34 76 39 5f 3b 88 d3 54 62 9b de 41 9c a2 6a c6 53 37 04 73 5d 83 c9 81 56 23 bb 5a 34 b3 f3 35 0d 0e dd 19 66 67 3d 0d 44 cc c1 b1 d6 b5 5d 2e 7b a3 6a db c0 d4 e3 66 31 eb 8e 9e cc ce b0 58 ac 6d 30 3d d4 d1 c4 2e 66 dd de 7f d7 60 72 a0 a3 b1 5d cc bb 23 38 b7 6c a0 e3 a9 56 b5 5d 2d bb 23 10 5c 83 7a ac e3 89 9d cf 6c 92 ef f3 06 a3 f6 22 bb 03 55 5d 83 aa 6a 07 71 f6 8c 85 6d 1b 98 4a ea 91 2c e7 dd e1 b6 be 85 b6 7f 1e 7a bf 88 ad 1a bc f7 08 9a 00 00 00 18 04 5d e7 00 00 00 18 04 41 13 00 00 00 83 20 68 02 00 00 60 10 04 4d 00 00 00 0c Data Ascii: vu_o~mX.D?\|SzsE,vY4v9_;TbAjS7s]V#Z45fg=D].{jf1Xm0=.f`r]#8lV]-#\zl"U]jqmJ,z]A h`M
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 1e b5 f7 1c ea 5e 43 75 ff e3 c9 d3 5f 89 a9 64 b5 9c 7d fd fb ee db ac ef 3d ae 3f fb 99 31 95 5d 2d 7b 3f a8 ea e4 41 fd f8 a9 56 55 7b cf a1 d5 db f2 bb 78 4f 50 d1 04 00 60 70 21 65 8a aa 19 4f 7b 1a 4c 5c ca 14 51 73 70 d8 6d 50 1d 1c b7 37 d4 56 a3 e6 e0 a4 a7 c1 d1 03 6b 8c 88 88 d1 ea f8 61 4f 83 7b 8f 54 8c 88 a8 56 f5 83 8f ba 0d da 94 29 22 6a ea fa e1 a7 dd 06 f5 a3 cf a4 32 22 62 4d 35 7a fc a4 a7 c1 e3 a7 6a 2a 11 51 53 8d 3e f9 27 dd 06 2e 65 8a 68 55 d7 4f 7e de 73 0d 4f 7e a1 55 2d 22 a6 1e 4d 9e fc a2 dc ad 3a f9 c9 af da 06 52 d5 d3 cf 3b 77 37 54 1d 3f fd 8d d6 a3 f6 0c e3 cf bf e8 39 c3 e7 5f b4 0d b4 aa 27 fd 0d 7e ab 75 2d 22 5a d7 93 cf 7f bb a6 c1 48 44 b4 1e 4d 7e da d3 a0 4d 99 22 62 46 e3 f1 d3 df f4 9c e1 69 7c 17 93 27 bf ec Data Ascii: ^Cu_d}=?1]-{?AVU{xOP`p!eO{L\QspmP7VkaO{TV)"j2"bM5zj*QS>'.ehUO~sO~U-"M:R;w7T?9_'~u-"ZHDM~M"bFi\|'
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 68 62 3f c5 72 a6 64 53 7f d4 4c 8f 1f 87 94 69 6d 33 3b 7d b5 b8 78 13 8f 12 69 96 f3 e5 4c 66 22 f5 e4 70 72 f4 c8 18 23 aa d5 68 7a 70 ef 93 b3 57 df 89 34 7e 81 a4 36 71 ee b8 a8 59 d7 a3 f1 78 ba 9b d7 06 00 bc 8f f4 f0 e4 d1 eb 1f bf d9 f5 65 6c 65 6f c6 7b 01 5e b7 9c a9 a2 2a c6 88 ea 68 72 3c 3a 70 29 b3 59 2d 4f 5f 7c e3 52 a6 b5 7e 6a 79 23 4d d3 d6 26 97 b3 b3 d3 17 5f ad 16 73 11 11 d5 6a 3c 1d 1f 3d 10 f5 63 3d a5 bb fa e6 0e c2 66 3d a6 96 09 00 c8 8c 26 7b 53 80 20 68 62 3f 95 e5 cc f6 69 35 39 7e d8 ce 37 6f 9a e5 e9 cb 6f ed 6a 25 d6 4a b3 12 bb 12 bb 92 66 95 3f 6e c4 da b3 57 df ae 96 6d d6 34 93 e9 89 ba fe 74 bf 2e 92 fa 97 db d1 5c 20 5d b7 08 28 00 e0 43 b5 47 7f 35 d0 75 8e bd a6 69 bf f9 f8 f0 9e 9a 4a 44 c4 da b3 57 cf a4 69 c4 Data Ascii: hb?rdSLim3;}xiLf"pr#hzpW4~6qYxeleo{^*hr<:p)Y-O_\|R~jy#M&_sj<=c=f=&{S hb?i59~7ooj%Jf?nWm4t.\ ](CG5uiJDWi
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 53 66 d3 88 34 b1 d3 7c 9f cb 99 b2 f5 78 ca ce 51 3d d9 d4 54 d5 35 3e 89 eb 5d 00 00 e0 6e 20 68 62 9f a9 c4 0e 74 2b a2 8d bb d5 64 63 45 8d 48 23 ab f9 c5 9b 1f da 15 da eb d1 44 b5 12 11 6b 9b e5 72 2e ab a5 4b 93 36 fc d3 b8 5a 66 58 d8 28 a4 cc fd 2c 67 02 00 b0 5b 04 4d ec ad 36 62 16 59 53 1a 51 e3 1e 58 7f 73 20 11 69 9a e5 6c 95 1e 9c cf 2e f7 bf 92 32 01 00 b8 39 04 4d ec b3 75 59 b3 bd a7 b9 a8 58 7f d3 73 95 bc eb dc fa 31 9a e1 f6 42 69 dc 24 65 02 00 70 03 08 9a d8 73 3d 59 d3 8a aa 58 75 b7 3b 6f 6c b9 88 66 76 6c 91 32 93 ed 42 ca 04 00 e0 9d 10 34 b1 ff d2 ac 29 22 aa 2e 3b ba b8 e9 6e 4b 29 e9 d2 8f b1 72 29 65 c4 14 21 65 02 00 70 23 08 9a b8 13 42 c4 94 64 42 ba 4b 93 2a 22 a2 b6 2c 6a da ec 37 7f 60 72 36 00 00 f0 6e 08 9a d8 03 5b Data Ascii: Sf4\|xQ=T5>]n hbt+dcEH#Dkr.K6ZfX(,g[M6bYSQXs il.29MuYXs1Bi$eps=YXu;olfvl2B4)".;nK)r)e!ep#BdBK*",j7`r6n[
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 1b 71 6d 04 4d ec 01 6b 49 99 d8 3f 6a aa 6a 72 b8 eb ab 78 6f f5 a4 cc 0d 09 70 cb a1 8d ed 38 6e 71 dd c3 9d b1 8c 57 ba be 6b 87 49 2d 1f 6b ef ae ee 41 6b 62 57 52 47 cc aa 96 9a c4 b9 98 e9 fa 8a 9f 79 0b 7f fa 24 29 6a f7 c0 24 d4 ae c9 8b 9d 57 d2 ce fb f5 69 79 43 d6 5c ff 34 df f8 8e e1 32 3f d6 5a ad c6 9f ca d5 67 37 e2 1a 08 9a d8 03 0c 53 c4 3e aa 46 57 5b 58 ea 43 72 49 ca dc 5c ce 2c 9b d9 24 5f 6e d3 7e fd ff 52 d2 cd 7d b5 be 8d 5b 92 ed fd 95 c4 75 25 3b 9f 81 92 6e eb ce 09 d2 5e f1 7c ab cf 88 59 0a d5 a4 ee 98 16 28 35 a4 46 95 e4 c5 f3 46 69 6a cd 5f 37 3d ad ff 55 8b d7 f5 a7 49 c2 71 5e 96 ed f9 14 d6 7d 46 ea 23 f0 b5 13 61 37 b5 ab ff c7 4c 4d 35 bd e6 69 71 15 04 4d 00 18 c6 87 34 c1 7c bd fe 4c 77 bd 1f 1e b3 f9 3d d6 47 cc 4e Data Ascii: qmMkI?jjrxop8nqWkI-kAkbWRGy$)j$WiyC\42?Zg7S>FW[XCrI\,$_n~R}[u%;n^\|Y(5FFij_7=UIq^}F#a7LM5iqM4\|Lw=GN
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: b5 4b 60 fa 33 6e a8 77 6e 48 99 9d aa 5b ff b3 6c 53 4f 99 4d e3 6f 79 73 1f a2 e2 ce e2 e8 7c 47 96 b0 f2 b5 32 25 7d dc 4e db 89 d3 7e fc 8c 9e b0 dd 3f 68 7f 13 b7 9c 92 c9 9f a6 f3 89 d2 89 41 f9 a4 a0 30 c5 28 99 21 94 ac aa 19 f6 97 cb 79 fa 37 ad f1 60 77 8d 49 83 f0 3e 92 7f fa b6 64 d2 95 8c 36 2b 97 3d c2 6d a2 a2 09 dc 71 a7 a7 a7 67 67 67 75 5d 5f 3e 48 b1 69 16 1b 23 e9 6c 36 ff f2 cb af ea ba 36 97 ad 10 69 ad 5d 2e 97 ef 5b 6f 35 ae eb c6 fe 66 ee ed 45 5f db 75 de 19 92 d9 6d 59 fe 09 f3 c3 2e fb c3 e5 9a 0e f4 75 17 d0 a7 ef a3 88 b9 2b b6 ea f4 98 6b df aa 46 f9 2b 86 41 9c 31 6b da a2 28 68 5d c1 b1 1c 87 e9 fb b2 fd d4 17 df 11 de 96 28 7d 97 79 7b b8 3b c8 88 34 c5 a8 4c eb df 8b 1b 8e 19 6a 8a be 50 2a be 2f 5e e2 60 cd 38 31 c8 15 Data Ascii: K`3nwnH[lSOMoys\|G2%}N~?hA0(!y7`wI>d6+=mqgggu]_>Hi#l66i].[o5fE_umY.u+kF+A1k(h](}y{;4LjP*/^`81
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 10 aa fc 6e 8d 6d c4 77 1e c7 7c b9 4d cd 4b bb 4f bb 87 69 cf b3 58 c8 2c 2b 71 e9 39 d6 f4 a1 6b 5e 7e b5 3e 7b 86 f8 da 26 c6 b4 34 5a 94 36 35 e6 d5 b6 62 da bd 53 a4 75 c7 b5 4b 61 9a b2 a3 5c 44 c4 48 32 1a d3 65 cd 70 bc a4 e1 d2 fa 9b 65 16 a5 d0 f0 2e fb a2 a7 f4 e6 c2 3c 88 c7 4f 4a 8b ef 37 6f 6e 93 63 b0 43 04 4d e0 8e 7b fc e8 d1 bd fb f7 b6 fc 7f ad b5 f6 f9 f3 17 2f 5f bd 1a f6 9a d6 bb de 4d 3b b8 d5 c7 1e e9 cd 9d 3d 11 33 f9 ad b7 de 19 1f 94 75 ca a4 85 a6 27 70 91 27 0d 1e 97 14 bb 74 cd e3 75 2d dd af 5a 6c 4e 1e e5 85 4f c9 cb 99 22 fe 56 3b dd 17 c8 f2 70 5e ce 4c fa a1 55 7c e5 32 cd 97 6d f5 32 19 2e 90 d6 04 c3 7c a0 10 fb 54 ad bb 67 65 3e 87 bd d3 45 ee 4f 21 2a e2 57 2f 8a 7d f4 6a c3 54 1e 4d 5f dc 9f b0 88 89 59 55 b2 f8 f1 Data Ascii: nmw\|MKOiX,+q9k^~>{&4Z65bSuKa\DH2epe.<OJ7oncCM{/_M;=3u'p'tu-ZlNO"V;p^LU\|2m2.\|Tge>EO!*W/}jTM_YU
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: cf 92 dd da 8a a6 ae 6f 93 8f ba 8b bd e1 5b d4 35 37 6f 2f 95 9d da bd fb 63 49 2e e9 3d ef 8b 9e a1 45 b7 de 19 1e 6a fa a4 73 25 49 0a 8b f1 ca d7 0f d3 72 66 5c 7d c8 15 1d ad b4 f7 26 f7 87 f9 55 8a c4 da b6 3e e9 13 aa 0d 99 d5 aa aa 55 69 ac 15 db ae e5 2e a6 1d 9c 29 e1 88 76 ee 79 d2 9f 2e b1 9e 69 25 ce 51 0f d7 da de 8d 5d 44 54 93 9f 0d fa f8 1a e6 fa a9 eb c9 98 d4 de a3 93 de f3 2c be 62 68 04 4d 00 c0 0e ac 2b 5b f6 ef da d8 69 1e 5b 76 2b 63 92 d7 35 7b 1b 6c 77 b5 9b 47 71 e6 9d e5 c5 06 97 f7 5c 4f 74 db 24 3c f6 31 34 e9 2a cf 42 6d 7c d5 9e d7 2f d3 55 7b 53 1f f7 30 4c cd 71 29 d3 cd f2 49 17 bf 8c 63 2b e3 0b c6 1a 67 ec 46 77 11 52 8c fa 3a a5 0d d9 d4 85 57 db 46 47 0d f1 33 bc f1 a4 3e 19 0b 9c 7d 6f c1 df 80 3d af 39 4b 5b 2d 4d Data Ascii: o[57o/cI.=Ejs%Irf\}&U>Ui.)vy.i%Q]DT,bhM+[i[v+c5{lwGq\Ot$<14*Bm\|/U{S0Lq)Ic+gFwR:WFG3>}o=9K[-M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	49964	23.47.27.74	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	1168	OUT	GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
2024-04-05 23:18:21 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Content-Type: text/html; charset=UTF-8 Content-Length: 147 Allow: POST Expires: Fri, 05 Apr 2024 23:18:21 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Apr 2024 23:18:21 GMT Connection: close
2024-04-05 23:18:21 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 54 68 69 73 20 41 50 49 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 61 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Method Not Allowed</title></head><body><h1>Method Not Allowed</h1>This API must be called with a HTTP POST request</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	49967	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	381	OUT	GET /store//about/logo_steam.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/svg+xml Content-Length: 2557 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-9fd" CF-Cache-Status: HIT Age: 6279 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c249082233-MIA
2024-04-05 23:18:21 UTC	1070	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 2c 36 33 2e 36 7a 22 2f 3e 0d 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 22 20 64 3d 22 4d 36 36 2e 31 2c 33 31 2e 31 63 30 2d 35 2e 38 2d 34 2e 37 2d 31 30 2e 35 2d 31 30 2e 35 2d 31 30 2e 35 73 2d 31 30 2e 35 2c 34 2e 37 2d 31 30 2e 35 2c 31 30 2e 35 73 34 2e 37 2c 31 30 2e 35 2c 31 30 2e 35 2c 31 30 2e 35 53 36 36 2e 31 2c 33 36 2e 39 2c 36 36 2e 31 2c 33 31 2e 31 7a 0d 0a 09 09 09 20 4d 34 37 2e 37 2c 33 31 2e 31 63 30 2d 34 2e 34 2c 33 2e 35 2d 37 2e 39 2c 37 2e 39 2d 37 2e 39 63 34 2e 34 2c 30 2c 37 2e 39 2c 33 2e 35 2c 37 2e 39 2c 37 2e 39 63 30 2c 34 2e 34 2d 33 2e 35 2c 37 2e 39 2d 37 2e 39 2c 37 2e 39 43 35 31 2e 32 2c 33 39 2c 34 37 2e 37 2c 33 35 2e 35 2c 34 37 2e 37 2c 33 31 2e 31 7a 22 2f 3e 0d 0a 09 3c 2f 67 3e 0d 0a 09 3c 67 Data Ascii: ,63.6z"/><path class="st1" d="M66.1,31.1c0-5.8-4.7-10.5-10.5-10.5s-10.5,4.7-10.5,10.5s4.7,10.5,10.5,10.5S66.1,36.9,66.1,31.1z M47.7,31.1c0-4.4,3.5-7.9,7.9-7.9c4.4,0,7.9,3.5,7.9,7.9c0,4.4-3.5,7.9-7.9,7.9C51.2,39,47.7,35.5,47.7,31.1z"/></g><g
2024-04-05 23:18:21 UTC	118	IN	Data Raw: 2d 30 2e 37 76 2d 34 2e 33 48 32 37 33 2e 37 7a 20 4d 32 37 32 2e 39 2c 32 39 2e 39 68 30 2e 38 0d 0a 09 09 09 63 30 2e 35 2c 30 2c 30 2e 38 2d 30 2e 33 2c 30 2e 38 2d 30 2e 37 63 30 2d 30 2e 34 2d 30 2e 32 2d 30 2e 37 2d 30 2e 38 2d 30 2e 37 68 2d 30 2e 38 56 32 39 2e 39 7a 22 2f 3e 0d 0a 09 3c 2f 67 3e 0d 0a 3c 2f 67 3e 0d 0a 3c 2f 73 76 67 3e 0d 0a Data Ascii: -0.7v-4.3H273.7z M272.9,29.9h0.8c0.5,0,0.8-0.3,0.8-0.7c0-0.4-0.2-0.7-0.8-0.7h-0.8V29.9z"/></g></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	49971	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	382	OUT	GET /store/about/icon-windows.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/svg+xml Content-Length: 761 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-2f9" CF-Cache-Status: HIT Age: 1828 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c24f7e7446-MIA
2024-04-05 23:18:21 UTC	761	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	49973	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	705	OUT	GET /public/shared/fonts/MotivaSans-Light.ttf?v=4.015 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://store.steampowered.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflare Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	361	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: application/octet-stream Content-Length: 122660 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT ETag: "649bb1ee-1df24" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 7010 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c27ac97489-MIA
2024-04-05 23:18:21 UTC	1008	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 df 1c 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 b7 ad 6e 29 00 00 01 6c 00 00 75 6a 47 53 55 42 e1 64 c1 db 00 00 76 d8 00 00 1b a4 4f 53 2f 32 74 d2 9d 02 00 00 92 7c 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 92 dc 00 00 05 8e 63 76 74 20 46 29 09 0f 00 01 cf 64 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d0 2c 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 cf 5c 00 00 00 08 67 6c 79 66 e0 8a ae 64 00 00 98 6c 00 01 01 b6 68 65 61 64 17 93 fb 41 00 01 9a 24 00 00 00 36 68 68 65 61 06 9e 06 2b 00 01 9a 5c 00 00 00 24 68 6d 74 78 76 c1 78 00 00 01 9a 80 00 00 0c e6 6c 6f 63 61 a7 f7 67 d6 00 01 a7 68 00 00 06 a6 6d 61 78 70 04 a0 0f 16 00 01 ae 10 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSn)lujGSUBdvOS/2t\|`cmapdcvt F)dfpgm6!,gasp\glyfdlheadA$6hhea+\$hmtxvxlocaghmaxp nam
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 00 00 00 02 00 01 00 02 00 00 00 02 00 01 00 02 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 07 00 10 00 18 00 26 00 3a 00 42 00 4a 00 52 00 01 00 00 00 01 00 4a 00 02 00 08 00 04 00 4c 00 76 00 9c 01 96 00 02 00 08 00 07 01 fc 26 2e 30 7c 36 90 3c d0 3c fe 3f 7e 00 04 00 00 00 Data Ascii: &:BJRJLv&.0\|6<<?~
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 01 00 02 01 00 00 00 01 08 00 01 00 02 01 00 00 00 01 08 00 01 00 02 01 00 00 00 01 08 00 01 00 02 01 00 00 00 01 08 00 01 00 02 01 00 00 00 01 08 00 01 00 02 01 00 00 00 01 08 00 01 00 02 01 00 00 00 01 08 00 01 00 02 01 00 00 00 01 08 00 01 00 02 01 00 00 00 01 08 00 01 00 02 01 00 00 00 01 08 00 01 00 02 01 00 00 00 01 08 00 01 00 06 01 00 00 00 01 08 00 01 01 09 00 2b 01 0a 00 2b 01 0b 00 2b 01 0c 00 2b 00 02 01 00 00 00 01 08 00 01 00 06 00 ff 00 01 01 00 00 13 01 08 00 15 01 bc ff ff 01 bd 00 01 01 c5 00 14 00 09 00 47 00 12 00 4a 00 12 00 4e 00 1b 00 ff 00 02 01 08 00 03 01 bb 00 04 01 bd 00 04 01 c0 00 05 01 c5 00 03 00 09 00 47 00 12 00 4a 00 12 00 4e 00 1b 00 ff 00 02 01 08 00 03 01 bb 00 04 01 bd 00 04 01 c0 00 05 01 c5 00 03 00 09 00 47 00 12 Data Ascii: ++++GJNGJNG
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 01 bd 00 04 01 c0 00 05 01 c5 00 03 00 09 00 47 00 12 00 4a 00 12 00 4e 00 1b 00 ff 00 02 01 08 00 03 01 bb 00 04 01 bd 00 04 01 c0 00 05 01 c5 00 03 00 09 00 47 00 12 00 4a 00 12 00 4e 00 1b 00 ff 00 02 01 08 00 03 01 bb 00 04 01 bd 00 04 01 c0 00 05 01 c5 00 03 00 09 00 47 00 12 00 4a 00 12 00 4e 00 1b 00 ff 00 02 01 08 00 03 01 bb 00 04 01 bd 00 04 01 c0 00 05 01 c5 00 03 00 0d 00 47 00 12 00 4a 00 12 00 4e 00 1b 00 ff 00 02 01 08 00 03 01 09 00 03 01 0a 00 03 01 0b 00 03 01 0c 00 03 01 bb 00 04 01 bd 00 04 01 c0 00 05 01 c5 00 03 00 09 00 47 00 12 00 4a 00 12 00 4e 00 1b 00 ff 00 02 01 08 00 03 01 bb 00 04 01 bd 00 04 01 c0 00 05 01 c5 00 03 00 06 00 fe 00 03 01 00 00 03 01 03 00 04 01 08 00 03 01 c0 00 03 01 c5 00 03 00 06 00 fe 00 03 01 00 00 03 01 Data Ascii: GJNGJNGJNGJNGJN
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 01 01 03 00 04 00 0e 01 03 00 04 01 09 00 54 01 0a 00 54 01 0b 00 54 01 0c 00 54 01 67 ff f7 01 68 ff f7 01 69 ff f7 01 6a ff f7 01 6b ff f7 01 6c ff f7 01 6d ff f7 01 6e ff f7 01 6f ff f7 00 01 01 03 00 04 00 01 01 03 00 04 00 02 01 00 00 03 01 03 00 08 00 01 01 03 00 03 00 01 01 03 00 03 00 01 01 03 00 03 00 05 01 03 00 03 01 09 00 03 01 0a 00 03 01 0b 00 03 01 0c 00 03 00 01 01 03 00 03 00 01 01 03 00 03 00 07 00 f8 00 03 00 ff 00 04 01 00 00 02 01 03 00 03 01 06 00 02 01 08 00 0d Data Ascii: TTTTghijklmno
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 00 1c 00 ff 00 16 01 00 00 19 01 01 00 19 01 02 00 19 01 03 00 12 01 04 00 19 01 05 00 19 01 06 00 16 01 07 00 19 01 08 00 2b 00 0b 00 f8 00 02 00 fe 00 1c 00 ff 00 12 01 00 00 26 01 03 00 12 01 06 00 16 01 08 00 1b 01 09 00 23 01 0a 00 23 01 0b 00 23 01 0c 00 23 00 20 00 d2 00 03 00 f7 00 03 00 f8 00 02 00 f9 00 03 00 fa 00 27 00 fb 00 27 00 fc 00 27 00 fd 00 27 00 fe 00 1c 00 ff 00 1e 01 00 00 26 01 01 00 27 01 02 00 27 01 03 00 26 01 04 00 27 01 05 00 27 01 06 00 21 01 07 00 27 01 08 00 2d 01 0d 00 03 01 0e 00 03 01 0f 00 03 01 10 00 03 01 11 00 03 01 12 00 03 01 13 00 03 01 14 00 03 01 36 00 03 01 42 00 03 02 a6 00 05 02 aa 00 03 02 ae 00 04 00 01 01 08 00 03 00 01 01 08 00 03 00 01 01 08 00 03 00 01 01 08 00 03 00 01 01 1c ff e8 00 01 01 1c ff e8 00 Data Ascii: +&#### ''''&''&''!'-6B
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: c5 00 02 00 01 01 c0 00 00 00 01 01 c0 00 02 00 01 01 c0 00 00 00 01 01 c0 00 00 00 01 01 c0 00 00 00 01 01 c0 00 00 00 04 01 bb 00 05 01 bd 00 03 01 c0 00 07 01 c5 00 02 00 04 01 bb 00 05 01 bd 00 03 01 c0 00 07 01 c5 00 02 00 04 01 bb 00 05 01 bd 00 03 01 c0 00 07 01 c5 00 02 00 04 01 bb 00 05 01 bd 00 03 01 c0 00 07 01 c5 00 02 00 04 01 bb 00 05 01 bd 00 03 01 c0 00 07 01 c5 00 02 00 40 01 76 00 00 01 8f 00 00 01 96 00 00 01 97 00 00 01 98 00 00 01 99 00 00 01 9a 00 00 01 9b 00 00 01 9c 00 00 01 9d 00 00 01 9e 00 00 01 9f 00 00 01 a0 00 00 01 a1 00 00 01 a2 00 00 01 a3 00 00 01 a4 00 00 01 a5 00 00 01 a6 00 00 01 a7 00 00 01 a8 00 00 01 a9 00 00 01 aa 00 00 01 ab 00 00 01 ad 00 00 01 b4 00 00 01 b5 00 00 01 b6 00 00 01 b7 00 00 01 b8 00 00 01 b9 00 00 Data Ascii: @v
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 00 00 01 c2 00 00 01 c3 00 03 01 c4 00 00 01 c5 00 04 01 ca 00 00 01 cb 00 00 01 cc 00 00 01 cd 00 00 01 ce 00 00 01 cf 00 00 01 d0 00 00 01 d1 00 00 01 d2 00 00 01 d3 00 00 01 d4 00 00 01 d5 00 00 01 d6 00 00 01 d7 00 00 01 d8 00 00 01 f2 00 00 01 f3 00 00 01 f5 00 00 01 f6 00 00 01 f7 00 00 01 f8 00 00 00 06 01 bb 00 08 01 bc 00 03 01 bd 00 06 01 c0 00 00 01 c3 00 03 01 c5 00 04 00 40 01 76 00 05 01 8f 00 05 01 96 00 05 01 97 00 05 01 98 00 05 01 99 00 05 01 9a 00 05 01 9b 00 05 01 9c 00 05 01 9d 00 05 01 9e 00 05 01 9f 00 05 01 a0 00 05 01 a1 00 05 01 a2 00 05 01 a3 00 05 01 a4 00 05 01 a5 00 05 01 a6 00 05 01 a7 00 05 01 a8 00 05 01 a9 00 05 01 aa 00 05 01 ab 00 05 01 ad 00 05 01 b4 00 05 01 b5 00 05 01 b6 00 05 01 b7 00 05 01 b8 00 05 01 b9 00 05 01 Data Ascii: @v
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: bc 00 03 01 bd 00 06 01 c0 00 00 01 c3 00 03 01 c5 00 04 00 06 01 bb 00 08 01 bc 00 03 01 bd 00 06 01 c0 00 00 01 c3 00 03 01 c5 00 04 00 06 01 bb 00 08 01 bc 00 03 01 bd 00 06 01 c0 00 00 01 c3 00 03 01 c5 00 04 00 06 01 bb 00 08 01 bc 00 03 01 bd 00 06 01 c0 00 00 01 c3 00 03 01 c5 00 04 00 06 01 bb 00 08 01 bc 00 03 01 bd 00 06 01 c0 00 00 01 c3 00 03 01 c5 00 04 00 06 01 bb 00 08 01 bc 00 03 01 bd 00 06 01 c0 00 00 01 c3 00 03 01 c5 00 04 00 06 01 bb 00 08 01 bc 00 03 01 bd 00 06 01 c0 00 00 01 c3 00 03 01 c5 00 04 00 02 01 bd 00 02 01 c5 00 04 00 02 01 bd 00 02 01 c5 00 04 00 02 01 bd 00 02 01 c5 00 04 00 02 01 bd 00 02 01 c5 00 04 00 02 01 bd 00 02 01 c5 00 04 00 02 01 bd 00 02 01 c5 00 04 00 04 01 bb 00 05 01 bd 00 03 01 c0 00 07 01 c5 00 02 00 05 Data Ascii:
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 00 15 ff ea ff e3 ff fc ff e1 ff fc ff dd ff ea ff df ff e2 00 12 00 03 ff f6 ff fe 00 00 00 03 ff ee ff f4 00 00 00 00 ff ff 00 02 00 00 00 00 00 01 00 02 00 00 00 02 00 00 ff f6 ff b2 ff f7 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ca ff 8a ff e5 ff ba ff cd ff 9c 00 00 00 00 00 00 00 26 00 00 ff c4 ff fd ff b3 ff ee ff c4 ff cd ff e0 ff c4 00 14 00 0b 00 01 ff ff 00 00 00 00 00 00 ff e5 00 00 ff b9 00 00 00 01 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff cb 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff d9 00 00 ff e0 ff fe ff cf ff f7 00 00 00 05 ff eb ff ff ff dc 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ff e0 ff d9 ff ff 00 Data Ascii: &

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	49972	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	704	OUT	GET /public/shared/fonts/MotivaSans-Bold.ttf?v=4.015 HTTP/1.1 Host: store.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://store.steampowered.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.cloudflare.steamstatic.com/public/shared/css/motiva_sans.css?v=2C1Oh9QFVTyK&l=english&_cdn=cloudflare Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	361	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: application/octet-stream Content-Length: 123884 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT ETag: "649bb1ee-1e3ec" Access-Control-Allow-Origin: * X-Cache: MISS CF-Cache-Status: HIT Age: 6877 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c26890746a-MIA
2024-04-05 23:18:21 UTC	1008	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 e3 e4 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 44 f4 60 3e 00 00 01 6c 00 00 75 e8 47 53 55 42 e1 64 c1 db 00 00 77 54 00 00 1b a4 4f 53 2f 32 76 62 a0 f8 00 00 92 f8 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 93 58 00 00 05 8e 63 76 74 20 48 67 0b 08 00 01 d4 2c 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d4 f4 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 d4 24 00 00 00 08 67 6c 79 66 cf 0e c7 af 00 00 98 e8 00 01 06 58 68 65 61 64 18 0f fb 61 00 01 9f 40 00 00 00 36 68 68 65 61 07 19 06 92 00 01 9f 78 00 00 00 24 68 6d 74 78 b4 4e 4c 2e 00 01 9f 9c 00 00 0c e6 6c 6f 63 61 7b 9c 3a 94 00 01 ac 84 00 00 06 a6 6d 61 78 70 04 a0 0f 12 00 01 b3 2c 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSD`>luGSUBdwTOS/2vb`cmapdXcvt Hg,fpgm6!gasp$glyfXheada@6hheax$hmtxNL.loca{:maxp, nam
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 00 00 00 02 00 01 00 02 00 00 00 02 00 01 00 02 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 01 00 03 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 00 00 03 00 04 00 05 00 06 00 07 00 10 00 18 00 26 00 3a 00 42 00 4a 00 52 00 01 00 00 00 01 00 4a 00 02 00 08 00 04 00 4c 00 76 00 9c 01 96 00 02 00 08 00 07 01 fc 26 2e 30 7c 36 90 3c d0 3c fe 3f 7e 00 04 00 00 00 Data Ascii: &:BJRJLv&.0\|6<<?~
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 06 00 02 01 00 00 00 01 08 00 06 00 02 01 00 00 00 01 08 00 06 00 02 01 00 00 00 01 08 00 06 00 02 01 00 00 00 01 08 00 06 00 02 01 00 00 00 01 08 00 06 00 02 01 00 00 00 01 08 00 06 00 02 01 00 00 00 01 08 00 06 00 02 01 00 00 00 01 08 00 06 00 02 01 00 00 00 01 08 00 06 00 02 01 00 00 00 01 08 00 06 00 02 01 00 00 00 01 08 00 06 00 06 01 00 00 00 01 08 00 06 01 09 00 3b 01 0a 00 3b 01 0b 00 3b 01 0c 00 3b 00 02 01 00 00 00 01 08 00 06 00 06 00 ff 00 06 01 00 00 0e 01 08 00 1a 01 bc ff fa 01 bd 00 06 01 c5 00 14 00 09 00 47 00 08 00 4a 00 08 00 4e 00 0b 00 ff 00 0c 01 08 00 13 01 bb 00 19 01 bd 00 19 01 c0 00 1f 01 c5 00 13 00 09 00 47 00 08 00 4a 00 08 00 4e 00 0b 00 ff 00 0c 01 08 00 13 01 bb 00 19 01 bd 00 19 01 c0 00 1f 01 c5 00 13 00 09 00 47 00 08 Data Ascii: ;;;;GJNGJNG
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 01 bd 00 19 01 c0 00 1f 01 c5 00 13 00 09 00 47 00 08 00 4a 00 08 00 4e 00 0b 00 ff 00 0c 01 08 00 13 01 bb 00 19 01 bd 00 19 01 c0 00 1f 01 c5 00 13 00 09 00 47 00 08 00 4a 00 08 00 4e 00 0b 00 ff 00 0c 01 08 00 13 01 bb 00 19 01 bd 00 19 01 c0 00 1f 01 c5 00 13 00 09 00 47 00 08 00 4a 00 08 00 4e 00 0b 00 ff 00 0c 01 08 00 13 01 bb 00 19 01 bd 00 19 01 c0 00 1f 01 c5 00 13 00 0d 00 47 00 08 00 4a 00 08 00 4e 00 0b 00 ff 00 0c 01 08 00 13 01 09 00 13 01 0a 00 13 01 0b 00 13 01 0c 00 13 01 bb 00 19 01 bd 00 19 01 c0 00 1f 01 c5 00 13 00 09 00 47 00 08 00 4a 00 08 00 4e 00 0b 00 ff 00 0c 01 08 00 13 01 bb 00 19 01 bd 00 19 01 c0 00 1f 01 c5 00 13 00 06 00 fe 00 13 01 00 00 13 01 03 00 19 01 08 00 13 01 c0 00 13 01 c5 00 13 00 06 00 fe 00 13 01 00 00 13 01 Data Ascii: GJNGJNGJNGJNGJN
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 01 01 03 00 19 00 0e 01 03 00 19 01 09 00 69 01 0a 00 69 01 0b 00 69 01 0c 00 69 01 67 ff fc 01 68 ff fc 01 69 ff fc 01 6a ff fc 01 6b ff fc 01 6c ff fc 01 6d ff fc 01 6e ff fc 01 6f ff fc 00 01 01 03 00 19 00 01 01 03 00 19 00 02 01 00 00 13 01 03 00 31 00 01 01 03 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 05 01 03 00 13 01 09 00 13 01 0a 00 13 01 0b 00 13 01 0c 00 13 00 01 01 03 00 13 00 01 01 03 00 13 00 07 00 f8 00 13 00 ff 00 19 01 00 00 0c 01 03 00 13 01 06 00 0c 01 08 00 1d Data Ascii: iiiighijklmno1
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 00 45 00 ff 00 20 01 00 00 33 01 01 00 33 01 02 00 33 01 03 00 08 01 04 00 33 01 05 00 33 01 06 00 20 01 07 00 33 01 08 00 3b 00 0b 00 f8 00 0c 00 fe 00 45 00 ff 00 08 01 00 00 1c 01 03 00 08 01 06 00 20 01 08 00 0b 01 09 00 3d 01 0a 00 3d 01 0b 00 3d 01 0c 00 3d 00 20 00 d2 00 13 00 f7 00 13 00 f8 00 0c 00 f9 00 13 00 fa 00 56 00 fb 00 56 00 fc 00 56 00 fd 00 56 00 fe 00 45 00 ff 00 1e 01 00 00 1c 01 01 00 56 01 02 00 56 01 03 00 4f 01 04 00 56 01 05 00 56 01 06 00 31 01 07 00 56 01 08 00 47 01 0d 00 13 01 0e 00 13 01 0f 00 13 01 10 00 13 01 11 00 13 01 12 00 13 01 13 00 13 01 14 00 13 01 36 00 13 01 42 00 13 02 a6 00 1f 02 aa 00 13 02 ae 00 19 00 01 01 08 00 13 00 01 01 08 00 13 00 01 01 08 00 13 00 01 01 08 00 13 00 01 01 1c ff d3 00 01 01 1c ff d3 00 Data Ascii: E 33333 3;E ==== VVVVEVVOVV1VG6B
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: c5 00 0c 00 01 01 c0 00 00 00 01 01 c0 00 0c 00 01 01 c0 00 00 00 01 01 c0 00 00 00 01 01 c0 00 00 00 01 01 c0 00 00 00 04 01 bb 00 1f 01 bd 00 13 01 c0 00 2b 01 c5 00 0c 00 04 01 bb 00 1f 01 bd 00 13 01 c0 00 2b 01 c5 00 0c 00 04 01 bb 00 1f 01 bd 00 13 01 c0 00 2b 01 c5 00 0c 00 04 01 bb 00 1f 01 bd 00 13 01 c0 00 2b 01 c5 00 0c 00 04 01 bb 00 1f 01 bd 00 13 01 c0 00 2b 01 c5 00 0c 00 40 01 76 00 00 01 8f 00 00 01 96 00 00 01 97 00 00 01 98 00 00 01 99 00 00 01 9a 00 00 01 9b 00 00 01 9c 00 00 01 9d 00 00 01 9e 00 00 01 9f 00 00 01 a0 00 00 01 a1 00 00 01 a2 00 00 01 a3 00 00 01 a4 00 00 01 a5 00 00 01 a6 00 00 01 a7 00 00 01 a8 00 00 01 a9 00 00 01 aa 00 00 01 ab 00 00 01 ad 00 00 01 b4 00 00 01 b5 00 00 01 b6 00 00 01 b7 00 00 01 b8 00 00 01 b9 00 00 Data Ascii: +++++@v
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 00 00 01 c2 00 00 01 c3 00 13 01 c4 00 00 01 c5 00 19 01 ca 00 00 01 cb 00 00 01 cc 00 00 01 cd 00 00 01 ce 00 00 01 cf 00 00 01 d0 00 00 01 d1 00 00 01 d2 00 00 01 d3 00 00 01 d4 00 00 01 d5 00 00 01 d6 00 00 01 d7 00 00 01 d8 00 00 01 f2 00 00 01 f3 00 00 01 f5 00 00 01 f6 00 00 01 f7 00 00 01 f8 00 00 00 06 01 bb 00 31 01 bc 00 13 01 bd 00 25 01 c0 00 00 01 c3 00 13 01 c5 00 19 00 40 01 76 00 1f 01 8f 00 1f 01 96 00 1f 01 97 00 1f 01 98 00 1f 01 99 00 1f 01 9a 00 1f 01 9b 00 1f 01 9c 00 1f 01 9d 00 1f 01 9e 00 1f 01 9f 00 1f 01 a0 00 1f 01 a1 00 1f 01 a2 00 1f 01 a3 00 1f 01 a4 00 1f 01 a5 00 1f 01 a6 00 1f 01 a7 00 1f 01 a8 00 1f 01 a9 00 1f 01 aa 00 1f 01 ab 00 1f 01 ad 00 1f 01 b4 00 1f 01 b5 00 1f 01 b6 00 1f 01 b7 00 1f 01 b8 00 1f 01 b9 00 1f 01 Data Ascii: 1%@v
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: bc 00 13 01 bd 00 25 01 c0 00 00 01 c3 00 13 01 c5 00 19 00 06 01 bb 00 31 01 bc 00 13 01 bd 00 25 01 c0 00 00 01 c3 00 13 01 c5 00 19 00 06 01 bb 00 31 01 bc 00 13 01 bd 00 25 01 c0 00 00 01 c3 00 13 01 c5 00 19 00 06 01 bb 00 31 01 bc 00 13 01 bd 00 25 01 c0 00 00 01 c3 00 13 01 c5 00 19 00 06 01 bb 00 31 01 bc 00 13 01 bd 00 25 01 c0 00 00 01 c3 00 13 01 c5 00 19 00 06 01 bb 00 31 01 bc 00 13 01 bd 00 25 01 c0 00 00 01 c3 00 13 01 c5 00 19 00 06 01 bb 00 31 01 bc 00 13 01 bd 00 25 01 c0 00 00 01 c3 00 13 01 c5 00 19 00 02 01 bd 00 0c 01 c5 00 19 00 02 01 bd 00 0c 01 c5 00 19 00 02 01 bd 00 0c 01 c5 00 19 00 02 01 bd 00 0c 01 c5 00 19 00 02 01 bd 00 0c 01 c5 00 19 00 02 01 bd 00 0c 01 c5 00 19 00 04 01 bb 00 1f 01 bd 00 13 01 c0 00 2b 01 c5 00 0c 00 05 Data Ascii: %1%1%1%1%1%1%+
2024-04-05 23:18:21 UTC	1369	IN	Data Raw: 00 1a ff e0 ff e8 ff e7 ff dc ff e7 ff c3 ff e0 ff cf ff e2 00 08 00 13 ff f6 ff f4 00 00 00 13 ff f8 ff ea 00 00 00 00 ff fa 00 0c 00 00 00 00 00 06 00 0c 00 00 00 0c 00 00 ff f7 ff bc ff fc 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e9 ff 94 ff f5 ff ba ff c9 ff 9c 00 00 00 00 00 00 00 1c 00 00 ff c4 ff ed ff c3 ff f8 ff c4 ff c8 ff d6 ff c4 00 14 00 10 00 06 ff fa 00 00 00 00 00 00 ff f5 00 00 ff b4 00 00 00 06 00 00 00 00 00 00 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff bb 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fd ff de 00 00 ff e1 ff f4 ff d4 ff fc 00 00 00 1f ff e6 ff fb ff f1 00 06 00 00 00 00 00 00 00 00 00 00 00 00 ff d8 ff de ff fa 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	49970	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	383	OUT	GET /store/about/icon-chromeos.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/svg+xml Content-Length: 940 Connection: close Last-Modified: Tue, 07 Nov 2023 18:01:49 GMT ETag: "654a7b8d-3ac" CF-Cache-Status: HIT Age: 6352 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c2693a5c78-MIA
2024-04-05 23:18:21 UTC	940	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 69 64 3d 22 4c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 30 30 20 35 30 30 22 3e 0d 0a 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 2e 63 6c 73 2d 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 500 500"> <defs> <style> .cls-2 { stroke-width: 0px; fill: #fff; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	49966	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	382	OUT	GET /store/about/icon-steamos.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/svg+xml Content-Length: 1243 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-4db" CF-Cache-Status: HIT Age: 5043 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c26cdca557-MIA
2024-04-05 23:18:21 UTC	1070	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:21 UTC	173	IN	Data Raw: 2c 31 30 2e 38 2c 37 2e 34 73 31 2e 31 2c 32 2e 35 2c 32 2e 35 2c 32 2e 35 53 31 35 2e 38 2c 38 2e 38 2c 31 35 2e 38 2c 37 2e 34 7a 20 4d 31 31 2e 34 2c 37 2e 34 0d 0a 09 09 09 63 30 2d 31 2c 30 2e 38 2d 31 2e 39 2c 31 2e 39 2d 31 2e 39 63 31 2c 30 2c 31 2e 39 2c 30 2e 38 2c 31 2e 39 2c 31 2e 39 63 30 2c 31 2d 30 2e 38 2c 31 2e 39 2d 31 2e 39 2c 31 2e 39 43 31 32 2e 32 2c 39 2e 33 2c 31 31 2e 34 2c 38 2e 35 2c 31 31 2e 34 2c 37 2e 34 7a 22 2f 3e 0d 0a 09 3c 2f 67 3e 0d 0a 3c 2f 67 3e 0d 0a 3c 2f 73 76 67 3e 0d 0a Data Ascii: ,10.8,7.4s1.1,2.5,2.5,2.5S15.8,8.8,15.8,7.4z M11.4,7.4c0-1,0.8-1.9,1.9-1.9c1,0,1.9,0.8,1.9,1.9c0,1-0.8,1.9-1.9,1.9C12.2,9.3,11.4,8.5,11.4,7.4z"/></g></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	49969	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	380	OUT	GET /store/about/icon-macos.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Type: image/svg+xml Content-Length: 1212 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-4bc" CF-Cache-Status: HIT Age: 1828 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c26cd14982-MIA
2024-04-05 23:18:21 UTC	1070	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:21 UTC	142	IN	Data Raw: 2e 31 2c 31 2e 35 63 30 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2d 30 2e 34 63 30 2d 31 2c 30 2e 34 2d 32 2c 31 2e 32 2d 32 2e 38 63 30 2e 34 2d 30 2e 34 2c 30 2e 38 2d 30 2e 38 2c 31 2e 34 2d 31 2e 31 43 31 33 2e 31 2c 30 2e 32 2c 31 33 2e 37 2c 30 2c 31 34 2e 32 2c 30 0d 0a 09 43 31 34 2e 32 2c 30 2e 31 2c 31 34 2e 32 2c 30 2e 33 2c 31 34 2e 32 2c 30 2e 34 4c 31 34 2e 32 2c 30 2e 34 7a 22 2f 3e 0d 0a 3c 2f 73 76 67 3e 0d 0a Data Ascii: .1,1.5c0-0.1,0-0.2,0-0.4c0-1,0.4-2,1.2-2.8c0.4-0.4,0.8-0.8,1.4-1.1C13.1,0.2,13.7,0,14.2,0C14.2,0.1,14.2,0.3,14.2,0.4L14.2,0.4z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	49974	96.17.60.195	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	1293	OUT	GET /dynamicstore/saledata/?cc=US HTTP/1.1 Host: store.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: steamCountry=US%7Cbd44e98e0d3d15c935a3d2dda85040fb; browserid=3555103046475363392; sessionid=90a967192b0b4c3f64f5d7e0; timezoneOffset=7200,0; ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
2024-04-05 23:18:21 UTC	360	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/json; charset=utf-8 X-Frame-Options: DENY Cache-Control: public,max-age=300 Expires: Fri, 05 Apr 2024 23:23:12 GMT Last-Modified: Fri, 05 Apr 2024 23:15:00 GMT Strict-Transport-Security: max-age=10368000 Vary: origin Date: Fri, 05 Apr 2024 23:18:21 GMT Content-Length: 29 Connection: close
2024-04-05 23:18:21 UTC	29	IN	Data Raw: 7b 22 62 41 6c 6c 6f 77 41 70 70 49 6d 70 72 65 73 73 69 6f 6e 73 22 3a 74 72 75 65 7d Data Ascii: {"bAllowAppImpressions":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	49975	23.61.62.148	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	744	OUT	POST /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive Content-Length: 193 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryiEPlSYQwwCMkwEnm sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://store.steampowered.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:21 UTC	193	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 69 45 50 6c 53 59 51 77 77 43 4d 6b 77 45 6e 6d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 6e 70 75 74 5f 70 72 6f 74 6f 62 75 66 5f 65 6e 63 6f 64 65 64 22 0d 0a 0d 0a 43 4a 76 32 6e 66 4b 65 77 4b 76 5a 77 41 45 53 45 4d 6e 34 47 70 36 51 32 33 67 77 4a 56 6e 36 65 48 46 6b 6a 73 30 3d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 69 45 50 6c 53 59 51 77 77 43 4d 6b 77 45 6e 6d 2d 2d 0d 0a Data Ascii: ------WebKitFormBoundaryiEPlSYQwwCMkwEnmContent-Disposition: form-data; name="input_protobuf_encoded"CJv2nfKewKvZwAESEMn4Gp6Q23gwJVn6eHFkjs0=------WebKitFormBoundaryiEPlSYQwwCMkwEnm--
2024-04-05 23:18:22 UTC	337	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 2 Access-Control-Allow-Origin: https://store.steampowered.com Vary: Origin Access-Control-Expose-Headers: X-eresult, X-error_message X-eresult: 1 Expires: Fri, 05 Apr 2024 23:18:22 GMT Date: Fri, 05 Apr 2024 23:18:22 GMT Connection: close
2024-04-05 23:18:22 UTC	2	IN	Data Raw: 28 00 Data Ascii: (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	49976	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	646	OUT	GET /steam/apps/2399830/capsule_231x87.jpg?t=1712339593 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 16176 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "65034ee1-3f30" Expires: Fri, 12 Apr 2024 17:53:14 GMT Last-Modified: Thu, 14 Sep 2023 18:20:17 GMT CF-Cache-Status: HIT Age: 19494 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c47b026dad-MIA
2024-04-05 23:18:22 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 03 00 03 01 01 01 01 00 00 00 00 00 00 00 00 05 06 07 03 04 08 02 01 00 09 ff c4 00 3b 10 00 02 01 03 03 03 02 04 05 03 03 02 06 03 00 00 01 02 03 04 05 11 06 12 21 00 07 31 13 22 14 32 41 51 08 15 23 61 71 42 81 91 Data Ascii: JFIFCCW;!1"2AQ#aqB
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: c9 c7 d3 c7 47 41 4c 52 eb 06 8d 68 8d 77 4d a5 6a 29 ec b7 f5 92 4a 79 e5 2f ea 52 16 69 20 24 70 a1 4f cc 0e 39 c7 3c f4 4f 1e 52 a6 fe bb d2 ea 6d 0e 10 97 27 ca ad fa 7e ff 00 a7 75 34 66 5b 5c 71 ce a0 fa 72 c5 2e 55 d3 c1 01 97 f8 1f bf 55 8a 56 21 06 16 62 ac 52 ce 19 72 52 9a 15 ae 6f 5f 0e 91 d3 53 ca bb 63 62 1a 28 e4 50 50 83 c0 c0 e7 a1 36 33 a8 92 66 8e b2 10 00 16 a0 36 f9 ae 35 7b d8 52 4d 5e aa e1 e6 9d 58 30 45 3f 37 27 c9 c7 81 d3 a8 74 b4 2c 6d c2 ab dd c3 a1 fd 45 f8 fc d6 bf 5d 7b db a4 f4 e5 6c 9a 7a a6 a6 5b 2b c5 36 7e 22 b0 ac 71 48 d8 1b 81 24 f0 46 e5 27 20 01 b8 67 c8 e9 15 e7 79 5d e3 84 53 08 2d e1 d3 dd 36 08 af ba 87 5f d0 dc ac 34 eb 68 6a 4b ad 3d 3f bf e2 69 e6 0e b1 b7 3b b0 ca 70 48 c8 e9 a6 50 0c 99 a8 2d 73 00 54 d3 Data Ascii: GALRhwMj)Jy/Ri $pO9<ORm'~u4f[\qr.UUV!bRrRo_Scb(PP63f65{RM^X0E?7't,mE]{lz[+6~"qH$F' gy]S-6_4hjK=?i;pHP-sT
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 8c 12 a3 d5 7a 98 65 00 12 4e dc 6d 27 eb c9 0a 33 8e 63 4a 95 20 88 15 a7 6b 00 94 a6 08 24 9d 4d 73 f6 a1 fc 4d f7 5f 47 67 f3 0b ed ee 5b 5b be f8 6f 34 a8 92 3c c1 4e 37 4c 95 09 23 1e 54 0c 29 11 e0 7f d3 3b 99 49 11 89 4a bc 26 de 9f 8a 59 cc 22 d2 33 22 f5 35 be fe 35 7b 85 74 a9 a3 a6 87 b8 37 aa 4b 72 95 6a b1 05 43 c2 67 01 bd e1 01 da 21 c8 1f 2a 9c 64 9c 14 5f 68 69 4a 0b d2 d4 92 1b 52 26 4c f0 a1 31 6b fa de e2 d6 5a 60 ab ee 05 e5 2a 62 9e 58 68 ec b5 36 e6 aa a4 68 58 02 2a 51 20 94 05 2c ed 22 fa 30 46 42 7a 4d ee 3b 89 3c 08 6c 9b cc 74 99 fa fb 13 14 25 e7 cb 70 27 ac 47 a8 3f 58 9a 74 ec 07 78 ab 74 5f 79 20 d3 d5 77 fb 25 c2 c1 75 8d 29 64 b8 52 ac d1 a4 a5 c8 08 36 ce ca f1 14 93 01 b7 a8 f6 87 23 82 09 eb 6b 4a 5c 00 69 a6 ff 00 7a Data Ascii: zeNm'3cJ k$MsM_Gg[[o4<N7L#T);IJ&Y"3"55{t7KrjCg!d_hiJR&L1kZ`bXh6hX*Q ,"0FBzM;<lt%p'G?Xtxt_y w%u)dR6#kJ\iz
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: f0 d9 f2 54 83 a2 2c 27 29 53 66 2f 69 bd e0 fe 45 50 0e d1 c5 0c 1a 51 89 41 52 80 19 a2 d6 b0 9e a4 03 e7 43 2f 72 cf a1 69 ad 8b 6e ba b5 ae 8a be 38 a9 9e aa 24 22 3a 7a c3 c4 13 b6 73 84 71 88 df 39 fa 37 95 e6 b9 b5 ab 0a d7 76 e7 84 84 c8 04 cd 87 ee 13 a1 83 78 d8 1e 15 0c 23 6d f6 93 aa 71 00 38 14 a2 09 00 a6 f3 e0 54 6a 09 4d 89 17 24 1d f5 5b a4 fc 51 7c 54 f3 e9 8e e7 d9 d6 ae 28 a4 6a 67 ad 00 89 a9 99 49 04 12 32 c3 07 ea b9 1f f6 9e a3 9d a5 2b fc 89 ca 78 81 ee 9f c4 1a d2 b6 31 f8 64 e6 c2 af bd 48 fe 0b 37 ff 00 d5 cd 7c 95 98 1f f6 14 e5 6a b3 5b 74 79 ff 00 55 50 dc a1 ae d3 a9 47 51 32 57 6f 0a 62 8f d1 7e 5c 8c 8c 00 49 dc 33 9c 78 ce 07 48 f6 90 5b 2c 93 b1 dc 68 6b 57 d8 78 a6 3b 41 df 05 94 2c 52 44 29 27 81 1f 01 17 9a e7 bd 51 Data Ascii: T,')Sf/iEPQARC/rin8$":zsq97vx#mq8TjM$[Q\|T(jgI2+x1dH7\|j[tyUPGQ2Wob~\I3xH[,hkWx;A,RD)'Q
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 26 fd 07 41 b0 1d 75 93 46 b4 7d 82 f3 35 85 e2 b1 db a3 ba ea 0a c7 41 34 45 bd 35 a6 84 30 24 3b 12 31 9f a8 1c 8f 68 e3 0d d7 0c ae 70 e8 31 3f b8 f0 07 40 39 9f a0 eb 53 70 86 40 7d c1 6d b9 9e 27 90 f7 e9 5d 2b a9 b5 52 76 83 b7 34 51 50 24 12 df aa 24 4a 5b 7c 25 37 0a 9b 8c 9f 29 c1 f3 1c 40 6f 39 f0 a8 b9 f3 d5 ce 15 9c a1 2d 37 d0 75 ac 56 31 49 70 af 10 f1 b0 b9 e4 05 45 2a b4 83 d3 f6 f2 19 ad f7 29 17 57 da 44 97 da 3b d3 1f d4 96 e2 2a 72 d2 39 fa 89 32 ca c3 fd ad fb 0e b7 ee 76 62 7f 42 19 47 ee 06 67 9c 5f c8 d7 cc d8 ed 62 7b 48 ba e8 f0 1b 47 2d bc c6 b5 6d ac d5 36 4e f3 76 86 87 51 d3 52 0a 74 a9 47 a7 b8 5b 7e b6 fa e8 ce da 8a 72 bf 4d 8f ee 5c f9 56 04 75 87 2a 24 c2 fe 7c de b7 6c 60 91 86 59 2c 9b 1b 8f 7f ec 57 3f 77 5e e1 1d 7d Data Ascii: &AuF}5A4E50$;1hp1?@9Sp@}m']+Rv4QP$$J[\|%7)@o9-7uV1IpE)WD;r92vbBGg_b{HG-m6NvQRtG[~rM\Vu*$\|l`Y,W?w^}
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 3e 73 85 f3 82 7a 32 60 89 59 b5 2a ea 94 85 1e ec 6b a6 c7 5f 41 ed 54 05 d0 ba 4a cd 4d 6e b8 53 5e 25 d6 13 34 2b 50 56 4a 7f 46 9e 19 98 23 27 1b 98 c9 85 03 27 71 52 41 00 60 2b b4 3b 90 e8 84 2b af cf 9e 9a a4 5f 70 28 e7 16 b4 75 dc fb 6d fd 30 69 9a 31 75 a8 ad d4 97 c9 d2 2a 64 9c 88 a5 96 23 b2 7a b3 ee 39 c0 da 15 41 dc 73 80 49 45 f0 c7 05 79 e4 e1 5b 91 73 b0 f9 b0 de 99 c0 60 57 8d 76 3f 88 d4 fc e3 55 1d 1b a8 1f 4a d5 46 e6 9d 68 fd 58 81 05 18 38 75 3e 3d c3 21 bc 9e 72 72 49 e8 98 55 a1 4d 78 4c ce a7 89 de 7f 1b 0a 73 1d 85 82 41 10 38 72 a7 68 bb 67 7c ee 46 be a3 d5 35 9a a2 d5 b6 df 07 a3 6b b5 cb 1c ea b4 91 6c 25 a4 6d a8 c1 a5 77 db 92 0f 0b 18 03 3b 8e 34 bd 9b 8b 67 0a b2 eb d7 8d 34 b7 1d 6b e6 1d bd d9 58 8c 4b 07 0f 86 80 0e Data Ascii: >sz2`Yk_ATJMnS^%4+PVJF#''qRA`+;+_p(um0i1ud#z9AsIEy[s`Wv?UJFhX8u>=!rrIUMxLsA8rhg\|F5kl%mw;4g4kXK
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 1d 1d c6 17 ad 35 11 39 b5 b5 34 ab 34 55 18 5f 5f 62 31 58 d0 36 37 12 c5 06 40 3b 58 a9 e7 c1 12 d2 08 b1 a5 d0 b2 0e 93 f3 e7 9d 5f fb 03 db 2b 5f 75 da ed 4f 2d 0d 2d 9a c1 2c 70 fc 5c 76 d3 31 f5 d0 b6 f1 12 bc ef 2b aa 86 44 6c fa 99 3b 47 b7 3e e5 26 14 17 9c 85 12 06 87 d7 e7 d2 bb 8e 52 70 cc 8c b0 66 e0 c5 ec 22 f1 16 bd b9 cd e9 a2 1d 33 4d a8 35 84 94 31 55 7c 05 04 f5 92 b7 c4 d4 3c 93 98 e2 dc ce d2 31 25 9e 46 db 96 24 92 ce c4 92 49 39 e9 d7 96 9c cb 58 d2 e7 e7 1a ac c1 34 e3 89 6d 9d 54 40 1e 7e c3 d8 55 53 b7 fa f2 8a ae db 76 a9 b2 59 eb a8 34 46 9c 8a 3f 56 57 9e 36 9c 46 d2 0c bc 91 7f 5b 49 f3 30 19 23 38 03 03 ac 4e 2f 10 87 dc 04 a6 67 db 41 f5 fa eb 5f 61 63 b3 8e 05 a4 b0 14 02 8f d4 8d 68 0e a9 ee 1f 6f b4 de bc ae b7 47 4e f4 Data Ascii: 5944U__b1X67@;X_+_uO--,p\v1+Dl;G>&Rpf"3M51U\|<1%F$I9X4mT@~USvY4F?VW6F[I0#8N/gA_achoGN
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 4b 34 b0 6c da ce 1a 09 8a 92 8c 17 68 c4 84 8c b1 cb aa e5 ba e8 81 a9 a5 17 85 0e 5d ab 1e 1f 2e 3a 52 fd c2 cf 79 b0 d3 4d 6c d4 36 69 a8 a7 99 05 7d 2c 6f 1e 21 ad 05 c4 13 b4 05 72 ac 8f b5 4b 2a f2 8f ed 20 6d 19 e9 41 4a 81 3b d5 4c fe e4 6e 3d eb 02 5d 6b ff 00 2f 9e df 76 8a a1 ab 22 65 98 d7 ce a4 3d 54 28 09 f5 1d 71 96 99 72 bb b1 ff 00 50 30 3f 36 43 f0 c4 c8 af 09 88 34 89 a8 e9 e5 a2 bd bc f4 93 34 4f 3c 87 d4 da 41 46 38 0c 32 a7 8c 7b 88 ff 00 f5 07 ce 49 92 40 55 8d 77 31 02 d5 ab fe ab bb dd e3 8a 7a 70 b4 cf 13 16 12 52 b4 86 60 08 c0 3e e6 6d bc 01 ca f3 cf f8 ef 77 62 ad aa 32 07 87 7a e8 7f c3 a7 78 2d 7d b9 ac bb 59 af fe 95 34 97 1a 45 a8 7a ba 58 52 38 e1 9d 37 b1 46 8e 35 0a 32 1c fb 86 39 41 80 77 83 d4 5b 73 ba 52 94 ad e2 a2 Data Ascii: K4lh].:RyMl6i},o!rK* mAJ;Ln=]k/v"e=T(qrP0?6C44O<AF82{I@Uw1zpR`>mwb2zx-}Y4EzXR87F529Aw[sR
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: a2 30 45 04 4e a9 12 ec 5f 4a 11 c2 c7 fa 50 92 e9 b7 20 46 36 7c 83 66 70 39 58 7e eb 0f 9b 5a bc 49 41 39 8d ce b3 af 1b 9e 3b df eb 42 aa e3 5b 7d ac 40 64 75 97 24 6c 46 68 a5 29 b0 9c 18 ff 00 da a5 24 1b b7 2f 9d c7 c0 6e 89 00 03 49 10 54 a0 07 cf 9c 28 55 7e ba a4 6b 2d 5a 44 d2 7e 64 29 c4 91 54 ef 58 a2 82 a0 ce 51 b6 a8 4f 74 4d 4e 12 3c 1c 36 f0 19 b7 0c 05 ec a1 69 b6 b1 f3 d7 4a 5c a5 f6 5c 39 ac 9c c0 1e 10 6d af 23 73 f4 af 77 bd 7b 6e d6 d7 f7 69 ec 14 d4 71 54 42 24 a7 92 85 e5 49 29 1d 52 34 52 cd 23 90 cb ba 35 2c 87 1f 38 5d ca 0a 85 60 65 75 79 53 a1 d0 70 d8 6b ed c3 7e 08 a8 ad b6 ff 00 fd 09 b8 d5 51 04 8b f0 d7 80 31 b4 57 9d 53 4d 25 aa 58 eb 24 88 ca f4 d8 ab 88 b0 cf a9 11 dc 1b 1f 56 0c 37 63 3e 08 5c f2 3a 40 a4 83 94 fc e1 Data Ascii: 0EN_JP F6\|fp9X~ZIA9;B[}@du$lFh)$/nIT(U~k-ZD~d)TXQOtMN<6iJ\\9m#sw{niqTB$I)R4R#5,8]`euySpk~Q1WSM%X$V7c>\:@
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: c4 ef f7 b4 59 85 9c 6a 0a 58 ff 00 96 e7 6d 7a 79 98 b5 6f 90 a4 34 09 55 ce b6 26 fc ae 6d 3c 6d c0 4d ea 69 ab af 56 dd 5b 56 96 db 6b dc 65 8e 69 06 25 9e 98 2d 5d 63 8a 65 8e 4c fa 8a 09 f6 a4 8e 5c 05 67 33 14 2b ef 32 8f 14 a1 47 23 62 dd 2e 6d 7f 62 78 92 4d 0c 3c e0 05 d7 8f d6 c2 49 80 7d 40 31 60 00 a4 b5 b9 41 63 d8 d1 24 75 15 62 24 9c 4c b9 21 63 28 8e 63 05 b2 cc cc a4 21 46 38 52 4e 42 87 72 b3 6a 13 d4 fc f9 c2 ab 71 a7 35 c0 88 d4 71 db d2 74 8b 1f 49 1d 7a 86 e9 51 4b 2c 93 2b 4f 1c 54 30 d7 4c e6 45 97 f4 a5 64 8d 64 2d bb 73 16 91 80 20 83 b5 bf 62 bd 75 68 55 fe 7c bd 26 c6 21 07 28 98 d4 79 c7 1e 94 1a 8a b6 78 04 72 47 1c 73 d4 14 27 d2 90 b0 f5 06 dd a7 90 ca 78 f3 f3 03 f4 1f 4c 2a 81 0b 06 af 9d 95 e1 94 91 72 41 b7 21 a9 f2 af Data Ascii: YjXmzyo4U&m<mMiV[Vkei%-]ceL\g3+2G#b.mbxM<I}@1`Ac$ub$L!c(c!F8RNBrjq5qtIzQK,+OT0LEdd-s buhU\|&!(yxrGs'xL*rA!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	49977	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	646	OUT	GET /steam/apps/1091500/capsule_231x87.jpg?t=1706698946 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 10011 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "622f469e-271b" Expires: Sat, 06 Apr 2024 03:42:38 GMT Last-Modified: Mon, 14 Mar 2022 13:43:58 GMT CF-Cache-Status: HIT Age: 89234 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c4ab97961a-MIA
2024-04-05 23:18:22 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 07 04 06 08 01 03 09 02 0a ff c4 00 42 10 00 01 02 05 02 04 02 07 04 08 03 09 00 00 00 00 01 02 03 00 04 05 06 11 07 12 08 13 21 31 22 41 09 14 15 32 51 61 94 17 42 Data Ascii: JFIFCCWB!1"A2QaB
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 5e 6a e9 c4 72 e5 36 90 44 82 24 11 20 89 04 48 22 41 12 08 90 44 82 26 20 89 04 48 22 c5 95 aa 49 cf 4c cd cb cb 4d 33 30 fc a2 c3 53 0d b4 e0 52 99 59 48 50 4a c0 f7 4e d2 93 83 d7 04 1f 31 17 df 42 ad 26 36 a3 da 40 76 a0 91 00 81 a4 8e ba f4 5e 43 81 24 03 a8 59 5d a2 c2 f4 90 44 82 24 11 22 a8 bc 52 82 52 49 21 29 1d 49 3e 50 02 74 0a 8b 9b 75 c7 8f ed 29 d1 71 31 24 dd 53 f4 be e0 6f 29 f6 65 0d 49 74 21 43 c9 d7 bd c4 75 ee 32 54 3f 56 3a a6 01 e8 db 1d c7 22 a3 d9 d8 52 3f 59 fa 18 f0 6e e7 c2 60 1e aa 32 be 23 46 8e 80 e6 3e 1f aa e7 49 4b 87 89 ae 39 d5 b6 9c 7e ca 74 da 60 e1 53 0c ef 69 4f b6 7e 0b e8 eb ff 00 0f 0e c6 ce 7a c7 6f 6f 0f f0 77 a3 ba 4d b9 c4 dd da 57 89 19 80 73 cf f0 53 d8 0e 8e 74 01 fb eb 58 7e 23 75 88 3c d1 b5 6e 6e b1 a3 Data Ascii: ^jr6D$ H"AD& H"ILM30SRYHPJN1B&6@v^C$Y]D$"RRI!)I>Ptu)q1$So)eIt!Cu2T?V:"R?Yn`2#F>IK9~t`SiO~zoowMWsStX~#u<nn
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: d3 f1 8d c7 11 f4 7f 8b e1 58 57 d2 f7 8e 63 59 0d 39 49 39 fb c4 00 23 2f b5 ae a2 74 83 d1 61 33 11 a3 52 a8 a4 d9 92 63 c3 fb d1 48 6b 7f 17 da 69 a0 a1 72 b5 ca d8 a8 d7 fb 37 41 a4 01 31 38 a5 79 05 24 1c 37 9f df 29 f9 66 30 b8 7f 81 f1 ae 23 21 d6 d4 b2 d3 3f 5d da 37 dd cd df ca 0f b9 5d b8 be a3 6c 0e 63 af 4f ef 65 53 c8 4d 71 0d c5 4c b2 66 12 e0 d0 9d 3e 9a c9 4f 28 17 6b b3 6d 75 19 dc 40 e4 e4 60 82 02 08 fd e1 df a8 54 c3 38 33 81 0c 62 4e 37 97 6d fa 83 d9 69 f1 1a b5 bf cc 5e ef b8 16 be 2e ef b1 2d 2d 1b 95 9f bc 76 f7 73 77 ba 07 de 5d 33 a7 5a 79 4a d2 eb 62 52 df a2 34 1a a6 cb 20 00 54 32 f3 ce 9e ae 3c ea fb b8 e2 d5 95 29 47 a9 24 c7 1c e2 0c 7a a7 10 d6 17 37 0d 22 a0 91 bf 74 32 7b 8c 63 62 1a d6 09 fe 22 4b 8e a4 93 3b 67 67 ea Data Ascii: XWcY9I9#/ta3RcHkir7A18y$7)f0#!?]7]lcOeSMqLf>O(kmu@`T83bN7mi^.--vsw]3ZyJbR4 T2<)G$z7"t2{cb"K;gg
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 92 d9 3f 28 c0 18 13 f0 0a 3e bf 8a 62 b7 35 03 37 ef bc b7 e4 a6 0b bc e4 90 39 ab 55 0d bd 58 a7 46 d9 a6 7a 01 3f 12 40 1f 10 ad 3b 6b d1 65 55 bb ab 06 b5 a9 f7 fb 6f 4d 3d 82 ec ad bb 26 96 c1 1f 00 e2 92 94 81 fc 1b 8d 1f 15 f4 cd 87 d0 05 98 75 07 d6 70 d2 5c 43 07 ff 00 67 1f 7e 52 a4 6d b0 5b 80 d0 dd 29 b7 de e3 fd 00 f8 95 85 c6 f5 7a db e1 eb 42 68 fa 07 a6 ef ac 0a 93 ca 98 a9 87 27 8b ce 4b cb 25 61 6a 4b 8a 52 bc 05 d7 70 70 30 36 a1 c1 80 15 d7 0f 80 ed af 78 bb 1c a9 c5 78 9d 10 d0 c1 95 80 36 01 31 13 a9 24 e5 69 89 24 ee 20 f7 61 65 de 39 96 34 05 ab 5e 5c 4e a6 77 f2 d0 7f 7e f5 52 e9 86 a1 f0 f9 a7 3a 73 43 a3 b7 a6 8e eb 0e a1 38 8e 6c f4 cb f2 cb 6e 5f 9e be bc 96 f2 95 a8 a5 1d 11 90 de 14 52 54 3d ec 0e 93 7f 67 c5 f8 86 21 50 d9 Data Ascii: ?(>b579UXFz?@;keUoM=&up\Cg~Rm[)zBh'K%ajKRpp06xx61$i$ ae94^\Nw~R:sC8ln_RT=g!P
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 63 c6 87 52 e9 80 4f 49 e4 06 cd 07 4f 12 e2 56 d5 c3 3f 03 13 17 4d 36 91 5e be aa 75 d4 d0 a5 d2 91 27 41 aa 4a 32 c1 7d 82 02 bf c2 f1 aa 59 0a 57 bc 90 42 9c db b9 58 c8 8b 9c 69 e9 33 0f e1 c7 3e d3 0a 8a d7 5b 13 03 23 23 93 a3 52 e1 27 ba 0e 87 da 33 dd 38 56 18 55 ce 22 73 d5 02 9d 2d e4 12 5c 4f 86 c0 8e 8e 23 f8 41 dd 75 46 b7 e8 11 d4 9d 26 6e cb b5 2b 66 c3 6e 55 68 5c b0 91 94 6d 72 a5 29 04 72 dd 64 8c 29 1d 77 0c 10 42 82 55 9e 98 3f 3d f0 b7 1e 56 c2 b1 d7 e3 58 b0 35 de f6 96 97 68 5c df e0 07 ba 07 2c a3 28 03 40 40 d0 ed b7 b8 3d 3a b6 ad b6 b7 00 00 66 24 80 7c c8 d6 79 c9 99 e7 d4 53 b6 97 a3 5a cb 44 e4 bd 46 fd b9 eb fa 83 51 46 d5 2d 35 09 82 dc ba 94 36 f6 40 25 58 c2 40 c1 51 c8 8e 83 89 7a 6c b8 a8 f2 eb 0b 26 ce d9 aa 38 b8 fc Data Ascii: cROIOV?M6^u'AJ2}YWBXi3>[##R'38VU"s-\O#AuF&n+fnUh\mr)rd)wBU?=VX5h\,(@@=:f$\|ySZDFQF-56@%X@Qzl&8
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: a9 5a d5 00 db 75 07 a5 cf bc db 53 67 01 cc 1c 29 29 73 18 29 03 71 cc 7d 0f 4b 8f 38 7f 8e b0 ff 00 a1 f8 95 bd 83 ce a1 e3 d9 0e ea d7 19 2c f2 7c 88 90 5e 25 6a 15 b0 cb ec 36 a9 b9 b4 39 e0 78 fc 1c c1 bf 9b 75 9d 72 e8 ba 03 4c 35 ea d5 d5 27 9f a7 c9 4c 3d 4a b8 e5 00 f5 db 76 ae c9 95 a8 4a 9f df 65 7d 71 fb c9 ca 4f 91 31 cb 38 9f d1 c6 2b 80 30 de 5b 1f 59 b5 dc 54 67 21 c8 bd ba 96 8f bc 0b 99 f7 94 be 1f c4 16 f7 44 52 b8 1d 9d 43 a4 13 2d 27 a3 5d b1 3e 06 1d f7 55 8d 1c 99 6d 29 e7 04 48 22 41 12 08 bc 10 45 ec 11 20 89 04 5c df c5 8e a6 5e f3 94 d7 b4 cf 48 29 53 75 9b ee aa ce d9 f9 f9 42 1b 66 89 2a b1 ef b8 f9 21 2d ba e0 ce c1 9d c0 02 b1 83 b3 77 5e e0 6c 06 c4 bc 63 b8 fb db 4e d2 99 ee e6 ff 00 d4 78 e4 06 ee 0d dd c0 03 26 04 11 9a Data Ascii: ZuSg))s)q}K8,\|^%j69xurL5'L=JvJe}qO18+0[YTg!DRC-']>Um)H"AE \^H)SuBf*!-w^lcNx&
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 7c 16 35 a5 6a 4a 59 f4 81 25 2c b7 1f 75 c7 14 fc d4 e3 f8 2f 4d be ae ab 79 c2 00 05 4a 3f 00 00 18 4a 40 48 00 66 63 18 b5 5c 5e e3 b5 70 ca c6 8c ac 60 f6 58 c1 b3 47 96 e4 ee e7 12 e3 a9 2a d5 ad b0 b6 64 4c b8 ea 4f 32 7a fe 83 90 d1 4d 79 c4 12 cc 48 22 41 12 08 90 44 82 24 11 78 b5 06 d2 54 4e 12 06 4c 54 02 4c 05 45 51 69 2d 88 8a ed cb 54 d5 4b 96 8a a9 7b b6 b0 b5 b1 4d 45 41 9c 4c 52 a9 48 51 4c bc b8 49 27 94 b5 8d cf 38 07 5d ef a9 27 a2 40 1d 27 88 31 47 61 96 94 f8 6b 0e ac 3b 16 34 1a a5 84 11 52 ab b5 77 78 7b 4c 66 8c 03 62 5b 26 74 88 6b 6a 22 e6 a1 bc ac dd 67 ba 0f 20 34 98 3c ce a6 7a 44 44 99 b7 bb c7 35 53 4b 0c 52 24 c4 f2 a7 04 ba 3d 65 7e f3 98 ea 7a 63 af f2 8d 80 e3 f8 a3 ac 1b 85 9a ee ec 1b b3 79 0d 67 4e 63 53 27 c5 46 8c Data Ascii: \|5jJY%,u/MyJ?J@Hfc\^p`XG*dLO2zMyH"AD$xTNLTLEQi-TK{MEALRHQLI'8]'@'1Gak;4Rwx{Lfb[&tkj"g 4<zDD5SKR$=e~zcygNcS'F
2024-04-05 23:18:22 UTC	868	IN	Data Raw: fd 5a 41 54 e6 13 41 9b 49 4a 10 ae aa 71 65 c7 06 48 21 20 00 07 45 2f c4 22 32 f3 01 c3 ae df 4c d4 b5 a6 ec 87 30 96 8f 6a 20 69 1b 6b 3b ee 00 8d 65 b0 b8 8d 4c 60 e4 18 6d 46 b4 48 cd 9b 36 ad 99 20 46 d3 11 b7 39 e5 0e ab d7 7f dc e1 6a 09 b9 6b 0a 48 3d 09 9e 74 12 3f 86 e8 93 fa 36 c7 ec 19 f2 8f d1 4c 8a 95 39 9f c5 79 f6 81 74 7e 24 ab fd 7b bf 9a 1f 46 d8 fd 83 3e 51 fa 2a f6 8f ea 53 ed 02 e8 fc 49 57 fa e7 7f 34 3e 8d b1 fb 06 7c a3 f4 4e d1 fd 4a 7d a0 5d 1f 89 2a ff 00 5c ef e6 87 d1 b6 3f 60 cf 94 7e 89 da 3f a9 4f b4 0b a3 f1 25 5f eb dd fc d0 fa 36 c7 ec 19 f2 8f d1 3b 47 f5 29 f6 81 74 7e 24 ab fd 73 bf 9a 1f 46 58 fd 83 3e 51 fa 27 68 fe a5 3e d0 2e 8f c4 95 7f ae 77 f3 43 e8 db 1f b0 67 ca 3f 44 ed 1f d4 af 53 a8 17 3e e1 ba e4 ab 91 Data Ascii: ZATAIJqeH! E/"2L0j ik;eL`mFH6 F9jkH=t?6L9yt~${F>QSIW4>\|NJ}]\?`~?O%_6;G)t~$sFX>Q'h>.wCg?DS>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	49978	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	642	OUT	GET /steam/apps/730/capsule_231x87.jpg?t=1698860631 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 9528 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "6508d054-2538" Expires: Wed, 03 Apr 2024 15:33:04 GMT Last-Modified: Mon, 18 Sep 2023 22:33:56 GMT CF-Cache-Status: HIT Age: 283279 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c4bfe5a539-MIA
2024-04-05 23:18:22 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 07 08 02 03 06 01 09 ff c4 00 45 10 00 01 03 03 03 02 04 03 03 07 0a 04 07 00 00 00 01 02 03 04 00 05 11 06 12 21 07 31 08 13 41 51 22 61 81 14 32 71 09 15 16 23 Data Ascii: JFIFCCWE!1AQ"a2q#
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 50 84 50 84 50 85 71 6b d9 0b cc 88 24 24 12 7b 0a 10 9a d7 b9 6b 52 8e 79 f9 d0 84 96 62 f6 a4 23 82 4f 27 2a f4 a1 09 26 df e6 8f eb 1a 10 a8 37 e5 34 d7 7f 69 bd 68 bd 13 6e 8b 26 55 d5 96 dd b9 ba 94 67 cb 01 c2 5a 6b 1c f2 af 81 de e3 80 47 3c 9a 47 b3 f6 66 a3 a3 85 b9 33 b0 85 3d 06 bd f5 05 3a 40 97 1c 00 37 55 4b a7 da 09 db ab 53 59 ba 5d 1d c3 03 73 90 9a 8e ee 5b 5f 1f 79 6a 6d 29 1f 45 1a c7 d0 d7 6c b4 ba be 99 d4 b8 b8 84 48 7b 64 e6 71 b9 fc 16 c1 4b 42 be bc 63 99 0e ea 6e 38 1d 8f 1c 00 3e 28 8d 78 4e 89 d6 56 c8 4d be b4 b3 1b 7c 92 78 27 e3 28 49 0a 39 fd a0 81 df 18 f8 0f b5 6c b7 97 b6 77 b4 a9 d6 b5 07 ac 33 3b f8 7c fc a1 6b fe 82 a5 ad 57 53 ab c9 7d 9e d1 49 8c d6 9c 8e 88 0d be dc 10 a5 98 e6 43 a1 e2 b6 ca c9 4a d2 a0 b5 7c 04 Data Ascii: PPPqk$${kRyb#O'*&74ihn&UgZkG<Gf3=:@7UKSY]s[_yjm)ElH{dqKBcn8>(xNVM\|x'(I9lw3;\|kWS}ICJ\|
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 92 e6 f2 5e 49 dd 9e fc d5 c2 64 67 75 00 de 53 c4 7b dc e7 3c a9 62 7a db 9d 15 d4 b8 c3 bb c8 5a 14 9e 46 d5 7a 10 79 1e de 94 e6 86 35 b8 0a 52 e7 3c 64 a9 5f a3 be 22 99 e9 7d ad 31 de b4 0b ca 58 41 53 76 f7 5c 28 8a eb e4 e4 39 21 29 23 cc 4a 71 c2 09 f8 8e 32 70 36 9c 85 1b 8a 74 99 03 0e e6 46 fe 00 f2 f1 19 55 c9 56 bb c3 df e5 26 bc df 75 3c fb 4e b2 81 65 b7 5b 9f 84 e2 ad f2 62 b4 e3 4a 6d f4 36 4a 10 a1 b8 a5 49 56 d0 9c 24 24 8e 31 9a c1 ea 0f 34 2d aa dc 51 69 24 09 03 99 3f de ea ed 95 26 dc 57 65 27 98 04 e4 f7 73 55 0f ad 3a bd 9b b5 f9 f9 86 e5 3a 54 d7 16 b7 5c 71 6b 00 a9 c5 15 a8 9f 98 24 a4 91 8e 32 a0 38 c1 ad 47 47 a1 54 34 b9 ed 19 fe fe 3b f3 ec f0 5b 16 ab 52 97 17 08 26 46 df 8f f4 51 ab da 9d ef b3 a9 85 93 20 17 0a d3 21 d2 Data Ascii: ^IdguS{<bzZFzy5R<d_"}1XASv\(9!)#Jq2p6tFUV&u<Ne[bJm6JIV$$14-Qi$?&We'sU::T\qk$28GGT4;[R&FQ !
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: da 4d cb 7a 43 76 29 d4 b7 a6 ca 54 fa ee 86 c1 20 6c 09 ec 9c 9e d8 52 6a 56 e7 44 b6 35 19 5d ef aa fe a8 97 4c 13 b9 03 b6 30 3b 25 3e ea 5b d4 9b 33 17 19 cc c0 e9 4b f0 63 ef 5b 4d 23 f5 92 1c 40 ce d4 84 a7 ba c8 c0 c0 e3 27 da b2 37 97 4f b4 65 4a ad 65 a9 63 64 81 bb 88 e4 20 73 3f 35 46 d6 83 2b b9 94 dc eb 90 e3 12 76 00 f3 c9 e4 b3 d2 16 db 84 fd 03 74 d7 2c 68 fb 4d ce f9 75 79 a6 e0 da 51 6f 06 3b 2c 36 76 12 94 e4 63 27 7a 89 cf 38 4f bd 45 a7 d1 af 5b 4e ab ab b6 d5 8f ab 50 80 d6 70 75 43 46 24 0e 53 93 33 9c 22 f2 a5 2a 77 ac d3 5d 70 e6 d3 60 25 ce e2 c9 27 3b f7 60 7c 53 b6 8f 72 e2 f3 17 a9 fa df a7 fa 7e c5 64 b7 c3 5b ea 52 2d c9 4b 8f 2b f7 53 95 11 d8 1f a9 1e f5 7b 4f 75 77 36 b5 6d 5a c6 9d 3a 4c 69 3e e0 93 dc 24 9e ff 00 c1 53 Data Ascii: MzCv)T lRjVD5]L0;%>[3Kc[M#@'7OeJecd s?5F+vt,hMuyQo;,6vc'z8OE[NPpuCF$S3"*w]p`%';`\|Sr~d[R-K+S{Ouw6mZ:Li>$S
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 34 34 7d 2f 2d 2c 26 3a 12 da 5d 92 8d de 6c 80 8e c1 64 9c 72 40 27 03 92 05 64 af ba 51 7b 7f 60 dd 3e ac 70 88 93 99 31 db 9f 02 7b c2 a1 69 a0 5a d9 de 1b ca 73 26 60 62 04 f6 7c 97 36 cf 53 ae 36 be 9f cf d1 f0 a3 47 62 24 f7 83 d2 a5 80 7c e7 30 46 11 9c e0 0f 84 7a 7b fb d5 1b 7d 5e b5 0d 39 fa 75 36 80 d7 99 27 99 db 1b ed 85 90 7e 99 4a ad eb 6f aa 12 5c d1 00 72 1b e5 38 f4 db ac 93 7a 63 63 b8 db a3 59 ad b7 36 ae 4a 0a 90 26 b6 a5 6f 46 dd bb 0e 08 05 38 27 83 fb c6 af 68 fd 20 ab a4 d2 a9 41 94 9a e6 bf 7e 20 73 88 8d f2 37 f8 aa da 96 8b 4f 53 aa ca af a8 e6 96 6d 1f 3f 14 be f1 d6 a4 df ec 93 60 b7 a2 74 c5 b1 52 1b 2d 09 51 60 24 3a d8 3d ca 4f a1 c7 19 f4 a7 de 74 88 5c 50 7d 06 da 52 6f 10 89 0d c8 f0 ef 50 db e8 86 85 56 d5 37 35 1d 19 Data Ascii: 44}/-,&:]ldr@'dQ{`>p1{iZs&`b\|6S6Gb$\|0Fz{}^9u6'~Jo\r8zccY6J&oF8'h A~ s7OSm?`tR-Q`$:=Ot\P}RoPV75
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 53 68 20 30 02 76 18 ce 0f 28 f3 94 d3 ad dd b9 b7 d2 07 d9 d5 3a 72 d3 0f 53 5e 66 a2 0d b6 14 18 c9 4a 93 95 27 0a 24 29 5f 17 0a c6 0f aa 47 ad 52 d4 4d c7 b1 8b 35 0b 76 36 bd 57 06 b1 ad 03 b4 67 73 9d f9 f6 76 ab 96 22 89 d5 03 ac ab 38 d2 a6 d2 e7 12 4f 7e 36 18 db f1 59 1d 01 6d 9b ae f4 66 80 8d 1a 33 b0 f4 dc 64 dd 2f 2f a5 b4 e5 f7 7f 61 2a e3 3c a8 95 10 7f 65 7f 2a b3 ec ca 2f be b5 d1 e9 b4 16 d0 01 f5 0c 6e 79 03 e2 73 1d 85 33 da 15 59 67 73 a9 bc 90 ea c7 85 82 76 1c cf 90 c4 f6 85 bf 5f 68 db 0f 4d e5 5c fa 83 a8 ed 1f a4 13 1d 92 96 a0 5b 63 34 13 12 22 79 0d 6f e3 19 c0 04 a8 82 37 2b 80 4e 09 7e a5 61 69 a4 3a a6 b1 7b 4b d2 38 9e ab 40 ea b7 fe 59 f2 19 31 12 70 27 2a 3d 3e f6 e7 52 6b 34 bb 5a 9e 8d a0 4b 9c 4f 59 dd b1 f4 13 b6 e7 Data Ascii: Sh 0v(:rS^fJ'$)_GRM5v6Wgsv"8O~6Ymf3d//a<e/nys3Ygsv_hM\[c4"yo7+N~ai:{K8@Y1p'*=>Rk4ZKOY
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 1e c4 b6 2f a0 64 c5 1f 74 62 3c 4e 37 e7 ba 45 a1 3a 9d 76 d2 16 6b cd 99 96 62 5c 2d 17 34 6d 91 0e 7b 6b 52 01 c6 37 27 6a 92 52 ac 7a e7 d0 7a 81 55 ac b5 ab 8d 3e 85 5b 56 34 3a 9d 41 96 ba 48 f1 10 44 1f e9 d8 14 f7 ba 5d 0b ca b4 eb b8 96 bd 9b 11 13 e0 64 19 0b ad b0 f8 84 bd d8 b4 bd be c0 9b 25 82 75 be 12 70 d0 9b 0d 6b 24 e4 9d c4 07 00 dd f1 1e 71 ea 7d cd 64 ed 7a 59 77 6b 68 cb 21 46 9b 98 cd b8 9a 4f 6e 7d e8 9c ef 0b 17 71 d1 db 7a f7 0f ba f4 af 6b 9d bc 10 3e 93 1e 69 8b 5c f5 4e 6e ba 81 1e 23 f6 7b 35 a9 a6 5c f3 73 6b 88 59 52 ce 08 01 44 a8 e4 0c 9e 2b 19 a9 eb 95 75 4a 6d a6 fa 4c 60 06 7a 8d 89 f1 c9 57 ec 34 9a 76 0f 2f 6d 47 b8 91 1d 63 31 e1 80 90 74 eb 55 44 d1 7a a6 35 e2 5c 05 dc 84 74 af ca 69 0f 06 8a 5c 29 20 2f 25 2a e5 Data Ascii: /dtb<N7E:vkb\-4m{kR7'jRzzU>[V4:AHD]d%upk$q}dzYwkh!FOn}qzk>i\Nn#{5\skYRD+uJmL`zW4v/mGc1tUDz5\ti\) /%*
2024-04-05 23:18:22 UTC	385	IN	Data Raw: 5f 03 fa dd 70 b9 dc 3a bd ad 5e bc a4 22 ec ab c4 bf b6 21 2a dc 94 bd e7 2f 78 04 70 40 56 7b 53 5a 31 94 b3 95 cb 7d a9 4c c7 47 96 a2 53 ea 0f a5 32 32 a7 e2 86 e1 21 3c 95 1e d5 22 82 17 80 66 84 01 2b d0 93 ed 44 a5 e1 2b 72 40 71 ce 3d 29 53 0c ec ad bf 82 48 4e a3 54 de 9e c0 f2 93 6e 08 59 cf 65 29 c4 91 fd c9 35 cb ff 00 c4 27 34 58 d1 6f 32 f9 f8 03 3f 30 ba 0f 43 1a 7d 6a ab b9 70 fd 47 f2 55 ab a9 91 1e 85 d4 9d 52 d3 c9 da ea 2e 92 72 32 0f 77 54 7d 09 f9 56 f9 a5 3d af d3 e8 39 bb 70 37 e4 b4 ed 40 16 5e 56 6b b7 e2 3f 32 a5 9f 0a d7 5f 23 ad 3a 69 bd d8 32 11 21 b5 0e 79 1f 67 70 8f ef 09 ad 63 a6 34 f8 f4 8a c7 b3 84 ff 00 dc 16 cb d1 9a 9c 37 f4 db db 3f 23 fd 15 f6 4c 46 11 29 72 52 cb 62 42 d2 10 a7 42 46 f5 24 12 40 27 be 06 4f 1f 33 Data Ascii: _p:^"!*/xp@V{SZ1}LGS22!<"f+D+r@q=)SHNTnYe)5'4Xo2?0C}jpGUR.r2wT}V=9p7@^Vk?2_#:i2!ygpc47?#LF)rRbBBF$@'O3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	49979	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:21 UTC	646	OUT	GET /steam/apps/2881650/capsule_231x87.jpg?t=1712153694 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 11642 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "66099ba5-2d7a" Expires: Wed, 10 Apr 2024 14:14:54 GMT Last-Modified: Sun, 31 Mar 2024 17:21:41 GMT CF-Cache-Status: HIT Age: 166915 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c4c92ca4d4-MIA
2024-04-05 23:18:22 UTC	928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 06 03 04 05 07 08 02 09 01 00 ff c4 00 46 10 00 01 03 02 05 02 04 05 03 01 04 06 08 07 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 22 41 51 09 14 32 61 71 15 23 81 42 Data Ascii: JFIF,,CCWF!1"AQ2aq#B
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: bd c1 03 ff 00 4e f8 10 0d a5 52 a1 26 63 81 79 96 2b 7b 52 e2 0a 25 25 e4 5c ed 22 d7 09 23 bf df 0e 8c 82 71 28 92 a9 cf a2 62 6a b0 25 36 d3 89 49 4c 79 a9 52 cd f8 e1 17 0a 3d fd 06 21 51 dc c9 0e 88 ab de e2 81 4b 60 8f dc b9 3e 61 7f 5c 64 51 85 4e 5b 9f 2d 29 94 b8 e1 0d c9 de 0d cd ac 41 ff 00 2c 4f 12 09 50 65 3a a5 be d9 5b 84 a9 20 82 14 78 20 ff 00 eb 82 ea 4e c7 1e 0f 8d 31 4d a5 49 41 5b bb 02 94 6c 05 cf 73 8e 39 da 2d 96 c6 cb c8 15 9a 5c 7d 30 66 9b 16 33 6f 49 55 a2 bc c0 58 6c 6c 02 c9 73 79 3c 10 41 b1 17 f3 73 8f 94 f1 1d 0a ef 53 8d 79 bc 41 45 72 bc 67 75 d5 63 cf bf 8a 3f 47 7d 1c 46 8d de 93 56 d6 84 54 aa 29 37 34 9a 52 c3 e8 fc 79 71 b2 c6 70 d6 08 0d 4d cc 8c 39 97 dc f9 a2 a4 a9 0c 78 29 42 ad ba d6 b5 8f 26 fc 80 6f 7e 4e 3b Data Ascii: NR&cy+{R%%\"#q(bj%6ILyR=!QK`>a\dQN[-)A,OPe:[ x N1MIA[ls9-\}0f3oIUXllsy<AsSyAErguc?G}FVT)74RyqpM9x)B&o~N;
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 3a bc 6a 0c d8 d3 1e 0f 36 eb 41 41 c4 12 45 d2 0a 92 2e 3b 11 cd ac 38 ed 8f 81 71 ae 93 77 fa 51 df fa 17 56 9c a3 14 b1 9f aa d7 67 84 f1 e2 bd a7 db f8 52 f6 da 56 3e ab ce a1 38 b6 f7 78 ce 5b 79 f3 fc 31 b9 5b f5 71 9e b2 ec 8a 6d 36 9a 99 09 ae 98 e9 0d c8 95 60 4c 8f 35 c8 ba 6c 0d 8f 3c 58 02 6c 3d 71 eb 78 0f 4d bc b1 b5 ad 5a e6 1e 8d 54 69 c6 1b ec 92 7b e1 ee b3 db 3b bc 64 f3 9c 55 7b 42 ee e2 9d 3a 2d 49 c1 3c b5 d3 7c 6d ee c6 fe d3 2a 65 4a 21 78 a9 e5 85 29 d5 d8 36 84 8b 90 3d ff 00 27 ff 00 7d f1 f5 48 b5 15 96 78 19 bc bc 22 27 37 ae 49 9c 10 e3 2e b6 c3 57 4a 14 f2 0a 77 9f ea 57 3f fb b0 c2 15 61 53 ec 49 3f 61 a3 95 ae a0 e2 d0 77 81 63 72 38 be 36 a3 5b 16 82 82 b6 de e2 e3 61 1f 55 bd 71 4c 57 43 56 cd 45 be 16 d1 cd 80 2a d5 d0 Data Ascii: :j6AAE.;8qwQVgRV>8x[y1[qm6`L5l<Xl=qxMZTi{;dU{B:-I<\|meJ!x)6='}Hx"'7I.WJwW?aSI?awcr86[aUqLWCVE
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 92 ff 00 6b 41 45 78 bf 94 77 51 af f5 73 4a 8c b5 57 34 ff 00 27 67 8a 69 17 76 0b 65 b2 ab 7a 80 0b a9 b9 ff 00 65 5f 8c 75 b4 ad b8 02 b4 b1 6d 79 5a 84 fb 4b 7f fe 5f de 8d 92 9e a5 15 f5 e9 c6 4b e7 cc a7 eb 70 b4 1b 5b ab 4b cb 99 cf 29 4e e9 f3 51 d6 02 50 f1 6b c2 82 e3 87 8b 29 04 25 00 13 73 75 25 bb ff 00 7c e3 dc 50 a9 c5 3a 05 15 79 a7 5c c7 51 b4 5d b3 99 a5 e4 f7 7f 07 2f e9 47 59 35 65 73 2f 47 5a 3e 8a a7 f6 f9 f8 7b 4c eb ae 5d 35 67 3e 9e 2a 81 aa f4 54 cc a3 4a 04 42 ad d3 d4 57 16 48 ee 05 ed 74 aa dc ec 55 8f 72 2e 39 c7 d4 78 73 8a f4 ee 25 a4 e5 69 2e 5a 91 fb 50 96 d2 8f e6 bc d7 bf 0f 63 a4 ba b1 ad 66 f1 35 b7 66 ba 11 ce 6b 9d 59 7d 3f 31 a3 c6 9f 0f f4 21 98 c6 69 13 bc ff 00 35 f3 1f 2a 63 78 77 dd b7 c3 db cd b6 de fe b6 e3 Data Ascii: kAExwQsJW4'giveze_umyZK_Kp[K)NQPk)%su%\|P:y\Q]/GY5es/GZ>{L]5g>TJBWHtUr.9xs%i.ZPcf5fkY}?1!i5cxw
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 6a 55 28 c1 c6 37 31 cc 25 df ba 65 28 b9 f5 4e 97 e9 11 68 39 b1 d4 6a f7 4d 19 91 b4 b7 0a a6 52 24 39 4e 42 f9 4a 6e 3b 00 39 00 10 0d b7 36 50 a0 a4 e3 de 46 9d 0e 2d ab 2b ab 05 ea 7a bd 1d e5 1e 8a 6d 75 fc 9e 77 59 c4 f9 a3 86 75 79 95 84 79 2a ff 00 a9 6f 2e 8f c3 e7 fc 60 cf 7d 4d f4 bc 74 bc d3 f3 96 4e 9e 33 26 97 55 92 17 4f ab b3 fb bf 2d ba e5 2d 3c 40 fe 02 8d af 6b 1b 28 58 fd 3b 84 b8 bf f4 c3 96 9d a8 c7 d1 5e 53 da 51 7b 73 63 bc 7f 15 db aa ca dc e9 af ac 3d 5f 15 a9 3e 6a 6f a3 fc cc f2 9b 34 80 02 ee 42 ef 6e c2 de f8 fa 59 d3 74 3d 62 a0 6a 8f 4f 7d 5e f4 61 90 74 cf 3f 6a 53 7a 71 53 ca c8 84 87 da 91 21 b8 ee 97 62 b0 b8 e9 5a 4b a0 a1 c6 d6 85 95 59 26 e0 90 0f 6e 45 06 ba a6 d7 4d 15 d1 ce 8a e8 9a 09 a5 f9 d5 bd 42 9a 26 c7 5b Data Ascii: jU(71%e(Nh9jMR$9NBJn;96PF-+zmuwYuyy*o.`}MtN3&UO--<@k(X;^SQ{sc=_>jo4BnYt=bjO}^at?jSzqS!bZKY&nEMB&[
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: b3 f5 8d 56 b7 d8 a7 1d f9 73 b2 e9 f0 ca 5f cb 04 f7 67 57 bd f4 7d 5e d9 72 51 8f 57 e3 f3 ff 00 2c ab fa 8b d6 48 8c 64 e8 ba 3d a3 ed 2a 95 a7 b4 df 24 b9 bc a9 da ab 97 ba 89 27 9d 85 5e 62 7f ac fa 04 80 0f b6 e1 4e 14 ba 95 db e2 2e 20 7c d7 73 de 31 ed 4d 76 f7 e3 6f e5 5e 2f 2c eb 6f 6f 60 a1 ea 96 bb 53 5d fc 4c b0 ac af 31 2a 0d b9 b7 ca ad c5 2a 4a 85 fe dd b1 f5 fc 1d 0e 0d f7 f1 04 e8 ab 4d 74 c3 43 72 16 7a d2 fa 24 ba 62 ab 33 d9 6a 4f 8b 39 e9 41 c6 de 8c b7 5a e1 44 d8 dd 1d c5 af 7f c6 21 0b 0b aa 7f 86 ae 9b e9 6f 49 73 33 56 55 a1 cb 6f 3e d1 22 c0 93 32 43 b5 17 9c 4b fe 76 d1 24 96 d4 a2 90 2c a5 ab 80 2d b7 8f 63 50 45 77 99 ba 2f d3 1c a3 f0 e1 89 aa 55 2a 14 b7 b5 26 6c 16 5e 62 60 a8 bc 11 e2 bf 30 25 07 c2 be cb 25 95 5e db 79 Data Ascii: Vs_gW}^rQW,Hd=$'^bN. \|s1Mvo^/,oo`S]L1JMtCrz$b3jO9AZD!oIs3VUo>"2CKv$,-cPEw/U&l^b`0%%^y
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 70 ca f0 bc 5d 81 b0 77 5b 67 3b ad 6f bd f8 c7 d2 8e 98 88 45 02 96 fc 7d 8c be f3 aa 03 ca 95 45 0b 23 f8 db fe 18 03 d3 4a 35 0d 1a df d2 2e 88 c5 57 8d 29 b8 b5 ba 43 0f 92 c0 dc 5b 8d 21 51 dc dc 9f e9 f2 21 57 fc e0 09 9a c6 60 8d a9 da 95 d4 c6 9d ac bd 39 27 2d c5 61 98 e6 fb 02 fe 55 d0 b0 8f be f7 9b bd bd 40 c0 15 ff 00 55 14 88 d1 fa 5d d1 0d 31 f0 1d 8f 2a ae aa 6c 46 62 b6 e1 4a b7 35 19 28 d8 4d af f5 ba 8c 01 77 6a 0e 9a 66 aa 76 6c d1 06 32 5d 37 c7 cb b9 35 fd b3 1c 32 9b 6c a5 8f 05 31 6c 12 a2 0a 88 65 4e 9e 2f dc 60 0c f7 ae ba 4a 68 5f 10 fd 3b cd 71 d5 1d b6 2b b2 e1 4a 5a 2c 52 b5 3a d7 ec af ed c2 50 d9 ff 00 6b 9c 01 79 67 5d 00 d2 0d 4d ea 76 2d 7a ad 53 9e f6 a3 d1 e3 43 a8 26 98 dc 82 86 52 cb 2e 5d a5 d8 a3 9f 35 ae 02 ef db Data Ascii: p]w[g;oE}E#J5.W)C[!Q!W`9'-aU@U]1*lFbJ5(Mwjfvl2]752l1leN/`Jh_;q+JZ,R:Pkyg]Mv-zSC&R.]5
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 97 40 0e dd cb 24 2b c4 4d 8a 77 5b 90 7b 60 30 06 f4 79 d5 d5 4b 43 6b 15 b8 f5 ca 34 da b6 5c 9e d2 56 a8 50 0a 7c 76 5f 4f d0 ea 12 b5 04 90 a4 95 05 58 8b f9 4d fc b6 20 14 e9 c7 5e 63 4f 75 57 50 a7 d5 32 44 e9 f9 2f 35 4e 5c cf 97 01 b4 cb 60 92 a0 37 02 76 2c 14 9d aa 49 3e 82 ca e0 82 01 14 7f 88 5e 90 e9 5d 0e b5 fe 8b f4 aa 65 1a bb 31 a0 0a 9f 61 98 ec 92 9b 84 a9 65 0b 5a 94 12 54 4e d0 05 ef dc 5e f8 14 c4 6e 6a 2b 15 0a 82 9d 97 04 a6 43 ae 29 d7 1c 52 42 54 a5 1b dc 92 38 f5 f6 c5 c1 30 09 67 f9 e8 34 3a 94 46 d9 9a 55 20 16 d2 e4 87 5b d8 83 7b dc 84 9e d6 06 d8 86 49 64 a7 b2 7c 95 53 2b e8 7d 0b 49 52 1b 74 5c 73 dd 0a 1f f3 c0 24 30 a3 b6 af d5 e3 a5 0e 59 41 76 0a 4e 08 8b a8 65 22 4b 41 87 1b e1 46 d6 b5 b1 4c b2 42 b1 50 71 0a 3b 89 Data Ascii: @$+Mw[{`0yKCk4\VP\|v_OXM ^cOuWP2D/5N\`7v,I>^]e1aeZTN^nj+C)RBT80g4:FU [{Id\|S+}IRt\s$0YAvNe"KAFLBPq;
2024-04-05 23:18:22 UTC	1131	IN	Data Raw: 2b b9 27 bf be 00 68 f5 5e 23 a5 85 37 10 3e d4 b3 65 a8 95 21 b4 f7 36 2b ee a3 c7 d5 ff 00 21 88 07 02 bb 02 4f 81 e1 50 92 20 c4 70 ed 0c 4a 3e 23 a2 f6 0e 59 5c a4 a8 8d 89 07 d0 15 5b 0c 01 8b d9 d2 19 8f 26 a5 52 a6 85 ee de cc 45 36 b0 a4 a0 81 ce de 3c c4 a8 84 80 4f 6c 5c 02 39 aa ea 58 2a 90 87 1c 6d d2 d9 08 4a 10 10 95 7a 5b 93 62 77 13 fc 0c 42 8e 53 9b 26 c4 76 3a 14 a2 6c da 5b 42 9d 69 2a 0a b1 de 48 1c 10 4d bd 3d bf 38 04 87 df ad c4 a9 c3 aa 47 54 f5 3c fa df f1 ee b4 96 ec 41 0b 0a 29 dd da fc db ef ce 29 3b 03 55 59 34 0a 84 d6 dc 62 6a 50 97 cd dd 26 3b 89 52 b7 83 bb cd fd 24 0e 40 e7 0d ca 86 13 29 28 30 64 53 98 aa a5 c5 46 29 f0 c3 a1 6d 97 07 f4 92 78 e7 b7 fb b0 43 ae e2 2f 4b 9a d2 5b 8b de 78 24 58 38 4e f1 6e 77 76 dd f6 23 Data Ascii: +'h^#7>e!6+!OP pJ>#Y\[&RE6<Ol\9XmJz[bwBS&v:l[BiHM=8GT<A));UY4bjP&;R$@)(0dSF)mxC/K[x$X8Nnwv#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	49980	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:22 UTC	645	OUT	GET /steam/apps/306130/capsule_231x87.jpg?t=1712247229 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 10599 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "5ab151c7-2967" Expires: Thu, 11 Apr 2024 16:13:51 GMT Last-Modified: Tue, 20 Mar 2018 18:24:07 GMT CF-Cache-Status: HIT Age: 111870 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c4fa1631e4-MIA
2024-04-05 23:18:22 UTC	928	IN	Data Raw: ff d8 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 1d ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 00 57 00 e7 03 00 11 00 01 11 01 02 11 01 ff c4 00 9d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 03 09 01 02 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 06 10 00 02 01 03 03 02 04 04 05 02 05 03 02 07 00 00 01 02 03 04 05 11 Data Ascii: AdobedW
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: a0 29 e5 95 07 48 c2 85 bd cd 0b b4 c1 98 b2 93 c9 f2 33 fc 69 1b 08 13 59 6d 8d 7c 40 14 33 cf d9 54 fa 60 fb f7 fa e9 28 62 05 76 cd 91 29 79 42 c9 0c 6a 03 1e d9 0a 3d 5b 27 f6 d3 58 c5 0c b4 b4 96 e9 52 28 6e 31 01 5c 47 66 40 19 58 76 c8 1f 42 75 ac c5 0c dd 59 83 63 7e 21 4d 34 f1 d6 73 5f 28 ce 58 9c 7a a8 1e 98 d5 21 06 fa 12 54 24 af bd 71 ba 56 3c d2 44 bf e5 e7 61 91 c8 83 d8 e4 7e da bc 70 93 72 3f ff d0 ce b0 5a 6b e3 60 23 a0 95 22 24 f8 67 90 7c fe c4 7a eb e7 1c 91 eb 8e dd 91 7b ab b3 44 29 a3 2f 12 49 8f 9a 5f 5e e3 eb a8 27 b3 3d 9a 53 6f 5e 2b 27 f9 79 22 f2 c9 df 9b 29 19 6c 7b 95 ff 00 c6 a8 98 3b 34 de c6 dd f7 3b b4 71 5b a7 92 3f 98 84 11 4c ec 08 2e aa 32 41 3e e4 6a d0 95 ad 91 9c 12 63 59 ae 55 f4 51 07 34 46 b1 42 f3 75 8c 8c Data Ascii: )H3iYm\|@3T`(bv)yBj=['XR(n1\Gf@XvBuYc~!M4s_(Xz!T$qV<Da~pr?Zk`#"$g\|z{D)/I_^'=So^+'y")l{;4;q[?L.2A>jcYUQ4FBu
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 1a e3 1d 08 9c 9f 0d 90 dc 10 16 56 20 82 a0 f9 7b 67 19 d1 c7 15 75 24 5e 4d d5 a6 6f 0f 83 0d db 3d 8a c5 5b 6b dc 57 6a 4b 74 1b b0 2d 7e de b1 c9 27 85 2b 4b 08 09 24 81 5c e1 59 d4 8e 4b 9c f6 5f 7f 4e af 4b 4a 72 8a 7a fe 4e 5f 57 17 28 46 4f bd fd 8d df 2e e9 a3 a5 89 e6 92 70 22 88 79 e4 04 b7 7f a0 0a 09 27 ec 35 dd d1 e7 71 11 9d 62 f8 84 e9 c6 c4 db f7 2b 6e fc dc 14 f6 34 dc 34 53 51 5b ac cc b2 55 5d eb 9a a1 0c 6a 29 68 29 f3 21 c9 3d 8f fb 8d 3f 3d 3a fb 81 47 66 0e f8 81 ea cc dd 56 b3 4d d3 ab ac 37 2b 75 ce cb 4b c2 eb 51 70 8e 08 e5 ad 36 d8 85 75 34 d4 e8 92 3b b1 95 cb 29 2e ab 85 e2 dc 79 6b 9b 3c fe 2f 14 9f 5d 9d 7e 9a 6b 03 93 71 bb 5a f9 3f 73 1b da fa 83 7f 63 4d 63 92 d3 6d b4 59 36 e7 68 ae 30 51 19 e4 9e a2 5e 1f e5 ea 04 cd Data Ascii: V {gu$^Mo=[kWjKt-~'+K$\YK_NKJrzN_W(FO.p"y'5qb+n44SQ[U]j)h)!=?=:GfVM7+uKQp6u4;).yk</]~kqZ?scMcmY6h0Q^
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: b2 df 70 ae bc d9 37 a5 4d 3c f0 dd 6d c6 e2 93 59 6b 3c 41 13 42 cb 24 f1 46 20 71 2a 48 63 7e 51 20 93 b6 58 e0 10 ce 6e ff 00 12 60 51 f6 11 bd 7f eb 5d 46 ed de 55 57 db 85 86 ab 6f c7 73 a0 a5 a6 8f 6d 5c 64 46 96 96 5a 38 80 78 1a 68 c9 47 12 b1 f1 11 94 e1 97 1f 7d 75 e2 a9 2b 44 72 26 9e cc af ff 00 c4 6a 38 27 9c 4b 05 6a 24 15 22 7a 13 45 e0 bc 1f 33 90 c5 a4 82 71 e6 8c 67 b0 ef c8 f7 23 18 d2 67 f4 d3 cc 92 4d 57 94 ef f7 45 fd 36 48 63 76 d3 bf 1d 7f 27 a4 5f 08 dd 56 aa de 5d 5c b2 35 25 bc 2e dc a7 e9 ed e6 8b bc 08 b3 5a 6a 22 b8 53 19 27 92 58 c6 0f e2 2e 81 78 16 ed c7 03 df 5c f8 7d 1a f4 f8 f8 b7 bb 29 9f d4 fc 6c 96 93 a3 d2 5f c6 61 a6 c3 c1 28 3d bc 80 c6 09 04 fa fa ea 52 40 2b bf 1a a0 13 b5 4d 6d ce 2a 38 99 48 92 1a 38 8a cc c3 Data Ascii: p7M<mYk<AB$F qHc~Q Xn`Q]FUWosm\dFZ8xhG}u+Dr&j8'Kj$"zE3qg#gMWE6Hcv'_V]\5%.Zj"S'X.x\})l_a(=R@+Mm8H8
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: c4 eb 0f 6c 5b 8e e3 6c 91 e5 a2 9f 89 98 0f 1a 26 19 46 c7 a6 57 eb f7 d4 e5 14 cc 9b 43 69 77 d4 55 b6 7a 9a 66 3f 2f 5b 2a 71 10 b1 cf 3f 4c 94 3f f1 eb a9 c6 34 c6 93 d0 f7 b1 ee 74 a6 82 d3 19 95 d5 56 86 9c 06 52 0f 70 a7 3d b4 f2 ec 11 da 18 d4 db be 96 48 81 f1 d8 b3 10 32 c3 ff 00 1a c6 76 7d 93 73 c4 b9 21 ce 33 ea 1b 5a 8c 0e 57 6f 35 4c f8 72 f9 bb fa 9c 69 e3 11 5b 17 37 dd fa e2 9e ad 25 49 e0 4a 75 69 9e a4 10 a0 c6 80 96 3c cf 65 18 fa 64 e3 38 1a 8b 9a 94 da 6b af ef 61 aa 46 2c 5e a8 da 28 69 ee 7f 3b 1d 34 f5 57 ba 89 66 92 e1 1c 8d 2b d5 39 c0 e4 c8 3c dc a2 5e 2a 31 db 00 0f 7d 56 1c 9e d8 ce 90 a7 8f f0 3d cd 56 ff 00 8e ee 3a eb 3d 44 53 c9 25 b4 8a 58 de 35 0e 70 04 92 93 91 cc 7e a0 46 32 75 5b 7f a0 13 5e 74 cf bb c2 ab 75 41 6c Data Ascii: l[l&FWCiwUzf?/[q?L?4tVRp=H2v}s!3ZWo5Lri[7%IJui<ed8kaF,^(i;4Wf+9<^1}V=V:=DS%X5p~F2u[^tuAl
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 45 55 4f eb 7f b8 78 3f 28 4f 6d 7b 45 9a 97 a2 dd 64 ea 7d 46 d0 5a 6d c7 b4 b7 4e d6 b6 50 08 ea a5 68 23 b6 df 56 e7 f3 74 b2 43 23 b8 c0 34 68 a1 98 16 19 3d fd f5 76 df 34 af 54 ff 00 81 17 4d 91 7a 15 d3 ca 7d cd 73 df 17 4d db b1 7e 7b 6e 51 ec 3d c9 7c b4 b3 d4 4b 46 28 67 a7 b6 cd 51 41 54 91 a4 b1 c9 34 5e 2a 2a 8e 4a 63 6e 5e fa 4c f3 e2 92 4f 76 90 d0 57 d8 88 b6 ed dd d3 59 6d 82 fd 6b b0 56 d7 db a8 e2 a9 71 3a c2 c7 c5 a4 a4 05 aa 5a 35 f5 74 85 09 f1 19 41 09 8c b1 1a bb 6a e9 b1 09 a3 a7 5b fe 8e df 45 b9 60 d9 f7 97 db 37 2a 09 6f 96 6b e9 a2 94 d3 3d 04 12 98 24 a8 59 59 0a 71 8e 50 63 2d e9 c8 6b 7c 48 f5 7b 35 31 97 f0 bf 43 b7 6f 9d 50 ac a7 dd 52 d3 1b b4 96 3b 9d 56 c7 b5 dd a4 14 d6 fb 95 fe 18 89 b7 d1 56 ca cd 1a a4 52 49 eb c9 Data Ascii: EUOx?(Om{Ed}FZmNPh#VtC#4h=v4TMz}sM~{nQ=\|KF(gQAT4^*Jcn^LOvWYmkVq:Z5tAj[E`7ok=$YYqPc-k\|H{51CoPR;VVRI
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: b7 bc 7b 17 71 ed 1d 9a bb 3b 70 d8 23 b3 54 1b 95 5c 74 f2 54 97 9a dd 71 8a 02 3c 0a ef 98 66 95 1a 48 48 66 72 fc c3 76 a4 71 b5 26 9a b4 dd ff 00 ea f9 13 72 d6 81 be a0 6e 5d b5 7c e8 57 c3 a6 cf a1 dc b1 a5 f7 61 d1 ee 7a 7d ef 6b 09 50 86 04 b9 dd 5a e1 48 43 b2 2c 72 7e 5b 90 c1 18 e1 bb 7d f4 f0 8b 53 93 ae ea be c0 6f 48 9d d1 ed c1 d3 1b 2d a2 f3 57 be 2f 09 69 aa dd 56 ab ae de d9 32 47 10 b8 bd b2 b0 d3 62 3b c5 e2 15 0d 22 c4 24 93 c3 85 63 52 dd de 50 99 89 19 97 2c 66 dd 47 c7 7f e9 06 2d 79 0f 6d dd 73 a2 da bd 00 dc 9d 30 dd fb a2 9f ab 9b 8a ed b9 2c b7 4d a1 43 13 cd 51 4b b7 68 ed 73 99 aa e5 8a ae 74 4e 2f 5a 08 84 45 17 65 4e 4c f8 2d c4 a3 c3 cb 22 92 54 a9 fe bf f8 15 3a 54 2c be 21 6e bb 0b 7c ef 8b ff 00 52 76 7e ff 00 a6 a8 83 Data Ascii: {q;p#T\tTq<fHHfrvq&rn]\|Waz}kPZHC,r~[}SoH-W/iV2Gb;"$cRP,fG-yms0,MCQKhstN/ZEeNL-"T:T,!n\|Rv~
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 17 47 76 05 bf e9 32 f7 c1 1e 87 f9 d2 b0 96 d4 27 6c cd 4a b2 d7 dd 6b 61 a8 74 cf 85 0d 3a b8 0d e8 41 25 c7 df 43 f1 07 41 9d ae dd d1 69 84 66 f5 bd 77 15 21 38 32 0a 7b 5c 52 71 ec 73 dc cb df be b5 cf d9 1b 41 7d 3d 83 e1 5d a9 95 eb 7a 99 be 05 49 53 ce 18 2c 94 fc 43 7b 60 b4 be 9a 65 c8 0e 8a aa fb 17 c2 9c d1 aa a7 51 f7 ec 35 31 1e 51 87 b3 52 b2 9c 8c 7f 4c 99 d3 6c 1a 33 05 cc 52 25 7d 7c 36 ea 97 ab b7 c5 3c ab 6f 96 64 09 2b c0 ac 7c 36 91 14 90 ac cb 82 40 27 07 df 4c 90 0f 48 f6 46 cb a1 a2 dc 3f 0c 11 ec 2d b9 6b de bd 0d df 36 1b 33 75 f6 ef 5b 45 4f 51 0c 15 12 56 4d 16 e7 4b ad 73 a9 96 de 68 e9 8f 28 99 64 8f 82 84 91 0b 13 93 c5 27 f9 b9 3f c5 7a fe 0b 2f 15 d7 93 02 dd 29 b6 ec 7d 4f ab a0 d9 b5 33 dc 36 bc 7b 95 e9 f6 c5 5c d1 2c Data Ascii: Gv2'lJkat:A%CAifw!82{\RqsA}=]zIS,C{`eQ51QRLl3R%}\|6<od+\|6@'LHF?-k63u[EOQVMKsh(d'?z/)}O36{\,
2024-04-05 23:18:22 UTC	88	IN	Data Raw: 09 6a b5 7c 33 21 52 f9 38 51 9c 0c 9f 42 74 28 36 58 45 75 75 58 d1 46 58 80 19 db b8 52 7d 31 fb 68 38 9a c9 f1 d7 8e 61 90 9c b4 7c 49 61 91 9f 72 07 f7 f7 d0 e2 1b 3b 41 70 82 58 dc cf e2 a2 c3 1a a5 44 90 9f cd 99 89 f2 a8 2d d9 55 40 cf dc eb 50 1b 3f ff d9 Data Ascii: j\|3!R8QBt(6XEuuXFXR}1h8a\|Iar;ApXD-U@P?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	49986	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:22 UTC	403	OUT	GET /steam/apps/553850/capsule_231x87.jpg?t=1709666906 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 14527 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "64ff7692-38bf" Expires: Wed, 03 Apr 2024 18:00:03 GMT Last-Modified: Mon, 11 Sep 2023 20:20:34 GMT CF-Cache-Status: HIT Age: 272977 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c64f1c2206-MIA
2024-04-05 23:18:22 UTC	928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 00 03 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 03 00 02 09 01 ff c4 00 43 10 00 01 03 03 03 02 05 03 02 03 03 09 08 03 00 00 01 02 03 04 05 06 11 00 12 21 07 31 13 22 41 51 61 08 14 71 15 23 32 81 91 42 Data Ascii: JFIFCCWC!1"AQaq#2B
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 64 e2 0e ce a4 69 bc 13 07 6f 5a 67 7a 16 fe 1e fa 54 3f a4 fe 7f 85 0d 57 fa d2 db f4 0b 6a 9f 6d 39 11 da dd 4a 92 c4 a7 ea 12 0f ec 53 90 59 4a 8a 94 07 f6 b9 c0 1d 81 29 1d ce ba 6f 86 7f c3 46 4d dd c6 25 8f 12 5b 0e 2f 86 d2 4f db 19 8c 29 64 6b 07 fc a2 24 6e 79 57 3b c6 3c 5a f9 0d e1 b8 49 01 65 23 3b 87 fa 34 d8 72 cd dc cc 69 a4 9a 13 ea c7 d3 7d f7 7c 55 9d b8 6d aa 6c e9 f4 57 d3 fb 51 a4 ca 1e 32 f0 00 0a 64 15 12 b0 a0 0a cf 6c 15 60 6b bd da e2 4d 5a 5b 8b 74 80 84 8d 92 84 c0 f9 08 1a 6d 58 6b 9f 0f b8 fb ca b8 b7 41 51 3c d6 a9 27 bc a8 92 67 78 ea 74 8a ca 57 43 b2 ad c9 52 60 bd be 9e e3 07 0b 0f 36 50 bc e4 8e c7 19 e4 11 9e dc 1d 16 8b f0 f2 02 d9 d4 7a fc c1 e8 47 31 bd 08 8c 3f 2b 85 2f 27 5e 9f be 54 11 3a f1 ac 46 51 08 a8 c9 46 Data Ascii: dioZgzT?Wjm9JSYJ)oFM%[/O)dk$nyW;<ZIe#;4ri}\|UmlWQ2dl`kMZ[tmXkAQ<'gxtWCR`6PzG1?+/'^T:FQF
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 47 66 3a 32 03 ce af 68 57 b0 cb 4c ff 00 ef 3a 2a de ed 2e b5 c5 0a 81 5c da f2 c5 e6 81 65 c6 ca 96 e2 a7 41 33 1b 4f b9 3b d1 15 c1 1e 8f d3 9a 4a ee 7b e9 f8 f4 cb 66 03 88 12 1b 65 2a 7a 44 87 54 15 e1 c6 6c 0e 0b 8b 23 b7 6c 03 9f 4d 64 6f 3c 4e a7 c1 63 0b 92 b3 a1 51 d2 07 54 f7 ee 76 de b6 78 47 82 1b 0a f8 9c 61 29 e1 88 21 23 59 3d 15 a4 14 c6 e0 6e 74 a0 5b a7 a8 35 3a 90 fd 7e f2 8f 0a d0 15 07 9a 5d 1a dc 5c ef 0d e7 62 6c 01 0d bf 90 54 d2 13 bc 3a e1 4f c2 46 30 a3 ac 83 38 95 f5 b3 2a b0 b1 70 e5 24 95 28 0d 41 3b c2 b7 24 ed ad 74 3b 9c 0f 0c bd ba 46 25 7c c8 52 d2 02 52 95 1d 20 6d e5 d8 46 fa 55 7d f7 d5 db 2a 9b 6d 4f 99 56 ab c7 ae 35 21 c8 e2 0c c5 be b6 0d 4f 6e e4 a9 c6 92 d9 ff 00 43 88 8f 32 5b 03 2b 74 9d ca 24 60 9b b0 f6 af Data Ascii: Gf:2hWL:.\eA3O;J{fezDTl#lMdo<NcQTvxGa)!#Y=nt[5:~]\blT:OF08p$(A;$t;F%\|RR mFU}mOV5!OnC2[+t$`
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 98 a9 9b 3e 52 58 98 e0 25 08 8e c2 44 66 5c c0 e4 80 50 e1 00 72 49 c7 ae b9 8a b1 bb ce 35 b6 16 09 cc 10 8c fc b5 50 ce af 90 20 56 c1 9b 06 56 1c b9 20 41 51 8f 40 60 7d c6 a1 d8 7d 2c 71 1f 61 59 b9 9a 54 fa 95 31 44 db f0 aa 2f ad f4 d2 9a da 51 e2 b9 93 fb b2 9e ce f7 56 a0 4a 72 94 23 01 3a c8 63 de 25 4b 93 6f 68 e4 34 74 51 4e 85 66 75 f4 48 d9 31 b8 d4 ef 4e 2d ec f5 cc e0 db 61 d3 f5 3b 9a 50 fd 4c 74 3a b7 53 af 7f 9f 70 e5 c9 ac 3c 11 1e 04 d6 14 d8 71 42 37 0d e3 68 1b 96 80 4e ed a0 fa 92 72 75 a9 f0 d7 8a 53 7e bf 81 50 09 80 3c d2 00 48 d8 12 4e 93 b0 fd 6a db ab 1b 70 d2 ae 49 25 49 fe 9e 4a 1d a3 5d 37 22 b2 1d eb 6c d2 66 cc 8b 1e 24 d4 a2 74 42 e2 24 35 cf 82 85 02 52 71 9e 72 70 31 f1 f8 d7 53 c3 5c ba 60 b8 2e 12 4a 67 43 cc d2 2c Data Ascii: >RX%Df\PrI5P VV AQ@`}},qaYT1D/QVJr#:c%Koh4tQNfuH1N-a;PLt:Sp<qB7hNruS~P<HNjpI%IJ]7"lf$tB$5Rqrp1S\`.JgC,
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 2b 00 e5 57 62 26 52 7b 7c 89 ad 65 ad c5 b6 26 ce 52 98 23 97 4f 7d 8d 2d 2e 6e 91 b9 d2 0e a6 5a b7 84 32 67 50 e2 4c f1 1c 7b c3 c2 a3 bb b1 61 09 5a 47 64 a8 94 80 ae d9 38 e3 8d 6a 30 cf 13 23 c5 78 65 ce 0f 71 0d bc a4 81 13 a2 92 14 92 a2 09 e6 00 32 3a 6a 26 93 5d e1 a9 b3 7d 37 28 12 91 f4 30 45 39 2b eb a4 74 bb a5 74 21 5a 6d e9 0c 53 15 18 a2 9b 1f 6a 9f 9b 2d 39 73 60 0a 20 6d f1 0a 96 54 7c a3 68 c9 d6 0f 0f 6f 11 f1 2d fd fd ed aa c2 1b 51 52 4a d5 3e 50 b3 a0 48 1a 93 90 47 40 3d 69 b0 43 76 6c 34 c9 12 40 1a 0e dc cf bd 5e 74 ef a9 14 9e a9 5a ad d7 e9 0a 5b 4c a9 e5 c6 93 1e 49 4f 8b 15 f4 1c 2d a7 30 48 c8 c8 39 07 04 10 46 b2 18 d6 11 75 80 dd 8b 47 fc d9 80 52 4a 41 85 24 f4 11 32 36 23 91 a6 16 cf b7 70 82 53 a4 6e 3a 57 bd 6f a8 d6 Data Ascii: +Wb&R{\|e&R#O}-.nZ2gPL{aZGd8j0#xeq2:j&]}7(0E9+tt!ZmSj-9s` mT\|ho-QRJ>PHG@=iCvl4@^tZ[LIO-0H9FuGRJA$26#pSn:Wo
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: a2 ab b9 43 45 b5 82 46 6d bd ba 7e fa d3 1f e9 22 f7 a4 f5 0b a3 10 2c fa 8c b4 cd a9 c1 88 a8 d2 22 04 29 bc 47 2a 3e 1a 52 b2 4f 88 b4 8c 92 a4 e3 b0 e3 03 59 ff 00 19 59 5f e1 78 b7 f1 cb 54 65 4c a4 85 0d 61 40 6a a5 0f e9 0a db 5d 37 aa 2c 56 d3 ec 7c 2a cf 68 ed d0 7a 52 83 af 5d 2a b1 7a 2d 44 99 01 ba fc ea d5 eb 3c 95 33 05 a0 db 2d 42 69 4b c9 7a 4e dc 9c e3 f8 53 90 54 79 c0 4e b7 18 16 33 8a 63 59 6e 2e 2d d2 cd b8 fb 3b 95 2c f5 4c c4 20 75 23 5d 87 5a 01 fb 76 98 24 21 59 94 77 3f be 74 1f 46 6a 88 fc 08 d1 6a 54 a7 91 20 b1 e2 8d 89 c3 ee 95 8c a1 43 70 f2 a0 8c 9c 8e e3 91 a7 b7 46 e1 04 a9 0a 81 a6 fb 45 7a c0 65 40 05 09 3f 59 a6 2f 4e 3a c5 23 a6 29 b4 eb f7 cd 61 ca 65 9b 4b 8f 32 93 4b 7d 11 5c 75 e9 a9 75 68 51 86 07 01 41 a2 8f 10 Data Ascii: CEFm~",")G>ROYY_xTeLa@j]7,V\|hzR]*z-D<3-BiKzNSTyN3cYn.-;,L u#]Zv$!Yw?tFjjT CpFEze@?Y/N:#)aeK2K}\uuhQA
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: ac fd 45 59 55 09 29 90 dd d7 71 52 9b 29 00 33 16 03 7b 09 e7 9f 3b 2a 39 fe 7a d2 2b c4 58 6a d4 72 be 44 74 03 f1 06 97 7c 13 e3 74 d0 5d a9 d7 ba 1d a5 d3 aa ed 2e 8f 21 c9 d5 9f d5 25 3f 0d 33 e2 a9 68 75 a7 24 95 25 4e 11 b4 64 b6 49 c7 18 3e 9e 9a 58 71 fb 6b 4b 45 86 55 2b 92 44 8d c4 f3 db 95 5a 9b 45 ad c0 14 34 e7 52 af 3e a0 41 ea 25 83 67 aa 5b 55 07 2b 71 6a 6d be eb 14 40 a8 e1 3b 4a f7 14 12 4a 42 92 9c 10 4f ae 70 46 4e 80 3e 28 b3 bc 69 b6 dc 24 3a 0e a1 20 f7 db 7d 63 5a 92 ec 56 85 2a 36 ef 46 54 9e bd 59 d1 26 36 ea ae ea fd 41 08 24 16 24 c3 6f 62 b8 23 07 63 49 3c 77 e0 f7 1a 7a 3c 47 87 36 42 d4 fa 88 e8 40 fc a8 6f 85 74 e9 96 93 35 8a ab 77 45 e5 56 ab c4 8c 62 b1 2e 4a 9d 6d a2 00 20 7b 9c 7a 9e e7 e4 fa eb 89 e3 78 93 57 57 6e Data Ascii: EYU)qR)3{;9z+XjrDt\|t].!%?3hu$%NdI>XqkKEU+DZE4R>A%g[U+qjm@;JJBOpFN>(i$: }cZV6FTY&6A$$ob#cI<wz<G6B@ot5wEVb.Jm {zxWWn
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 62 b8 be 58 ea 0c ee 01 d5 2b 86 97 85 0c 67 d7 4e b1 57 53 71 66 a6 12 d9 52 9c 42 88 91 a0 31 3a ce c7 5d 3b d2 db 74 96 dc cf 98 79 48 e7 be bc ba d0 ec 5b 9a c8 9b 11 87 c5 b7 6a 20 3a 80 b0 db d2 a2 21 69 c8 ce 0a 4a 72 0f c1 d2 46 af f0 e7 10 16 86 1a 00 ff 00 a9 00 fb 82 34 a2 0a 2e 24 82 b5 7d 6a 41 ad 59 ad 8d eb b7 2d 26 d3 8c 95 19 90 f1 ff 00 0e a7 f1 d8 76 dc 16 7f bd bf ca a3 95 e3 b2 d5 f2 35 d1 35 9b 3d 6e 6c 4d bb 6a a8 f7 ff 00 bd c3 e7 fc 35 0f 8d c3 62 4b 0c ff 00 7b 7f 95 7b 95 f8 9c ea f9 1a ea d4 cb 39 9c ad cb 72 d5 8e a3 dc fd c4 4f f7 ed d4 57 89 e1 a0 42 99 66 3f de dd 40 36 fa 8f 90 a8 fb 1a 9b 1e ab 6a 21 2a 6d 9a 4d b4 86 dc 1e 60 dc a8 d8 57 f2 03 9d 0f fc 5f 09 4c 9e 13 1d ff 00 98 d5 5a 6d ee 4e a4 af 4e ca a8 35 ba fd 9b Data Ascii: bX+gNWSqfRB1:];tyH[j :!iJrF4.$}jAY-&v55=nlMj5bK{{9rOWBf?@6j!*mM`W_LZmNN5
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 35 2a 28 5e c3 c0 c2 01 c1 ec 40 23 3a ae f7 05 50 65 4f 26 e5 d2 b4 82 53 e6 1b c1 ec 0e be b5 eb 37 a0 ac 20 b6 90 09 13 a7 7f 5a 5e da 37 35 d1 d6 aa ea 2d da eb 2e db f4 a5 32 eb d2 9f a4 34 b8 eb 94 ad a1 38 70 a8 a9 24 10 47 04 1e df 8c 66 ac ee af 31 e7 85 a5 d0 2d 22 09 56 50 52 54 62 35 26 47 d3 f4 39 fb 76 6c 90 5d 6c e6 3a 44 c1 8a 6d 33 d2 57 18 00 22 f7 bb 42 40 da 13 f7 ed e0 0f c7 85 ad 9f f0 63 11 f1 4e ff 00 70 ff 00 eb 49 be 28 1f fc 69 f9 1f ce 90 9d 54 95 78 d3 2e f9 f4 78 95 8a dc ba 6c 37 9a 5b 4e c8 52 9d 2a 50 4a 56 15 e5 48 04 85 1f 6e 08 1e da e5 18 d3 b8 95 ad eb 96 cd b8 e2 d0 92 08 99 3c 81 e9 1a 1d ab 47 66 dd ba d9 0e 29 22 4c d5 03 1d 52 bd 23 c9 43 32 6e 2a 9a 56 83 85 07 1d 29 24 fe 34 81 78 e6 2e 09 1c 75 83 d2 4d 12 2c Data Ascii: 5(^@#:PeO&S7 Z^75-.248p$Gf1-"VPRTb5&G9vl]l:Dm3W"B@cNpI(iTx.xl7[NRPJVHn<Gf)"LR#C2n*V)$4x.uM,
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: a8 6c c7 c3 cf fc bf eb 44 0c 1e 7f f2 7d 3f 5a 9a 8f ab 8d c9 ca ad 50 9f f6 96 7f fc 5a 1c f8 e8 f2 b5 9f f9 ff 00 d6 bd fe 0c 06 ee 7d 3f 5a 55 d6 aa e8 bd 2e 9a 8d 6d 51 8c 6f ba 77 c4 f0 42 f7 ec e0 71 9c 0c f6 ef 8d 73 2c 5a f7 e3 ee 5c b8 cb 97 31 98 99 fa e9 4e 18 67 82 80 89 98 ab ea 1b e2 29 d8 49 28 59 c0 e3 58 eb a6 8a d3 3d 29 8a 34 ab f4 38 14 a0 a2 ad 89 27 19 27 19 f8 1a 05 8b 72 e6 a7 6a f9 46 2b ac 87 59 7e 22 f6 14 b9 b1 38 4e 15 ca 7e 3e 74 cd e0 85 20 81 ca a9 48 20 d2 82 f7 af 31 72 db 75 5a 64 58 c2 4b 32 50 ec 64 38 fe 52 da dc 48 38 58 c7 25 21 78 03 d0 e0 fa 68 cb 26 1c b0 7d 0e ad 50 44 13 1a 90 27 6e c4 8d 4f b0 a6 09 48 71 0a ac 4d 73 46 b8 69 ed 2e 8d 50 65 50 93 bf 98 bd c1 38 00 9c fa 27 80 40 d7 68 b7 72 d5 d5 7c 43 47 37 Data Ascii: lD}?ZPZ}?ZU.mQowBqs,Z\1Ng)I(YX=)48''rjF+Y~"8N~>t H 1ruZdXK2Pd8RH8X%!xh&}PD'nOHqMsFi.PeP8'@hr\|CG7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	49981	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:22 UTC	404	OUT	GET /steam/apps/1675200/capsule_231x87.jpg?t=1699990406 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 10095 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "6553cabb-276f" Expires: Wed, 03 Apr 2024 15:33:31 GMT Last-Modified: Tue, 14 Nov 2023 19:30:03 GMT CF-Cache-Status: HIT Age: 283257 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c619a12239-MIA
2024-04-05 23:18:22 UTC	928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 07 00 01 08 09 0a ff c4 00 42 10 00 01 03 02 05 02 04 03 06 04 02 08 07 00 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 22 41 51 09 14 61 23 32 71 81 91 Data Ascii: JFIFHHCCWB!1"AQa#2q
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 13 eb e3 47 6d d4 8f cc 14 9c 28 53 0e 08 c6 a8 b4 99 57 11 b3 3c 0b fa 26 5b 2e b1 fb ed 23 f7 c1 08 04 23 51 91 6a 52 7f e0 9d a7 54 87 b4 3a 83 4b 3f a1 20 fe d8 4a 43 b2 4d 2f 25 57 a1 24 a9 fa 24 f4 24 73 b8 47 52 93 fa a6 e3 02 61 a5 32 3e d7 80 4a 5c 49 69 5f d2 e0 da 7f 7c 09 11 d5 15 e1 85 72 9b 28 7d 30 42 8c 22 d4 d1 17 e3 02 21 03 c3 c2 94 a1 04 a0 e1 ca 21 6b 67 d3 02 50 b5 b7 ea 30 24 b5 b7 0e 51 0b 36 e0 94 a1 66 d3 82 52 4b c2 71 24 21 06 f0 26 02 10 6f f6 c0 9c 29 9e 8a d3 62 d5 75 93 21 41 9d 19 99 b0 a4 d7 e0 32 fc 69 08 0b 6d d6 d5 21 01 48 5a 4f 05 24 12 08 3d c1 c0 85 ee ee 71 e8 0f a7 fc ed 11 d6 25 e9 8d 16 9c 56 2c 1d a2 b6 aa 7a 90 6f 7b a7 c1 29 17 fc 8e 05 15 c2 bd 4d 7c 21 2b 19 52 1c dc c1 a4 35 39 19 9a 0b 40 ba bc b9 51 29 Data Ascii: Gm(SW<&[.##QjRT:K? JCM/%W$$$sGRa2>J\Ii_\|r(}0B"!!kgP0$Q6fRKq$!&o)bu!A2im!HZO$=q%V,zo{)M\|!+R59@Q)
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 84 a0 91 e5 b2 6c 67 0a 32 d5 a9 b9 53 45 24 16 c3 19 9a 6c 58 e8 79 ed ce b0 f9 71 d5 c6 f0 8b 88 75 c0 f3 49 4a 5c 42 81 47 84 d8 56 f2 a4 27 75 f7 28 35 08 07 65 37 e9 f3 a5 7a ce 71 cb d4 1c c1 16 4c 68 ce d5 16 14 e9 5a 7e d2 0c 75 5c 36 a6 c9 f2 95 ae ca 27 f9 92 2d 61 c9 c7 17 75 c7 9f 52 ee af 0f b3 a2 e7 39 98 9f f1 9e 60 fa 7d 7e 0b af b2 e0 96 f6 b4 69 df 71 1a a1 a1 c0 90 3f c8 f4 0d f5 ea 76 1d d7 58 e6 6e 9b 28 b9 1e 8b 54 cc b9 7a a9 51 a6 57 20 c4 0a 8f 32 24 c2 d8 8d b0 1d eb 3e aa 05 3d ee 7d cd f1 99 63 42 e6 d2 d8 0b 97 ea 7e e4 fa ad 1f 1b e2 4f af 70 ea f6 d4 a2 98 80 1a 33 85 c4 39 f9 fa de 7a a1 50 e9 ad 44 7a 55 7a b5 57 43 34 a6 96 85 25 4f 78 a9 3b 94 90 af 37 86 a2 5b 55 fb 73 7c 6c e8 dc 53 a7 e6 3d cf 1a 5a 32 67 02 37 9f 45 Data Ascii: lg2SE$lXyquIJ\BGV'u(5e7zqLhZ~u\6'-auR9`}~iq?vXn(TzQW 2$>=}cB~Op39zPDzUzWC4%Ox;7[Us\|lS=Z2g7E
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 5a cf df 0d ed 4f d3 cd 58 c9 79 06 64 fc bd 2e 76 6e 75 f6 a9 73 63 4f 5f 80 4b 48 de b2 e2 4b 61 c4 00 9b 72 10 45 cd af 86 1d cd 56 5a e9 80 ac 4f fc 1a b5 a9 d0 52 ba f6 4f 48 3f d3 51 90 7f fa d8 35 84 83 6a 0d a1 74 fe 93 e8 b6 75 a3 3b 4f d1 6c c8 dd 0e 4d 6a 85 42 8d 55 f1 e2 4c 5f 82 e3 69 74 b4 cb 89 bb 69 52 5c 0a 6c 92 40 36 b7 7e 40 3c f3 6c 0d 3a af 0c f7 5c 4b ba 19 ea b7 4f bb 65 76 b4 d4 f7 da 00 8d c4 05 6d e6 4d 28 cf 39 47 2c 55 ab 0f 8a 75 5d b8 10 de 94 e3 06 62 90 a7 82 10 a5 14 dc b4 47 20 5a e4 7a f6 c6 69 65 73 ec 60 83 cc 9c fc a3 3f 45 8c 0d 21 2e 26 23 a0 fd 67 1f 55 c1 fd 1e 51 73 36 b6 ea 6d 43 54 aa ac 32 ba ec c7 5c a7 65 98 2f 2f 63 31 d4 ab f8 8e 82 41 fb a9 b8 dc 06 e2 02 c8 1c 01 8e 07 8d 53 6b 59 4b c3 7c 3c c3 aa 65 Data Ascii: ZOXyd.vnuscO_KHKarEVZOROH?Q5jtu;OlMjBUL_itiR\l@6~@<l:\KOevmM(9G,Uu]bG Zzies`?E!.&#gUQs6mCT2\e//c1ASkYK\|<e
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: cb b5 d5 28 a8 5b d3 9e 31 59 03 56 14 db ab 4e 77 55 3f c2 33 3b 57 33 d7 53 39 aa 7e 61 ac cc ae cf 46 51 75 a4 ca a8 3e b7 9e 08 13 23 10 9d ca 27 8b 92 6d f5 c2 22 10 cc ee ad 9e ac 35 0b 47 28 19 4f 56 e9 d4 3d 65 cc ab cf 8f 3f 3d a5 50 97 35 f7 59 66 63 8f 6c 90 cb 65 4c d9 29 4d 96 84 a4 39 b5 00 10 9b 62 87 b4 3a 26 71 9c 63 e6 a7 a4 3b 08 7f 0c 6a 34 6c ff 00 2a 56 75 6a 9b 32 95 41 c9 f0 45 12 97 4b f1 50 fc 75 4a 71 21 4f 48 4a c2 42 d4 e8 6c 04 9d dd 83 e6 dd ce 39 de 19 c2 9f 67 75 5e ee b3 83 df 50 ce a8 20 ff 00 d6 36 00 72 85 9b 56 a0 2c 6b 1b 80 15 a7 d4 b6 9a d4 f5 f3 a4 53 5c d4 1a 61 a2 e6 dc ba d4 ba a3 f1 a2 ad 71 50 1b 40 74 16 d4 a2 49 0d 16 c3 4e 2b 9b 12 d0 f4 c6 55 f3 ef 1d 67 e6 50 64 54 04 63 0e c6 a1 3b 6e 74 c9 1d d2 a4 e1 Data Ascii: ([1YVNwU?3;W3S9~aFQu>#'m"5G(OV=e?=P5YfcleL)M9b:&qc;j4l*Vuj2AEKPuJq!OHJBl9gu^P 6rV,kS\aqP@tIN+UgPdTc;nt
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 37 3b 35 b9 35 9a 85 31 ea 5a a9 35 34 3c c4 56 c2 9f 69 d4 2d 32 59 43 ca 3c 34 12 42 9b 1c ab bf 1c eb 8e 56 70 5d 20 bf 89 ed 53 58 f2 f6 69 a7 d1 74 06 8d 2e 53 f1 9c 8a f3 e9 cc 0c f8 e1 4f 25 68 4b 88 6d 71 d2 b7 79 24 9d bf 4b da f8 5a 53 95 51 e4 fe ba f3 cf 4c fd 35 0d 2c a0 69 9c fc 91 5f 25 6e 2b 38 4f 71 61 c5 c8 5b c1 6b 77 c0 71 8d 84 f8 60 34 3c e6 c1 29 3c da d8 61 a0 a5 25 1f a3 3f 16 5d 47 c9 74 dc c3 4e d4 7a 62 35 66 15 51 08 6d a6 e7 48 6a 0f cb 22 cb 4b a8 3e 1b 0a 0e 25 61 49 b8 23 8d bf 53 87 a1 47 52 80 e4 1e b9 4e 9d 74 c7 9e b4 62 95 92 08 83 98 a5 4c 7a 3d 59 55 75 07 61 21 fd 81 29 d8 1a fb 45 20 20 79 b7 26 e7 d0 60 d1 3b a0 39 2c 73 e2 61 ab 33 b2 e6 98 50 a7 2a 23 94 fc 97 36 24 a9 0e 30 54 89 35 a4 47 29 08 6e 4b 8a 2a ee Data Ascii: 7;551Z54<Vi-2YC<4BVp] SXit.SO%hKmqy$KZSQL5,i_%n+8Oqa[kwq`4<)<a%?]GtNzb5fQmHj"K>%aI#SGRNtbLz=YUua!)E y&`;9,sa3P#6$0T5G)nK
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 3d 28 c8 fa a4 e5 42 9f 2d 92 da 60 ce 76 44 54 38 d2 d2 6c 9d 8a f1 1b b9 04 da f6 c7 3e fb 56 b4 b8 32 a0 c2 f4 0a 1c 70 d4 63 1f 56 dd ed 0f 00 82 04 83 39 1d c4 ee 26 17 36 67 0e 8f f5 8f 22 a1 d5 d4 32 05 52 44 66 cd be 62 96 94 cd 41 1e ff 00 64 54 7f 51 8a 7c 97 81 b4 fa 2d a3 38 85 b3 ce 9d 70 7a 1c 1f aa a9 a7 c2 7e 95 25 71 a6 c7 7a 14 84 fd e6 a4 b6 a6 d6 3f 25 00 71 4e db ac e6 90 e1 2d ca 4f 70 47 d3 0e 14 96 b8 c1 08 44 2c 2d f7 90 cb 69 dc b5 10 94 a4 77 24 f6 18 c7 79 e4 15 cd 0a e9 a7 51 5f cb d4 88 70 e1 7c bb 8e 32 92 5f 4b c4 80 e2 cd 8a 88 50 ec 41 16 fc 31 52 92 c5 54 24 37 73 22 94 f8 1e aa 8c b4 bc 3f 4b 83 fb 62 29 82 89 15 da 72 97 b5 6f fc ba ff 00 a6 4a 14 d9 ff 00 dc 2d fb e0 42 4a e3 ac 55 66 36 d4 75 87 98 65 5e 2b ae 23 94 Data Ascii: =(B-`vDT8l>V2pcV9&6g"2RDfbAdTQ\|-8pz~%qz?%qN-OpGD,-iw$yQ_p\|2_KPA1RT$7s"?Kb)roJ-BJUf6ue^+#
2024-04-05 23:18:22 UTC	953	IN	Data Raw: 8f cb 02 13 95 3d c4 95 7d 70 21 3f b5 16 3c c6 f6 bc cb 6f 8e 3e fa 41 c0 85 83 28 43 51 df 1d 6f c1 5f f5 47 70 db f4 38 42 50 8c 45 3a bb 04 de 2d 4d 99 60 76 4c 94 6d 57 fd 43 0d 10 94 ab 36 d6 a1 b5 b2 ab 48 75 f6 3b 6e 40 0f b6 7f 23 7c 08 48 be 6b 25 d7 4d 9f 86 cc 37 af c9 68 aa 3a 81 fc 39 4e 0d 94 72 a5 d9 5e b1 99 f2 7b 89 91 93 75 0e b5 46 52 6c 52 95 3c 5c 6c 01 d8 5d 24 8f db 19 4d ba ac d1 01 d8 ef 9f ba c3 75 95 bb ce a2 c0 0f 51 83 f3 10 ac 3a 6f 54 3a b1 47 ca 73 72 fc ea 36 5b cd f4 d9 b3 d1 51 98 f9 60 09 52 96 92 0e d5 ac 28 12 92 52 09 16 bf 26 c4 5c e3 2d 9c 41 e2 a8 aa f1 24 08 11 88 f9 61 60 bf 85 52 34 5d 42 99 80 e3 a8 cf b5 3d 8c e6 3e 28 b8 7d 53 53 1a cc 34 cf f7 4d 77 49 0b d3 da 35 3a 8e 5f 9a fb 89 4b 1b 8e f2 dc 75 28 02 Data Ascii: =}p!?<o>A(CQo_Gp8BPE:-M`vLmWC6Hu;n@#\|Hk%M7h:9Nr^{uFRlR<\l]$MuQ:oT:Gsr6[Q`R(R&\-A$a`R4]B=>(}SS4MwI5:_Ku(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	49982	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:22 UTC	404	OUT	GET /steam/apps/1938090/capsule_231x87.jpg?t=1712178612 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 9294 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "652f28b0-244e" Expires: Wed, 10 Apr 2024 21:10:53 GMT Last-Modified: Wed, 18 Oct 2023 00:37:04 GMT CF-Cache-Status: HIT Age: 180440 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c61a0a09a2-MIA
2024-04-05 23:18:22 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 04 05 06 07 02 03 08 09 ff c4 00 48 10 00 01 03 02 05 02 04 03 03 07 08 08 07 00 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 22 41 51 09 61 71 14 16 32 15 23 42 Data Ascii: JFIFCCWH!1"AQaq2#B
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: b3 00 03 1c 35 7d 51 18 47 e9 82 46 93 bc e8 45 81 3d cd 87 cf 0e b5 b2 a1 d5 a8 1b 00 f3 5a 59 52 3c d6 3c 0e 0f cb 0b 20 a8 94 9c dc c1 d9 23 ab a4 86 7c 82 de 83 9b 5b 0f d0 39 ca ad e2 6c 22 9f 83 d8 a3 92 5d 2e 12 b5 12 05 ac 46 2c 98 23 01 61 ee 2a 1a 84 b9 c9 1a 50 95 a1 4a 16 fa fa e1 f9 23 0a ad ad 6b 9a 5c 3e 68 78 27 60 01 5d cf a7 ae 06 ac a1 dd 1d 30 0a d1 29 2e a9 44 36 cf 07 8b 8e c3 0e 30 b4 0c 95 0a e1 b5 5c 62 9b 3f 44 89 e6 9f 65 2b de 9d e4 f6 b0 c4 86 96 bb 65 57 56 9d 7a 41 da c4 ad 0d 47 21 ad ee 25 44 9f ea fe 1f 9f ee c3 85 d9 80 a1 d3 a2 43 35 d4 07 3d 36 f3 fe e9 c2 33 b1 12 ad cb 65 4f 14 59 b0 e3 7e 84 f3 db f5 62 33 85 48 80 63 9a ba a1 52 d1 a7 53 d8 5c 44 36 47 29 ce df 84 fb 52 7a c5 6a 2b 2d 3a ea 23 b9 e2 b4 76 80 b1 6f Data Ascii: 5}QGFE=ZYR<< #\|[9l"].F,#a*PJ#k\>hx'`]0).D60\b?De+eWVzAG!%DC5=63eOY~b3HcRS\D6G)Rzj+-:#vo
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: f2 97 98 71 e6 12 ea de fc 27 7d 8a 88 08 ba 40 00 73 8b fa 36 b4 69 b0 43 65 72 3e 21 c7 b8 95 ed 7a a1 f5 8b 40 26 00 30 31 fd 96 e6 7a 29 d1 0d 38 cd 3a fb 9d 1f c9 51 f3 54 0a 05 39 35 0a 7e 5f a8 bc 55 0e 35 a1 aa 4b 8d b5 c1 db bd 69 00 13 bb 68 e0 0b 5c 19 a1 ad 6c c0 59 a7 d7 ab 52 03 9d 2b 4e 5d e9 83 44 35 66 97 d3 8e a3 c6 d2 ea 4e 5b 6f 33 cd 71 b9 f4 08 ea 2e c4 7d 97 69 53 9f 08 74 10 37 94 39 1d b5 25 56 1e bc 1e 2c 60 04 d9 7b b3 25 52 4e 74 ff 00 a7 09 f8 b4 35 a7 43 26 d2 86 48 34 ef 14 d0 bc 0f e4 db bf 25 17 6f b7 df 7f 9b eb 82 8c a3 0f 3a 54 63 59 3a 15 a3 ea 5f 57 3a bb 42 ca b5 7a 46 9c 65 ac bf 3b 2e d3 22 42 4c 17 5e 6d 72 6a 10 9b 2d a1 09 47 e1 05 c4 ac a9 44 d8 15 fd 6c 92 dc a7 99 54 b5 a2 54 4f 22 f4 59 4f d3 4d 5e d0 61 9b Data Ascii: q'}@s6iCer>!z@&01z)8:QT95~_U5Kih\lYR+N]D5fN[o3q.}iSt79%V,`{%RNt5C&H4%o:TcY:_W:BzFe;."BL^mrj-GDlTTO"YOM^a
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 52 1a bc 8e a9 53 9e a4 d4 65 42 90 12 1f 8e ea 99 73 69 b8 dc 95 14 9b 1f 5e 41 c2 53 b1 d5 26 f4 c0 44 85 87 1c df df e5 80 8e 06 10 09 be 02 00 4a 3d b7 1c 02 4f d3 01 1c 63 0b 73 0d 36 a4 af 72 c0 3c 79 48 ef 84 38 9e 41 49 a3 4e 99 07 53 b3 d1 3f e5 d8 aa 71 e4 a4 21 2b f7 0a 17 e3 e5 8a eb 97 80 d9 95 b3 e0 56 ee 7d 40 d0 d0 7d 44 e1 58 54 78 61 24 33 b2 c0 0e 55 f2 c6 6a b3 e7 c5 2b b7 70 cb 60 df e0 e9 4f 82 9a 96 85 d2 9e 08 1d 85 f1 03 bd 25 6b 3e c0 da 62 5a 31 f8 a9 4f 8a 39 27 8b 9f 5e 0e 2a 00 5d 13 bc 03 25 26 97 2b 62 48 07 be 1d a6 c9 50 2e ae 34 88 07 74 cd 22 aa 90 14 14 d8 1c f3 cf 38 9a da 27 91 59 8a bc 45 a0 1d 6d 8f 8a b0 34 b3 a6 0d 51 d7 ac bf 2e bd 91 b2 a9 ae d2 62 cc 54 07 5f fc a3 12 3e c7 d2 84 2d 49 da eb a9 51 b2 5c 41 b8 Data Ascii: RSeBsi^AS&DJ=Ocs6r<yH8AINS?q!+V}@}DXTxa$3Uj+p`O%k>bZ1O9'^*]%&+bHP.4t"8'YEm4Q.bT_>-IQ\A
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 45 1a 9b a3 14 08 b5 fc e1 97 7f 24 51 65 ca 44 46 24 aa 7c 57 fc 47 54 85 b8 94 ed 69 c5 28 79 5b 59 b9 16 e3 de d7 91 52 bd 5a 4c d5 51 b0 aa 6c 78 55 8d fd c9 a1 67 5b 51 19 c8 22 40 f5 03 65 17 a0 65 ef b3 ed 0e 14 11 7f 20 47 60 3f 7d b1 9e b8 b9 d5 30 bb 07 06 e0 9d c4 0a 84 79 47 d6 48 53 48 50 11 7b 8b aa de aa 1c e2 8d f5 0e cb a9 da 59 b0 99 19 8e a9 72 58 ee 79 1e 86 fc 62 3e a5 70 da 3b 9d bd df 5e 5d 42 d4 65 0b 28 de e9 03 9b 61 61 8a 29 b9 10 4c c8 4d 33 6b 21 b5 ac 6e 48 50 e4 6e 1d b1 32 9d 02 42 ce 5d f1 40 c7 38 48 91 d5 57 99 97 31 2d b5 a9 29 75 48 28 24 6c 47 af d4 e3 4b 69 6c 08 92 17 13 e3 fc 71 ec 71 6b 5c 41 1c 87 e6 76 5e b4 fc 1a ea 6b 77 a5 9c dd 25 f2 54 1a cd f2 cf 1d ec 20 c1 38 d1 52 a6 da 6d 86 ae 35 7f 75 52 f2 af 79 54 Data Ascii: E$QeDF$\|WGTi(y[YRZLQlxUg[Q"@ee G`?}0yGHSHP{YrXyb>p;^]Be(aa)LM3k!nHPn2B]@8HW1-)uH($lGKilqqk\Av^kw%T 8Rm5uRyT
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: b4 94 a8 b8 fb 6a dc 14 ca 89 f2 91 62 39 ee 04 d6 88 59 ca af 35 0c 9e 4b 95 7a 67 ea 6f 39 74 b9 a8 4c 66 8c a7 2b 73 2b da dd 46 92 fa 8f d9 aa 2c 03 72 db 83 d0 8e 4a 56 39 49 3c 70 48 21 37 c9 49 3a bf eb 23 37 f5 6f 9d 85 46 ae 4d 27 2c c1 52 85 27 2f 32 e9 5b 31 52 78 2b 59 b0 f1 1d 50 ee b2 07 b0 00 71 80 80 10 ba ef a7 2f 89 46 87 74 eb a3 b1 29 94 ec a1 9d ab 99 f9 74 a8 cd d4 aa 75 06 e2 94 4d 94 cb 09 6d b6 7c 73 20 ad 11 5b b0 6d b4 86 fc 88 17 d8 54 55 73 94 50 b8 1f 5d f5 df 37 75 13 a8 95 0c e5 9c aa 06 5d 42 49 d8 cc 76 ee 18 86 c8 24 a1 96 51 73 b5 09 b9 f9 92 49 24 92 49 24 a0 17 52 f4 1d f1 2c 9f d3 4d 35 cc 9b 9f 23 54 f3 3e 40 4a 54 b8 09 81 b1 c9 b4 d7 3b ec 68 38 b4 25 4d 28 f7 41 50 da 4d d3 ea 08 05 11 08 ba e9 eb a7 21 75 33 9d Data Ascii: jb9Y5Kzgo9tLf+s+F,rJV9I<pH!7I:#7oFM',R'/2[1Rx+YPq/Ft)tuMm\|s [mTUsP]7u]BIv$QsI$I$R,M5#T>@JT;h8%M(APM!u3
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 0a 11 ca 2c 04 68 c6 09 18 43 01 1a 3b 60 23 84 61 37 f4 c0 4a 01 64 94 e1 32 9c 0d 5b 50 8c 26 53 ed 6a da 94 e1 12 a4 35 a8 f6 60 4a 56 85 81 45 b0 60 a6 8b 61 6b 29 c2 81 4c 96 ad 8d c7 52 d0 57 fa 03 d7 df 09 2e 00 c2 79 94 5c e6 97 f2 4b 29 f4 89 32 ca 4b 76 46 e2 36 97 3c a9 3f 3b fb 61 8a 95 98 c9 05 5a d9 70 cb 9b 92 0d 3c 4e d3 81 eb 3d 06 67 e6 a7 79 63 23 f8 e9 71 c7 a4 f8 b2 0d ee 96 d2 53 63 7e 6e 4f 70 47 6c 67 ae f8 86 9c 35 b0 17 62 ec ff 00 64 3b e0 ea 95 aa ea a8 67 00 11 99 cc 93 b8 23 6c 6d 90 9c 55 94 63 bb 0d d4 29 b4 59 0b 29 4a 92 82 14 a5 0b 8b ab df fe f8 8c 2f 5e 1e 08 3b fd 61 5e bb b3 16 f5 2d dc c7 34 78 49 00 81 04 91 22 5d d6 3f 03 95 14 73 2e c4 fb 42 a3 f8 49 0e 0e 77 8e 46 df 53 c7 ae 2e 05 cd 4d 3a e7 0b 9a d4 e0 76 9d Data Ascii: ,hC;`#a7Jd2[P&Sj5`JVE`ak)LRW.y\K)2KvF6<?;aZp<N=gyc#qSc~nOpGlg5bd;g#lmUc)Y)J/^;a^-4xI"]?s.BIwFS.M:v
2024-04-05 23:18:22 UTC	151	IN	Data Raw: 35 75 56 6c a2 60 68 30 02 53 15 6c 30 e1 49 2a dc 40 24 02 79 3d af 86 9e 1c e1 2a c2 d9 d4 29 3c b4 ef ed 4a 8a d6 84 a5 24 8d df 2e d8 64 00 64 ab 12 e7 b4 06 93 94 7e 38 55 81 04 fd 7b 60 69 47 de 83 ba 73 81 15 52 4a ad 6b 5b 8f 96 22 d4 7e 85 7d 67 6e ea f3 1b 42 90 53 c7 d9 59 1b 85 af e9 7b df e7 8a da 9e 33 85 b4 b2 9b 7a 43 5e 12 a5 9d a4 9b 71 86 86 55 83 ce 9c f2 4a 5b 46 d1 c6 19 25 4e 63 43 42 d9 84 a7 c2 2b f3 6f 5c 1a 4c c1 85 ff d9 Data Ascii: 5uVl`h0Sl0I@$y=)<J$.dd~8U{`iGsRJk["~}gnBSY{3zC^qUJ[F%NcCB+o\L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	49983	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:22 UTC	646	OUT	GET /steam/apps/1962663/capsule_231x87.jpg?t=1712172838 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 8619 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "6570a5f6-21ab" Expires: Wed, 10 Apr 2024 19:34:05 GMT Last-Modified: Wed, 06 Dec 2023 16:48:54 GMT CF-Cache-Status: HIT Age: 186249 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c61f2609c6-MIA
2024-04-05 23:18:22 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 00 03 01 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 02 03 09 01 00 ff c4 00 53 10 00 01 03 02 04 03 05 04 04 07 0a 0a 0b 00 00 00 01 02 03 04 05 11 00 06 12 21 07 13 31 08 22 41 51 61 14 32 71 81 15 16 91 a1 Data Ascii: JFIFCCWS!1"AQa2q
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: bc 2c e0 b0 e2 62 ab 09 fa 5f e8 d3 4f 5b 68 ff 00 25 e6 f3 35 6b df df 4d bd cf 5e b8 ac f2 f0 ad 11 86 1f 52 f7 40 3f d4 ca c3 cc bf 26 3d 2e 6c a8 4d 38 a6 cc a6 a3 2d 4d dc 1b 7b c0 10 3c 3c 7c 71 6e 4b e4 cf c5 fc 04 19 1b 82 95 2c df 9a fe 84 a9 89 59 71 6a 8c b9 28 72 54 25 12 b0 95 24 58 25 45 37 f7 ba df 09 2c aa 11 b5 b1 e1 85 ce 5c 5e 82 0a d7 65 86 3e 87 ae c9 a2 e7 08 f5 89 d4 90 a0 fc 2f 63 e5 59 49 04 a9 05 5c c5 69 55 81 b6 dd 7c ba e1 17 92 f5 71 1d f8 ca 9b 8c ae 8a 4c cd d9 75 14 2a be 4f 87 f5 8f da 3e b0 be 59 d7 ec 3a 7d 9f ba 15 7b 73 0e be be 98 2b ca 74 f4 07 e2 d3 5b ec be 83 d9 1a 12 b3 14 ea 2a b3 cc 76 67 32 10 a6 da 30 13 cd 75 25 3a 8a 82 39 d7 b0 dc 78 e3 3c b3 39 6c bc 7c 74 9b 56 7c ff 00 14 48 33 b3 21 a2 33 9f 18 95 21 Data Ascii: ,b_O[h%5kM^R@?&=.lM8-M{<<\|qnK,Yqj(rT%$X%E7,\^e>/cYI\iU\|qLuO>Y:}{s+t[vg20u%:9x<9l\|tV\|H3!3!
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 52 47 4c 6d c7 3e 4e 97 44 da 21 26 3b 22 39 75 e5 90 bf c5 6d 29 b8 3f 13 e1 8a bc 8d 3a 42 71 4c a6 92 12 b4 2c 1e e8 3e 58 d7 19 b5 d1 9e 58 d3 4e c8 59 73 33 4d c9 19 96 2d 56 02 d2 b7 98 51 ee ac 5d 2b 49 16 52 4f c4 13 8f 45 4b 9a 30 d7 17 a1 83 2b b4 85 45 6c d4 0c 1a 15 3a 9d 36 62 42 5c 98 d0 25 c2 40 20 28 fe 51 00 ed 7b db 0c a2 bd ce 6d fb 15 95 0e 31 4e ac 42 cb 31 55 4d 61 02 87 26 3c 86 8a 56 ab ba 5a 00 00 7c af 6f 0c 3a 49 5b be c4 db a4 14 b3 da 0e ac d5 52 4c f3 45 8b ad e6 5a 60 a3 98 ab 00 85 38 a0 7e 7c c3 f6 62 1c a0 f5 65 ea 5d d1 d9 48 e3 74 b8 73 a4 ca 66 83 06 21 90 db 4d 96 d9 b8 4f 74 ac ea db c4 eb fb b0 8e 71 e9 33 94 65 d9 df 3e bd 1f 31 2b da 95 0a 2d 3b 53 5c b7 1b 8c 80 35 0b 93 72 7c f7 c7 9f 9b 24 a4 ff 00 a1 bb 14 12 Data Ascii: RGLm>ND!&;"9um)?:BqL,>XXNYs3M-VQ]+IROEK0+El:6bB\%@ (Q{m1NB1UMa&<VZ\|o:I[RLEZ`8~\|be]Htsf!MOtq3e>1+-;S\5r\|$
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 19 bd a4 33 4e 56 ab c0 8f 26 2d 35 99 ed 96 64 20 38 92 eb 72 1b 6f 59 4a 85 b5 6c 77 f5 c3 71 d1 38 bd d1 a3 bb 47 d2 32 fe 51 e0 ee 61 ad 47 a0 42 6e 4b 26 2a 43 91 21 b6 97 ac a9 2d 20 e9 20 5f a2 8e d8 e8 a5 61 97 41 e5 23 21 e5 69 94 78 6e af 2d 52 55 ce 8e 85 2b 5c 06 89 37 46 f7 ee f9 13 80 14 45 77 81 dc 38 7c 92 e7 0f f2 bb 84 80 2e aa 2c 63 fa 98 36 ce e2 be 05 57 6b ac 8f 97 32 97 66 5c fb 32 85 97 e9 74 59 6d 43 6f 97 22 9d 09 b6 1c 47 e1 9b 1d d5 21 20 8d 89 1b 61 a1 b9 6c 49 a5 c5 9e 5e f0 97 35 49 6e b4 f4 49 92 27 4f 7a 66 86 99 d6 a5 38 94 90 4d ee 54 7b b7 db 7f 4c 7a 38 e4 ee 8f 33 24 35 63 33 32 b4 b6 d3 05 5a 4a 6e f1 04 1b 13 ee 2b 1a 19 9e 2a ac df 12 a7 7d 5e cb d5 69 87 f7 c6 18 3c b0 7c 54 46 c0 7c ed 8f cd 5f d3 16 cf bb 86 dd Data Ascii: 3NV&-5d 8roYJlwq8G2QaGBnK&C!- _aA#!ixn-RU+\7FEw8\|.,c6Wk2f\2tYmCo"G! alI^5InI'Ozf8MT{Lz83$5c32ZJn+}^i<\|TF\|_
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 65 5a 33 b7 04 aa 22 57 11 a2 02 00 25 a7 6c 47 fa 87 09 1c 7c 76 17 37 2e cd 17 55 21 34 b9 84 f4 0c af f4 4e 28 00 1f 80 12 58 97 c2 5a 13 b1 d4 56 c9 e7 84 92 2d d2 43 80 fd e3 0c fb 04 7a 3e c2 ab 36 cf 1c ea 74 dd 44 38 fd 0d 97 ed e0 74 3c a1 ff 00 c8 70 37 47 6a c1 95 50 58 83 da cd ba 9a 5c 57 3a 6e 58 5e a6 c8 db ba fa 13 70 7c 3d d1 7f 3b 8f 2c 43 fe cf ec 53 f9 4e 9e da 29 d5 d9 ab 38 83 e7 0b fb eb 18 a4 ba 15 0d cc b9 fc 1e a5 ff 00 35 6b f4 06 19 00 a0 cc 5c 1e c8 b9 ba a6 fd 46 b9 93 e8 75 79 ef 84 87 64 cd a7 b4 eb 8e 04 8b 27 52 94 92 4d 80 00 63 81 48 ce bd b6 78 23 c3 ec a5 d9 c3 34 55 a8 59 26 81 47 aa 32 e4 30 d4 d8 34 d6 99 79 01 52 9a 4a ac b4 a4 11 70 48 3e 87 14 8b 76 4e 51 54 79 b3 91 e3 05 e7 3a 42 55 b8 32 05 c1 36 bf 5f 1c 68 Data Ascii: eZ3"W%lG\|v7.U!4N(XZV-Cz>6tD8t<p7GjPX\W:nX^p\|=;,CSN)85k\Fuyd'RMcHx#4UY&G204yRJpH>vNQTy:BU26_h
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 37 97 b8 fb 2e 5a fd d4 cd 4a 54 6f 62 94 a8 04 a8 fa f7 54 76 c6 67 24 a6 59 46 e3 66 97 c6 92 22 97 83 b4 68 59 73 3c 67 ba 57 2c a6 7b 12 5b 5b 65 46 ff 00 b9 56 0a 9b 09 f4 17 de de 9e 58 94 15 36 87 96 d2 63 5d e6 51 21 95 b4 e2 42 db 5a 4a 54 93 d0 83 b1 18 a8 85 01 e1 d6 57 57 5a 0c 03 ff 00 80 9f d9 85 e2 be 03 6c 12 97 02 8f 94 f8 b3 96 d9 87 12 3d 39 b9 71 5f 6e cc a0 20 29 7b 69 bf d9 6f 9e 12 92 92 19 5b 8b 19 8e b4 87 da 5b 4e 24 2d b5 a4 a5 49 3d 08 3d 46 2a 21 41 45 e1 e6 5b cb b3 93 32 99 46 8b 0a 52 41 01 d6 93 65 00 45 8e 02 49 06 c9 19 d2 a9 1a 89 94 2b 53 e5 af 44 68 f0 dd 71 67 d0 20 ec 3d 4f 41 ea 71 cf 48 08 00 ec a6 41 e0 26 57 d2 95 20 0f 6a 16 59 b9 ff 00 2a 7b c6 c3 1d 1d a3 84 8f 68 2a d2 e8 5d ac 72 7c fd 83 11 53 4f 53 aa b8 Data Ascii: 7.ZJTobTvg$YFf"hYs<gW,{[[eFVX6c]Q!BZJTWWZl=9q_n ){io[[N$-I==F!AE[2FRAeEI+SDhqg =OAqHA&W jY{h*]r\|SOS
2024-04-05 23:18:22 UTC	845	IN	Data Raw: a6 34 a7 f4 90 7d 92 9f ed a7 c5 d6 1a 75 c5 e6 e9 ac c7 25 1a 5f 76 89 0e c9 bf 51 fb c8 1b f8 60 a7 7d 1c 0a 67 de d6 1c 45 cf 99 76 66 5e aa e7 07 aa 94 49 ed 84 49 65 54 a8 8d 73 00 5e ab 6a 43 41 43 70 0e c4 61 d5 88 da f9 03 5d cd ae bd 96 64 d0 86 66 ff 00 a3 64 72 83 91 8c 44 8f 70 20 24 6a d3 a8 0f c1 37 70 08 be 84 93 72 06 02 72 5e c7 54 7d 98 11 25 c8 ac 49 71 02 49 79 09 36 0a 4a 6c 0f a8 c5 2d d0 9a b1 bd f5 6e 67 3d b6 d9 9b 19 69 70 7b e8 6c a4 03 d2 d6 22 f8 f8 ce 48 fa 55 16 77 c7 ca 75 68 52 75 fb 43 48 71 ab 2b a5 c1 df fe 58 3c 90 38 b4 5a e7 56 6b 79 ca a4 8a 93 cf b1 15 ce 5a 5a 59 6d 4a de dd 7c 3d 70 63 28 c5 51 cd 37 b2 b9 34 8a 8d 39 49 34 cc d3 34 3e 01 e5 04 ea 40 b5 f7 17 d5 b6 0a 6a 5f 74 45 71 6b a6 40 87 97 f3 95 2a 53 72 Data Ascii: 4}u%_vQ`}gEvf^IIeTs^jCACpa]dfdrDp $j7prr^T}%IqIy6Jl-ng=ip{l"HUwuhRuCHq+X<8ZVkyZZYmJ\|=pc(Q749I44>@j_tEqk@*Sr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	49984	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:22 UTC	403	OUT	GET /steam/apps/359550/capsule_231x87.jpg?t=1711470437 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 8231 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "6307785d-2027" Expires: Tue, 09 Apr 2024 16:27:20 GMT Last-Modified: Thu, 25 Aug 2022 13:25:49 GMT CF-Cache-Status: HIT Age: 283861 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c63ad1a564-MIA
2024-04-05 23:18:22 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 05 01 01 01 01 01 00 00 00 00 00 00 00 00 04 02 03 05 06 07 08 01 09 00 0a ff c4 00 3f 10 00 02 01 03 02 04 04 04 04 03 06 05 05 01 00 00 01 02 03 04 05 11 00 06 07 12 21 31 08 13 41 51 14 22 61 71 09 32 81 91 42 Data Ascii: JFIFCCW?!1AQ"aq2B
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 2b 73 e1 4f b3 13 83 f4 d5 a2 18 62 db 64 31 02 63 50 87 b1 f3 0e 3f ae b6 49 90 da 32 a5 4c fa eb cd 3b 05 2a 28 cf 5d 34 84 38 b8 00 f5 c6 a8 91 5d 3d ff 00 6d 30 0f 8a c7 70 36 66 bb 8a 1a a6 b5 2d 40 a4 6a ef 25 bc 81 31 52 c2 33 26 39 79 ca a9 3c b9 ce 01 3a 04 32 89 cd d8 11 aa a1 0e 2c 79 38 c1 ce a9 21 0e 88 71 ea da 28 2c 50 04 76 cf db 1d f4 c4 2a 35 66 3f 31 23 db 1a 02 c2 11 18 1c 06 6c 9e 80 6a 92 15 86 d2 d3 31 f9 5a 47 0c 7d 3d f5 6a 3e c9 b0 a0 9e 43 72 87 2f f4 38 d3 a4 84 9d 84 a2 c1 22 0c 33 07 c7 52 3a e8 54 16 c7 69 69 c7 39 32 2b c8 b9 ee 70 00 fd 75 51 48 96 d9 25 4f 48 cf 1b 05 94 a7 b7 40 73 fa e3 57 42 15 1d 25 5c bc cb e7 90 83 b8 0a 3a 8d 2d c7 b2 09 af b4 9a 42 07 98 c3 ff 00 10 72 3d fa 68 68 13 b1 90 83 18 49 70 0f 7e 80 60 Data Ascii: +sObd1cP?I2L;(]48]=m0p6f-@j%1R3&9y<:2,y8!q(,Pv5f?1#lj1ZG}=j>Cr/8"3R:Tii92+puQH%OH@sWB%\:-Br=hhIp~`
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 56 50 ca 66 40 41 19 04 73 0d 31 1f 6f b8 a1 55 c1 6d 9f e2 83 62 70 42 b7 80 7b 32 ba 9f 78 5b 9e a8 5e a3 b5 d2 46 69 58 79 e0 27 94 20 c9 cf 91 f9 83 a9 1c dd ba 75 e7 49 b4 e5 66 bb 5d 51 41 f0 9b e1 1f 61 6c ff 00 15 9e 21 ed f5 bb 6e d7 75 da d6 39 ed b4 56 9a 5b cd 2c 75 71 c1 f1 71 fc 49 44 f3 43 75 40 63 40 4f cc 43 0e a7 27 35 29 3d 28 51 8a b6 23 c3 47 87 bd 9b 6f f1 63 e2 97 6f de f6 6d 8a e9 6f a0 9e 8a ba d9 4d 5f 6c 86 78 a9 23 a9 59 e7 0b 0a ba 91 18 c3 a8 c2 e3 a2 81 e9 aa 94 9e 94 d0 a2 95 b2 c1 c7 3f 0b bb 33 73 f8 15 b4 dd ac 5b 2a c5 6f dc d6 eb 25 aa f6 6b e8 6d 90 c3 51 30 8e 38 9e a7 9e 45 50 cc 1a 23 29 20 9e a7 04 e9 46 4f 5d 30 71 5a 4d 98 70 1b 85 d4 9c 60 dd 31 9e 19 ed 09 29 29 76 c5 be a6 3a 63 62 a5 f2 c4 86 a2 bf 99 82 f9 Data Ascii: VPf@As1oUmbpB{2x[^FiXy' uIf]QAal!nu9V[,uqqIDCu@c@OC'5)=(Q#GocomoM_lx#Y?3s[*o%kmQ08EP#) FO]0qZMp`1))v:cb
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: ff 00 84 e3 56 ee a8 0a 1f cb da 96 e7 e5 6e c7 15 37 13 83 a9 ff 00 11 f9 39 fb c3 a7 16 8f 8c 0f 0e 89 7b af b2 53 ec b7 b0 6f 6b 78 4a 3b 14 cd 1d 34 a6 9a a6 8e a4 73 2f 62 ad e6 10 50 e4 65 43 77 03 1a 4e 3a 25 5f 44 45 ea 46 53 e2 1e 9d db f1 5d e1 23 00 c4 1a 2a 12 30 3d 03 d5 64 ff 00 bf ae b4 87 f6 99 2f f5 a3 ab f6 64 94 7b d7 8b 5c 70 d9 f5 d8 96 9e 82 f5 63 ba b4 7d fa b5 0d 23 a8 3f 42 d4 83 f9 eb 07 b2 4c d1 6e da 24 78 5b bb a8 78 d1 7c dd 75 15 0c 25 97 63 6f 8a db 7d 2a 8c 7c 92 45 47 e4 1f e5 53 2f eb 9d 26 b4 af ca 1a 76 73 3f 89 0e 08 70 ff 00 c5 5e fd dc 17 ee 0c 6f 08 a8 38 e5 b3 f0 f5 c9 45 e6 c2 b3 c9 13 18 d5 5e 4e 50 12 65 64 e4 59 15 8e 30 03 74 c3 2e b0 93 82 ee 5b 10 d2 97 1c 9c 91 e2 13 c4 fd eb c4 77 86 cd 93 1e e7 4c 6e bd Data Ascii: Vn79{SokxJ;4s/bPeCwN:%_DEFS]#0=d/d{\pc}#?BLn$x[x\|u%co}\|EGS/&vs?p^o8E^NPedY0t.[wLn
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: f6 e2 df dc 37 7b ff 00 0c 6b 37 1b 49 25 d2 96 86 f0 58 4a f2 1e 69 39 64 8d 63 60 ae e3 9c ab 73 7c c4 90 7b 01 71 85 2a 96 e2 bb 76 88 6b ce ea db 95 7c 25 b2 ec eb 45 9a b2 8a e1 0d ca 4b 95 c6 f1 57 58 b2 fc 5b 34 42 35 44 8c 46 be 5a 20 04 80 59 8e 59 ba fb 5a 8b bb b2 76 aa 35 7d 8b e2 66 d5 45 b9 38 cf 7c dd fb 3e 4d cb 5f c4 78 26 a4 69 56 e0 20 fe cf 86 46 76 28 99 89 8b 60 f9 3c bd b1 e4 2f e9 3d 27 b2 4f 82 b5 73 6b 91 cf 0f de 29 b7 2f 03 ae 3b 4e 7a 58 62 bc 52 58 d2 b6 8d a8 e6 7e 41 3d 15 4c 91 ca d1 64 0f 90 ac b1 97 0d 83 d5 ba 82 33 9d 25 8a 33 4f ec 85 27 13 af ab 7f 16 3d ab 15 b5 9e 9f 61 5e 65 af 0b 91 0c 95 71 2c 59 f6 2e 32 71 ff 00 86 b9 bf a4 97 b3 5e b2 f4 67 1c 1d fc 48 61 b1 6e 8d ed b9 77 be df ae b8 dd 2f f3 53 2d 34 36 b7 Data Ascii: 7{k7I%XJi9dc`s\|{q*vk\|%EKWX[4B5DFZ YYZv5}fE8\|>M_x&iV Fv(`</='Osk)/;NzXbRX~A=Ld3%3O'=a^eq,Y.2q^gHanw/S-46
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 9c f7 bb 70 ae c8 93 ca 9a a6 34 f9 1b a8 2b d8 f2 90 73 d7 af 7f 5d 4f 6b e7 90 dd 70 f6 24 27 dc f6 0a e9 43 c9 72 b1 ba b7 4c ad 4c 6c 31 f5 1d c6 31 fe f1 a9 ed 35 8b f6 7c aa 56 27 3d f0 35 f3 48 f5 07 10 8c 64 83 f7 d5 a2 47 51 c1 eb 9e 9f 6d 34 21 f5 91 4f 4e 63 fa 0d 51 23 81 82 f7 24 6a 84 3d 1b 03 8c 02 7f 4d 52 24 7a 32 98 20 f3 1f b8 3a 6a 83 70 b8 7c bc 0e b8 fb 03 9d 52 10 50 e5 e4 f9 00 63 eb cc 0e 34 c4 1b 4e 63 5f 40 3e f9 d5 70 04 95 3c cc 92 f3 a2 46 e3 1d c6 a9 09 87 c7 5d f2 f2 89 22 55 f5 e5 88 96 ff 00 5d 3d 42 d2 26 56 86 49 48 59 a4 c9 ee 65 8f 19 3f a6 8b 1a 5e 85 43 18 42 07 36 47 a1 51 d0 e8 48 4e 43 b1 d3 ca ae 18 f3 b0 f7 44 cf 4d 3a 16 af 44 8d ba 94 16 e6 90 3b 96 fc c1 87 2e 3f 4d 5c 51 0d 92 33 50 48 23 63 41 11 91 98 0c Data Ascii: p4+s]Okp$'CrLLl115\|V'=5HdGQm4!ONcQ#$j=MR$z2 :jp\|RPc4Nc_@>p<F]"U]=B&VIHYe?^CB6GQHNCDM:D;.?M\Q3PH#cA
2024-04-05 23:18:22 UTC	457	IN	Data Raw: d7 56 f8 e4 49 6e 05 47 4b 1d 43 1f 36 ac d3 73 10 a1 4c 7c ec dd 7a 9e 98 03 53 18 af 2c 6d bf 08 b5 d2 ed b8 a2 a7 59 2a 99 84 7d 0c 63 3d 58 1f b7 d8 f4 d7 52 c4 92 b6 73 bc 8d bd 81 da 73 96 48 87 93 8c a8 03 a1 5f db 59 37 e8 b4 81 8c 32 bc a4 32 b4 8c 7f 88 b0 3c de bd 75 83 7b ee 6e 96 db 0f 2c 2e c5 c2 04 40 7b e7 40 c9 4b 5d 4b 53 1e 92 15 95 b0 4f 32 e7 27 24 f7 fb 8f 5d 5a 95 70 27 1b e4 b8 41 0d 4c a8 89 25 50 8d 90 1e 4f ee f9 97 ae 07 4f d8 77 d5 eb 6b 94 0b 1d f0 cb 15 ba 91 27 f2 21 a9 a7 76 a9 5f ef 01 82 4e 45 61 8f 97 23 af 4f 5c 7e 9a 16 47 e0 7d 18 f9 03 ab a4 05 ff 00 e6 2b 29 cf cb 83 95 03 07 19 f5 e8 75 6a 4d 99 38 24 35 4f 04 6d 2e 7c e6 55 61 dc 2e 40 ff 00 79 1a b5 56 43 e0 3a db 6b 92 54 22 79 3e 1a 42 ff 00 28 8b ae 41 19 c7 Data Ascii: VInGKC6sL\|zS,mY*}c=XRssH_Y722<u{n,.@{@K]KSO2'$]Zp'AL%POOwk'!v_NEa#O\~G}+)ujM8$5Om.\|Ua.@yVC:kT"y>B(A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	49985	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:22 UTC	404	OUT	GET /steam/apps/2054970/capsule_231x87.jpg?t=1711745105 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 14104 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "64706e43-3718" Expires: Fri, 05 Apr 2024 20:45:06 GMT Last-Modified: Fri, 26 May 2023 08:30:59 GMT CF-Cache-Status: HIT Age: 92982 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c64ea48de5-MIA
2024-04-05 23:18:22 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 00 03 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 03 00 02 09 01 ff c4 00 3e 10 00 02 01 03 03 03 02 05 01 06 04 04 06 03 00 00 01 02 03 04 05 11 06 12 21 00 07 31 13 41 08 14 22 51 61 71 15 23 32 42 81 91 Data Ascii: JFIFCCW>!1A"Qaq#2B
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 40 6d a7 6d 7a 9e 20 24 ee ad b3 53 a5 ee aa 68 a9 f1 0c d2 bc 91 82 30 18 92 77 00 df af 81 fd 3a eb e1 91 d9 00 25 4c 92 36 48 d2 46 ae df bf c7 d1 74 b3 52 c9 b6 38 e2 75 a7 03 89 0b 1c 20 3e fc 9f 1c 63 a5 65 22 c9 3a aa 58 56 ba 83 76 1c 54 81 6a 85 ea a3 69 66 57 88 48 b9 db ca cd cf 8c 8f bf df a1 e7 39 4d 0f e9 1b aa 69 70 24 d8 bf 3f f6 a8 75 04 0d 16 a6 ab a6 8a 08 92 98 3b 3c 61 07 8f 72 80 ff 00 df aa fd 1e fb 63 73 6f 4a 1f 4b b3 47 35 a0 0b 37 5e c1 47 b3 d2 55 5f ae d4 94 50 07 aa a8 92 45 67 0c 73 85 1c 0f 3e df ec 3a b6 c8 fe a0 1a 35 3e ab 94 32 e8 5f 21 ba 1f 61 b2 71 5f 22 d3 ba 3e 05 6a cb 9b 0f 4a 1d ef 14 51 e1 d7 27 09 80 78 cb 9c e3 df 00 93 d7 41 6c c3 b3 21 3b 28 62 37 62 a4 74 97 a1 28 2e 5f 88 db 6d aa 5a 78 e8 34 ad 13 49 1c Data Ascii: @mmz $Sh0w:%L6HFtR8u >ce":XVvTjifWH9Mip$?u;<arcsoJKG57^GU_PEgs>:5>2_!aq_">jJQ'xAl!;(b7bt(._mZx4I
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: b5 b2 49 f5 54 ce 6a 1d 07 80 0f f0 28 ff 00 f1 5c 0f ef d4 cc 43 8c 8e be d4 f4 2d 11 37 20 e4 82 ea ab cc 8c 72 4f d5 e7 a5 68 ad d8 53 2d 89 53 20 8d a3 7f 4d 26 7f 4a 3f bc 8d 9e 71 fa 7b 9e b2 40 bd 51 1a 2e f5 5b f3 52 76 64 e8 4d 19 da 5b fa 54 d4 94 be db 66 b6 dd e8 27 1f 42 d5 c4 9e ad 3c a9 f6 0d 19 65 3f 7d aa 7c e7 ab b8 67 90 f6 93 dc 54 cc 5b 03 a2 73 79 6a 3c 10 05 55 82 17 91 e9 c1 8e 24 90 10 dc 95 c7 b9 c9 ea de cb 9f 1a 80 15 43 5a 1a 5a 56 8e 14 20 c4 0a 2a bf 19 c9 ce 7f 4e 3a fb 40 b2 2c 84 21 7a d3 a2 31 21 70 24 51 fc 4c 30 31 ff 00 c3 d0 ce a8 ad 26 d0 2d ce 80 98 84 81 07 a5 9c 6e ce 3e af d3 a0 90 8e 0d 21 da 9a 4c 86 fa 7e ac fb f4 2a 46 05 5e 8b 72 d5 50 b5 41 88 6f 12 ab 2b aa f8 c0 39 52 3e dd 72 1b 1d 17 63 b8 56 9a 5a d6 Data Ascii: ITj(\C-7 rOhS-S M&J?q{@Q.[RvdM[Tf'B<e?}\|gT[syj<U$CZZV N:@,!z1!p$QL01&-n>!L~F^rPAo+9R>rcVZ
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: a4 77 a2 4e 37 47 bc 78 24 7f 30 1f 63 c7 58 40 26 b5 47 2f 0c f7 29 5e b2 69 16 49 66 93 24 46 02 8c 93 ce 31 81 d7 81 bc 10 89 b3 67 74 c7 d3 56 a3 0a 44 b2 06 4c 1c 80 7d cf 46 63 46 c9 77 3c 92 51 de a8 d1 d6 2d 51 a0 6e d4 f7 2d 37 49 a9 0a d2 4b 1d 2c 35 31 86 68 a6 91 76 9f 48 f9 0c c3 e9 c8 20 f2 3a dc b4 c8 c9 21 09 8e 2d 78 20 d2 f9 c3 ab f4 fc d6 ed 43 71 b0 9d 39 55 a6 da 86 91 a6 34 75 9b bd 60 bb 94 e4 e4 9e 31 c0 3d 4a 88 e6 21 d7 c6 97 42 e2 0b 01 0e cd 7c 54 bb 35 82 36 9b 7c b2 18 f2 c2 26 50 84 92 ac a4 12 31 f6 e0 fe 7d ba 2b 45 b6 be 6e 86 f3 5a a2 69 34 25 c3 4f 24 35 ad 1e fa 59 3e a8 ea e9 98 4b 0b e3 dd 24 5e 0e 3d c7 91 ee 07 59 0f 63 fe 83 bf 6a 18 7f 10 54 7d 37 f1 0f 47 f0 ef dd 4a 6d 4c b4 e6 e6 b5 30 49 0d 75 a2 17 db eb 43 Data Ascii: wN7Gx$0cX@&G/)^iIf$F1gtVDL}FcFw<Q-Qn-7IK,51hvH :!-x Cq9U4u`1=J!B\|T56\|&P1}+EnZi4%O$5Y>K$^=YcjT}7GJmL0IuC
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: b2 42 78 9f 11 d0 e9 cd 15 69 bb 75 f2 e9 b1 e9 b4 dd de aa 86 44 59 62 96 0a 37 91 5d 08 ca 95 90 0d 8c 0e 41 04 12 39 f3 d1 5b 3c 24 d0 76 df 36 42 30 48 07 d4 13 1e 86 ae 3a 3a 3f 95 af a2 ad b3 d5 46 04 89 4f 5f 4c f0 99 36 32 96 2a 48 c3 e3 23 3b 49 c6 46 71 91 92 3c c7 34 6e 0d 3b 6e 97 7b 1e dd c2 45 77 ff 00 b4 d5 fd c6 ee c5 b2 f7 a7 6c d7 2b c5 34 76 ca eb 1d dd e8 68 e4 91 60 90 c6 26 a7 66 60 39 cf a8 a3 03 38 0c 09 ea 73 a1 ea b3 8e e2 3b d3 18 47 b8 47 5c 2f fd a5 b7 6b 7b 73 15 2d 6b 5d f5 15 ba a2 aa 96 0a 7a 7a 9a 3b 75 29 3e a5 74 93 9d 94 d0 8c 02 c4 c9 cb 6d 51 bb 68 e0 65 87 5a 6b 49 61 ce 2a be ff 00 d7 14 cc b2 93 4d 8c ef c7 92 26 d7 7a 02 e9 a4 ae d1 d3 6b 3e e1 69 4e de 43 71 8b d4 a7 d3 75 33 33 b2 23 65 44 8f 1c 08 52 26 04 70 Data Ascii: BxiuDYb7]A9[<$v6B0H::?FO_L62H#;IFq<4n;n{Ewl+4vh`&f`98s;GG\/k{s-k]zz;u)>tmQheZkIaM&zk>iNCqu33#eDR&p
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: d4 cd 0b 02 db e3 86 45 91 83 80 79 52 40 04 7b f8 1c f5 f6 25 c0 47 5f 29 6f 08 df ae fc 15 9f 76 04 f5 9d c1 be d4 d4 c8 2a 1e b2 71 5e b2 ef 24 4b 1c aa 1e 37 53 e7 05 58 01 e7 00 63 db ad e6 05 a0 ac 06 3b 31 00 59 4e 9a 1b 52 34 22 34 0c c8 06 d3 91 83 e3 cf 5c 48 14 6d 75 cf 93 30 a5 73 db 2b 74 f0 77 4f 4a 0b 7c 60 56 1a 89 91 3f 76 64 1c d3 4d 9c ae 3e a1 8c e7 a0 62 ef f6 ef f0 f5 0b 38 72 3a d1 7d be 85 0f 55 53 b5 4e bd bb 04 56 58 5a f3 5e 02 88 7d 33 8d b4 7c 6c f2 b8 e0 60 f5 bc 0b 6e 26 f7 0f 57 2f b1 a6 9c 7b cf a0 4e 1d 2b dc 01 a2 3b 73 dc 2d 3f 31 95 ed 6f 05 51 48 77 6d 14 d2 bd 1a 30 7f c0 de a1 f8 f2 dc f9 e9 0c 73 8c 7d 21 10 69 de af cf 4f b2 3e 11 9d 66 11 e5 dc 2e bc 95 75 c3 52 50 de 34 b7 6f ed 77 aa 84 b4 47 6f b7 4c d1 cc f4 Data Ascii: EyR@{%G_)ov*q^$K7SXc;1YNR4"4\Hmu0s+twOJ\|`V?vdM>b8r:}USNVXZ^}3\|l`n&W/{N+;s-?1oQHwm0s}!iO>f.uRP4owGoL
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 2f 69 a8 75 92 f7 5f fc 57 a5 6b 2a 24 a7 a5 a1 87 4f 4c 1d e7 91 76 c8 88 8f 38 09 23 0a 7c 17 3b 46 22 19 6c 28 ea 9c 3d 29 3b a7 30 33 0e 3a ce d7 70 ed d3 6d 7e e9 39 30 31 b6 31 23 a5 39 3b 07 a2 71 76 53 bc d3 68 2e c6 ea 0a ba 3b 6d 16 a8 4b 9e a2 c5 6d 9e 6d a2 27 86 5a 7a 48 4c 60 30 01 81 f0 77 00 0e df 6e 0f 52 71 e2 47 74 88 85 8e a2 e1 77 da 2c f8 05 57 0a 18 ec 27 5a f6 e8 34 d3 c0 7b fa a2 bd 25 dc ce d9 e8 ad 57 6a b6 69 0b 6b df ae 3a 92 57 13 dd 6f 13 ee 5b 24 5b 19 d6 97 91 92 72 9c a1 3e a6 42 99 59 b0 80 2f 8a 93 17 3e 19 d2 e2 db 42 3a 1a 8d cd d5 d7 1e ff 00 25 f4 2c c3 c7 2e 48 0d e6 17 a7 9f c1 e6 81 fb 77 6d b7 ea ef 8a bd 43 71 b9 3a 57 d9 6c b7 ba eb 93 b6 57 15 52 fc c4 86 99 54 78 2c 64 1e a0 03 83 e8 91 e0 f4 f6 2b 1d d4 f4 Data Ascii: /iu_Wk*$OLv8#\|;F"l(=);03:pm~9011#9;qvSh.;mKmm'ZzHL`0wnRqGtw,W'Z4{%Wjik:Wo[$[r>BY/>B:%,.HwmCq:WlWRTx,d+
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: ad 2d 1c b1 c5 12 c4 ac 1a 66 2e c4 93 23 65 70 d8 c2 81 ef 9e 93 c7 61 4e 35 82 00 e0 1b a1 d6 ef b0 05 eb 25 2d d6 b5 db f2 9b f6 1d 65 db dd 65 56 f7 4a 5e d2 54 c9 76 86 73 0b 8a ab eb a2 bb 33 7a ac 31 10 cb 06 77 2c 72 d9 e7 1c 74 91 c3 e3 23 19 0c e2 ab fe be 1e c9 86 30 97 68 dd 6e b7 f1 43 1d eb ba df f5 ad 9e 6b 54 d4 94 d6 8b 55 26 cf f9 0a 18 bf 74 a1 01 44 dd 9c 0c aa b6 d1 80 3c 93 c9 c1 14 fa 37 05 1c 6f eb 01 cc e3 c4 f6 a4 3a 42 43 13 0b 1c 36 e0 86 b4 af 7a 35 6e 91 d2 09 a5 e2 92 8a f3 a7 a1 45 8e 1b 7d ea 90 55 47 0a 03 9d 8a 49 07 6e 79 c1 24 0f 6c 74 de 27 a1 b0 d3 cb d7 8b 6b f9 b4 d5 a8 70 74 94 8c 19 1c 03 87 22 83 b5 de ac bf eb fa e8 6b 2f 55 42 4f 95 8b d2 a6 a7 81 04 30 52 a7 f9 62 41 c2 8e 07 3e 4e 07 3c 0c 35 87 c1 c5 84 61 Data Ascii: -f.#epaN5%-eeVJ^Tvs3z1w,rt#0hnCkTU&tD<7o:BC6z5nE}UGIny$lt'kpt"k/UBO0RbA>N<5a
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: d4 f1 5c 35 2d 2d 0e 9f d4 57 08 69 a1 8a 1f 91 a9 58 64 a5 a7 50 91 88 c2 8f ee d8 3e 7e fd 6e 22 e7 c4 0d dd 8e 2a 3f 4f c7 14 1d 27 3c 31 34 34 46 40 00 00 05 50 f3 3a ee 78 a6 8f 6f f4 57 ca d7 5b e9 6e 34 12 3c f6 8b 35 55 c2 e9 4b 02 19 24 57 ad ca c5 4e ca 0e 77 08 3e ac 7b 6e 1d 73 b8 cc 43 a8 f5 6e fe 4e 01 bf fc 77 3d d7 a2 43 05 1b 25 23 30 b0 01 27 c7 40 3c b5 4c 1f 87 ad 02 34 05 05 34 95 b0 b4 15 15 15 0d 34 91 4e db de 35 6e 10 33 67 19 03 04 fe b8 f6 ea a4 ee 76 26 37 65 d7 4f 45 43 0d 13 70 a0 67 14 7f 3f 84 67 dc 1d 13 3a e8 bd 47 73 a9 23 74 bb 47 a3 18 c8 5f de 0c 12 47 bf 56 ba 3e 3a 73 1a b8 ae 97 9f 38 91 c9 11 51 66 a6 fd 9f 25 33 d0 6d a9 49 01 86 af 7e 00 5f e6 57 1e 1b f0 7d ba b6 61 7e 7c e1 df 49 dc 57 91 1c 97 3c 26 66 43 19 Data Ascii: \5--WiXdP>~n"*?O'<144F@P:xoW[n4<5UK$WNw>{nsCnNw=C%#0'@<L444N5n3gv&7eOECpg?g:Gs#tG_GV>:s8Qf%3mI~_W}a~\|IW<&fC
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 83 f4 bd 90 75 c6 d0 c4 ec 61 82 a7 24 7e 7e dd 2f 23 6d 37 1b a9 51 9b 32 cd 55 86 56 25 b0 23 54 f7 72 46 01 fc 7f ed d4 b9 23 a3 63 6e 3d ca b4 6f b1 5c 78 77 a9 14 f1 54 58 ae 42 a6 24 e5 5f 0e 8c 38 e0 e0 82 3f a1 e8 b1 9c b4 e6 ea 12 d2 83 64 15 ab 7b 19 dc 63 43 6d 7b 9d 1c 7f 33 66 8c 88 ae 56 a2 09 96 91 4f 89 22 3e f1 fb ed f6 39 f1 ef 58 16 bc 58 52 5c d2 34 3b 27 7d e2 8e 99 9a 86 6a 69 12 7a 59 99 67 8b 2d f4 14 61 9d e0 9e 07 1f db 1d 6c 6a 09 40 b2 c2 1a 76 b4 bb ba 27 f8 a6 39 f5 44 2a cb 4b 3c 4f 4b 69 5f e6 34 fb b1 34 d8 ff 00 34 c4 0c 67 18 45 5f f3 75 88 80 26 ce bc bf 29 a7 3c b4 53 4d 73 fc 24 8e af a0 96 8a 3a 88 a5 59 52 36 20 6c 03 22 41 b8 e3 23 f5 ea 81 68 22 d4 e6 ba 9d 49 7a 69 60 78 ce d2 00 65 db b4 9c e4 03 cf 23 df a4 5e Data Ascii: ua$~~/#m7Q2UV%#TrF#cn=o\xwTXB$_8?d{cCm{3fVO">9XXR\4;'}jizYg-alj@v'9D*K<OKi_444gE_u&)<SMs$:YR6 l"A#h"Izi`xe#^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	49987	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:22 UTC	403	OUT	GET /steam/apps/230410/capsule_231x87.jpg?t=1711638801 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 11929 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "660434cf-2e99" Expires: Thu, 11 Apr 2024 15:13:27 GMT Last-Modified: Wed, 27 Mar 2024 15:01:35 GMT CF-Cache-Status: HIT Age: 115476 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c65d1174c6-MIA
2024-04-05 23:18:22 UTC	928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 03 02 00 01 09 ff c4 00 40 10 00 02 01 03 03 02 05 02 03 06 04 04 05 05 00 00 01 02 03 04 05 11 06 12 21 00 07 08 13 31 41 51 22 61 14 32 71 15 16 23 42 81 Data Ascii: JFIFCCW@!1AQ"a2q#B
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: e1 52 79 66 f5 c2 28 39 27 e3 27 a9 c2 55 93 29 d5 da 52 de d2 d5 6c 5b 6c 96 da 7b a5 ed eb e2 2f 0a 3d 38 a6 fa 83 b2 fa 65 ce 78 07 04 7a 30 ea 41 98 12 45 6f 29 38 48 00 93 b4 a0 ae b9 57 7e 29 16 6b 44 0c 63 5c 49 02 d5 1e 7f fa 88 24 12 3e df d4 75 c2 ce d3 ca a8 06 c6 43 9e 9f f6 bb 10 64 fc 34 f8 c0 86 a1 41 5c 7f 85 08 fa 4f e8 76 92 78 00 f4 a2 36 ae 23 14 57 10 6e 6a 69 32 cf 51 33 4d 29 e0 2e 3e 84 fb 7f f1 d4 c0 1e d1 d6 24 65 a7 c1 0a a3 2c c4 01 9f 73 d1 d4 e8 da 45 92 12 59 0e df a5 89 2a 7d 88 e4 67 fb 1e 97 7c c3 13 a5 34 45 95 b2 7d 09 3c fa fa f4 53 93 b4 71 17 c9 f4 03 dc fa 74 42 72 4e a2 a4 dc 09 94 ed 51 e8 47 bf 46 ab 66 29 8d 49 6f 71 8a 98 62 9e 30 a4 71 b9 b9 3d 34 10 a2 2b 49 3c ce f4 75 ed e6 e2 69 36 07 52 a5 be 38 e8 cf 1b Data Ascii: Ryf(9''U)Rl[l{/=8exz0AEo)8HW~)kDc\I$>uCd4A\Ovx6#Wnji2Q3M).>$e,sEY*}g\|4E}<SqtBrNQGFf)Ioqb0q=4+I<ui6R8
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: fc 81 d7 48 ae 26 56 41 91 ac 9f ee 05 6a db fd 5e 93 59 a0 a3 92 6a 4a 2a 92 ab 52 23 7c 2c 35 86 51 13 c2 c0 70 a8 48 0c 49 18 01 41 5c ee e9 25 45 dd 7c a0 f8 5c 81 fd 07 a4 9b da 9d 13 a3 ee bd ae d5 f7 fa 4b 55 33 ea 2a 4a 89 a6 92 e3 08 fa f0 3f 8a a3 00 e3 f2 1d 9c 7c 1f 7e a5 70 06 45 03 83 34 3c cc 95 91 8d 82 b5 5f 2f cb 99 b7 5a 77 46 a6 d3 a7 a7 d3 f6 f7 96 4b 9a c6 69 ea a9 a9 24 92 29 e9 80 0b 22 ce fb 41 f3 63 01 83 16 fa 58 16 23 24 64 75 03 b6 9b 07 a4 fa 1c 4b ac 07 1d 67 be c4 f7 1d ac 15 77 dd 35 1b bd 7d 4e a1 b2 4d 43 4d 31 28 a9 1c b9 c2 6f 0b e8 a1 4c 8d 91 fa 0c 9e 9f fa 6e 61 95 98 11 d8 cc 2f d7 3c 1b 52 e4 53 ed fb c7 2d eb 5f 5e 1a 25 8e 7a f6 12 2c 0b 03 24 47 09 80 31 c0 e0 7d fd 3a fa 70 c1 05 4c 4c 5e 13 19 e4 45 85 d6 e0 Data Ascii: H&VAj^YjJR#\|,5QpHIA\%E\|\KU3J?\|~pE4<_/ZwFKi$)"AcX#$duKgw5}NMCM1(oLna/<RS-_^%z,$G1}:pLL^E
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 86 3d 24 98 29 2b aa 74 f5 82 f9 3d 14 b0 c7 70 81 92 49 59 19 56 56 43 b3 cc 53 e8 73 b4 67 3c e7 90 7d 7a af 1b e8 7a 3c 18 b7 4d 69 ee 24 aa 1a 29 aa 24 fc 3c 48 d2 4b 21 c2 aa 0c 9f d0 0e b4 8c 80 6d 28 ea 6c cd 55 ad 51 23 90 11 43 1a ac ac 87 2b 9d d9 29 9f b1 6c 1f b8 3f 1d 45 85 bc e6 2c 38 e9 ef ff 00 bf d6 f2 bc 83 ca 4d 27 98 46 f4 05 5c 3a a9 28 0e 09 c7 a7 07 1f ed d5 65 68 c9 03 5c 02 9a 16 c3 2a e3 6e 79 3e e7 93 fd ba 9e 34 19 fb 0c 05 62 27 20 8c f1 d1 88 04 cf 71 65 01 c9 1c f4 c5 f7 8b 26 45 94 91 9d a4 f3 d1 4f 7c e4 6a 82 a4 ec 1c 2a fd 4c c3 e7 ff 00 7c 75 e2 6b 61 38 3b 99 f9 f8 90 23 11 aa e3 24 65 b3 9e 3a ee a3 55 04 0b 37 2d a8 24 53 b0 27 32 12 30 07 03 3d 30 30 20 54 51 07 73 19 7a 4f 4d 5d f5 ae a0 b3 e8 bd 2f 45 35 ee f9 58 Data Ascii: =$)+t=pIYVVCSsg<}zz<Mi$)$<HK!m(lUQ#C+)l?E,8M'F\:(eh\ny>4b' qe&EO\|jL\|uka8;#$e:U7-$S'20=00 TQszOM]/E5X
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: b7 48 57 cc ab 2d 3c 9c f1 14 a5 8a e0 8c 15 0c d8 fc df 58 23 cb 14 ae 66 c4 74 e4 fd e4 fe 52 e5 05 b1 fe d1 07 0d 05 d3 49 5e aa 6d 17 aa 1a ab 65 ce 94 84 96 92 b2 06 86 54 24 02 32 8c 01 19 04 1f b8 20 fa 1e b4 d1 c1 16 0c 81 94 83 47 68 45 5a ed 72 b3 55 d3 43 29 8e 49 20 64 05 78 3e 9d 38 92 54 88 b0 34 91 03 fb 6f 71 9e 6a 4a f8 5b ea c4 6a e7 fc aa 18 ae 4f f5 60 3a 9f 03 51 ae f2 8c c2 c4 bc 1b a5 52 e0 e4 9c 0e 7a ac 1b 90 d5 4b 9b 3c a2 3a 3a 84 7a 79 2a 49 51 e5 ac 55 5f 87 2a c0 f0 db f6 39 18 3f 00 1e 3d 47 5e b6 1b ac 1d 20 8a 30 26 fb ad ae 96 1a 99 41 d3 f7 39 63 89 40 6b a4 ae 24 a8 ab 6c a9 8c c8 aa c5 17 9f 31 59 c6 59 83 21 3c 8e a5 2f 91 49 b5 da 55 e4 e3 70 3d 42 75 ae d7 36 08 b5 3d a2 4b 55 d9 2e 11 54 52 08 ab aa 77 2a 2a 33 65 Data Ascii: HW-<X#ftRI^meT$2 GhEZrUC)I dx>8T4oqjJ[jO`:QRzK<::zyIQU_9?=G^ 0&A9c@k$l1YY!</IUp=Bu6=KU.TRw**3e
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: db 18 a8 6c 6e 8d 99 73 83 cf 3c 1c 83 82 08 ea dc 6f ac 6a 1c 49 1d 0a 9a 30 56 eb 4d 53 a4 2f f1 de 28 14 35 2d 48 2f 2c 2f 9d ab bb 21 95 c0 fe 56 f9 fe 52 7e 3a 53 02 0d 88 68 43 0d 26 1e d2 69 1a ba b8 a0 96 44 4b 24 53 2f 98 21 bc cf 1d 34 8a bf e3 da e4 16 4f 86 00 83 d3 53 3a d5 1e 62 5b 0b 74 e2 13 d9 b4 ce 9a 86 3c d5 ea 15 7c 20 6f 32 8a 9f 2a df 38 32 3a 31 ff 00 f0 c7 df a7 79 96 36 11 3e 59 1c 99 ce e3 a6 28 ee 27 cb d3 f7 28 ee 2e 7e 8f c2 57 46 29 a5 61 f2 a7 71 46 18 ff 00 38 6f f2 f4 1a af 99 ed 35 14 da ef b1 f6 ad 41 51 51 43 5d 6e 86 cb 77 2a 73 5f 1f f0 96 16 c7 05 f9 da e3 9e 73 ea 32 01 ce 0f 49 6c 78 f2 6e 63 d3 33 e3 f8 4f d2 01 f6 cf bb 37 7e da d6 ae 8d d5 25 85 25 ba 63 4d 24 f9 25 a9 54 93 82 48 c9 68 8e 41 56 00 fd 24 63 23 Data Ascii: lns<ojI0VMS/(5-H/,/!VR~:ShC&iDK$S/!4OS:b[t<\| o282:1y6>Y('(.~WF)aqF8o5AQQC]nws_s2Ilxnc3O7~%%cM$%THhAV$c#
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: bc 82 ac 3d 41 07 a6 2e 60 37 8b 38 2c 54 5f f7 86 4b 06 b4 4a 7b fe 9d ac 67 bf 5b 80 a3 b8 5a c4 64 cc f4 d8 25 66 0d c0 94 2e 42 90 06 76 e0 63 09 92 19 99 33 6f d4 7e 7f 10 f0 a3 e2 24 74 3f 9f cc 09 d0 1d eb ab d0 37 28 5b 68 aa b6 93 b6 a2 94 9c 89 17 d0 32 e7 d1 c7 f4 c8 00 13 e8 44 b8 72 9c 0d 63 71 1f 97 08 ce b4 79 9c 35 35 de 7d 43 5f 72 36 4a da ed 44 d5 99 9a a6 a1 60 63 53 32 92 58 46 e0 0c 85 51 8c 8f ca 48 27 d3 1d 77 26 42 e4 84 37 7c fb fd 84 e6 3c 61 05 be d5 c7 b7 dc c7 67 60 74 7c fa 27 41 46 2a 1e 9a 7d 65 af 2e 14 b4 d4 56 c1 54 15 a8 28 a3 de e2 69 d9 79 84 33 90 fb 7d 4a c3 e9 f5 0e 8b 12 14 a2 db 5f e7 de 0e 56 0f 74 2e b9 9a 9b c3 35 86 ab 4a 4f a9 f5 1d 5c 2f 09 d4 17 7a 69 e2 8e ac 6d 97 c8 50 d1 c6 24 1e c5 a3 db 29 5f 55 f3 Data Ascii: =A.`78,T_KJ{g[Zd%f.Bvc3o~$t?7([h2Drcqy55}C_r6JD`cS2XFQH'w&B7\|<ag`t\|'AF*}e.VT(iy3}J_Vt.5JO\/zimP$)_U
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 29 f5 82 46 3d 42 f4 43 68 31 10 da b7 1f 54 8f b5 47 f2 fa b1 fd 3a ee a9 ea 13 8d be eb 51 74 99 05 1c 72 fe d2 92 a7 fe 59 a0 24 cd b8 e0 2a 20 50 49 63 c7 03 e7 ae 82 7a 41 20 0b 26 6a 5d 0f e0 fa fd 59 a7 2a 2a 7b 8b 0d 0d 25 ee 5d b2 5b 6c 72 a4 92 56 b1 63 96 33 fe 1c 82 a4 8c 00 84 92 0b 7d 5b 71 cd b8 f0 6a 5d 4f 33 b2 78 a0 1b 4a 6f 18 57 6a 99 fb 7b 66 a6 b2 45 a2 2d 3d bf b5 b2 a4 35 f5 f4 75 30 9a 89 76 82 54 54 81 b6 48 51 8f 19 28 e4 e7 ea 6e 9c ad a5 eb 19 00 57 d6 2c 28 75 bc 96 4d f5 e0 77 a8 88 83 5f 7e e4 eb 8b 1e ae a0 8e 99 a4 33 1a f8 6d ae 03 ce c3 90 bb a2 fe 40 72 58 33 9c e7 0d 83 e9 d6 71 c8 cd ea 6f 9c d4 08 a0 14 5d fa 43 75 f1 35 78 ac d5 96 8b ed ee 9e 3b 35 12 a8 b7 18 28 dd a5 82 df 49 23 12 d5 2c 84 e6 6a 8f 38 ac ae c7 Data Ascii: )F=BCh1TG:QtrY$* PIczA &j]Y**{%][lrVc3}[qj]O3xJoWj{fE-=5u0vTTHQ(nW,(uMw_~3m@rX3qo]Cu5x;5(I#,j8
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 24 7c f2 ce c7 80 07 ff 00 c1 93 c7 46 a8 5b 65 80 ce 10 5b 4d a1 d9 dd 0b a6 7b 3b 55 0c 1a 52 b6 92 e7 a9 c3 b5 3d 7e b0 99 95 1e 29 4a e5 a0 a2 0f f4 c2 8a a7 0f 31 cb 92 c5 46 3d 06 96 2c 23 15 96 3f 9f 9f 9d b1 b3 e6 6c db 05 db f3 73 fe 7e 11 0e ec f8 a0 fd c6 9e a6 cf a6 2e b5 33 5c 03 15 a9 ac a0 9c c4 ec 79 0c 86 6e 58 83 cf 2a 41 e7 20 83 cf 48 cb 9b 55 86 e3 b7 fb fe 4a 30 60 23 7e bd ff 00 c1 fe cc e9 7b ef 15 fa e7 18 14 f5 62 dc cf 93 2a 51 46 a9 bc fc b4 84 19 1c fc 97 76 cf ae 7a 97 50 03 d3 b4 d0 09 bd b6 ff 00 39 06 c5 ad 6a ad ae 6a 6a 6d 94 b5 91 96 c3 39 53 1c 85 be 77 29 1f fe ba f5 86 d9 87 ed b4 2a 23 e1 30 82 fa d1 d5 19 de db 3d 44 36 f9 22 66 64 9e 41 26 e2 47 2b f4 fb 93 9e 4e 3e fd 20 63 0a e7 5d 6d c7 fd 46 ea 2c a3 4f 5f c3 Data Ascii: $\|F[e[M{;UR=~)J1F=,#?ls~.3\ynXA HUJ0`#~{bQFvzP9jjjm9Sw)*#0=D6"fdA&G+N> c]mF,O_
2024-04-05 23:18:22 UTC	49	IN	Data Raw: 63 e6 c2 19 a0 64 d6 f6 a1 21 5e 32 8c ac 01 24 83 cf 59 a3 0e 96 bb 9b 9e 60 23 88 33 5d 0b c7 51 28 94 61 c3 1c e0 fb f4 3d 37 95 21 db 69 ff d9 Data Ascii: cd!^2$Y`#3]Q(a=7!i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	49989	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:22 UTC	646	OUT	GET /steam/apps/1086940/capsule_231x87.jpg?t=1711532262 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 16505 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "656ef0e8-4079" Expires: Wed, 10 Apr 2024 09:37:48 GMT Last-Modified: Tue, 05 Dec 2023 09:44:08 GMT CF-Cache-Status: HIT Age: 221910 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c938c65d0e-MIA
2024-04-05 23:18:22 UTC	928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 03 02 01 00 09 ff c4 00 41 10 00 02 01 03 03 03 02 04 04 03 06 03 07 05 00 00 01 02 03 04 05 11 06 12 21 00 07 31 13 41 14 22 51 61 08 23 32 71 15 42 81 16 Data Ascii: JFIFCCWA!1A"Qa#2qB
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 8c ea 2b 5a 57 d3 7c 9c 3b c1 21 85 f6 e3 ce 23 2a c7 ff 00 99 43 6a c1 b7 e2 eb b6 56 cb cf df e2 0d 39 7e f5 9b be 12 9b b4 2a 7b 23 a1 5e 62 20 7f d5 49 a3 0b 27 69 67 b9 42 f5 6e c7 6c 6d 9f 86 58 19 a4 38 27 0a 40 fa f9 e3 db ab 24 f0 f4 10 56 b3 1e 15 11 71 c6 c3 47 b3 40 92 79 ce 07 8f a5 45 97 b4 b5 f5 34 93 d6 b8 14 b1 44 4e f4 74 2b 81 9e 15 7e a7 fd ba da 6c 12 a1 93 f0 ac 87 1c 65 0b 0d 03 24 ed f7 34 b6 bd d8 5e 96 47 c2 34 4b b8 ed 0f ee 3e dd 4e 5d 59 14 f7 93 b5 54 31 72 16 04 99 34 33 3a b4 2c 41 23 8f 3d 22 5b 45 39 a6 69 50 55 48 a3 a8 8d 54 6f e4 e7 cf d3 ad 69 8a d6 b4 93 b5 5c d1 de 12 16 11 85 f5 17 c0 f9 ba 2d 0b 8c 50 dd 99 39 ab 89 c7 af 4c 0a c4 49 c0 e0 f4 42 86 a1 8a d4 85 04 aa 09 aa 5a fa 25 4c b1 05 7e a3 a0 1c 68 83 34 c5 Data Ascii: +ZW\|;!#CjV9~{#^b I'igBnlmX8'@$VqG@yE4DNt+~le$4^G4K>N]YT1r43:,A#="[E9iPUHToi\-P9LIBZ%L~h4
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 20 62 b6 5b 28 28 c1 a0 3b ad 1d 6e 9f d5 17 2b 45 58 29 51 47 30 57 c0 c6 32 01 ff 00 d7 a9 2e 1d 75 fa a6 12 e8 3b d5 6d fd a8 b6 75 4d 9e 54 ed ec dd c6 09 68 6a 22 95 0c b5 08 c0 33 60 6d 0a 7c 67 3e f9 ea b6 cd c8 04 73 fa 54 2f 15 42 b0 41 c5 35 6b 22 82 d1 14 92 48 85 54 8d ea 00 f3 91 e0 f4 d3 09 ef 72 a4 4d 12 ae e8 de 96 da da ae 19 17 e6 60 27 90 06 01 4e 78 fa 7d ba 0d d2 79 d3 8b 7c ed 49 ab c5 41 82 a9 a3 24 b1 c9 c7 3d 2c 59 d2 62 9e 34 35 09 aa 0a aa 89 6b ea 0c 0a a0 e3 df a1 14 a2 b3 14 62 50 10 35 54 a7 b5 bf c1 46 91 86 69 5c 65 51 47 27 ec 3a f5 50 da 0a 96 60 57 ad ea 71 70 91 26 a8 a5 8d ed b5 4c 93 fe 44 cb c3 46 c7 0c bf 62 3c 83 f6 3d 04 d3 cd 3d de 6d 52 3c 36 f7 f3 f4 a6 4e 30 e3 5d d7 13 07 a1 de b5 e5 ce 31 4b 45 cf eb 2b c9 Data Ascii: b[((;n+EX)QG0W2.u;muMThj"3`m\|g>sT/BA5k"HTrM`'Nx}y\|IA$=,Yb45kbP5TFi\eQG':P`Wqp&LDFb<==mR<6N0]1KE+
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 43 02 48 5d a4 0d d9 08 f8 f7 b4 2e ad b3 67 68 da 92 55 82 bd 3b 03 bc 01 93 e7 cb 94 d3 1e 09 c0 90 d3 82 f2 e9 40 84 e4 24 1c 9f a4 78 73 e7 43 1d f0 b7 69 99 bb a9 49 70 d2 97 86 be 69 ab a5 b6 9a 35 aa a0 55 dc 27 a6 89 69 a6 52 ae c0 fc cd 10 90 16 23 2b 2a 9c fb 9d 7e cd b8 bf d3 16 1c 4c 29 27 69 19 04 92 0f ae 6b 77 1c 48 ed 7b 72 70 af a7 d8 45 1d f6 56 cd 63 bd 94 b5 50 dd e0 7b b3 48 f1 ad ae b9 4d 3d 46 e0 a5 b8 8d b9 94 e0 1f f9 7b bd b1 9c 8c d1 8e 3f 6b 66 54 9b 84 29 24 6f 89 8f 71 98 f1 a9 7b 8e 05 77 7a 03 96 ea 4a 92 76 33 1e 99 14 d1 d5 7a 53 50 53 e9 4a ed 48 d5 f6 1f e0 4a cb 1c 95 af 72 8c a9 ff 00 09 51 93 c9 e3 e5 19 6f b7 42 2b db 9e 1c 7b b6 e9 52 cf 80 1f 53 59 b1 ec 45 ec c3 ca 4a 3c e7 e8 29 1b a8 2d 94 74 13 35 ea e5 ac 6d Data Ascii: CH].ghU;@$xsCiIpi5U'iR#+*~L)'ikwH{rpEVcP{HM=F{?kfT)$oq{wzJv3zSPSJHJrQoB+{RSYEJ<)-t5m
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 24 d6 67 ec df 6a 3b ab 78 7a 5d 4d a3 f5 65 fe 0d 57 13 89 e9 64 8a e3 33 bc f2 96 e1 5c 33 10 ca c7 86 dc 31 82 77 71 9e bb 25 ff 00 06 b4 b3 b0 72 e5 67 49 48 c1 1b 93 c8 79 93 88 ae 4b 61 ed 35 d5 d7 13 45 98 ef 24 98 20 ec 07 33 e9 bc d3 37 f1 fb 70 b6 eb 4e e2 e8 8d 29 6f 86 2d 47 ad 62 86 3a 0b b3 db e3 32 49 fc 42 4f 9a 4a 48 f6 e7 76 d7 65 22 30 4e c3 29 51 82 48 ea 3b d9 d7 54 8b 95 b4 55 2d e9 04 83 b0 51 27 6f 49 04 f3 81 d2 ad 38 db 09 36 88 78 0f f7 35 10 98 dc a4 0e 7f 08 f5 eb 48 3a 4f c3 fe a6 b1 eb 91 a6 ed 17 3b 25 5d ea b4 1a 0a cd 2b 16 a4 a2 8e be 55 7f 95 e9 fd 3f 58 12 e7 8f c9 27 71 20 02 bc 70 d3 8b 2a cc 82 a6 64 a8 6c 52 92 73 d3 1e ea 5f c3 3f 58 98 43 e9 84 f4 24 6d d7 3e fa 21 b5 e9 db ff 00 6e ed 1d cb d3 97 2a 3b 44 92 db Data Ascii: $gj;xz]MeWd3\31wq%rgIHyKa5E$ 37pN)o-Gb:2IBOJHve"0N)QH;TU-Q'oI86x5H:O;%]+U?X'q pdlRs_?XC$m>!n;D
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: a5 fe 82 af 3d bd d6 b6 cb c5 c2 71 45 4f 47 50 1d aa 66 07 6c 59 38 de 71 c9 c1 20 f1 f4 1d 56 59 96 dc 7d b4 ac c2 64 49 e9 9f a6 f5 01 7c c3 96 d6 8f 38 d8 3a c2 55 11 83 24 11 83 ca 76 a2 ff 00 c4 5e bf a6 d6 7a 29 ed d4 d5 d0 54 09 2e 31 c8 25 a6 90 94 aa 84 b1 70 f9 03 05 54 31 42 32 4e e8 f3 e0 8e ba 6f 1f e2 ad 3d 64 6c f5 ea 50 58 20 8d 94 82 37 f4 38 23 95 72 5f 67 38 09 b5 7d 37 61 1a 41 48 04 1d d2 a0 60 8f 50 35 03 cc 1e b4 b2 ed cf 6c a4 ee 46 a2 a8 a6 b7 81 05 54 2b b7 7d 53 94 33 b1 f0 4e d0 40 20 79 fa f0 7c e7 ae 58 e5 f3 6c 28 6b 04 cf 4a e8 eb b6 5e 93 a3 00 53 72 9f b4 95 1a 0f b7 fa b2 0d 53 eb 50 d4 d1 54 c3 35 be 9c 4a 1e 3a 89 9c 34 72 7a 64 0c 0c 06 89 dc 79 3b 50 9f 3d 57 f0 db 84 a9 b5 29 bd a4 6f 51 7c 41 2b 2f b6 98 cc 19 3e Data Ascii: =qEOGPflY8q VY}dI\|8:U$v^z)T.1%pT1B2No=dlPX 78#r_g8}7aAH`P5lFT+}S3N@ y\|Xl(kJ^SrSPT5J:4rzdy;P=W)oQ\|A+/>
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 3b 30 49 0a 74 f3 81 26 e1 37 4a 29 70 ad ac e4 f3 c8 d3 b9 99 19 c8 80 41 ce 73 48 b8 ea 6d ff 00 46 92 e2 02 1e c7 74 1d 84 66 7c cf 2f 95 06 4e d2 6d 8d 63 89 30 b9 c7 df ab d5 4f 2a e7 c8 00 cc 9a d2 5a 12 64 a5 f8 76 48 8c f5 0a 09 66 53 fc a7 db a0 ee 2e 5b 29 29 52 4f ba 8d b6 e1 b7 2b 5c b6 e2 63 ce 88 35 15 82 5d 41 53 4c eb 4d 3f a4 8e bb a0 85 32 f2 f3 ca 83 9f 27 c0 fd fa 8c b9 b9 69 00 f7 09 f4 ae a7 c1 f8 4d e1 10 a7 92 31 8e f0 df 94 d1 12 cd a2 35 4e a7 5b 34 35 f4 d6 8d 59 41 3d 4c 2b 5d 67 b5 7c 3d 15 cd 44 e4 6d 8e 14 38 09 4d bb d1 35 04 7e 61 0d 9c 85 07 a9 2b eb 94 1e ef 64 14 9f cf 77 9d 5f 70 74 dc 5a 24 97 0e b5 11 25 25 50 52 00 de 4c cc f4 e4 69 b7 a3 35 ad 1e 81 b2 dc 93 51 eb 8b 6a d1 51 20 ab a6 a8 28 86 4a 09 54 ed 2f b4 01 Data Ascii: ;0It&7J)pAsHmFtf\|/Nmc0O*ZdvHfS.[))RO+\c5]ASLM?2'iM15N[45YA=L+]g\|=Dm8M5~a+dw_ptZ$%%PRLi5QjQ (JT/
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 20 e8 6b 2b 75 5c 95 21 4a c7 41 8f 4a 3a f6 e5 36 e0 38 44 9e 5a 8c fa c5 5f 76 97 f0 f5 5b dd ad 55 51 66 8a f3 4d 60 b6 db ed d5 17 8b d5 fe e4 59 a9 a8 69 90 61 a4 90 06 0d 23 17 65 01 41 e4 96 27 80 73 b7 8c 06 ac 92 da 54 44 00 4c 79 46 c2 0f cb 78 03 26 87 e0 ce bd 78 b7 0a 41 2b 51 03 d4 cf 3c 7f 81 43 b7 1d 13 a5 e9 41 a3 d3 77 4a cd 49 6d 89 ca ff 00 15 ab b7 0a 24 98 ff 00 f8 a3 f5 1d b6 fd db 69 3f 4c 72 5c 70 d5 39 72 ce a7 9b d0 4e c2 64 c7 8f 4f 8d 28 e2 29 45 ab a5 2d 39 ae 37 20 18 9f 03 ce a5 db bb 4d 79 a8 a2 6b 95 05 92 e5 59 44 b9 06 78 69 24 92 15 c7 9f 98 02 07 45 b8 6d 2d d7 df 5a 52 a3 d4 80 68 14 7e aa e5 10 84 a9 40 74 04 d4 2a 4d 11 47 56 be b4 b4 a3 2a 7f 51 5f 7c ff 00 a7 4c 11 6e db 89 98 c5 02 bb 97 5a 25 33 14 4b 41 db 1b Data Ascii: k+u\!JAJ:68DZ_v[UQfM`Yia#eA'sTDLyFx&xA+Q<CAwJIm$i?Lr\p9rNdO()E-97 MykYDxi$Em-ZRh~@tMGVQ_\|LnZ%3KA
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 48 a4 0a 4c 8a a4 c8 63 50 37 22 48 63 6c ae 3a 81 bd b8 bb 65 de d9 c4 92 53 9d 30 04 81 9e e9 1f 5e bb 09 15 d4 2d 6d ed d6 c7 67 6c b0 50 ac 6a ce 09 c7 78 1f 84 7b f7 aa 3d 03 42 bd aa ec 26 b8 d6 74 b4 d6 d6 d7 d6 2b d2 da 29 2e 12 ac 55 c9 6a 58 d5 99 ea a0 46 ca 17 94 8d 91 c8 e8 76 94 62 bc f5 b6 f7 8d ae e4 b2 d3 48 ff 00 6d 69 4a a7 c1 53 18 e5 10 3d 4c 40 c1 a1 f8 67 05 43 2a 7d d7 d5 de 41 52 63 c5 31 23 c7 7c f8 41 ce 45 72 fc 34 6b fe e3 dc 1f bb 7a 86 e9 7d b9 6a 2a 0b 3e 8e ac b8 56 57 57 a8 ab 16 db 81 3f dc e4 57 90 30 49 32 ae 40 ff 00 00 63 b7 03 a0 5d 1a 5a d4 d2 7b da 92 07 94 81 3c b6 9d f7 f8 d3 74 2c 2d d0 87 20 8c 9f 0e b1 e5 1c bc aa a3 b5 5a cf 51 c7 f8 5d ee e5 ca 6d 57 76 a9 96 8a 1a 58 68 a8 de a0 bc 70 4b 2d 4f ad 24 e5 4f Data Ascii: HLcP7"Hcl:eS0^-mglPjx{=B&t+).UjXFvbHmiJS=L@gC}ARc1#\|AEr4kz}j>VWW?W0I2@c]Z{<t,- ZQ]mWvXhpK-O$O
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 4f f1 58 b0 d9 54 69 46 de 83 cf 39 51 e5 41 14 92 44 cd 1c b2 3c 8d ce ec 63 2c ef fd 7d bc e7 a0 db 50 10 7f 26 99 38 83 04 0f c1 50 ea e6 8b 26 3d c0 ae 32 a4 1c 92 49 3f e5 ef d6 0a 22 62 b2 48 31 22 b5 9f 64 7f 10 7a 2f b9 1d 84 b8 76 1f ba 17 63 a6 c7 a6 e2 c3 7e af c9 a5 a3 97 78 92 35 91 87 29 89 55 58 1c 63 69 91 49 19 07 a8 0b ab 1b 8b 4b b1 72 d2 64 05 48 f0 07 f7 24 e3 63 c8 e7 97 4a b8 61 e6 af 6d 8b 73 de 22 14 39 98 fd aa 1d 7c 45 43 bc 76 8b b9 5a 7e df 0c 34 fa 70 ea ba 62 36 d3 de b4 c3 2d ce 96 54 ce 33 ea 42 5b 66 78 38 7d a7 c7 1d 5d db f1 7b 67 1b 05 67 49 e8 77 fb 1f 42 6b 9e 5c 70 4b 96 9e 29 48 9f cf 1c fb ea d2 c9 a9 28 bf 0f 1a 62 fb 73 b9 4d 14 5d e3 b9 46 94 d6 7b 75 21 8e a2 7b 25 33 2b 2c 93 55 63 70 47 95 64 28 b0 e3 d4 fd Data Ascii: OXTiF9QAD<c,}P&8P&=2I?"bH1"dz/vc~x5)UXciIKrdH$cJams"9\|ECvZ~4pb6-T3B[fx8}]{ggIwBk\pK)H(bsM]F{u!{%3+,UcpGd(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	49988	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:22 UTC	645	OUT	GET /steam/apps/252490/capsule_231x87.jpg?t=1701938429 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 4628 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "5dbaf08e-1214" Expires: Wed, 03 Apr 2024 16:42:55 GMT Last-Modified: Thu, 31 Oct 2019 14:32:46 GMT CF-Cache-Status: HIT Age: 492642 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c93bd6dab1-MIA
2024-04-05 23:18:22 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 07 08 02 05 06 09 03 04 ff c4 00 56 10 00 00 04 04 03 03 02 0f 0a 0b 04 0b 00 00 00 00 00 01 02 03 04 05 06 11 07 12 21 08 31 41 18 d2 13 14 36 51 55 56 61 71 74 75 Data Ascii: JFIFHHCCWV!1A6QUVaqtu
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: b0 8d 44 9b 69 84 49 92 73 a0 94 65 7c da da e2 e0 44 d8 d9 82 90 d8 4f 58 c8 e4 ac 4d 1d 98 a2 62 ca 5d 53 ae 34 48 34 5d c3 45 88 88 ce fb 80 4d bc 83 e5 7d b6 c6 79 9a 79 c1 80 f9 07 ca bb 6d 8c f3 34 f3 83 00 e4 1f 2a ed b6 33 cc d1 ce 0c 03 90 7c ab 77 e1 6c 67 99 a3 9c 18 10 a4 8f 04 a1 a7 18 f7 15 87 a7 34 75 b8 66 5d 79 be 9e 26 48 d6 79 1b 35 91 e5 bd b5 b5 b7 88 a9 a8 b6 10 95 f1 ab a3 3c cd 1c e1 70 87 c8 3e 57 db 74 61 fe e6 8e 70 60 1c 84 65 7d b6 c6 79 9a 39 c1 81 f2 8d d8 62 57 09 08 fb c5 56 45 99 b6 da 97 6e 93 4f 02 bf eb 06 05 41 b8 83 22 01 89 ee 01 b3 a4 8f f2 ae 4a 7f f1 ac 7a c4 8e 2e af d1 ee 76 67 c1 db 6c 9f 58 e9 fb 74 7e e8 5b 11 ab 1f ab 40 08 97 1b 66 d3 59 24 7c b1 d8 09 84 54 1b 4f 36 b4 a9 2c 3a a4 91 a9 26 5a d8 bb 8a 1e Data Ascii: DiIse\|DOXMb]S4H4]EM}yym4*3\|wlg4uf]y&Hy5<p>Wtap`e}y9bWVEnOA"Jz.vglXt~[@fY$\|TO6,:&Z
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 9f 3f 86 26 38 f1 fa 36 4e c7 d4 6d 1b d1 b4 37 bf 8e ba 67 f0 45 73 33 1c b5 72 67 e1 c9 fa 3a 58 0a c9 89 1c 24 a2 0e a0 36 60 a7 11 a4 44 b6 98 2d 13 d6 52 ed f1 6f a7 ce 3a eb 9a 3a af d5 72 bd 36 66 8a 79 e7 f8 e9 7a 4d 3e d9 b7 a1 b7 a7 b1 b4 f1 45 fb 9c b1 1c dd 13 3d 19 f1 f8 3a f1 d3 bd 8b 47 5d 75 19 3c f0 27 7f 90 c7 37 45 e9 36 fa e3 c5 d2 ed bf 56 6a 7b 15 78 4b a4 d8 3b a8 3a 8f c6 45 ea 92 36 8c 3f 2b 27 5c 47 c3 e9 7e 27 52 71 74 f4 d1 e8 98 78 28 95 21 4b 5c 22 d2 97 0b 2a 89 45 63 52 54 5b cb ac 28 86 79 0a d0 9d 97 a8 bc e1 8f 62 18 12 f6 16 e1 84 b3 09 29 83 91 4a 62 22 e2 a1 0d f5 c4 67 8d 5a 54 e6 65 11 11 95 d2 94 95 bd e9 70 01 15 6d c3 f2 3d 05 e3 86 7d 53 c1 22 40 d9 e0 fe 04 e8 ef 00 4f a4 c2 04 13 b7 c6 8a a2 fb d1 7f 62 24 aa Data Ascii: ?&86Nm7gEs3rg:X$6`D-Ro::r6fyzM>E=:G]u<'7E6Vj{xK;:E6?+'\G~'Rqtx(!K\"*EcRT[(yb)Jb"gZTepm=}S"@Ob$
2024-04-05 23:18:22 UTC	961	IN	Data Raw: 0b b9 18 c6 45 aa 2c 33 a4 3b 55 92 6b ff 00 2f 67 9a 28 3d cc e9 0b f5 2d 24 bf 8b d9 e6 80 fa c3 61 f5 2f 05 10 d4 44 3d 37 28 62 21 a5 13 8d ba d4 0b 49 52 14 47 72 32 32 4d c8 c8 f8 80 da cc 23 0e 09 09 5d bd ef 13 3d c5 f3 ee fa 4c 8b ba 28 f3 63 1e 5c e8 d8 c7 57 2e d6 cd 1e e1 fa 06 03 83 24 82 bd 21 d9 c6 2c a2 30 6a 96 6e df 9b 83 4a 6e 5c 75 3f 9b eb bf 70 86 50 88 3b 6e d5 67 7a 8b d6 ff 00 eb df 61 fd 7f 91 09 22 aa 16 84 20 60 1d be 70 08 c0 7d a5 d1 cb 95 cc 61 63 10 94 ad 70 ee a1 e4 a5 5b 8c d2 64 64 47 f4 0f 9d ca 22 e5 15 51 3c f1 8e f7 27 4d 7e ad 2d fa 2f d3 19 9a 66 27 ba 72 90 7d de a7 65 fe c1 00 7f f6 af 9c 3a 0e 03 b1 ed 4f d3 c9 b0 7e dd eb fd d5 1f f2 fe c7 ca 06 7b d8 f9 7f f0 af 9c 31 e0 2d 3f b5 3f 4f 26 7f 6f 76 87 ba a3 ba Data Ascii: E,3;Uk/g(=-$a/D=7(b!IRGr22M#]=L(c\W.$!,0jnJn\u?pP;ngza" `p}acp[ddG"Q<'M~-/f'r}e:O~{1-??O&ov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	49992	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:22 UTC	646	OUT	GET /steam/apps/1172470/capsule_231x87.jpg?t=1708706824 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 9608 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "65baba39-2588" Expires: Wed, 03 Apr 2024 15:33:12 GMT Last-Modified: Wed, 31 Jan 2024 21:23:05 GMT CF-Cache-Status: HIT Age: 283276 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c94fba6db6-MIA
2024-04-05 23:18:22 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 02 03 06 07 08 09 00 01 05 04 0a ff c4 00 56 10 00 01 03 02 03 05 05 04 04 08 08 07 11 00 00 00 01 02 03 04 05 11 00 06 07 08 12 13 21 31 09 22 41 51 61 14 32 71 81 23 42 Data Ascii: JFIFCCWV!1"AQa2q#B
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 90 32 9c 0a ab fe ca 99 b3 dc 52 52 ab 02 a5 21 24 03 de 29 f8 58 1b df a6 2e a0 f1 4a 6b 3b 18 c8 71 d9 d0 25 57 5b 53 52 99 87 bb 00 77 0f 59 dd 06 03 f9 11 b9 7b f4 af 54 b2 16 ac d1 a5 4a c8 79 86 97 99 60 53 9d 10 df 72 9a 77 92 c2 ed 74 a4 dc 0f ab d0 f4 38 c4 04 9c 49 93 b7 9e d2 a6 ca 4d a4 d0 c6 08 00 40 e4 32 5c 8d 46 da 5b 4a 74 7f 30 22 87 9c f3 dd 23 2d 56 16 c2 65 26 14 c5 28 39 c2 51 50 4a bb a9 3c 89 4a be cc 04 ab 03 57 a3 25 6a f6 4d d7 68 2f ff 00 01 33 2c 3c cf 4c 65 e0 cd 46 5c 02 a2 96 b9 6f 06 89 50 1c d4 3f 55 fc f1 93 45 c2 93 4d 6d a3 01 cf 7f 4c d6 3d a0 3b 50 53 6e 6f 91 3b 80 f1 1e 71 80 e2 67 62 70 58 68 86 92 02 77 40 e4 00 e8 05 ce 31 80 80 ad 68 00 00 d1 80 fb 85 c9 a7 b6 6b 35 55 d4 54 2f 16 36 f3 31 01 e8 a3 d1 6e 7c fa Data Ascii: 2RR!$)X.Jk;q%W[SRwY{TJy`Srwt8IM@2\F[Jt0"#-Ve&(9QPJ<JW%jMh/3,<LeF\oP?UEMmL=;PSno;qgbpXhw@1hk5UT/61n\|
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 26 f7 aa 1d cd 07 2e 6e 38 0e 73 b0 a9 57 1d 80 d3 0d a1 b4 06 d0 94 25 29 4a 45 80 00 72 03 1a 14 c9 92 be 82 b1 ac a6 d0 c6 08 03 00 06 40 6c 01 53 77 6d 65 79 32 f6 85 c9 b4 84 2b 7b d8 32 ca 1d 5a 7f 35 4e c9 7f fd 48 4e 22 9a 8a da ab a6 af c0 7f 4b 58 2d a6 03 75 9c 9d 12 ac a7 dd e4 94 b4 5d 90 14 f2 bd 00 68 fc 6d eb 8c bb 43 5a dd 40 d3 3d d1 3e f5 ab dc 26 d2 7f 18 eb 43 48 1d b3 f5 67 6b 40 68 91 c2 41 8e 4a f9 b6 53 cc 0c 66 bd 9a 34 ba a5 0d b5 b7 19 cc b9 09 b6 d0 e3 9b eb 01 b6 92 dd 94 af 15 77 79 fa df 18 c1 6c ea 22 f6 d7 a4 8d 02 c8 97 ff 00 a4 df fe 57 b0 8a 6a 3f f6 26 0b ed 11 9d 7f f2 b2 ff 00 6c 8d 88 84 28 71 b4 90 b6 d1 1a a6 3f ef 55 57 f6 c7 70 ca 15 fd 6c b0 95 1d 98 74 86 c0 ff 00 c5 1a 57 ec ad e2 60 a4 a9 57 b4 9b fc 36 b5 Data Ascii: &.n8sW%)JEr@lSwmey2+{2Z5NHN"KX-u]hmCZ@=>&CHgk@hAJSf4wyl"Wj?&l(q?UWpltW`W6
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 1e a7 21 d7 72 55 b4 b7 38 62 cd 5b af 55 0f 33 8a 61 5a 01 d8 85 bc ef fd 98 f8 dc e0 44 15 af a5 3f 94 4a 7e 08 bf de 70 42 20 a2 9a 4a b7 4d de 5d b7 8f ba 00 f1 c1 08 00 ac 2d 03 c9 4b 71 7f e5 28 e0 44 20 86 5a 4f 44 0f 98 bf df 83 14 e1 69 93 b9 bf bb dd ef 1f 74 5b 04 20 05 0e cb 64 a1 58 ec 12 57 cd 00 44 a3 92 d9 37 c2 95 44 84 34 b6 47 8e 09 50 94 22 83 b8 af 86 09 c1 00 89 42 0d 9b 78 61 ca 81 29 c8 d1 2c 8e 73 16 61 fc 21 25 bd e8 30 08 59 de 1c 96 e7 d5 4f cb de 3f 01 e7 8c 4b 75 ab f0 96 52 1b e3 a9 80 e0 dd a7 ae 5f f1 77 37 a2 dd 18 ff 00 39 7b 7e 3a d0 d9 a1 67 82 77 39 fe ab 7a 78 8f 20 0f 89 48 d7 1b 3c 27 3a 7b a7 ee c6 89 2b db f2 9b dd 63 ce 07 2e 65 a4 c2 8c e6 ed 42 7a 78 48 b1 e6 84 5b be af b0 d8 7c 6f e1 8c bb be ca 6d b6 b0 d2 Data Ascii: !rU8b[U3aZD?J~pB JM]-Kq(D ZODit[ dXWD7D4GP"Bxa),sa!%0YO?KuR_w79{~:gw9zx H<':{+c.eBzxH[\|om
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 2a 44 4c 8f 36 05 15 ec c4 ed 5a 04 25 b8 d3 cb 5c 84 30 db 6b 8c 16 96 d2 a2 91 bf bc 82 9b 8e 5b a6 c4 e0 42 96 ba 3b d8 b7 96 72 b6 6e 85 58 cf 99 ed cc e3 4a 8a e2 5e 14 58 54 d3 0d b9 24 1b 84 ba e1 71 6a dc 3e 29 48 04 8f ac 30 e1 12 ac 3e 2d 55 a6 d5 22 3f 05 0c b5 0d 61 95 16 c8 08 40 dd 05 36 4f 95 8a 45 87 4c 01 25 41 bd a4 6f 36 fe db 1a a2 b6 9c 4b a8 32 e3 59 48 50 20 ff 00 23 63 c4 61 29 05 6d 3d 9a 9f e0 43 a5 ff 00 e6 66 fe df 23 13 6a ac e6 a4 b9 56 e8 24 de c3 9f 2c 49 56 4c 09 2a 38 6d 77 9f 97 a7 5a 05 aa 39 99 6b 2c 4a 66 8c b4 05 ab a2 1e 7f f9 3c 36 6c 7a d9 4e 97 08 f3 03 1c 8b c8 a5 40 06 ec c0 73 38 bd df 06 8e 0b 8c a0 c7 54 ae 5c 7d 52 0b bf f6 8e eb 78 86 37 13 fc 88 3b d5 1d ec f9 a4 6f eb b6 b2 65 5c 83 1e 51 84 ed 6e 51 8f Data Ascii: DL6Z%\0k[B;rnXJ^XT$qj>)H0>-U"?a@6OEL%Ao6K2YHP #ca)m=Cf#jV$,IVL8mwZ9k,Jf<6lzN@s8T\}Rx7;oe\QnQ
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 58 89 4c 8c 84 87 a4 ab 73 78 81 dd 16 25 4a 3e 80 73 c6 3d a2 b3 2c f4 5d 59 d9 0f 7e e1 d4 ae 6e e3 b9 ed 57 e5 e1 46 ef b3 78 aa 18 9d 80 66 5c 78 01 8a 97 14 5a 04 4a 25 2a 2d 3e 2b 09 44 78 ed 86 d0 2d cc fa 9f 53 d4 fc 71 d7 e5 ee 73 8b de 7b c7 12 be 86 dd d6 0b 3d d7 63 a5 61 b2 88 a7 4c 00 3a 6d 3c 49 c4 9d a4 94 5e 60 a8 42 cb 94 69 75 39 48 01 98 e8 de 29 04 82 a3 d0 24 7a 93 61 f3 c6 45 9a 8b ed 35 5b 45 99 9f b2 7a 05 8d 7c 5e 96 6b 92 c1 56 f0 b5 1e e5 31 3c 49 c8 01 c4 98 03 89 4c ee 93 65 c7 f3 a6 6a a8 e6 ea a2 77 d2 cb 8a 2d 8b 9b 17 ad ca de 88 4d ad f2 f2 c7 39 7b d6 65 3a 6d b1 51 ca 3f f9 f9 b8 e2 7a af 39 7a 3a ba ad 3a 49 7d d7 d2 ab cf 10 c7 4b 77 1a 87 28 e1 4d b0 06 e3 ab 19 25 8e bb e9 7d 53 56 34 93 31 65 2a 3d 5d aa 24 ba bc Data Ascii: XLsx%J>s=,]Y~nWFxf\xZJ%->+Dx-Sqs{=caL:m<I^`Biu9H)$zaE5[Ez\|^kV1<ILejw-M9{e:mQ?z9z::I}Kw(M%}SV41e=]$
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 5b 17 7b 28 66 cd 54 d4 4d b1 b5 52 85 13 51 19 a1 e9 f6 9f ca a3 85 e5 a1 41 8f 21 75 26 e5 c1 0f 2d 26 51 21 c6 ac b0 a3 71 bd ef 5b 95 b9 83 34 6c 4d 2e d5 bb 67 67 ed 25 d4 9d 6e c9 f4 0a c4 58 52 68 d9 52 95 5d cb 8b 7a 13 4e 70 1d 32 d8 44 c4 f7 87 d2 15 b4 fa 94 02 af bb c3 24 5b c4 28 01 2e 36 e8 d6 4d 4c d3 9c c5 95 a9 3a 73 9c 19 ca 29 5e 56 cc 79 92 7a 9d a4 b1 3c c8 fc 1d 19 0f a1 af a5 1d c0 be fa 37 87 4d eb d8 da d8 91 1b 4a 84 18 18 66 bd fa 93 aa da 87 33 47 f6 73 6f 27 e6 88 b9 2b 32 6a 3c ba 7b 15 0a d8 a4 35 3c 32 a7 e9 cb 92 e1 43 0e 10 93 77 00 f1 16 1e 38 1c e2 fc 5c a4 d6 b5 a0 35 a2 00 c0 72 4f 36 91 d3 35 3d 59 2b 25 48 d4 4a ec 36 33 64 56 1c 4e 61 83 4e 8c db 91 a7 2c a9 61 b2 95 80 38 64 27 86 a3 b8 2c 4d c5 ad 80 04 27 32 33 Data Ascii: [{(fTMRQA!u&-&Q!q[4lM.gg%nXRhR]zNp2D$[(.6ML:s)^Vyz<7MJf3Gso'+2j<{5<2Cw8\5rO65=Y+%HJ63dVNaN,a8d',M'23
2024-04-05 23:18:22 UTC	465	IN	Data Raw: 20 81 c8 7e fc 71 10 bb 0c 19 c0 28 ff 00 99 aa 8f 6a fe a9 46 a2 c6 5b 8d 52 62 29 6c 82 6c 08 42 0f d3 b9 6b fb c4 80 91 e8 01 f3 c6 f3 67 a6 db aa c0 6b bc 77 cc 1e a7 c2 39 0c ca f3 c5 f9 4a ae 99 e9 03 2c 0d 31 46 99 20 1e 03 f5 1d 07 69 8d 51 c0 03 bd 48 28 86 3c 18 ac c6 8e c1 69 86 50 1b 6d b4 81 64 a4 0b 00 39 f9 0c 68 ee 2e 79 2e 71 92 57 a1 28 d2 a7 67 a4 da 34 5b 0d 68 00 0d c0 60 02 31 72 87 09 76 42 fd d3 e5 fb f1 08 56 ce 08 4d 49 fa 34 fd 1a fa 0f 2f df 82 13 05 0c 3e 4f e4 95 f6 8f df 82 11 28 2b 75 45 0a fa 25 74 3e 23 00 08 41 6d c5 f0 d3 f4 47 dd 1e 23 0e 11 28 45 e7 2d fc d2 bf ac 30 42 24 a0 29 e7 37 4d db 57 f5 86 18 09 49 45 36 eb bc 14 8e 12 ad ba 39 6f 0c 38 0a 33 82 df 19 db 5b 84 ab 79 6f 0c 10 89 28 a7 5d 78 a4 23 75 4d a2 fb Data Ascii: ~q(jF[Rb)llBkgkw9J,1F iQH(<iPmd9h.y.qW(g4[h`1rvBVMI4/>O(+uE%t>#AmG#(E-0B$)7MWIE69o83[yo(]x#uM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	49991	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:22 UTC	646	OUT	GET /steam/apps/2519060/capsule_231x87.jpg?t=1712178634 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/jpeg Content-Length: 9277 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "64d26f5f-243d" Expires: Wed, 10 Apr 2024 21:11:15 GMT Last-Modified: Tue, 08 Aug 2023 16:37:51 GMT CF-Cache-Status: HIT Age: 180425 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c938322886-MIA
2024-04-05 23:18:22 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 00 04 06 07 02 03 08 01 09 ff c4 00 42 10 00 01 03 02 05 02 04 03 04 06 08 06 03 00 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 22 41 51 14 32 71 15 61 81 91 23 36 Data Ascii: JFIFCCWB!1"AQ2qa#6
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: d0 b3 72 54 45 f1 ad 89 72 32 80 71 17 a9 a5 de 7f b3 f8 47 02 7b a2 6c 81 a7 95 bc d6 6c 92 45 fe e8 28 f5 52 bb 4e 4a 94 96 81 74 fb 81 c6 2c e1 c7 98 ea ed 16 93 c4 78 c7 0e 69 2d 88 73 28 9c c9 6d 4b 51 f2 14 ab 17 11 b1 cc 1b ae 6f 95 95 16 49 da 8a 15 25 9d a7 13 18 e5 ad e4 45 49 b0 48 bf 38 76 d4 0e 5d 75 58 91 85 26 d2 4f 6c 61 64 2f 70 94 b4 b0 21 7b e9 81 65 4f 1a e9 fb 54 a4 44 a3 4a 6b 4d b3 73 b1 ab 45 29 a5 bc 8a 0c a2 89 e5 4d a9 c4 86 0f 87 67 6e 84 a9 63 6d ee 94 93 d8 5f 0a 09 b2 b5 54 74 17 53 69 12 19 8f 3f 4e b3 64 27 de a8 37 49 69 a9 14 39 4d a9 c9 ab 6c 3a dc 64 82 d8 25 e5 36 42 c3 63 cc 52 41 02 dc e3 29 2a 32 d6 55 ad 3f 99 93 96 da a3 cf 73 30 aa 5f d9 e9 a4 22 2a cc b3 27 7e cf 00 33 6d fe 26 ff 00 2e cb 5e fc 5a f8 10 a5 d5 Data Ascii: rTEr2qG{llE(RNJt,xi-s(mKQoI%EIH8v]uX&Olad/p!{eOTDJkMsE)Mgncm_TtSi?Nd'7Ii9Ml:d%6BcRA)2U?s0_"'~3m&.^Z
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 4a b7 17 e3 8b f3 8a e7 42 c1 0b 44 3e 6b 71 c6 e3 13 cf 9d 24 dc 45 c7 e8 93 a5 02 6b ae 9a 5f b9 13 79 a8 53 c0 6b 71 43 a5 a5 3c 1a 55 ae e2 4f 6e 7b 5e f6 c4 21 de c5 e2 3b 5d 5f 97 e8 b6 f1 2f 0f e2 35 0c 44 f3 72 97 72 9a b7 0d 80 bd 83 ae bf 15 1d a9 53 9b 86 d9 4b 63 cc 7b fa db 16 11 4a e7 9d 56 a9 9d 85 1e 34 74 c1 af 55 14 9e c7 98 f1 8b 88 9c b9 ce 64 3a a1 6a 45 95 6c 4b 05 6b af 6d 1a 4d 56 9b 61 e0 ab dc 15 89 d3 86 5a a6 67 0e a0 34 ca 83 59 8a 99 f4 9a a6 67 a5 c1 9b 15 64 84 bc c3 92 da 43 88 24 10 40 29 51 1c 1b f3 81 22 b4 34 be 9e 75 4f d1 66 89 57 f4 e7 56 f2 d6 98 64 88 f9 7f 52 f2 3c 08 95 c4 aa 3b ce ad 52 18 5a 56 e1 4a 52 a5 ab 76 e4 34 f2 2d 6b ef 08 f7 e5 54 90 09 55 1f 40 dd 2d 69 61 d0 88 5a 85 ac 99 5d bc c4 ee 76 cd 10 f2 Data Ascii: JBD>kq$Ek_ySkqC<UOn{^!;]_/5DrrSKc{JV4tUd:jElKkmMVaZg4YgdC$@)Q"4uOfWVdR<;RZVJRv4-kTU@-iaZ]v
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 20 21 0e 36 e9 69 25 29 09 48 de b0 41 79 45 5c 28 13 95 80 a5 d9 b3 aa 97 8f 51 fa 93 a3 99 e3 44 ab b5 17 f5 1e 3d 3e 2a 32 ec 5a c4 5f 8a 27 e1 7c 35 25 6f 34 f7 86 94 29 03 7e f0 e0 28 00 ee f7 02 14 5f 36 d3 f4 57 a1 9c c9 94 f3 f5 73 a5 fc e1 94 aa 29 96 bf b2 6a 23 35 b5 3d b4 be 84 72 14 94 4c 71 20 ed 51 b0 58 e6 c6 d7 da 6c 2c 2b ae 80 9c f9 ab da 5f 9e e9 b9 e7 a7 2a cd 7b 2a ea 15 61 39 81 11 69 d9 ae 9a c2 4c 42 dc 53 18 29 7f 14 db 81 7f d5 9b 5a ad 6e 4d bb 5c 60 42 88 e9 f6 9c 64 fe 99 75 87 28 cd ca fd 27 e7 0a 26 76 ac 89 91 28 cf af 37 c5 92 c3 8a 4c 75 b8 f3 6a 5a a6 ad a4 2b c2 4b 84 05 d8 90 95 6d b9 18 10 a5 ac 64 bd 45 cf 5a 26 72 2e a5 74 ef 98 e6 97 f3 05 4f 30 c8 14 0c e5 4c 8c da 1d 95 51 97 2d 28 43 82 5a 56 52 91 2b 69 bd ae Data Ascii: !6i%)HAyE\(QD=>2Z_'\|5%o4)~(_6Ws)j#5=rLq QXl,+_{*a9iLBS)ZnM\`Bdu('&v(7LujZ+KmdEZ&r.tO0LQ-(CZVR+i
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 9b f1 0f 25 c9 cb 8e 95 00 1a 4a 82 de 2d 8b 79 52 40 b6 04 2e 8b d5 2d 55 d1 9d 14 d7 5d 2a a1 b3 ae d1 b2 35 3f 49 22 9a 63 f9 3c 65 b9 b3 84 c0 f3 29 43 9e 2c 96 bc 9b 8b 5b 39 da a2 95 ee 51 e4 90 04 29 36 50 d1 8a 0e 88 75 03 d4 45 65 2d 09 19 33 3e 64 f3 99 62 c6 86 e8 41 79 29 f1 be 3d b6 94 38 e1 4f 36 b0 47 09 12 5b c0 85 46 f4 19 52 d1 4c d7 99 33 95 7b 43 72 6d 5e 8d ab 59 7a 8c eb f4 aa 46 6c ae a9 f8 d5 14 2c 14 2c 02 9e d6 56 c4 92 7b 78 89 3d af 61 0a d1 a1 e4 2a 96 ab 74 33 a5 2c d5 f4 41 7a c5 57 4c f9 72 a6 50 0e 65 ff 00 e3 aa 80 f1 91 2c 38 e9 5a 96 92 ab 29 45 1e 19 37 1b af e9 81 0b 83 ba e6 d1 19 f9 05 ac b3 2d 8e 9e 9e d1 38 89 6a 4b 92 94 33 78 cc 09 9a 37 b0 84 a9 4a 0b 57 83 b1 4b 09 f4 dc 5d ff 00 97 02 17 23 60 42 ec ac 70 c5 Data Ascii: %J-yR@.-U]5?I"c<e)C,[9Q)6PuEe-3>dbAy)=8O6G[FRL3{Crm^YzFl,,V{x=at3,AzWLrPe,8Z)E7-8jK3x7JWK]#`Bp
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 03 ca 02 e1 49 1d 92 a5 73 7f 4b f3 6c 6d 50 bc b1 a7 98 d8 5e 66 ca c1 30 38 b6 f5 43 19 a9 54 72 78 5c c8 2e b3 11 d9 21 51 e6 53 1c 5a 24 34 e8 49 00 b6 eb 57 37 07 8b 5c 73 dc 1e 38 b0 06 c6 8a 99 cc 0e b6 b8 6d fb d0 a1 b9 9f 4d e5 bc d9 9f 45 8c bb 3a 02 e5 51 1b 0a 2f c5 58 f9 b6 a4 dc b8 df 37 0a 17 20 1b 1e d7 2b b0 13 6c 71 d9 df 6f 9f ea b7 69 ca f3 02 69 73 91 4c a0 d4 a6 b6 f2 93 69 50 a2 ad c4 20 a3 e7 07 68 37 3e 64 de dc f6 e3 0d 48 db a3 74 9f 6b c3 6d a5 1b aa bb 99 67 40 7a 32 2a 08 a6 b8 d0 0a 71 6b 92 5a 50 48 ee 08 ef cf 6b 5b 0d 35 83 73 a8 4e 17 f9 68 50 d5 e4 21 4f 8a 0b 70 1f 2b 71 09 09 54 86 ed e7 06 e7 69 04 81 7b 11 7b fa e1 c6 c8 1d bd 26 dc df 24 c6 6c 19 11 58 8e b7 0a 8c 94 95 b6 19 20 28 d8 dc a4 0f 53 7b 1e fc e1 12 00 Data Ascii: IsKlmP^f08CTrx\.!QSZ$4IW7\s8mME:Q/X7 +lqoiisLiP h7>dHtkmg@z2*qkZPHk[5sNhP!Op+qTi{{&$lX (S{
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 42 58 10 96 04 2e ca c7 0c 5f 54 d0 ea fb 4e bb 4f 71 0d a8 23 75 85 cf a7 3c 9c 58 e0 34 3a 76 82 b4 5e da 65 bf 07 82 cd 90 35 aa d3 d4 d2 87 51 61 3a f2 d3 11 a0 5a 7c b8 94 a1 9b 58 25 0a 17 b2 95 fe 7f fa c6 f0 43 45 bd 78 8b 33 2a 79 98 d8 a4 3e 16 dd 7b 2c d9 41 f3 a5 72 7e 5c ac d0 e9 ad 13 15 2d 36 5d 3b 13 e7 0a 58 28 2a fb cd af f9 e2 4c 31 b5 ed 73 8a ab 12 90 d2 d6 ec 6b e2 bb 17 41 d3 43 81 91 68 10 be c6 8f 2c 4d 43 2b 25 c4 24 95 29 c5 58 93 ba c0 90 ab 0b 1f 6c 54 49 66 57 73 2b e6 f8 21 6f 26 c8 2e a2 39 93 33 0b ab d3 9c da 96 28 b4 58 d3 5d 93 48 cf 0e ad 4c 86 e5 14 f9 da 50 17 09 17 f2 01 db 80 49 f5 c4 88 0b d9 ac 7b f9 26 72 59 1c 8c e6 90 68 6b f7 6b 9b f3 6e 41 ad 64 3c d4 aa 45 7c 31 22 9c b2 05 3e b5 11 3e 24 69 17 17 01 2b b6 Data Ascii: BX._TNOq#u<X4:v^e5Qa:Z\|X%CEx3y>{,Ar~\-6];X(L1skACh,MC+%$)XlTIfWs+!o&.93(X]HLPI{&rYhkknAd<E\|1">>$i+
2024-04-05 23:18:22 UTC	134	IN	Data Raw: 89 b1 0c dc 5d 2b 4a 8a 4a 7d 0f 03 9f e1 88 4f b2 75 5b 66 20 63 63 b1 a1 06 ab dc 35 fb 93 a8 eb f3 83 dc 61 a2 15 8c 6f 37 6b 34 8d ab 57 a7 37 e3 07 44 01 4e 29 8d 49 af 0d a0 38 00 24 70 3d f0 f4 46 ca ac cd 8f 91 9e ca 4d 23 30 16 a2 08 16 b6 1d 73 a9 57 c1 10 79 a2 99 a9 16 07 0f 82 ab 5c dd 13 37 d0 46 1f 69 55 53 34 85 a3 0e 28 89 60 42 58 10 96 04 25 81 09 60 42 58 10 96 04 25 81 0b ff d9 Data Ascii: ]+JJ}Ou[f cc5ao7k4W7DN)I8$p=FM#0sWy\7FiUS4(`BX%`BX%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	49990	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:22 UTC	630	OUT	GET /store/about/cta_hero_community.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:22 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:22 GMT Content-Type: image/png Content-Length: 31506 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-7b12" CF-Cache-Status: HIT Age: 5043 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41c93e52a54c-MIA
2024-04-05 23:18:22 UTC	1072	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 7a b4 49 44 41 54 78 da ec dd 7b 90 5c f7 95 d8 f7 73 1f fd 98 9e 37 30 78 10 24 88 01 49 81 14 49 89 a0 44 93 e2 3e 24 10 f2 be 5c 54 89 54 16 72 2a 71 15 c1 94 cb f1 16 fe 90 b8 f9 2b ce 56 51 aa 4a e2 4a b9 b2 a4 52 85 6c ca d9 14 21 27 4e d9 cb b2 49 ad 64 a7 1c 8b 20 a4 dd 98 84 44 49 43 91 82 48 4a 14 06 04 88 e7 0c e6 3d fd be 37 bf 73 ef ed 41 a3 d1 3d cf 7e f7 f7 23 5d de 9e 9e ee fb f8 75 4f f7 fd 1d 9c df f9 89 00 00 00 00 00 00 00 00 00 00 00 00 74 3b 8b 26 00 00 00 80 3a 7c e4 d8 88 59 dd 61 96 b1 b2 bb 0b 66 99 32 cb e4 c9 97 8f Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<zIDATx{\s70x$IID>$\TTr*q+VQJJRl!'NId DICHJ=7sA=~#]uOt;&:\|Yaf2
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: e3 66 39 25 e1 90 93 8d 1e e3 d9 e8 f9 87 cc ed 57 cc fa 5b d1 b9 97 1f f7 77 78 9b 00 40 4b 8c 49 f5 62 96 eb 1e 6e 61 1e bb 68 3e df 17 cd cd 81 b2 bb 07 b4 36 12 b3 28 01 00 36 82 a2 96 40 9d 99 8b 31 fd d7 ff d2 50 8d 60 56 0d 09 6b 27 3c 5f f6 b0 6f 6d e4 a2 4d a7 e9 8c 3a fa cf cb cd e3 7e eb 7d e1 57 be bd a3 66 39 6b f6 fb d4 06 b7 f1 5c d9 ed a7 ca ce bd 74 dc 27 d6 9a 96 14 00 d0 30 d5 a6 fa bc b0 89 ed 54 7b ce 6e 9a 17 00 b0 11 04 24 80 c6 78 56 6a 17 6d fc 66 59 b1 c7 35 1d 3e 72 ec eb 51 a7 7e bc 7c 1b 66 19 95 fa 0f 7d d8 1f 6d bb 14 98 d0 20 c2 2b e6 18 5e 5a ef 06 cc b9 69 30 a6 7c 56 8d 72 2f 9a df 3f cb db 03 00 9a 2f 9a dd 69 a0 e2 ee 45 cd 78 d8 e8 b6 cc 73 74 78 46 65 56 c5 ee 68 48 08 00 00 eb 62 d1 04 40 43 2f fe b4 d6 43 29 c3 40 Data Ascii: f9%W[wx@KIbnah>6(6@1P`Vk'<_omM:~}Wf9k\t'0T{n$xVjmfY5>rQ~\|f}m +^Zi0\|Vr/?/iExstxFeVhHb@C/C)@
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 3a c3 36 00 a0 b1 9f b9 bf 96 70 16 8e 5a 43 38 0e b6 cb 10 8e b2 21 1a f7 49 f5 7a 11 5a 90 f3 2d 73 4e 17 78 65 01 a0 f7 10 90 00 9a 7f 71 a6 ff 72 75 30 fa 71 a2 8b 66 a5 38 15 ad 47 cc 39 12 94 00 80 06 32 df 1d 53 da 91 97 ea 53 83 aa 71 9d 4e 33 1a e6 d1 aa ef bb 81 e8 fb 6e 77 8d 87 04 e7 60 ce 65 91 57 14 00 7a 13 01 09 a0 f9 0e 95 dd ee a6 19 29 ca cf e5 0b bc cc 00 d0 58 3a dd e7 1a 43 38 c6 cc f2 48 14 18 68 2a b3 4f dd f7 5a 43 34 de 65 88 06 00 f4 36 02 12 40 f3 95 77 d6 4f 75 d1 85 71 f9 d0 93 43 bc cc 00 d0 b4 cf 5f 1d c2 f1 9e 54 1f c2 91 94 30 28 31 d6 ac e3 89 86 8b ac 36 a5 27 43 34 00 00 01 02 12 40 f3 1d 2a bb 88 3c d5 65 e7 56 3a 9f 83 ed 58 54 0d 00 ba 55 34 4d a6 4e 0d da 0e c3 1f 6a 65 3d e8 2c 20 6f 32 44 03 00 50 42 40 02 68 a2 Data Ascii: :6pZC8!IzZ-sNxeqru0qf8G92SSqN3nw`eWz)X:C8HhOZC4e6@wOuqC_T0(16'C4@<eV:XTU4MNje=, o2DPB@h
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: a4 9f 68 d7 93 8c 02 08 cf d5 61 53 f5 da 0e 00 f4 32 ed d4 57 2b 36 39 22 b5 83 11 41 30 61 b3 c1 88 8a ef 84 c9 e8 bb af d6 f4 a0 03 35 8e 63 36 0a 6a 00 00 7a 98 43 13 00 f5 71 f6 cc 8f 33 fb 1f 78 f4 5f 4b 38 a7 fb f8 26 37 f3 a2 b9 40 7b b6 03 ce 75 c2 9c eb db d1 b9 6e 26 53 e2 94 59 fe a8 54 c5 1d 00 b0 e9 cf 63 cf 7c 1e 2f 9b 9b 3b d7 f9 14 cd 8a 38 63 9e 57 a8 f3 f7 9f 16 c4 8c cb fa 0a 55 ea be f5 18 72 bc 82 00 d0 db 2c 9a 00 a8 bf 55 52 58 57 33 d1 89 c3 17 74 aa 37 d9 58 50 62 82 61 1a 00 50 f7 cf 62 1d a2 a1 85 26 6b 0d c7 d5 0c 86 77 1b 9d 95 10 15 b4 bc af d5 c7 01 00 e8 0c 04 24 00 00 00 ba c0 e1 23 c7 34 08 a0 c5 23 47 a2 45 33 11 b4 e3 7f f9 e4 cb c7 2f 37 f9 38 34 40 32 56 71 1c 53 d1 b1 14 78 b5 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: haS2W+69"A0a5c6jzCq3x_K8&7@{un&SYTc\|/;8cWUr,URXW3t7XPbaPb&kw$#4#GE3/784@2VqSx
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 75 da 37 33 35 e8 48 59 21 c8 6a ea 52 1c 32 da 47 f9 7e 74 9b 4f 54 0c c9 38 65 1e f7 cd a8 cf 53 3a 17 0d 20 1c 95 30 58 51 da 56 e9 be b5 b6 75 42 c2 c0 45 e9 b1 a5 69 4e 9f e5 1d 53 7f 64 48 74 b1 a8 70 e5 2b 42 30 02 68 dc 87 68 30 54 83 ec 08 00 a8 37 df f7 1e 9f b9 7a 49 3b 19 83 0c df 00 ea 2f 2a ea 78 36 ea c8 d7 5a 6a 39 b8 c6 f3 ce d6 1a 36 b1 41 5f ab f8 f9 89 6a f5 21 a2 e0 c7 13 72 73 a6 c4 33 6b 6c eb e9 5a db 32 8b 06 1f 26 cb ee 66 d8 06 01 09 6c 82 06 23 c6 69 06 a0 31 28 64 09 00 8d a5 99 12 17 3e fc c5 7f 23 e1 bf c6 f2 81 0b d4 2f 18 a1 7d 84 97 a4 71 ff 70 19 d4 6a a8 31 6c 62 23 0e 95 dd 7e 75 b5 62 95 51 50 e2 44 d9 5d 95 01 91 f2 9f 27 d6 31 5d e8 37 cb cf 67 8d 8c 10 6c 12 1f ec 5d 6a df fd 8f 7d 5d d6 57 ac 05 c0 66 3f 40 09 46 Data Ascii: u735HY!jR2G~tOT8eS: 0XQVuBEiNSdHtp+B0hh0T7zI;/*x6Zj96A_j!rs3klZ2&fl#i1(d>#/}qpj1lb#~ubQPD]'1]7gl]j}]Wf?@F
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: af c3 69 02 00 3d fd 21 68 db 41 86 04 00 00 40 37 31 1d 64 2d ac b8 df 2c 27 68 8d 86 98 94 b0 78 e5 c3 a6 ad a9 dd b1 49 cc b2 01 a0 a7 91 1d 01 00 00 ba 95 e9 28 6b a7 f9 d9 c3 47 8e 69 c7 f9 90 84 d3 56 ee 93 d5 a7 07 ad 27 1d 42 f2 76 97 35 ab 0e 87 99 88 da 16 5b 44 40 02 40 cf 72 1c 82 11 00 00 a0 fb 45 b5 25 5e 15 66 e1 40 9b 61 c8 06 80 9e 44 21 4b 00 00 00 a0 b5 b8 1a 07 d0 9b 1f 7e 0c d5 00 00 00 00 5a 7b 4d 4e 13 00 e8 b9 0f 3e 0a 59 02 00 00 00 ad bf 2e a7 09 00 f4 dc 07 1f d9 11 00 00 00 40 eb af cb 69 02 00 3d f5 a1 47 30 02 00 00 00 68 8f 6b 73 9a 00 40 af d0 61 1a 3a 5c 03 00 00 00 40 eb 71 65 0e a0 77 3e f0 c8 8e 00 00 00 00 da e7 fa 9c 26 00 d0 0b 74 8a 4f 0a 59 02 00 00 00 ed 83 80 04 80 9e e0 38 7c dc 01 00 00 00 ed 84 2b 74 00 dd ff Data Ascii: i=!hA@71d-,'hxI(kGiV'Bv5[D@@rE%^f@aD!K~Z{MN>Y.@i=G0hks@a:\@qew>&tOY8\|+t
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 19 38 3e 60 f6 8d f6 d7 3f 38 22 fd 43 a3 e2 c6 e2 34 46 07 b1 82 1a 96 14 b2 04 80 7a 29 e4 73 92 4d 2f c9 e2 dc 75 1a 03 00 d0 b1 1a 1e 90 88 86 44 1c 68 f3 76 08 0a 5d 9a e5 7f e6 2d d1 9e 12 c9 94 ec b8 7d 3c 58 03 00 00 91 81 e1 6d 32 bc 7d 97 5c fb 78 52 72 d9 34 0d 02 00 e8 38 0d 1d b2 11 4d ef 79 b8 43 da e2 80 39 de 2f f2 96 68 3f 6e 2c 21 7b c6 ef 25 18 01 00 c0 2d df 91 71 d9 75 e7 dd 12 4f f4 d1 18 00 80 8e d3 e8 1a 12 9a 1d d1 49 bd c8 27 a3 7a 17 68 23 3b 6f 1f 17 9b d9 19 00 00 a8 7e 31 67 3b b2 fd b6 bd 34 04 00 a0 f3 be c3 1a b5 e1 28 3b a2 d3 8a 45 6a 30 82 2c 89 36 a2 d9 11 7d fd 83 34 04 00 00 ab d0 0c 89 64 6a 80 86 00 00 74 94 46 66 48 74 ea 74 9a cc b8 d1 46 62 71 8a 57 02 00 b0 1e 04 24 00 00 9d a6 91 01 89 87 3a b4 4d b6 fb be 7f Data Ascii: 8>`?8"C4Fz)sM/uDhv]-}<Xm2}\xRr48MyC9/h?n,!{%-quOI'zh#;o~1g;4(;Ej0,6}4djtFfHttFbqW$:M
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: fa 7f 22 37 67 1c c8 2a 9d fe a3 e6 39 1a 18 78 cd 2c 6f 34 3a 63 22 ca 88 d0 21 24 eb 9d b5 63 25 a3 83 6c 09 74 2b b2 23 00 00 00 00 b4 4a 5d 02 12 51 60 e1 c9 4d 3c 55 87 74 7c 55 c2 8c 84 b7 a5 ce d3 75 46 d3 87 ea 30 8c 83 72 f3 f0 91 8d 78 32 0a b6 fc 05 b3 78 a0 9b 10 8c 00 00 00 00 d0 4a 5b 0a 48 ac 73 88 c6 7a e8 76 34 70 f0 b8 d9 a6 76 fa 75 56 8d 0b 66 79 5f 36 30 9d 67 14 80 b8 c3 2c f7 4a 98 09 b1 bd 4e ed a4 db fa 1f cc f6 ff 9c 21 1c e8 06 3a 4c 83 69 3e 01 00 00 00 b4 d2 a6 03 12 51 30 e2 4f 25 1c da 50 4f ba dd 83 d1 f2 64 b4 2f 5d 7d b0 ca 73 b6 4b fd 82 0f ab 1d d7 9f 46 33 85 4c f0 d6 41 27 23 3b 02 00 00 00 40 ab 6d 2a 20 d1 c0 60 c4 6a 0e b4 41 7b e9 79 ff 89 39 ff 13 ad 28 c8 09 d4 03 85 2c 01 00 00 00 b4 45 df 64 a3 4f 68 51 30 a2 Data Ascii: "7g9x,o4:c"!$c%lt+#J]Q`M<Ut\|UuF0rx2xJ[Hszv4pvuVfy_60g,JN!:Li>Q0O%POd/]}sKF3LA'#;@m `jA{y9(,EdOhQ0
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 00 00 00 6b d1 e2 96 64 49 00 00 ea 89 80 04 00 00 00 d6 c5 71 98 06 14 00 50 3f 04 24 00 00 00 b0 4e 96 d8 36 41 09 00 40 7d 10 90 00 00 00 c0 fa 2f 1e 29 70 09 00 a8 d7 77 0a 4d 00 00 00 80 0d 5d 40 52 e0 12 00 50 8f ef 13 9a 00 00 00 00 1b 41 81 4b 00 40 3d 10 90 00 00 00 c0 c6 2f 22 a9 25 01 00 d8 ea 77 09 4d 00 00 00 80 8d d2 0c 09 86 6e 00 00 b6 82 6f 11 00 00 00 6c ee 42 92 2c 09 00 c0 56 be 47 68 02 00 00 00 6c 96 e3 10 94 00 00 6c 0e 01 09 00 00 00 6c 1a 05 2e 01 00 9b 45 40 02 00 00 00 5b bb a0 64 e8 06 00 60 33 df 1f 34 01 00 00 00 b6 82 02 97 00 80 cd e0 9b 03 00 00 00 5b bf a8 24 4b 02 00 b0 d1 ef 0e 9a 00 00 00 00 75 b9 b0 24 28 01 00 d8 c8 f7 06 4d 00 00 00 80 ba 5c 58 da 14 b8 04 00 6c e0 7b 83 26 00 00 00 40 dd 2e 2e c9 92 00 00 ac f7 3b Data Ascii: kdIqP?$N6A@}/)pwM]@RPAK@=/"%wMnolB,VGhlll.E@[d`34[$Ku$(M\Xl{&@..;
2024-04-05 23:18:22 UTC	1369	IN	Data Raw: 7e cc 95 c4 40 5f 90 35 11 33 db 1f db 96 96 5d 63 cb 32 36 9a 90 bb ee 48 c8 fc e2 55 59 ce fa f2 f1 b5 9c d9 e4 a5 20 db 22 36 bc 37 18 c6 41 60 02 00 01 09 00 0d d7 3f 34 4a 23 80 bf 03 f3 77 40 40 02 d8 44 a7 da d2 d9 1c c8 92 d8 98 30 ab a1 a8 33 67 e4 b3 52 cc 2d 4b 3c 66 cb d8 48 5c ee b9 33 21 03 fd b6 3c fe c8 76 d9 b9 2b 21 3b 77 26 24 31 34 28 76 2c 16 3d 35 ca 88 28 6d 67 e5 85 58 f9 cf cd bf d3 e2 97 ae 1b d4 fc 90 fe b8 c4 9c bc c4 f4 f5 32 dd 8a 54 5f 4c 3e 75 20 29 b3 0b 9e 64 b2 be 2c 2e 67 a5 50 f0 c5 c9 2d 89 38 09 b1 9c b8 79 1c 41 09 00 04 24 00 34 88 66 46 68 31 2c a0 d7 25 53 03 34 02 b0 49 5a 5c b1 50 60 1a d0 f5 c7 23 7c 91 42 46 b2 8b 33 b2 bc 30 13 04 23 76 6e 8b cb 1f 3c be 4d 9e fe c3 7e b9 7d b7 23 b7 1d d8 1b 04 21 74 f1 8b Data Ascii: ~@_53]c26HUY "67A`?4J#w@@D03gR-K<fH\3!<v+!;w&$14(v,=5(mgX2T_L>u )d,.gP-8yA$4fFh1,%S4IZ\P`#\|BF30#vn<M~}#!t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	49993	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:23 UTC	634	OUT	GET /store/about/cta_hero_community_pt1.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:23 UTC	296	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:23 GMT Content-Type: image/png Content-Length: 9460 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-24f4" CF-Cache-Status: HIT Age: 5044 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41cbf86f31dd-MIA
2024-04-05 23:18:23 UTC	1073	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 24 96 49 44 41 54 78 da ec dd 4f 8b 1b 57 9b 28 f0 72 62 06 2f bc e8 17 cc e0 45 20 32 78 61 48 60 3a 10 42 16 17 22 6b 37 ab b4 17 82 7b 57 6e ef 2e 68 91 f8 13 38 fe 04 6d 2f 1a ee ce 9d e5 d0 0b 77 be 40 5b 81 bb 78 21 81 b7 03 21 84 4b c0 1a f0 c2 0b c3 db 17 cc 8b 19 cc cc 9c 63 1d c5 65 b9 4a ff ba a4 56 95 7e 3f 38 48 5d 52 95 aa 8e 84 54 f5 f4 79 9e 93 65 00 00 00 00 00 00 00 00 4d 77 41 17 00 00 10 75 ba bd ad 70 f3 51 68 57 72 8b 5f 87 f6 22 b4 c1 f1 e1 fe 2b bd 04 40 55 04 24 00 00 88 c1 88 56 b8 69 4d 78 4a 0c 4c fc 71 7c b8 ff 5c Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<$IDATxOW(rb/E 2xaH`:B"k7{Wn.h8m/w@[x!!KceJV~?8H]RTyeMwAupQhWr_"+@U$ViMxJLq\|\
2024-04-05 23:18:23 UTC	1369	IN	Data Raw: 16 ff fb 3f 4a d5 78 33 ab 46 36 ac 9d 70 2f f7 b4 87 f3 9c b4 c5 69 3a d3 85 fe bd ec dd bc df aa 4f fc f2 db db 0d ed 69 78 dd 9d 39 b7 71 37 77 7f 27 77 ec a3 fd 3e 98 36 2d 29 00 4b 53 34 d5 e7 b3 05 b6 53 b4 ce 55 dd 0b c0 3c 04 24 60 39 ee 64 e5 45 1b ef e7 8a 3d 4e d5 e9 f6 be 4d 17 f5 ad fc 36 42 fb 4b 56 7d ea c3 b5 b4 ed 51 60 22 06 11 1e 87 7d 78 34 eb 06 c2 b1 c5 60 4c 7e 56 8d bc 07 e1 f1 3b 3e 1e 00 ab 97 66 77 ba 3c b6 f8 65 1c f1 30 ef b6 c2 3a 31 3d 63 7c 54 c5 d5 94 12 02 00 33 b9 a0 0b 60 a9 27 7f b1 d6 c3 68 84 41 bc 40 3f 0a 27 71 83 39 d6 8f 81 80 dd dc a2 7e 68 77 46 db 08 8f c7 40 45 7b 6c b5 59 6a 53 14 d6 a1 08 db bd 90 3b 69 dd 1b 7b ed b8 dd 9b f3 8e ec 48 fb 17 f7 b7 3f cf b1 03 f0 e7 77 e9 95 f4 bd 7d f9 8c 9b ba 94 5a de ef Data Ascii: ?Jx3F6p/i:Oix9q7w'w>6-)KS4SU<$`9dE=NM6BKV}Q`"}x4`L~V;>fw<e0:1=c\|T3`'hA@?'q9~hwF@E{lYjS;i{H?w}Z
2024-04-05 23:18:23 UTC	1369	IN	Data Raw: 02 12 b0 7a ed dc fd 26 cd 48 91 3f 96 af bc cd 00 cb 15 a7 fb 9c 92 c2 71 25 b4 cf 53 60 60 a5 c2 6b c6 d7 9e 96 a2 f1 ab 14 0d 80 cd 26 20 01 ab 97 bf 58 ef 37 e8 c4 38 9f 7a d2 f6 36 03 ac ec fb 37 a6 70 fc 9e 15 a7 70 5c ca 86 41 89 2b ab da 9f 94 2e 32 69 4a 4f 29 1a 00 bc 21 20 01 ab d7 ce 9d 44 f6 1b 76 6c a3 e3 d9 5e c7 a2 6a 00 4d 95 a6 c9 8c 53 83 ae 43 fa 43 d9 a8 87 38 0b c8 5f a5 68 00 30 22 20 01 2b 34 56 3f a2 df c0 43 fc 31 77 7f db 3b 0e b0 3a e9 42 ff a4 20 20 f0 3a d5 9c 58 95 a2 d7 7a 19 f6 e1 44 8a 06 00 79 02 12 b0 5a db 25 17 ef 4d 71 92 bb df f6 76 03 ac 5c 4c d1 b8 38 43 80 60 69 62 6d 8b 6c 38 7b 46 de e5 f3 2c b0 09 c0 7a f2 c3 00 4b 10 4e ba 62 e0 61 ab e0 c2 fc 5f f2 f7 c3 f3 be cb 5d c8 d7 6e c6 8d 94 27 bc 93 3b d6 8f 73 0f Data Ascii: z&H?q%S``k& X78z67pp\A+.2iJO)! Dvl^jMSCC8_h0" +4V?C1w;:B :XzDyZ%Mqv\L8C`ibml8{F,zKNba_]n';s
2024-04-05 23:18:23 UTC	1369	IN	Data Raw: 34 00 2a ff 2e 8e 29 1a b1 d0 64 59 3a 6e 1c c1 f0 eb b2 47 25 a4 82 96 37 ce 7b 3f 00 a8 07 01 09 00 80 06 e8 74 7b 31 08 10 8b 47 6e a5 16 47 22 c4 0b ff e7 c7 87 fb cf 57 bc 1f 31 40 72 65 6c 3f 5e a4 7d 79 ed dd 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 0f 17 74 01 00 00 40 f3 75 ba bd f6 94 a7 6c 87 b6 a5 a7 26 ea 87 76 72 7c b8 7f aa 2b ce 4e 40 02 00 00 a0 a1 3a dd de 6e b8 f9 3a b4 1d bd 51 a9 93 d0 1e 1e 1f ee 1f e8 8a c5 09 48 00 00 00 34 4c 1a 0d f1 28 b4 96 de 58 aa 41 68 77 8e 0f f7 fb ba 62 7e 1f ea 02 00 00 80 e6 e8 74 7b 7b e1 e6 ff 64 d2 2f 56 21 f6 f1 ee b5 4f be b8 f0 f4 b7 9f fa ba 63 3e 02 12 00 00 00 0d d1 e9 f6 e2 a8 88 ff ad 27 56 ae 7d ed 93 2f 5a 4f 7f fb e9 07 5d 31 Data Ascii: 4*.)dY:nG%7{?t{1GnG"W1@rel?^}yXt@ul&vr\|+N@:n:QH4L(XAhwb~t{{d/V!Oc>'V}/ZO]1
2024-04-05 23:18:23 UTC	1369	IN	Data Raw: f7 bf eb 74 7b e3 41 87 ed ac 7c 36 90 37 db 4a 53 8a b2 04 52 36 00 00 00 58 4b 29 18 10 d3 40 8e 66 78 7a 3f b4 cf d2 c8 8f b2 ed c5 00 c7 2c 23 1e de a4 a5 a8 1d b1 5c 46 48 00 00 00 b0 b6 52 50 e2 56 aa 1f 71 3b 1b a6 70 8c 6a 3c c4 c7 fa a1 fd 30 9e a6 31 61 7b 77 c3 b6 62 5d 88 98 ae 11 b7 b9 bd e8 b6 38 1b 01 09 00 00 00 d6 5e aa 5b 11 db 9d 0a b6 35 08 37 77 f5 ea f9 92 b2 01 00 00 00 ac 9c 80 04 00 00 00 45 ca ea 27 0c 74 0d 55 10 90 00 00 00 a0 c8 fd 92 e5 0f 75 0d 55 10 90 00 00 00 e0 3d c7 87 fb 71 66 8b 38 85 66 3f 2d 8a 7f 7f 66 e6 09 aa a2 a8 25 00 00 00 85 52 50 e2 48 4f 94 fa 58 17 2c ce 08 09 00 00 80 fa 1a 4c 78 ec 5f 74 cf d2 b5 75 c1 e2 04 24 00 00 00 6a 2a 4d 5f 79 5a f2 f0 4e a7 db 6b e9 a5 e5 08 7d db 0e 37 65 fd 2b ad 65 06 02 12 Data Ascii: t{A\|67JSR6XK)@fxz?,#\FHRPVq;pj<01a{wb]8^[57wE'tUuU=qf8f?-f%RPHOX,Lx_tu$j*M_yZNk}7e+e
2024-04-05 23:18:23 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-05 23:18:23 UTC	1369	IN	Data Raw: e4 dd 04 00 00 9a 4a 40 82 46 49 33 55 fc 2d ab 5f 20 22 8e 80 88 01 88 fb c7 87 fb 03 ef 24 00 00 d0 74 02 12 34 cd a3 ac 5e c1 88 41 68 f7 43 3b 92 96 01 00 00 6c 12 01 09 1a 23 15 8c 6c d7 64 77 0f 32 45 2a 01 00 80 0d 26 20 41 93 ac fb c8 88 41 36 2c 52 79 20 2d 03 00 00 d8 74 02 12 34 5d 3f 5c fc df 5c 64 c5 4e b7 f7 24 4b 23 2e c2 36 2e e8 4a 00 00 80 ea 7c a0 0b 00 00 00 80 55 33 42 02 36 cf ed 4e b7 f7 55 ee 6f 53 8c 02 00 00 2b 27 20 01 9b a7 95 da 48 bb d3 ed dd 54 60 13 00 6a e9 52 f8 1d cf d7 d1 ba ac 4b 80 ba 10 90 00 a2 76 68 7d dd 00 00 b5 73 35 35 80 da 51 43 02 36 4f 3f 15 e9 bc a9 2b 00 a0 b6 5e cd f0 1c ff 7c 04 d6 9a 2f 29 00 00 a8 9f 18 90 b8 34 e5 39 9f 76 ba bd 78 7b 9a 9e ff 6a 74 ff f8 70 ff 95 2e 04 ce 9b 80 04 00 00 34 db d6 f8 Data Ascii: J@FI3U-_ "$t4^AhC;l#ldw2E*& AA6,Ry -t4]?\\dN$K#.6.J\|U3B6NUoS+' HT`jRKvh}s55QC6O?+^\|/)49vx{jtp.4
2024-04-05 23:18:23 UTC	173	IN	Data Raw: 00 50 ce b4 9f 30 d4 0f 6d 77 6c d9 bd 4e b7 77 4f d7 00 00 00 54 cf 08 09 18 fa b1 e2 ed 9d ea 52 00 00 80 72 02 12 30 74 94 55 17 44 18 a4 e9 44 01 00 00 28 21 20 01 d9 9b 5a 10 31 18 71 b7 82 4d c5 ed dc d2 a3 00 00 00 93 7d a8 0b 60 e8 e9 6f 3f 9d 5c fb e4 8b 5f c2 dd 2f 43 db 5a 60 13 fd d0 fe 97 d1 11 00 00 00 d3 5d d0 05 f0 be 4e b7 b7 9d cd 17 94 18 a4 d9 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 65 f8 6f 01 06 00 75 09 71 e7 d9 4a f0 54 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: P0mwlNwOTRr0tUDD(! Z1qM}`o?\_/CZ`]N:eouqJTIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	49995	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	634	OUT	GET /store/about/cta_hero_community_pt2.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	296	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/png Content-Length: 6427 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-191b" CF-Cache-Status: HIT Age: 5045 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d0bbab8db5-MIA
2024-04-05 23:18:24 UTC	1073	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 18 bd 49 44 41 54 78 da ec dd 4f 8c 55 d7 79 00 f0 7b df 7b 03 66 f8 6b 8f 8d 1d 30 66 9c 36 43 8a 13 81 ba 08 a2 9b 5a 66 d3 05 56 52 a9 f5 ae 32 6d ba b1 ba a9 dd 5d 1b a9 cd a2 cb 7a 87 a2 56 5d 38 bb ca 2c 1a 15 da ba 0b 48 ba 29 b2 ac b6 58 6a 90 8c 22 61 4c ec 10 db d8 fc 1d 18 60 e6 f6 9c 99 4b 32 e0 61 3c c0 fd 7f 7f 3f e9 ea be 81 99 f7 de 7c f3 de 99 73 be f9 ce 77 93 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<IDATxOUy{{fk0f6CZfVR2m]zV]8,H)Xj"aL`K2a<?\|sw
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 0e cd a9 85 a0 93 5e 16 02 28 71 e0 1c 0c e6 2b 24 00 a8 ce cc f4 d5 3f 0d a7 55 22 01 d0 a1 79 b5 10 74 4b 7e 99 cf 49 91 80 12 07 4e d5 11 00 95 9b 9b 9b fd bd 70 1a 13 09 80 0e cd ab 85 a0 73 9e 17 02 28 8f ab 6a 00 d4 66 c3 b9 0f 7e f6 0d 61 00 e8 0e 09 89 ee d9 25 04 50 0e 8d 2c 01 ea 75 eb e6 cc 73 a2 00 d0 1d 66 d6 dd 33 29 04 50 d2 80 69 ab 06 40 ad b2 b9 b9 6d a2 00 d0 a1 f9 b5 10 00 ac 60 b0 d4 c8 12 00 00 8a 9d 63 0b 01 c0 0a 06 4b d5 11 00 00 50 ec 1c 5b 08 00 be 64 a0 94 8c 00 00 80 e2 e7 d9 42 00 70 6f 71 9b 46 dc ae 01 00 00 14 cb 2c 1b 60 b9 41 52 75 04 00 00 94 33 d7 16 02 80 a5 c5 4b 7c 6a 64 09 00 00 e5 90 90 00 b8 87 e1 d0 10 09 00 00 65 31 db 06 58 6a 70 9c df aa a1 3a 02 00 00 4a 9b 73 0b 01 c0 9d 34 b2 04 00 80 f2 99 71 03 dc 3d 30 Data Ascii: ^(q+$?U"ytK~INps(jf~a%P,usf3)Pi@m`cKP[dBpoqF,`ARu3K\|jde1Xjp:Js4q=0
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 86 ce fb d1 43 7d 86 43 97 f9 04 00 80 be ab e5 4f 94 79 b3 ca d7 92 6a 92 11 8b c5 2a 8c ef 85 c7 df eb 47 0f 35 0d 3a 1a 59 02 00 00 49 0d 15 12 79 d3 ca 98 8c 18 af e9 7b 8e 8f 7b 20 3c 8f c7 d3 34 3d ec 25 00 d5 d2 3b 02 00 00 98 5f 1b 54 f9 60 0d 48 46 2c b6 3f 3c 9f 03 5e 02 50 1d 5b 35 00 00 80 db 2a 4b 48 34 2c 19 71 5b bc 12 c7 8b 5e 06 50 3e 8d 2c 01 00 80 c5 2a 59 1d e4 0d 2c 9b 96 8c b8 6d bf 9e 12 50 c1 60 33 50 1d 01 00 00 fc 5a 55 3d 24 5e 49 9a 99 8c b8 2d 5e 81 e3 94 ab 6f 34 df da f5 9b 92 b5 1b 1e 4d 46 63 ab 04 a3 45 d2 f9 1e 96 1a 59 02 14 e5 d6 cd 1b c9 cc b5 ab c9 95 8b 9f 09 06 00 ad 55 7a 42 22 df 12 31 d5 f0 38 cc 37 ba 0c c7 df 79 49 34 d3 ea 47 c6 93 27 b6 4e ce 9f 01 80 24 59 b7 f1 b1 64 e3 c4 93 c9 27 1f be 9f dc 98 b9 26 20 Data Ascii: C}COyjG5:YIy{{ <4=%;_T`HF,?<^P[5KH4,q[^P>,*Y,mP`3PZU=$^I-^o4MFcEYUzB"187yI4G'N$Yd'&
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 7b 45 5e 15 11 93 11 8b af ec b1 37 1c bb c2 ff 1d 8b 97 25 f5 f2 a0 0f 16 7a 47 00 00 00 54 ab d0 84 c4 dd 15 07 f7 10 2b 26 5e 08 9f fb 66 58 f4 1f af fa 1b ce 93 25 f1 4a 1e f7 6a 96 19 bf 87 fd e1 f3 e2 36 93 46 55 74 40 d1 62 df 88 58 21 01 00 00 50 b5 c2 12 12 f9 42 ff 95 e4 ce 8a 83 64 99 45 ff 81 f0 35 31 31 70 34 1c c7 cb ae 98 c8 2b 22 e2 16 92 95 5e b5 e3 57 15 1d aa 25 e8 2a d5 11 00 00 40 5d 0a 49 48 e4 89 85 fd 0f f0 a5 71 4b c7 4b c9 42 45 c2 bb 49 c1 97 eb cc 2f 1f 1a b7 61 ec 4e ee dc 3e 72 3f f6 e7 c9 96 1f b8 8a 07 5d 22 19 01 00 00 d4 e9 a1 12 12 2b dc a2 b1 12 f1 7e 62 e2 60 6f b8 cf b8 e8 8f 57 d5 f8 79 38 de 4b ee e3 72 9e 79 02 e2 e9 70 ec 48 16 2a 21 26 0a 8a 53 bc af bf 0d f7 ff ba 2d 1c 74 41 dc a6 e1 32 9f 00 00 40 9d 1e 38 21 Data Ascii: {E^7%zGT+&^fX%Jj6FUt@bX!PBdE511p4+"^W%@]IHqKKBEI/aN>r?]"+~b`oWy8KrypH!&S-tA2@8!
2024-04-05 23:18:24 UTC	1247	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	49997	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	634	OUT	GET /store/about/cta_hero_community_pt3.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/png Content-Length: 20936 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-51c8" CF-Cache-Status: HIT Age: 5045 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d0c92202dc-MIA
2024-04-05 23:18:24 UTC	1072	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 51 6a 49 44 41 54 78 da ec dd 69 8c 65 e9 79 1f f6 e7 9c 73 97 da ab ab bb ba 7b a6 87 3d c3 99 21 87 c3 e1 36 22 29 71 11 45 89 92 2c 59 36 19 cb b2 2d 03 8e 01 c9 40 e2 24 08 82 04 fe 94 20 06 ec 4f 09 02 23 70 1c 20 31 90 04 30 ed d8 81 61 20 de e4 38 71 2c 7a 91 1d 93 23 89 8b b8 89 8b c8 e1 2c 9c e9 9e de 6a af bb 9d 73 72 de 73 6f 55 77 cf f4 ac ec a5 66 fa f7 93 ce dc 5a ee bd 67 a9 2a de fb fe fb 79 9f 37 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<QjIDATxieys{=!6")qE,Y6-@$ O#p 10a 8q,z#,jsrsoUwfZg*y7
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 95 65 2e 01 dc 39 0f bf ff 13 6f 6f 6e d2 f6 78 b3 1d 73 45 00 b8 15 ea ba 8e b2 9c b8 10 c0 46 b3 7d 25 6d 4f 7d f3 89 0d 97 83 3b 4d 20 01 b7 d9 2c 84 f8 f5 66 fb b5 98 86 11 00 70 cb a5 Data Ascii: e.9oonxsEF}%mO};M ,fp
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: ae 9b 6b 3f 89 ba d9 ae 06 12 f5 2c 6d c8 0e 3f 4f ed 3e b2 2c 6f 6f 8b 3c 6b ab 5b b2 e6 76 52 77 9b a7 c8 0f 1e 05 f0 ba 09 24 00 00 b8 63 d2 b4 8d ba ae 9a cd 90 f6 56 bb ae 1a 22 5d ef 6a 1c e5 fe 46 8c f6 36 9a af a6 4a 95 ba bd ad eb 6c 9a 4b 64 d3 c7 74 b2 3a ba fd 6e fb b3 5a 5a c8 a3 db ed 44 b7 d3 89 ad c9 7a 8c a2 17 55 7d f8 ac 00 af 8b 40 02 00 80 3b 2a 55 49 94 e5 c4 85 b8 95 d7 38 ea b6 12 22 6d fb 3b 57 a2 9a 8c a6 21 50 fa 5a 5d 45 bf d7 dc 27 cb a3 d3 29 9a db 48 25 11 d1 29 66 c1 44 55 45 a7 3b ad 90 48 b1 c3 70 38 89 bd fd 32 f6 47 3f 6c 3e 6b 1e d3 ed 46 d6 59 8a ac bb 1c a5 8a 09 e0 75 10 48 00 00 70 47 b5 53 00 b2 69 a5 04 b7 50 9d 42 89 32 ca f1 a0 dd 52 1e 31 9d 8e 91 c2 88 d4 64 b4 19 1c 14 79 7b 9b be d6 ed e4 d3 42 8a 32 7d 7d Data Ascii: k?,m?O>,oo<k[vRw$cV"]jF6JlKdt:nZZDzU}@;*UI8"m;W!PZ]E')H%)fDUE;Hp82G?l>kFYuHpGSiPB2R1dy{B2}}
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: a1 8a 2f 7d 63 2b ca d1 7e 4c 9a ad d3 9d 6f 1b 5d d6 99 7f c0 00 04 12 00 00 1c 51 69 ea 86 06 97 2f a3 1a 47 94 e3 d8 b9 fc 5c d4 e5 20 56 96 8a f8 d9 8f 1c 8f 4f fd c4 5a fc c9 3f 79 6f e4 dd 5e f4 56 4e b4 15 0c 57 03 87 88 3a e5 07 d5 34 88 48 d3 36 a6 4b 84 5e 1f 40 dc 28 8f c8 66 ff ad 8b 4e 64 55 d5 ec bb 8c 6a 32 6e f6 3d be 7a 87 bc 79 be e6 fb bd 7e 2f 96 4e ad c5 1f fb b9 4b 31 1a 8c 62 34 ba 2f 7e ef db 5b f1 95 6f 6d c5 c6 85 a7 a3 d3 5b 88 95 93 0f b4 d3 3e 54 4a c0 dd 2d 77 09 00 00 38 8a a6 0d 2e 0d 58 5f 72 5d ea aa 0d 03 c6 a3 fd 94 4c c4 c2 7c 1e 0f bd 6d 3e ee bb 77 2e 4e 9d 9a 6b c3 88 ac d3 6d 2b 1e 52 e8 30 2d 60 68 6e ab 6b fa 46 bc f8 f6 b5 6a 97 65 ad a6 7d 25 ca 49 db 8f a2 fd f2 6c 68 51 45 d1 6e 91 17 d1 e9 76 a2 db eb c4 3d Data Ascii: /}c+~Lo]Qi/G\ VOZ?yo^VNW:4H6K^@(fNdUj2n=zy~/NK1b4/~[om[>TJ-w8.X_r]L\|m>w.Nkm+R0-`hnkFje}%IlhQEnv=
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: e8 2d c4 fc da 7c 64 b3 0a 88 6a 3c 68 9e 67 10 bb 1b e7 0f 8b 37 fa e9 39 16 d6 da ed 60 c9 50 d5 12 20 90 00 00 80 5b 3f 88 7f 0b 35 b8 ac c6 fb 51 8e f6 63 b0 7b a5 ad 54 e8 76 d2 80 bb 8e aa 1e c5 68 ef 52 94 d3 7c 20 b2 9d 8d b6 5a 20 a2 8c 4f 7e 78 25 4e 1e ef c4 2f fd ec e9 38 7e 72 31 3a fd 6e fb 5c d3 ea 89 3a be fa f5 cb f1 b5 66 fb 47 ff ec 5c ec ee 4d 0e 67 5f 4c b3 8f 3a be fb fd ed b8 74 69 3f 7a cd c3 3e b0 b3 12 27 8e ad 45 51 d4 d1 c9 eb ab 4b 79 56 65 4c c6 c3 36 d8 18 35 fb 4e d5 19 d5 64 78 4d 65 4a 1e 9b 3b dd d8 dc ed c5 ff f1 7f 6f c6 ef 3f 39 8a 27 9f 1b c7 ce 6e d9 56 45 b4 c1 47 73 7b 71 63 14 7f e7 9f 5e 8e d5 a5 22 fe c4 2f 9c 8a b7 9f ad e3 c1 b3 65 f4 e7 e7 e3 9e 7b aa f8 c8 fb 07 31 18 f6 63 7f 7f 25 fe dd 57 b7 a2 a8 f6 23 Data Ascii: -\|dj<hg79`P [?5Qc{TvhR\| Z O~x%N/8~r1:n\:fG\Mg_L:ti?z>'EQKyVeL65NdxMeJ;o?9'nVEGs{qc^"/e{1c%W#
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 1b 8f 7f e0 78 7c a0 d9 4e 9d 5e 8c 22 2d 8d 99 ee 93 2a 1b ca 2a f6 b7 a6 ab 74 f4 7a 9d 76 cd 89 3c 85 0f fb e3 f6 3e 29 80 a8 d3 b2 99 cd c7 93 e1 4e 7b bf c3 2d 66 03 fa 6b 96 f1 7c b5 30 a2 fd 6f 3d 89 72 52 b6 53 4f d2 f9 a4 9f 41 5a 86 33 05 02 e9 e3 ce fc d2 f4 f9 d2 f3 4e a6 15 18 d3 45 3c aa 69 81 c5 68 d0 6c bd 28 9a fb 45 a7 13 45 51 c4 9f fb 33 67 63 38 18 c5 85 e7 2f c7 3d 27 bb b1 7e b2 17 fd f9 5e fb b3 ad 9a e7 48 cd 3f d3 31 af af 0e e2 dd 0f 76 e2 a7 3e b4 1a ff e6 8b 57 e2 d2 e6 28 f6 36 9f 8f ce c2 5a b3 df 63 fe 28 40 20 01 dc ed d2 bf 84 00 11 93 f1 c8 45 80 5b ac 28 f2 76 4a c0 9b 45 aa 58 48 3d 1b 92 77 3c b8 18 8f be 73 35 d6 4e 2c 44 35 dc 8f c9 de 4e 8c d3 8a 1a 31 0d 08 3a 31 8e a2 53 c7 47 3f b8 16 0f 3e bc 14 f7 9d 99 6f 0b Data Ascii: x\|N^"-**tzv<>)N{-fk\|0o=rRSOAZ3NE<ihl(EEQ3gc8/='~^H?1v>W(6Zc(@ E[(vJEXH=w<s5N,D5N1:1SG?>o
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 4e a2 6e f6 b7 94 d7 b3 10 62 d8 06 13 29 53 b8 b0 31 8a af 7e 37 e2 b3 7f 7f 2f 3e f2 fe 61 7c e4 7d 17 e2 9e 33 ab 07 ff 2b 3a 7b e6 38 5c d6 b4 1c 37 8f 9d 8c a6 2b 8a 94 e3 18 0e fb b1 bd d7 8f e1 20 f5 ea a9 db 2a 8f 2c 04 12 20 90 00 78 d1 c0 ec ca 0b cf c5 f6 95 8b b1 b0 b4 1a 79 51 b8 28 bc a5 a5 de 29 7b db 9b 6f 9a b9 ec f0 56 93 56 6b 98 4c de 3c cb 80 96 93 71 33 d0 7e a5 29 07 d3 de 0f 69 20 3e 19 67 31 18 e5 d1 6b 06 df 8b 0b 59 cc f5 53 45 48 15 c3 14 46 34 e7 dd eb 76 63 69 61 a9 b9 cd da ca 88 a8 b7 db 56 0f a9 b7 c3 e9 7b ef 8b f5 13 27 9a d7 e2 a5 f6 31 a9 97 c4 b8 19 e8 0f c7 e3 d8 de de 8e 67 9e 7a 26 9e 1e 3f 1d d9 28 9f ad f0 51 c7 03 f7 bf 3d 56 56 96 e3 d4 e9 7b 9a 81 ff 20 5e 38 ff 7c 3c f9 f4 b3 b1 bb bb 17 9d 2c 2d df 99 37 fb Data Ascii: Nnb)S1~7/>a\|}3+:{8\7+ *, xyQ(){oVVkL<q3~)i >g1kYSEHF4vciaV{'1gz&?(Q=VV{ ^8\|<,-7
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 7f 6d a5 db 0c f2 87 ed c7 ed ea 16 65 39 eb 39 11 6d 95 c4 42 bf d7 56 24 2c f4 7a d3 61 7e 55 c7 6f 3f f1 f9 e8 74 8a 58 5e 5e 8e df fc dc 3f 8f af fd de ef 45 39 99 c4 7c 73 9f b5 a5 e5 e8 77 7b 6d 20 d1 29 ea 38 be b4 12 a3 b9 49 ec 6c 6c b6 81 c5 5a f3 98 e5 85 85 76 2a 48 1b 46 bc f4 e0 a6 99 41 5a b9 b3 ce ae 39 de e9 6d 6a 78 59 55 d3 29 26 69 95 91 6e a7 d9 4f 5e 37 c7 fa da ae db 70 d2 69 1e 9f c7 13 5f db 8f e7 2e 65 d1 e9 2f 46 de ed 47 96 02 1e 78 0b 69 fe c6 cf ce fe 7e 9e 11 48 00 00 c0 9b 50 db b8 31 cf db 81 f0 d1 0a 24 66 d3 1d 9a e3 db d8 9c c4 33 29 90 f8 fd 68 ab 23 1e b8 e7 9a 05 37 66 83 fb 97 b3 b6 dc 8d f9 fe b4 91 63 5a 39 a3 ad 92 68 ce 35 05 1d e9 b9 e7 0f 02 89 6e 37 f6 26 93 f6 7b 4f 3c f1 f9 58 5a 5e 8e 93 27 4f c7 e7 3e f7 Data Ascii: me99mBV$,za~Uo?tX^^?E9\|sw{m )8IllZv*HFAZ9mjxYU)&inO^7pi_.e/FGxi~HP1$f3)h#7fcZ9h5n7&{O<XZ^'O>
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: bf 7a 16 46 a4 66 96 f5 b5 95 15 b3 50 23 1d 57 d5 1e 5b dd 36 b3 6c 03 89 e5 22 d6 56 8a 36 70 79 25 fb c3 22 2e 5e 19 b7 81 c4 28 5b 99 ae a8 31 ab 8c a8 fd 5a 73 f4 c2 88 34 35 e3 d3 cd b6 70 04 0e 27 05 22 7f b1 39 a6 7f d2 fc 7d fe 86 40 02 00 00 ee a0 a3 d8 e0 32 3a fd 66 f4 5f 44 56 4e 62 52 e6 31 18 66 f1 85 af 6d c4 e6 4e 2f 2e 6f 1f 6f 06 ed 55 f4 3a e5 75 f3 24 b2 6c da 27 a2 df 2b e3 9d 0f cc c5 cf 7e 74 3e 3e f7 c4 a5 d8 dd 4b ab 58 ec 37 f7 ed 34 df 9e f6 8c 68 83 98 4e 6a 82 39 7d 70 5a 51 a3 1d 38 1d ac 86 71 b0 0a 46 4c fb 42 5c e7 9a a9 1a 2f 96 1a 64 be f8 fb 2f 7e 7c bb fa 47 55 c7 a4 9a 4e 11 29 9a eb 3f d7 cb 63 ae 9f c7 d9 7b b3 38 73 f2 d5 23 85 4b 5b bd 76 1a cb f9 4b 83 58 58 5e 88 a2 93 0b 22 38 8a 41 44 0a 20 fe 93 b8 73 55 11 Data Ascii: zFfP#W[6l"V6py%".^([1Zs45p'"9}@2:f_DVNbR1fmN/.ooU:u$l'+~t>>KX74hNj9}pZQ8qFLB\/d/~\|GUN)?c{8s#K[vKXX^"8AD sU
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 69 ed cf 88 c9 38 96 9a e7 5a ca 8b 38 3e 3f 1f 6b 73 f3 71 ac d9 ee 5d 5a 6a 43 8a b9 2c 8f 72 6f 3f ea b2 8c c9 68 d4 86 0c e3 e6 f1 db 69 ba 46 b3 7d 77 52 c5 c5 6a 14 17 aa 71 f3 79 15 e3 e6 6b 83 c9 b0 0d 40 da 70 a2 de 6b f6 39 89 cb 9b db 31 1c 4d fb 4d 7c e2 c7 d6 e2 d1 07 c7 cd 31 ee bd a6 ea 88 f6 67 94 aa 40 8a 3a 7a cd 68 a5 ed c9 d9 5e 97 2a 0e e7 af c0 ed f5 ab 31 5d b1 e2 ad e2 20 60 f9 ef 05 12 00 00 70 07 42 89 b2 3c 22 55 12 d9 74 9c 3d 18 ce 02 89 fa e0 36 6b 1b 3b 1e 34 96 bc de b4 d1 65 9a da f0 b6 93 9d f8 d5 9f 3f 15 5f f8 da 56 b3 6d c6 0b 57 ae b4 ab 75 2c ce 2f 46 3d 1e 47 d6 3c f8 c3 cd 0e d6 a3 1f eb 59 3f ee 3d 75 32 96 57 56 62 f5 d4 a9 e8 76 7b d1 6b b6 7e 67 ba 2c 6a de ec b8 dc db 6b 53 80 8d ef 7f 3f aa 49 19 93 e1 5e 8c Data Ascii: i8Z8>?ksq]ZjC,ro?hiF}wRjqyk@pk91MM\|1g@:zh^*1] `pB<"Ut=6k;4e?_VmWu,/F=G<Y?=u2WVbv{k~g,jkS?I^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	50000	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	629	OUT	GET /store/about/cta_hero_hardware.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	296	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/png Content-Length: 54376 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-d468" CF-Cache-Status: HIT Age: 211 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d0b8c6032d-MIA
2024-04-05 23:18:24 UTC	1073	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 ab 00 00 03 1a 08 06 00 00 00 60 74 d0 55 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec dd 69 b4 24 e7 7d df f7 df f3 54 55 6f 77 5f 66 01 66 30 18 00 03 80 04 b8 62 28 52 10 09 12 24 48 ca a2 25 25 11 03 5b 56 e4 c8 c7 3a a6 a2 a3 17 51 22 47 8e 65 27 51 f2 2a 91 2d cb 3e 89 e5 13 25 39 92 ce 51 e4 e4 40 b2 7d 94 48 54 68 51 02 69 91 a2 2c 2e 12 41 90 04 05 62 1f cc 7e 67 ee 7e bb ab ea 79 f2 a2 67 86 00 66 ee 4c 77 75 75 d7 d2 df cf d1 50 c0 ed ae aa 3f a6 fb 56 d5 af 9e cd 08 00 00 00 37 75 f7 db 1f 7d 9f 0d f4 98 a4 7b e5 cd 5d c6 f8 bb 24 73 5b d1 75 d5 9e d7 29 2f ff fb 32 fa 9a f7 fe 99 6f 7f e5 33 9f 2c ba 24 00 93 63 8a 2e 00 00 00 a0 8c 4e bc e3 03 8f cb Data Ascii: PNGIHDR`tUsBIT\|d IDATxi$}TUow_ff0b(R$H%%[V:Q"Ge'Q*->%9Q@}HThQi,.Ab~g~ygfLwuuP?V7u}{]$s[u)/2o3,$c.N
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 Data Ascii: CXaP:U@VCXaP:U@VCXaP:U@VCXaP:U@VCXaP:U@VCXaP:U@VCXaP:U@VCXaP:U
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 81 02 11 56 01 00 40 a5 1c bb ef 7d 77 37 5b e1 93 32 ea 0c b3 9d 77 9e b0 3a a5 8c b1 0a 82 c1 57 6c f4 de dd df dd d9 33 27 1e 7e ff 9f bd f2 f5 af ec 8e b1 34 00 37 71 eb 2e 33 00 00 00 25 d2 98 09 7f 59 d2 fc b0 db 79 96 ac 99 5e 19 3e fb 5e bc fb 93 c9 e6 de 3b c5 fd 32 50 18 7e f9 00 00 40 65 1c 7f f0 7b de 61 8c f9 de 6c 5b 13 56 a7 55 a6 4f de ab b5 b9 76 e1 c7 1f f9 a1 4f 1c ca bb 1e 00 83 19 bc 3f 04 00 00 40 c1 c2 28 fa 2f b2 6e 3b 6d 2d ab 0b 2b 87 35 33 b7 70 93 77 18 ed 6e 6f e8 d2 85 d3 99 5a 1e 2b 25 e3 7f 9f 4b e2 1f 4c 63 ff 4b 92 4e e7 5b 10 80 41 10 56 01 00 40 65 18 63 1e 29 ba 86 2a 38 74 ec 84 66 e7 96 6e f9 be f6 cc 9c c2 a8 a1 f3 af be 30 81 aa 8a e3 33 b6 aa 7b f9 99 bd 8d 4b 6f 79 f0 f1 c7 ff e2 e9 27 9e e8 e5 5c 16 80 5b a0 1b Data Ascii: V@}w7[2w:Wl3'~47q.3%Yy^>^;2P~@e{al[VUOvO?@(/n;m-+53pwnoZ+%KLcKN[AV@ec)*8tfn03{Koy'\[
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: e3 b9 1f af b4 ac d9 0c 65 e8 02 0c 14 84 b0 0a 00 00 2a c3 3b 3f f8 02 a2 35 b1 b4 7a 58 61 d4 b8 e1 6b 1b 17 cf e5 da aa 7a 55 9a c4 da 58 bb f1 12 38 9d d9 79 75 66 17 72 3f e6 b8 65 9c 7c 6a 43 c6 25 79 d7 02 60 30 84 55 00 00 50 19 ce 28 5b 58 ad 68 2f e0 20 8c b4 b8 7a db 0d 5f f3 de 6b 7d ed ec d8 8e bd 71 f9 c2 be af ad dc 76 4c 52 c5 d7 b2 19 80 91 dd 34 a1 b9 f1 7a 3e 00 c6 8e b0 0a 00 00 2a c3 7a ed 9f a0 6e a2 a2 59 55 ab 87 8f ed 3b 03 6f 77 67 4b 69 3a be 46 bf de de ce be eb ae 36 1a 2d 2d ac 4c c1 52 36 d6 ac fb 2e dd 80 81 a2 10 56 01 00 40 65 18 e3 cf 64 da 2e ef 42 26 a0 d5 9e d1 ec c2 f2 be af 6f 6f 8f 7f f8 ee ee d6 fa be af 2d 1f 38 72 c3 35 5f eb 24 90 b9 64 69 59 05 0a 43 58 05 00 00 95 91 b8 20 53 bf d7 8c e3 15 0b b5 ba cf 52 35 Data Ascii: e;?5zXakzUX8yufr?e\|jC%y`0UP([Xh/ z_k}qvLR4z>znYU;owgKi:F6--LR6.V@ed.B&oo-8r5_$diYCX SR5
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 98 32 84 55 00 00 50 49 dd 38 79 72 98 f7 0f d3 0d 14 35 34 e0 e7 6f 83 e0 1b 32 76 73 cc d5 00 18 00 61 15 00 00 54 d2 cb 5f fb fc b7 bd f7 97 07 7d 3f 93 2c 4d b7 41 1f 56 44 ad d6 d7 7d d8 26 ac 02 25 40 58 05 00 00 55 f6 85 81 df 49 cb 2a 6e c9 a4 73 73 07 be f6 27 4f fc 12 93 2b 01 25 40 58 05 00 00 95 95 7a f7 c7 83 be 97 6e c0 d3 cb 98 c1 6e 79 8d b1 df 0a 1b ba 30 e6 72 00 0c 88 b0 0a 00 00 2a cb 3b fb e9 41 df 4b 58 9d 5e 83 7e f6 d6 86 7f 11 c7 8d 8d 31 97 03 60 40 84 55 00 00 50 59 2f 7c f5 c9 7f 2f af 81 66 6e 1d b4 75 0d 35 34 e8 78 d5 66 f3 cf a3 a6 23 ac 02 25 c1 59 1b 00 00 54 99 f3 72 5f 1a e8 9d 34 ac 4e ad 41 5b 56 db b3 f3 7f fe e4 13 bf bc 35 e6 72 00 0c 88 b0 0a 00 00 2a 2d f5 fe 53 83 bc 8f 96 d5 e9 35 c8 67 6f 4d f0 cd ce 4c fb c5 Data Ascii: 2UPI8yr54o2vsaT_}?,MAVD}&%@XUInss'O+%@Xznny0r;AKX^~1`@UPY/\|/fnu54xf#%YTr_4NA[V5r*-S5goML
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 78 00 00 c6 26 08 23 85 51 a3 d0 1a bc 77 bf 93 f4 cc 4f bc f0 f4 93 67 0a 2d 24 07 84 55 00 98 02 27 de f9 d8 c3 c6 f8 ff 5d f2 0f 14 5d 4b 77 77 47 53 34 eb 3e 00 60 ca 34 9a 6d 19 6b 0b ad c1 7b 5d 96 49 ff e1 b3 5f fe ec 3f 2f b4 90 11 11 56 01 a0 c6 0e 1c 78 70 76 e1 e8 c1 5f b0 46 7f c7 4b 93 99 57 ff 26 58 53 15 00 50 77 13 59 7b 75 40 ce f9 cf b9 dd ad 1f 7f fe 99 2f 3e 53 74 2d 59 10 56 01 a0 a6 8e bd f3 b1 07 9a 72 bf 29 a3 b7 17 5d 8b 24 79 ef d4 db db 2d ba 0c 00 00 c6 6e 92 6b af 0e 60 23 8d 7b 3f f9 dc 53 9f fb cd a2 0b 19 56 01 d3 55 01 00 c6 ed de 87 1e fd 89 c0 98 df 36 46 77 14 5d cb 55 71 6f 4f f2 74 ff 05 00 d4 9f 73 a9 c2 b0 51 96 a6 c1 a6 0d 82 8f 2f 1e 3a 7e ef 42 4b bf 77 f9 f2 e5 a4 e8 82 06 55 8e bf 3e 00 40 2e 16 8f bf 63 71 65 Data Ascii: x&#QwOg-$U']]KwwGS4>`4mk{]I_?/Vxpv_FKW&XSPwY{u@/>St-YVr)]$y-nk`#{?SVU6Fw]UqoOtsQ/:~BKwU>@.cqe
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: f7 f0 91 49 1c 8f 41 38 00 50 12 27 1e fa d0 af 4b fe f1 a2 eb 18 56 9a 24 37 5c 36 60 e2 75 c4 bd a1 27 dd 18 8a f7 32 26 90 65 c2 a5 4a 48 93 44 de 39 a5 e9 95 b1 d4 be 3f a9 09 9f 5f bd 79 ef e4 d2 54 de 39 b9 24 96 73 fd 75 37 e5 5d e1 93 ea 60 78 49 af 3b de eb 8b f7 52 09 c6 af 16 7d fc 61 19 99 85 20 b4 3f 10 2c b4 7e 6d e7 e2 c5 b1 36 0f 57 66 54 2f 00 d4 d9 bd 27 3f fc 77 e5 d3 bf 59 74 1d 59 24 49 39 ba 31 c5 49 77 ec 8b 87 c7 f1 9e 82 70 76 cc 47 41 56 49 12 cb 25 b1 52 97 5c f7 5d b8 fa 18 a3 d7 fb ce da 8b 61 d4 98 74 89 18 03 ef 5d ff b3 4f 93 9b 3f b0 32 46 d6 86 0a 82 48 41 c8 2d 70 15 4c e2 bc 9e 24 dd 42 cf 05 69 12 2b 0c 1b 1a fb 7f 68 ce ac b5 f7 2e b4 0f ff ab 0b 7a e6 23 e3 3c 4e b5 62 3c 00 d4 d0 89 87 3e fc dd c6 a4 bf ae 0a 3e 40 Data Ascii: IA8P'KV$7\6`u'2&eJHD9?_yT9$su7]`xI;R}a ?,~m6WfT/'?wYtY$I91IwpvGAVI%R\]at]O?2FHA-pL$Bi+h.z#<Nb<>>@
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 1f 94 89 b4 ca 63 d2 e3 c4 6d 49 c3 cb b4 1a e7 79 3d 2c 69 ab ea 55 55 1f bb 2a 49 41 60 1f 39 f6 c0 7b ff 5a d6 ed f9 6d 04 80 31 b2 b1 fd 45 49 8b 45 d7 31 aa 2a 5d 30 9b ad 4e ae 37 36 c6 06 6a 34 c7 db 15 0d 00 b0 bf bc cf eb 32 b6 b4 dd 7f 5f ab 4a d7 de 9b 89 9a e1 3f d5 83 0f 36 b2 6c 4b 58 05 80 31 39 7e f2 83 ef f1 d2 c7 8b ae 63 54 de 55 6b 1a 7d 63 ac 9a ad 4e 2e 2d 63 36 88 d4 6c cd e4 50 15 f2 30 c9 16 2f 5a d7 4a 66 92 9f 47 89 96 31 41 df d5 f3 ba cd e9 bc de 6a cf 96 b6 fb ef 6b 95 75 b9 b8 61 59 63 6f bb 3b 58 fa b9 4c db e6 5d 0c 00 a0 af e1 cd 3f 91 7c e5 fb 12 56 f1 c9 6e ff c6 66 46 61 d8 54 a6 ce cb c6 28 6c b4 69 51 2d 99 49 ce da 69 26 b8 76 2f 6e 2d 98 60 b7 ec b2 2d 63 82 3e 63 ac 1a 23 9c d7 bd a4 30 6a 55 ee bc 5e c5 6b f0 8d Data Ascii: cmIy=,iUUIA`9{Zm1EIE1]0N76j42_J?6lKX19~cTUk}cN.-c6lP0/ZJfG1AjkuaYco;XL]?\|VnfFaT(liQ-Ii&v/n-`-c>c#0jU^k
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: dc f0 c7 93 ae 03 00 6a c3 9b 1f 2a ba 84 bc d4 a9 3b 11 00 00 d3 a0 4e 6b ae 06 81 79 ef 8d ba 02 13 56 01 20 83 bb 3f fc f8 82 91 3f 59 74 1d 79 e8 cf 00 4c 17 60 00 00 aa a6 2e 3d a3 8c 0d a2 66 3a fb bd 6f fc 39 61 15 00 32 b0 6b 6b df ef e5 1b 45 d7 91 07 47 ab 2a 00 00 95 54 a7 ae c0 51 23 fa c1 37 fe 8c b0 0a 00 19 58 eb af 7b fa 57 55 75 ba d0 01 00 30 4d ea d4 15 d8 5a fb d8 75 3f 2b a2 10 00 a8 38 6b bc fd ee a2 8b c8 43 bf 0b 30 00 00 a8 aa ba 74 05 b6 26 38 72 f8 4d ef 38 fe ba 9f 15 55 0c 00 54 d5 bd 0f 7d f8 7e e7 d2 13 45 d7 91 07 ba 00 03 00 50 6d b5 e9 21 65 a4 96 ed bc ae 2b 30 61 15 00 86 64 ac 7b 4c 46 a6 e8 3a f2 50 9b 0b 1c 00 00 53 aa 4e 5d 81 4d 18 7c ec b5 ff 4e 58 05 80 21 79 6f e8 02 0c 00 00 4a a3 36 5d 81 ad 7d dd 4a 0b 84 55 Data Ascii: j;NkyV ??YtyL`.=f:o9a2kkEGTQ#7X{WUu0MZu?+8kC0t&8rM8UT}~EPm!e+0ad{LF:PSN]M\|NX!yoJ6]}JU
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 2a 00 d4 0c 6b ef d5 57 a3 d5 51 b3 d5 29 ba 0c 00 35 d7 68 b6 15 35 9a da db dd 56 d2 eb 16 5d 0e 72 e4 9d 93 a9 d0 c4 7b 84 55 00 a8 19 5f c1 6e 3e b8 39 1b 84 6a cf cc 55 6e 62 0c 00 d5 65 8c 55 bb 33 a7 a4 d1 d2 de ce 26 bd 76 6a c2 b9 b4 52 b3 c4 13 56 01 a0 66 1c 13 64 d4 4a ab 33 ab a8 d1 2a ba 0c 00 53 2a 0c 23 cd cc 2f a9 b7 b7 a3 de de 6e d1 e5 60 44 55 7b e8 40 58 05 80 9a a9 da 85 08 37 d6 6f 4d 9d 97 b5 b6 e8 52 00 4c 39 23 a3 66 6b 46 61 d4 d0 ce d6 a6 c4 43 d1 ca aa da 24 4b 5c 01 01 a0 46 08 aa f5 d0 68 75 34 33 b7 48 50 05 50 2a 41 10 69 76 7e 51 61 d4 28 ba 14 8c c0 7b 5f 74 09 03 e3 2a 08 00 35 c2 e4 4a 15 67 ac 3a 73 0b 4c a2 04 a0 b4 8c b1 6a cf cc ab d5 9e 2b ba 14 64 54 a5 b9 2d e8 06 0c 00 35 52 a5 0b 10 5e cf da 40 ed b9 05 59 53 Data Ascii: kWQ)5h5V]r{U_n>9jUnbeU3&vjRVfdJ3S#/n`DU{@X7oMRL9#fkFaC$K\Fhu43HPPAiv~Qa({_t*5Jg:sLj+dT-5R^@YS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	49998	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	637	OUT	GET /store/about/cta_hero_hardware_pt1.png?v=2 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/png Content-Length: 66811 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-104fb" CF-Cache-Status: HIT Age: 5045 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d0b85674a8-MIA
2024-04-05 23:18:24 UTC	1071	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 ab 00 00 03 1a 08 06 00 00 00 60 74 d0 55 00 00 0f 41 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ed 99 59 72 e4 b8 11 86 df 71 0a 1f 01 fb 72 1c 24 32 11 e1 1b f8 f8 fe 92 55 d2 a8 d5 d3 9e 68 cf 93 23 ac 0a 15 4b 2c 12 4b 2e ff 42 05 fb d7 3f 6f f8 07 3f 35 c5 18 6a 1b b3 af de 23 3f 75 d5 95 37 1f 66 7c fd ec e7 3d c5 fa bc bf 4e 49 2c ef b3 3f 9c 0f 69 bf bf c8 9c f2 4f af bf e2 ec af 63 fa 38 ff be e1 e3 c8 7d 29 b6 2f 03 cd f3 fe 42 7e fc 62 d5 d7 31 cf 6f 03 e5 d7 a1 f8 8a fc b3 be 07 5a ef 81 4a 7e 7d 91 de 03 ec d7 b6 62 5f 73 7c dd 82 d8 eb f8 be ff 15 06 7e 83 bf d5 f9 e3 b2 7f fa 7b 10 3d 6d cc 53 72 b6 92 4a e4 bd 94 fc 5a 40 f1 df 12 ca 7e 3e Data Ascii: PNGIHDR`tUAzTXtRaw profile type exifxYrqr$2Uh#K,K.B?o?5j#?u7f\|=NI,?iOc8})/B~b1oZJ~}b_s\|~{=mSrJZ@~>
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 5a 49 25 ac 72 2d 55 a1 74 db a1 04 95 ba 55 e9 4b c6 14 ed d4 0f bd d7 b7 c8 69 b9 92 56 2b bd f9 5a 50 79 99 5b a6 59 c9 32 c8 e6 0d 14 62 aa 4c 7e cd db a8 89 ec 0e 10 8c b9 87 56 bf a5 ec 3d bb d5 73 7b 56 12 d4 52 db 69 cd 96 e0 de 69 5a 9b 2b 2a fe 6a b0 08 8d b7 ed 4e c7 e8 73 33 39 67 6b 3e c4 36 c9 79 5f a3 95 d8 d6 8e 6b 19 f5 75 9f 15 51 8c 3b 11 45 19 a5 4d 3b 3e 10 bf 75 9e fc eb da ff 55 c9 43 06 93 f5 2e b2 2e 6d 0f 54 ad 75 b5 dd 87 51 f8 c7 c6 75 b8 81 f7 69 2b b5 9c fa ed 67 25 47 53 1a 93 e2 61 9c 06 42 b5 4e 48 c1 dd 56 3c 85 56 04 a1 75 c0 05 ca d1 aa 97 2b 7f e9 8a b5 17 01 8c ce 21 9c 92 ec 36 59 94 de 6c a7 12 f0 29 17 1e bb d1 b6 5e c2 9a ee 4e 9b 1c d1 b4 32 a7 d6 0d a4 d0 02 a3 19 85 45 72 5a 26 b6 75 96 6d f1 12 d2 44 6d 0d c4 Data Ascii: ZI%r-UtUKiV+ZPy[Y2bL~V=s{VRiiZ+*jNs39gk>6y_kuQ;EM;>uUC..mTuQui+g%GSaBNHV<Vu+!6Yl)^N2ErZ&umDm
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 90 6b 68 dc 1c 90 a4 14 d5 08 4a 8d c1 0b 88 11 c3 98 fb b3 ac 8b 0a 23 15 b8 b1 1e e1 8d 37 3b af ff c0 46 6f e9 f7 cb 0b 1a de 1b 25 9b db 00 1f e9 64 f6 41 87 01 eb 7b a1 f0 0b 20 a6 c7 10 28 14 47 6f 81 34 66 f4 18 85 7d c6 d2 e5 d2 d8 0b b8 e1 30 7b 43 d9 64 27 f9 d5 27 de 46 d0 2d 9a 5d 03 65 ef 67 ea 0c e0 9d d0 c0 c0 67 87 a7 31 51 c0 98 17 b4 a5 74 8d ee 6e 10 45 1b 6e 00 6c cf 45 f7 e2 39 5f ba 17 71 d2 bd cb 58 0b 30 cf 02 c8 1a c0 0e 3c 85 3b 4e c5 d2 0c 57 d3 07 31 57 e0 dc 6d c4 0f 14 40 f0 b8 cb 7d 8c 21 88 ad 76 d0 71 60 cf 45 4f 44 e4 33 e6 14 bc f0 ee 5c 29 80 7a 28 4b 28 02 e9 04 f4 dc c1 0a 27 15 0c dd a3 d0 0e a1 00 68 1d 32 58 97 3f 7b 42 4d 1e 17 74 cb 29 a4 55 fc b3 5d 7f 28 13 cc 21 7f d3 19 08 ec 24 c8 d3 02 75 3b 15 63 f3 d2 a1 Data Ascii: khJ#7;Fo%dA{ (Go4f}0{Cd''F-]egg1QtnEnlE9_qX0<;NW1Wm@}!vq`EOD3\)z(K('h2X?{BMt)U](!$u;c
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: f5 27 3d d7 9f d2 91 78 d0 8c 86 b9 4f d0 c6 13 34 7c 9c cf 39 f1 16 67 a3 de 86 40 de e6 f6 d8 28 17 75 5b 0f 4d 46 ea 88 af 70 64 de c7 30 43 91 04 b1 ef 8a 5e 14 b4 1f 6a 9c d4 b3 6b d6 cb 2b 81 93 59 e8 8f 5c 2f de 8d 89 90 d8 48 21 78 04 9d 2d 2e fd c7 c1 7c 63 c7 81 9d 5d 72 35 6f bc fe e8 a6 58 ce 7a cc dc 83 05 f0 8b e3 d4 8f 1e 38 3e c7 f0 f1 e1 ef 1e ff 3f d0 ff c6 40 f4 cc d5 15 fe 0d ca 01 36 53 fa 07 13 b6 00 00 01 83 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 9c 7d 91 3d 48 c3 40 1c c5 5f 53 a5 22 15 15 33 88 38 64 a8 4e 76 51 11 c7 5a 85 22 54 28 b5 42 ab 0e 26 97 7e 41 93 86 24 c5 c5 51 70 2d 38 f8 b1 58 75 70 71 d6 d5 c1 55 10 04 3f 40 5c 5d 9c 14 5d a4 c4 ff 25 85 16 31 1e 1c f7 e3 dd bd c7 dd 3b 40 68 54 98 66 75 c5 00 4d b7 Data Ascii: '=xO4\|9g@(u[MFpd0C^jk+Y\/H!x-.\|c]r5oXz8>?@6SiCCPICC profilex}=H@_S"38dNvQZ"T(B&~A$Qp-8XupqU?@\]]%1;@hTfuM
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 47 49 4d 50 3a 41 50 49 3d 22 32 2e 30 22 0a 20 20 20 47 49 4d 50 3a 50 6c 61 74 66 6f 72 6d 3d 22 4c 69 6e 75 78 22 0a 20 20 20 47 49 4d 50 3a 54 69 6d 65 53 74 61 6d 70 3d 22 31 36 37 36 35 38 30 30 37 31 31 31 30 38 30 31 22 0a 20 20 20 47 49 4d 50 3a 56 65 72 73 69 6f 6e 3d 22 32 2e 31 30 2e 33 32 22 0a 20 20 20 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3d 22 31 22 0a 20 20 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 47 49 4d 50 20 32 2e 31 30 22 0a 20 20 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 33 3a 30 32 3a 31 36 54 31 32 3a 34 31 3a 30 39 2d 30 38 3a 30 30 22 0a 20 20 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 33 3a 30 32 3a 31 36 54 Data Ascii: mat="image/png" GIMP:API="2.0" GIMP:Platform="Linux" GIMP:TimeStamp="1676580071110801" GIMP:Version="2.10.32" tiff:Orientation="1" xmp:CreatorTool="GIMP 2.10" xmp:MetadataDate="2023:02:16T12:41:09-08:00" xmp:ModifyDate="2023:02:16T
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e d3 51 74 3f 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e7 02 10 14 29 0a 52 f0 f8 3c 00 00 20 00 49 44 41 54 78 da ec dd 59 70 5c 57 9e e7 f7 ef ff dc 4c 2c dc 29 92 a2 48 51 22 29 89 00 48 2d 25 11 5c 54 a5 92 98 50 4d f5 52 5d bd d4 f4 f4 b8 da d1 dd e3 18 cf b4 23 c6 6e 7b bc 3e 38 fa d1 e1 08 bf f8 c5 61 bf 39 c2 31 11 13 7e b1 3d 76 4c 8c c7 31 1e 17 d9 d5 d5 d5 a5 2e 92 6a Data Ascii: <?xpacket end="w"?>Qt?bKGDpHYstIME)R< IDATxYp\WL,)HQ")H-%\TPMR]#n{>8a91~=vL1.j
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 22 cb c5 5a 60 17 90 68 28 da d6 88 11 86 3d b8 96 00 8b 88 c2 aa 88 88 88 2c 7d db f7 1c 34 60 23 71 19 b0 96 00 b7 a7 1a f0 95 b9 dd 38 33 f8 53 85 55 11 51 58 15 11 11 91 65 a1 03 d8 0e 6c d2 7c a6 6d 8d 03 67 8c 30 a6 a1 10 11 85 55 11 11 11 59 2e ba 81 5e 60 a5 86 a2 6d dd 07 1b 0a 1e ea 1a 0a 11 51 58 15 11 11 91 e5 14 56 fb 80 b2 86 a2 6d dd 31 38 e3 8e 0e 58 15 11 85 55 11 11 11 59 fa 8a fd aa eb 81 37 50 73 a5 76 95 02 57 70 bb 7a 76 e8 a7 0a ab 22 a2 b0 2a 22 22 22 cb 42 09 78 05 78 09 35 57 6a 57 53 c0 69 23 dc d3 50 88 88 c2 aa 88 88 88 2c 17 65 e2 7e d5 35 0a ab 6d 6b 12 38 69 1e aa 1a 0a 11 51 58 15 11 11 91 e5 a2 13 78 b3 f8 2a ed 69 cc b0 21 c3 33 0d 85 88 28 ac 8a 88 88 c8 92 57 ec 57 5d 05 f4 a0 fd aa ed 2a 03 ae e1 76 31 37 d7 f9 aa 22 Data Ascii: "Z`h(=,}4`#q83SUQXel\|mg0UY.^`mQXVm18XUY7PsvWpzv""""Bxx5WjWSi#P,e~5mk8iQXxi!3(WW]*v17"
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 8a c8 dc 19 3d c4 63 6b ca f3 fc 9b 5f 05 b6 bb 16 80 89 c8 fc bf b7 bc a4 f9 4a db 72 62 27 e0 3b 98 3e 00 44 44 61 55 44 e6 a8 af 7f 60 05 71 09 f0 56 e6 77 ef 57 b1 6f d5 5e 76 67 a5 46 5a 44 e6 c3 f6 3d 07 13 e2 fe fa 0d 1a 8d b6 35 0a 5c 30 b7 fb 67 06 7f aa b4 2a 22 0a ab 22 32 67 5b 81 5e e2 b2 dd f9 b6 0a d8 9a 13 ba 35 cc 22 32 4f d6 00 3b 80 d5 a8 b9 52 bb ba 06 5c 34 0f 35 0d 85 88 28 ac 8a c8 9c ec 79 ef 50 c9 63 50 dd d1 c2 49 e5 2b 90 ab c9 92 88 cc 97 cd c4 ca 6a 87 86 a2 6d 5d 32 ec 72 e2 49 a6 a1 10 11 85 55 11 99 93 3c b1 55 cc 2c 01 6e 05 77 d8 e6 39 2f 6a b4 45 64 9e 6c 21 36 6f 4b 34 14 6d 6b 18 ec 06 6a ad 24 22 0a ab 22 32 17 7d 7b 2b 01 67 03 d0 43 3c 66 a6 25 ef 25 06 9b cd 6c f3 6b ef 1d 52 d7 4e 11 79 26 db f7 1c 34 62 17 e0 cd Data Ascii: =ck_Jrb';>DDaUD`qVwWo^vgFZD=5\0g*""2g[^5"2O;R\45(yPcPI+jm]2rIU<U,nw9/jEdl!6oK4mkj$""2}{+gC<f%%lkRNy&4b
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 96 69 28 44 44 61 55 44 e6 92 56 57 11 97 cc 6e 6a f1 1d e5 c0 15 9c e3 43 c7 0f 8f cf f5 97 bc 79 e0 50 c8 dd d6 d6 53 fb 08 f8 01 f0 11 f1 8c c5 32 cf 7f df 9a cd 0a b3 eb 8b 5b 23 c8 56 81 29 c3 aa c4 e5 71 53 66 dc 03 6e 03 37 3d b5 eb 9e da 65 e0 3a f8 ad e0 dc e9 dd 5b b9 e7 c6 a4 1b f7 cd 7d ec d4 b1 bf d0 52 62 91 68 15 71 2f 7a a2 a1 68 4b 39 70 d3 b0 61 42 ae e6 4a 22 a2 b0 2a 22 4f a7 b7 7f c0 80 97 89 cb 66 57 b5 f8 ee ea 0e e7 30 3f 39 d7 5f b0 7b 5f a5 3b cb ed 75 77 7e 1f f8 21 d0 43 ec f2 bb 18 96 00 1a b1 02 d4 35 6b 32 47 11 b2 bd 08 b0 f7 88 d5 88 51 37 46 80 6b c0 2d 73 1f 81 70 ab a7 7f 60 c4 f0 1b b8 5d 06 ae 0d 1d 3f 3c b9 67 e0 c3 24 af 05 f2 ba f9 a9 bf 51 87 62 59 fa b6 ef 39 98 00 9b 89 5b 18 d4 5c a9 3d d5 81 f3 e6 36 72 f6 a4 Data Ascii: i(DDaUDVWnjCyPS2[#V)qSfn7=e:[}Rbhq/zhK9paBJ"*"OfW0?9_{_;uw~!C5k2GQ7Fk-sp`]?<g$QbY9[\=6r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	49996	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	637	OUT	GET /store/about/cta_hero_hardware_pt2.png?v=2 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	296	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/png Content-Length: 18662 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-48e6" CF-Cache-Status: HIT Age: 211 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d0be718dd2-MIA
2024-04-05 23:18:24 UTC	1073	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 ab 00 00 03 1a 08 06 00 00 00 60 74 d0 55 00 00 08 7e 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ed 98 59 72 23 3b 0e 45 ff b9 8a 5e 02 49 70 c2 72 38 46 f4 0e 7a f9 7d 90 1a 6c d9 aa 17 e5 7a bf 25 85 94 29 92 09 82 b8 18 2e e4 f6 ff fe 7b dc 7f 78 89 2f c5 a5 5c 5b d1 52 3c af a4 49 63 e7 a6 f9 db ab 5f df c1 a7 eb fb 36 34 bc dc 47 5f c6 5d e8 f7 89 c8 90 dd dd 7e f9 56 6e d7 f0 18 bf 3f f0 b8 f2 5c f0 f9 93 a0 36 ef 13 e3 75 42 d3 ed 1a db 17 41 f1 76 11 d3 c8 ee d7 5d 90 de 05 49 bc 4d 84 bb 80 7e 3b 96 2f da ea e7 23 8c 7d bb de 9f bf 99 81 8f b3 af d4 5e d5 fe f6 bb 62 bd 95 d9 47 62 dc 12 c4 f3 2d 12 6f 0a 88 7d c4 49 bf 6e 3a d3 85 85 e1 7e 7f fb Data Ascii: PNGIHDR`tU~zTXtRaw profile type exifxYr#;E^Ipr8Fz}lz%).{x/\[R<Ic_64G_]~Vn?\6uBAv]IM~;/#}^bGb-o}In:~
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 35 ee 1d a6 e7 f4 d2 96 95 f1 a6 74 36 78 fb dc be ee 0a 3b 94 58 75 38 ea e8 3a da 97 c6 41 e5 2f 7b 4f e8 33 db 37 5d 50 66 49 43 83 39 27 66 5c 35 c8 ce cc 04 65 eb 3a 4b e9 2d 51 3a 71 65 ed c9 71 8e e6 8b f0 c1 f7 a9 fe a7 e0 d9 3d e7 c9 5e a5 eb 04 b5 41 65 1c 49 1b 96 ac 13 4c 0e 07 52 aa ab 01 3f 57 32 23 06 85 b0 5f 63 8c 84 c7 32 82 03 ce 1f 7e 36 e3 fe e4 a1 77 33 ee 37 1f 6a ba f3 bc 06 ea 1e 91 73 87 dc 43 9c 33 c2 b8 06 1d 86 77 19 12 1c 13 e6 0d 90 a3 1c 3a dc e5 94 8d 9d 4f 5e dd 8c 96 3d a9 83 ec 50 6a db 3b aa 41 3e 8d 90 94 b2 c2 80 4e f5 b9 16 42 dc c6 77 80 da 77 43 7f 6c bc 0c 52 44 ff ba ad 4f d0 1a 76 29 57 ce 81 ce b5 7c 3c ea d4 d8 69 7a a0 55 18 7a e4 ca de 45 b4 38 7c 7d 41 de 71 e2 9a 04 2c 35 a4 05 7e 2b 3d d2 e8 1e 5b ce 61 Data Ascii: 5t6x;Xu8:A/{O37]PfIC9'f\5e:K-Q:qeq=^AeILR?W2#_c2~6w37jsC3w:O^=Pj;A>NBwwClRDOv)W\|<izUzE8\|}Aq,5~+=[a
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: ac 55 6a ac 75 4f fe c2 70 5e 5f 59 e6 3a cd 51 24 b0 88 25 a4 20 41 41 0d 65 54 60 23 4a ab 4e 8a 85 34 ed c7 7d fc 23 ae 3f 45 2e 85 5c 65 30 72 2c a0 0a 0d b2 eb 07 ff 83 df dd 5a 85 a9 49 2f 29 1c 07 ba 5f 1c e7 63 0c 08 ed 02 cd ba e3 7c 1f 3b 4e f3 04 08 3e 03 57 7a db 5f 6d 00 b3 9f a4 d7 db 5a e4 08 e8 df 06 2e ae db 9a b2 07 5c ee 00 c3 4f 86 6c ca ae 14 a4 29 14 0a c0 fb 19 7d 53 0e 18 ba 05 7a d7 bc de 5a fb 38 7d 00 32 d4 55 f2 06 38 38 04 c6 8b 94 bd ee f3 ee 9e ce de fe 3d d3 ea ef 07 2c 3c 72 8a 56 2d ba 18 00 00 0e 45 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 Data Ascii: UjuOp^_Y:Q$% AAeT`#JN4}#?E.\e0r,ZI/)_c\|;N>Wz_mZ.\Ol)}SzZ8}2U88=,<rV-EiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 3d 22 2f 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 62 61 64 64 61 65 39 2d 66 63 35 65 2d 34 63 33 64 2d 38 39 36 38 2d 35 36 37 62 64 37 62 65 39 30 66 36 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 47 69 6d 70 20 32 2e 31 30 20 28 4c 69 6e 75 78 29 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 33 2d 30 32 2d 31 36 54 31 32 3a 31 32 3a 32 32 2d 30 38 3a 30 30 22 2f 3e 0a 20 20 20 20 3c 2f 72 64 66 3a 53 65 71 3e 0a 20 20 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 0a 20 20 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 0a 20 20 20 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a Data Ascii: ="/" stEvt:instanceID="xmp.iid:7baddae9-fc5e-4c3d-8968-567bd7be90f6" stEvt:softwareAgent="Gimp 2.10 (Linux)" stEvt:when="2023-02-16T12:12:22-08:00"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:documentID="xmp.did:
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 47 65 9a 80 55 fa 37 bf fb ef d2 79 7f 26 a5 f4 fe 3f fe dd ed ef ac f3 ef 02 00 00 56 2b d7 04 00 00 00 08 ab 00 00 00 20 ac 02 00 00 20 ac 02 00 00 Data Ascii: @GeU7y&?V+
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: ca 6e fe ce e1 1f 45 c4 9f 68 3e 00 00 d8 4c 45 af b7 d4 cf eb 15 e5 4a ae 33 8b b8 9e aa f8 0b 3d 26 ac be 3c a8 be 77 78 90 b2 e5 ee 53 05 00 00 2e d6 b2 cf 77 29 07 83 15 5e 6d 76 a8 1c 58 58 7d a9 b6 ca bf 1d ca 7f 01 00 60 a3 0d 86 a3 c8 b2 6c 39 a1 a2 28 a2 df 1f ae f4 7a 95 03 0b ab 2f f4 5b bf 77 78 2b 8b f4 47 9a 0d 00 00 36 5b 96 e5 31 da de 59 ca 67 0d 87 db 4b 0b be cf bd 5e e5 c0 c2 ea 8b 34 6d f6 97 9a 0c 00 00 ba 61 38 dc 8e de 82 e5 c0 65 d9 8f e1 68 eb a2 22 f6 e1 cd 77 0f 0f f5 9c b0 fa 05 8f 0f 55 3a d0 64 00 00 d0 1d bb 7b d7 e7 3e 6c a9 e8 95 b1 b3 b7 7f a1 d7 9b 52 f6 17 07 b7 0e bd 3e 53 58 7d e6 a6 70 a8 12 00 00 74 4e 96 e5 b1 77 ed b5 73 af 8e 0e 47 db b1 77 ed b5 95 97 ff fe 0a 07 fd dc 9b 49 84 d5 c7 6e be fb fb ef 87 55 55 00 Data Ascii: nEh>LEJ3=&<wxS.w)^mvXX}`l9(z/[wx+G6[1YgK^4ma8eh"wU:d{>lR>SX}ptNwsGwInUU
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 35 8b 07 f7 ee 2e b5 24 75 19 9e 2c 18 cc b3 5f 76 38 dc 8e 5e d9 5f e8 f7 97 65 3f 86 a3 ad 95 7e c7 cb be ce 61 4f b5 68 37 c3 6a e8 d8 65 6b 9a 26 8e 1f 7c be 16 ab a9 cf 33 9d 9c c6 83 7b 77 95 05 03 00 9d 30 19 9f ae c5 6a ea f3 b4 ed a3 f9 e1 f8 ec e4 dc 3f bb bb 77 3d 8a 39 5f 51 58 f4 ca d8 d9 db bf 90 ef 78 99 d7 99 da f8 6d 7f 05 1d 0b ab b7 1e 2d 97 5b 32 5f a2 ba ae e2 e1 83 cf a3 a9 ab b5 bf d6 b6 6d 1e 5d ab c0 0a 00 6c b0 d3 d3 e3 38 3b 7d b8 11 d7 3a 3e 3b 39 77 60 cd b2 3c f6 ae bd 76 ee 55 c7 e1 68 3b f6 ae bd 76 61 ef 82 bd cc eb 4c 99 05 b8 ae 78 fa b8 63 d2 8b 5b 5e af ba fc a0 ba 49 e5 b5 6d db c4 f1 fd 5f c4 ee b5 d7 a2 37 e7 93 30 00 80 cb 72 f2 f0 c1 a5 1c 60 b9 68 60 6d da 26 76 76 ae 9d 2b 08 6e 6d ef c5 60 38 8a b3 d3 93 17 96 Data Ascii: 5.$u,_v8^_e?~aOh7jek&\|3{w0j?w=9_QXxm-[2_m]l8;}:>;9w`<vUh;vaLxc[^Im_70r`h`m&vv+nm`8
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: fd da 3b bf 39 f7 cf 4f 96 f8 7a 1e 00 80 8b 9a 7b 6d ef ed 5f 78 50 7d 36 b0 ce bb e5 eb c9 5e 50 10 56 79 65 b3 d9 64 ee a7 51 37 de 78 7b a5 7b 54 5f 65 b0 be f1 c6 db 73 0f 98 f6 23 00 00 97 61 32 39 9d eb e7 8a 5e 2f de 5e e0 61 fd 32 bc fd f5 df 8a a2 98 6f 8f 6c b5 e4 bd a5 4f 83 40 be dc 83 33 73 07 71 22 ac ae 49 58 9d 4e e7 fa b9 fe 60 18 37 be fa f6 a5 5f ff af bd f5 ce dc 03 e6 6c 36 75 03 00 00 17 aa 69 9a b9 f7 58 de 78 e3 ed 4b a9 68 7b 56 39 18 c6 57 de f8 da 7c 61 b5 9a ad a4 14 b8 58 f2 01 53 bd a2 74 a3 22 ac ae 83 79 57 17 7f ed ad 77 2e 7d b0 7c 32 38 cd 3b 60 2a 45 01 00 36 65 ee d5 1f 0c 2f ad fc f7 97 42 f3 57 ff d5 dc 8b 05 ab 98 7f 95 65 7f c9 81 7c e0 46 45 58 bd f4 c1 b2 ae e6 2a 01 2e 8a 5e ec 5d 7f 7d 6d be c7 bc 03 66 4a ed Data Ascii: ;9Oz{m_xP}6^PVyedQ7x{{T_es#a29^/^a2olO@3sq"IXN`7_l6uiXxKh{V9W\|aXSt"yWw.}\|28;`E6e/BWe\|FEX.^]}mfJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.5	49999	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	631	OUT	GET /store/about/cta_hero_steamworks.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/png Content-Length: 43398 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-a986" CF-Cache-Status: HIT Age: 2341 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d0bbd64954-MIA
2024-04-05 23:18:24 UTC	1072	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 88 00 00 02 dc 08 06 00 00 00 8c e3 8b 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 a9 28 49 44 41 54 78 da ec dd 6f 6c 1c f9 99 27 f6 22 d9 64 8b a4 c8 91 34 9a 91 3d f2 0d e5 f3 dc ed 40 f6 e1 c6 40 76 05 2c 02 ac 1c 60 1d ec 2b 4f 12 04 01 92 c0 3b 41 f2 e2 92 7b b1 be 03 72 6f ed 7d 77 b8 37 de 7b 11 04 01 12 78 6d dc 9b 24 2f d6 17 e0 5e ec 1a 88 67 0f 8b c1 d9 3e c4 f6 9e c7 90 73 e3 8c a4 1d 8d 47 33 12 a5 21 29 52 cd bf e9 a7 d8 45 15 5b cd ee ea 66 93 ac ee fa 7c 80 36 67 46 d5 dd 55 bf ae 6a b9 be 7c 7e cf 2f 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2a 9a 30 04 c0 b8 5b ba 7e e3 42 f3 c7 1b ad c7 05 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<(IDATxol'"d4=@@v,`+O;A{ro}w7{xm$/^g>sG3!)RE[f\|6gFUj\|~/I*0[~B
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: ee de f2 e1 03 00 c0 18 ab 19 02 80 e2 22 2c f9 e0 d6 4f ce 74 1f 22 ac 11 d8 00 00 00 c3 a4 82 08 00 00 00 a0 e2 04 44 00 00 00 00 15 27 20 02 00 00 00 a8 38 01 11 00 00 00 40 c5 09 88 00 00 00 00 2a 4e 40 04 00 00 00 50 71 02 22 00 00 00 80 8a ab 19 02 80 fe 9c bf f8 72 52 9f 5b 2c bc fd fa ca 72 b2 b1 ba 3c b4 f7 9f 5d b8 94 cc 2d 5e 2a ed f8 3c fa e8 76 b2 bb b3 dd 73 bb ff aa f6 72 b2 38 31 d5 75 9b 9f ec ac 25 ff 76 77 75 28 63 b2 d5 d8 48 56 1e dc eb f9 5a 5f 99 ba 90 bc 3e 39 db 75 9b 5b bb 1b c9 0f 77 1e bb 18 00 00 18 1b 02 22 80 3e 44 38 f4 d9 d7 be dc d7 73 2e bd f2 85 e4 f6 5f ff eb 34 a0 38 ae fa dc 42 f2 b9 d7 7f bb d4 63 34 7f e1 e5 e4 ee bb ef 74 dd e6 bf 9f fe 6c f2 0f 6a 9f ed f9 5a ff a0 f9 b7 d4 1f 3c fd 45 f2 e1 de e6 91 db 44 38 54 Data Ascii: ",Ot"D' 8@N@Pq"rR[,r<]-^<vsr81u%vwu(cHVZ_>9u[w">D8s._48Bc4tljZ<ED8T
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 0d 96 ca a4 36 a3 6a a8 2c a6 6a 7e 57 03 00 c0 d9 13 10 01 9c 02 d3 b8 00 00 80 32 13 10 01 00 00 00 54 9c 80 08 00 00 00 a0 e2 04 44 00 00 00 00 15 27 20 02 00 00 00 a8 38 01 11 00 00 00 40 c5 09 88 00 00 00 00 2a 4e 40 04 00 00 00 50 71 02 22 00 00 00 80 8a 13 10 01 9c 82 c6 fa 4a a9 f6 67 7b 73 23 d9 dd d9 f6 c1 94 c0 ce b6 cf 01 00 80 b3 57 33 04 00 c5 ad 3c b8 97 2c bc f8 4a 32 5d 9f 2d fc 9c c6 fa 6a b2 be b2 5c aa e3 d8 6a 6c 24 1f fe fb 9f 26 17 ae 2c 25 53 35 7f 15 9c e5 e7 f0 c9 dd 5b 06 02 00 80 33 e7 ae 00 a0 cf 1b fa db 7f fd af 93 d9 85 4b 85 b6 df dd d9 4a 03 a2 32 da 58 5d 4e 1f 00 00 00 02 22 80 01 08 56 00 00 80 71 a2 07 11 00 00 00 40 c5 09 88 00 00 00 00 2a 4e 40 04 00 00 00 50 71 02 22 00 00 00 80 8a 13 10 01 00 00 00 54 9c 80 08 00 Data Ascii: 6j,j~W2TD' 8@N@Pq"Jg{s#W3<,J2]-j\jl$&,%S5[3KJ2X]N"Vq@N@Pq"T
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: b6 65 0e 87 42 54 37 2d 5e be ea 04 06 00 60 e8 54 10 01 f4 29 c2 86 fa dc 62 e1 ed cb 38 2d a8 8c d3 ca 4e da 74 7d 76 2c 8e 63 aa 36 ed 22 04 00 60 e8 04 44 00 7d 88 90 e1 d5 2f fe 6e 1a 12 15 65 5a 10 00 00 50 76 a6 98 01 f4 21 a6 f7 f4 13 0e 85 98 16 34 b7 78 c9 e0 01 00 00 a5 25 20 02 38 05 fd 4c 49 03 00 00 38 6d 02 22 00 00 00 80 8a 13 10 01 00 00 00 54 9c 80 08 00 00 00 a0 e2 04 44 00 00 00 00 15 27 20 02 00 00 00 a8 38 01 11 00 95 b0 b3 bd 6d 10 00 00 e0 08 02 22 80 0a ba fd ee 66 f2 d1 ed 72 07 26 8f 3f d9 69 ee e3 56 d7 6d 36 56 97 0b bf de ea c3 7b 3d b7 e9 e7 f5 ce c2 ee ce 76 b2 f2 e0 9e 13 18 00 80 a1 ab 19 02 80 6a fa ee b7 96 93 37 6e ce 26 e7 e6 cb f7 bb 82 a7 4f 76 93 9f bd bd d1 fc b9 d7 75 bb 0f ff fd 4f 93 f3 17 af 24 d3 f5 d9 ae db Data Ascii: eBT7-^`T)b8-Nt}v,c6"`D}/neZPv!4x% 8LI8m"TD' 8m"fr&?iVm6V{=vj7n&OvuO$
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 6e e6 fe f9 4d c3 c1 a8 a9 cf 2d 14 de 76 ba 3e 6b c0 00 00 a0 02 04 44 d0 87 af ff e0 ab 37 9b 3f 2e e4 fe d3 d7 8c 0a 00 00 00 a3 4e 40 04 fd 69 0f 84 de 68 35 ad 06 00 00 80 91 25 20 82 fe dc ec f0 df 4c 33 03 00 00 60 a4 09 88 a0 a0 af ff e0 ab 31 b5 ac 53 53 6a cb dd 03 00 00 30 d2 04 44 50 dc 51 95 42 6f b6 c2 23 00 00 00 18 49 02 22 28 ae 5b a5 90 69 66 00 00 00 8c 2c 01 11 14 d7 2d 04 32 cd 8c ae 76 b6 b7 0c 02 00 00 50 5a 02 22 28 e0 eb 3f f8 6a f4 1e ea 36 8d 4c 05 51 45 34 d6 57 06 7a de 93 c7 1f 1b 3c 00 00 a0 b4 6a 86 00 0a e9 15 00 5d f8 fa 0f be fa e6 f7 7e ff 2f be 6f a8 c6 db da a3 8f 93 df bc f7 d3 a4 3e b7 58 f8 39 eb 2b cb c9 56 63 c3 e0 01 00 00 a5 25 20 82 62 be 56 60 9b 98 66 26 20 aa 80 08 89 e2 31 ca fb 3f bb 70 a9 f0 b6 00 00 c0 Data Ascii: nM-v>kD7?.N@ih5% L3`1SSj0DPQBo#I"([if,-2vPZ"(?j6LQE4Wz<j]~/o>X9+Vc% bV`f& 1?p
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: d5 d7 92 4b af 7c a1 d4 e7 dd 07 b7 7e 92 2e 0f 0f 00 00 27 c1 14 33 80 3e 44 28 b1 78 f9 6a a1 70 28 fd 92 6d 6e 17 cf 89 ea 94 b2 28 73 38 14 ce cd 4f 24 6f 7c a5 fb 3e c6 67 50 d4 e2 e5 57 7a 6e b3 f0 e2 2b a5 3f f7 e6 16 2f b9 00 01 00 38 31 02 22 80 3e 4c d5 06 9b 82 14 15 47 0c f1 2f af a9 e1 16 c0 4e d7 67 0d 2a 00 00 d5 fe ff d8 86 00 00 00 00 a0 da 04 44 00 00 00 00 15 27 20 02 00 00 00 a8 38 01 11 00 00 00 40 c5 09 88 00 00 00 00 2a 4e 40 04 00 00 00 50 71 02 22 00 00 00 80 8a 13 10 01 00 00 00 54 9c 80 08 e0 14 ec 6c 6f 19 84 3e 3c 7d b2 db f5 cf 77 77 b6 87 fa 7e 5b 8d 0d 83 0e 00 40 a5 09 88 00 fa 30 68 90 b0 b1 ba 5c 9a 63 f8 37 ff 6a bd d4 63 fc f4 c9 5e f2 b3 b7 bb 8f f3 c3 7b ef 15 7e bd 95 07 1f f6 dc 66 f9 c3 5f 97 7a 4c 22 10 5b 7b 74 Data Ascii: K\|~.'3>D(xjp(mn(s8O$o\|>gPWzn+?/81">LG/NgD' 8@N@Pq"Tlo><}ww~[@0h\c7jc^{~f_zL"[{t
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 0b 50 22 08 ca 2a 84 3a c9 2a 71 f2 d5 41 11 a4 9c b5 38 8e a3 aa 80 8a 84 46 93 ad 7f ce fe 2c 2f 8e 2f a6 c5 9d c1 31 67 53 d1 2a 11 16 2d 5e be 9a 5c 7a e5 0b 7d 3d 67 76 e1 52 72 f7 dd 77 92 c6 fa ea 50 f6 a1 df 80 0a da 7d 72 f7 56 d7 f3 f1 a5 57 5f 4f ea 73 0b 43 79 af 95 07 1f 36 1f f7 0c 3a 00 40 c9 09 88 e8 a9 d5 53 e8 ad 64 3f 18 ba 76 1a ef 99 05 23 f1 33 0b 84 8e 72 dc 30 68 bf ea e8 70 6f a0 a3 2a 72 3a 55 26 cd 5f 7a 39 59 7f f4 a0 f0 f4 af 38 a6 6c da 5b f4 3a ea 36 75 ac 68 68 94 1d 47 d2 16 9c 9d 41 50 96 0f 8b fe b4 f9 f3 5f 8e 5b cf a2 e9 fa ec 40 cf 8b 90 68 18 01 d1 f9 8b 2f f7 1d 50 41 bb cf be f6 e5 e4 f6 5f ff eb 8e 7f 76 e1 ca 52 fa 18 96 fd 73 7f 65 68 01 29 00 00 27 43 40 44 47 cd 9b fb ac 49 71 84 42 37 4f f2 bd 22 74 99 9a 99 Data Ascii: P":qA8F,//1gS-^\z}=gvRrwP}rVW_OsCy6:@Sd?v#3r0hpor:U&_z9Y8l[:6uhhGAP_[@h/PA_vRseh)'C@DGIqB7O"t
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 3d af 57 d5 4f 8c 55 fe bd d2 8a ac e6 73 da ab 89 da 9f 73 10 16 b5 1a 75 b7 af da 36 a0 b7 92 67 7d 8a fe d8 95 0d 00 00 70 32 04 44 63 66 d8 c1 50 bf 95 2a fb c1 c5 ca 73 a1 4d 04 0b 11 30 3c ab 60 59 e8 38 9d 2a eb 87 b3 b9 be da f1 7d b3 25 e3 bb 35 4c ee 27 30 e9 78 0c 6d 4d a9 b3 a0 66 10 31 d5 6c 3d 9d d6 b5 bf af 1b 9f 3e 4a e6 5f 7c a9 70 15 53 1a aa b5 82 97 a3 aa 8a d2 06 d2 cd c7 51 9f 55 84 34 31 e5 ae 7d f5 b4 f6 f7 c9 57 85 c5 18 44 ef a4 2c 44 ea 55 4d 74 e8 9c a9 4d 37 c7 6b fa c8 55 db 06 74 b3 f5 b8 ed 2a 07 00 00 18 3e 01 d1 98 18 76 30 34 48 c8 12 95 26 9b 4f d6 9e ab 1a 8a a0 a0 bd fa 26 3f 9d aa 53 33 e9 7c 85 4c ba e4 7b 6d ba 67 d5 4b 54 0a 45 c0 31 c8 34 b5 4c a7 a6 d4 b3 2f 5c 1c f8 f5 0e 9a 56 b7 7a 19 65 af 3f 7f f1 72 df af Data Ascii: =WOUssu6g}p2DcfPsM0<`Y8}%5L'0xmMf1l=>J_\|pSQU41}WD,DUMtM7kUt*>v04H&O&?S3\|L{mgKTE14L/\Vze?r
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 8f 6b a7 66 e0 c7 3e ae fa b9 f4 1c cc 4f 2d 4b 7b 3a ad ad a4 55 53 c7 0d 76 e2 dc 9b bf f4 f2 b1 aa 92 c2 c4 f4 6c 94 96 f9 d2 01 00 00 c8 ee e7 0c c1 d9 6b ad 4e 16 55 43 d7 06 79 fe 71 57 25 cb 3b ad aa a1 2c 38 38 ab 70 28 44 13 e4 4c 1c db 30 c6 af f0 85 57 af 27 13 6b 93 e9 18 44 68 12 41 d5 b0 c7 b7 93 93 ae 24 0a f1 3a b3 8b 17 4f ac 9a 28 3b e7 e3 d1 69 45 bd 42 26 a7 93 c9 73 2f 24 7b 5b 1b cd c7 7a df ef bf 78 f9 6a f3 f1 4a a1 6d 77 b6 b7 93 d5 87 f7 92 b5 47 1f fb b2 03 00 00 4a 4b 40 74 86 5a 4d a8 a3 cf d0 37 06 79 7e 04 0a d1 ff 66 18 c1 c2 69 f5 1a ca 9c 75 38 14 a1 4c 16 92 84 22 bd 87 86 29 c6 33 42 a2 6c 1f 22 ac 3a 8d 80 28 1b e7 fd f7 3c 1c 12 45 2f a4 a1 7e b9 44 35 d1 cc 4c 1a 12 65 d3 e9 b2 6a a2 f8 f7 e3 56 01 65 e7 67 ba ea d9 Data Ascii: kf>O-K{:USvlkNUCyqW%;,88p(DL0W'kDhA$:O(;iEB&s/${[zxjJmwGJK@tZM7y~fiu8L")3Bl":(<E/~D5LejVeg
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 28 f6 25 2a 88 32 33 67 dc 9c ba 5d 59 a6 99 65 ce 62 ba 59 c8 aa 89 d2 eb 21 17 06 65 d5 44 51 11 d7 d7 aa 64 5d 44 35 d1 20 53 2c 9f ac ad 26 1f de fe 55 7f fd 8c 00 00 00 4a 4e 05 d1 10 0c 3a a5 6c d8 53 bd ce ba 6a 28 f3 b4 6d fa ce 59 87 43 21 5f 91 12 61 d9 49 4f af eb 57 99 a6 99 65 22 a8 d9 d9 de 3e f8 2c 4f ab 92 28 fb 8c 3a 55 f9 c4 18 45 80 36 ac 95 fd 06 ad 26 da 68 6e 7b e7 df ff 75 f2 99 bf f5 5a 32 3b bf 90 00 00 00 8c 3a 15 44 c7 d4 9a 52 16 8d a8 fb 0a 87 86 d9 20 ba 0c 55 43 99 a8 32 c9 2f 29 5e 86 70 28 2a 3d f2 7d 98 ea 25 bc a1 4f a7 99 e5 ce 85 f6 be 51 67 21 02 aa b9 0b 97 9e db af d3 a8 24 ca 74 aa f2 89 cf 73 fd f1 c3 a1 57 13 f5 5b c5 17 fb 11 95 44 9f 3e bc 5f 68 fb f5 95 65 5f 98 00 00 40 69 09 88 8e 61 e9 fa 8d 08 85 fa 5a a5 Data Ascii: (%23g]YebY!eDQd]D5 S,&UJN:lSj(mYC!_aIOWe">,O(:UE6&hn{uZ2;:DR UC2/)^p(=}%OQg!$tsW[D>_he_@iaZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	50009	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	403	OUT	GET /steam/apps/306130/capsule_231x87.jpg?t=1712247229 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/jpeg Content-Length: 10599 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "5ab151c7-2967" Expires: Thu, 11 Apr 2024 16:13:51 GMT Last-Modified: Tue, 20 Mar 2018 18:24:07 GMT CF-Cache-Status: HIT Age: 111872 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d43ccca551-MIA
2024-04-05 23:18:24 UTC	928	IN	Data Raw: ff d8 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff dd 00 04 00 1d ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff c0 00 11 08 00 57 00 e7 03 00 11 00 01 11 01 02 11 01 ff c4 00 9d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 03 09 01 02 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 06 10 00 02 01 03 03 02 04 04 05 02 05 03 02 07 00 00 01 02 03 04 05 11 Data Ascii: AdobedW
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: a0 29 e5 95 07 48 c2 85 bd cd 0b b4 c1 98 b2 93 c9 f2 33 fc 69 1b 08 13 59 6d 8d 7c 40 14 33 cf d9 54 fa 60 fb f7 fa e9 28 62 05 76 cd 91 29 79 42 c9 0c 6a 03 1e d9 0a 3d 5b 27 f6 d3 58 c5 0c b4 b4 96 e9 52 28 6e 31 01 5c 47 66 40 19 58 76 c8 1f 42 75 ac c5 0c dd 59 83 63 7e 21 4d 34 f1 d6 73 5f 28 ce 58 9c 7a a8 1e 98 d5 21 06 fa 12 54 24 af bd 71 ba 56 3c d2 44 bf e5 e7 61 91 c8 83 d8 e4 7e da bc 70 93 72 3f ff d0 ce b0 5a 6b e3 60 23 a0 95 22 24 f8 67 90 7c fe c4 7a eb e7 1c 91 eb 8e dd 91 7b ab b3 44 29 a3 2f 12 49 8f 9a 5f 5e e3 eb a8 27 b3 3d 9a 53 6f 5e 2b 27 f9 79 22 f2 c9 df 9b 29 19 6c 7b 95 ff 00 c6 a8 98 3b 34 de c6 dd f7 3b b4 71 5b a7 92 3f 98 84 11 4c ec 08 2e aa 32 41 3e e4 6a d0 95 ad 91 9c 12 63 59 ae 55 f4 51 07 34 46 b1 42 f3 75 8c 8c Data Ascii: )H3iYm\|@3T`(bv)yBj=['XR(n1\Gf@XvBuYc~!M4s_(Xz!T$qV<Da~pr?Zk`#"$g\|z{D)/I_^'=So^+'y")l{;4;q[?L.2A>jcYUQ4FBu
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 1a e3 1d 08 9c 9f 0d 90 dc 10 16 56 20 82 a0 f9 7b 67 19 d1 c7 15 75 24 5e 4d d5 a6 6f 0f 83 0d db 3d 8a c5 5b 6b dc 57 6a 4b 74 1b b0 2d 7e de b1 c9 27 85 2b 4b 08 09 24 81 5c e1 59 d4 8e 4b 9c f6 5f 7f 4e af 4b 4a 72 8a 7a fe 4e 5f 57 17 28 46 4f bd fd 8d df 2e e9 a3 a5 89 e6 92 70 22 88 79 e4 04 b7 7f a0 0a 09 27 ec 35 dd d1 e7 71 11 9d 62 f8 84 e9 c6 c4 db f7 2b 6e fc dc 14 f6 34 dc 34 53 51 5b ac cc b2 55 5d eb 9a a1 0c 6a 29 68 29 f3 21 c9 3d 8f fb 8d 3f 3d 3a fb 81 47 66 0e f8 81 ea cc dd 56 b3 4d d3 ab ac 37 2b 75 ce cb 4b c2 eb 51 70 8e 08 e5 ad 36 d8 85 75 34 d4 e8 92 3b b1 95 cb 29 2e ab 85 e2 dc 79 6b 9b 3c fe 2f 14 9f 5d 9d 7e 9a 6b 03 93 71 bb 5a f9 3f 73 1b da fa 83 7f 63 4d 63 92 d3 6d b4 59 36 e7 68 ae 30 51 19 e4 9e a2 5e 1f e5 ea 04 cd Data Ascii: V {gu$^Mo=[kWjKt-~'+K$\YK_NKJrzN_W(FO.p"y'5qb+n44SQ[U]j)h)!=?=:GfVM7+uKQp6u4;).yk</]~kqZ?scMcmY6h0Q^
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: b2 df 70 ae bc d9 37 a5 4d 3c f0 dd 6d c6 e2 93 59 6b 3c 41 13 42 cb 24 f1 46 20 71 2a 48 63 7e 51 20 93 b6 58 e0 10 ce 6e ff 00 12 60 51 f6 11 bd 7f eb 5d 46 ed de 55 57 db 85 86 ab 6f c7 73 a0 a5 a6 8f 6d 5c 64 46 96 96 5a 38 80 78 1a 68 c9 47 12 b1 f1 11 94 e1 97 1f 7d 75 e2 a9 2b 44 72 26 9e cc af ff 00 c4 6a 38 27 9c 4b 05 6a 24 15 22 7a 13 45 e0 bc 1f 33 90 c5 a4 82 71 e6 8c 67 b0 ef c8 f7 23 18 d2 67 f4 d3 cc 92 4d 57 94 ef f7 45 fd 36 48 63 76 d3 bf 1d 7f 27 a4 5f 08 dd 56 aa de 5d 5c b2 35 25 bc 2e dc a7 e9 ed e6 8b bc 08 b3 5a 6a 22 b8 53 19 27 92 58 c6 0f e2 2e 81 78 16 ed c7 03 df 5c f8 7d 1a f4 f8 f8 b7 bb 29 9f d4 fc 6c 96 93 a3 d2 5f c6 61 a6 c3 c1 28 3d bc 80 c6 09 04 fa fa ea 52 40 2b bf 1a a0 13 b5 4d 6d ce 2a 38 99 48 92 1a 38 8a cc c3 Data Ascii: p7M<mYk<AB$F qHc~Q Xn`Q]FUWosm\dFZ8xhG}u+Dr&j8'Kj$"zE3qg#gMWE6Hcv'_V]\5%.Zj"S'X.x\})l_a(=R@+Mm8H8
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: c4 eb 0f 6c 5b 8e e3 6c 91 e5 a2 9f 89 98 0f 1a 26 19 46 c7 a6 57 eb f7 d4 e5 14 cc 9b 43 69 77 d4 55 b6 7a 9a 66 3f 2f 5b 2a 71 10 b1 cf 3f 4c 94 3f f1 eb a9 c6 34 c6 93 d0 f7 b1 ee 74 a6 82 d3 19 95 d5 56 86 9c 06 52 0f 70 a7 3d b4 f2 ec 11 da 18 d4 db be 96 48 81 f1 d8 b3 10 32 c3 ff 00 1a c6 76 7d 93 73 c4 b9 21 ce 33 ea 1b 5a 8c 0e 57 6f 35 4c f8 72 f9 bb fa 9c 69 e3 11 5b 17 37 dd fa e2 9e ad 25 49 e0 4a 75 69 9e a4 10 a0 c6 80 96 3c cf 65 18 fa 64 e3 38 1a 8b 9a 94 da 6b af ef 61 aa 46 2c 5e a8 da 28 69 ee 7f 3b 1d 34 f5 57 ba 89 66 92 e1 1c 8d 2b d5 39 c0 e4 c8 3c dc a2 5e 2a 31 db 00 0f 7d 56 1c 9e d8 ce 90 a7 8f f0 3d cd 56 ff 00 8e ee 3a eb 3d 44 53 c9 25 b4 8a 58 de 35 0e 70 04 92 93 91 cc 7e a0 46 32 75 5b 7f a0 13 5e 74 cf bb c2 ab 75 41 6c Data Ascii: l[l&FWCiwUzf?/[q?L?4tVRp=H2v}s!3ZWo5Lri[7%IJui<ed8kaF,^(i;4Wf+9<^1}V=V:=DS%X5p~F2u[^tuAl
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 45 55 4f eb 7f b8 78 3f 28 4f 6d 7b 45 9a 97 a2 dd 64 ea 7d 46 d0 5a 6d c7 b4 b7 4e d6 b6 50 08 ea a5 68 23 b6 df 56 e7 f3 74 b2 43 23 b8 c0 34 68 a1 98 16 19 3d fd f5 76 df 34 af 54 ff 00 81 17 4d 91 7a 15 d3 ca 7d cd 73 df 17 4d db b1 7e 7b 6e 51 ec 3d c9 7c b4 b3 d4 4b 46 28 67 a7 b6 cd 51 41 54 91 a4 b1 c9 34 5e 2a 2a 8e 4a 63 6e 5e fa 4c f3 e2 92 4f 76 90 d0 57 d8 88 b6 ed dd d3 59 6d 82 fd 6b b0 56 d7 db a8 e2 a9 71 3a c2 c7 c5 a4 a4 05 aa 5a 35 f5 74 85 09 f1 19 41 09 8c b1 1a bb 6a e9 b1 09 a3 a7 5b fe 8e df 45 b9 60 d9 f7 97 db 37 2a 09 6f 96 6b e9 a2 94 d3 3d 04 12 98 24 a8 59 59 0a 71 8e 50 63 2d e9 c8 6b 7c 48 f5 7b 35 31 97 f0 bf 43 b7 6f 9d 50 ac a7 dd 52 d3 1b b4 96 3b 9d 56 c7 b5 dd a4 14 d6 fb 95 fe 18 89 b7 d1 56 ca cd 1a a4 52 49 eb c9 Data Ascii: EUOx?(Om{Ed}FZmNPh#VtC#4h=v4TMz}sM~{nQ=\|KF(gQAT4^*Jcn^LOvWYmkVq:Z5tAj[E`7ok=$YYqPc-k\|H{51CoPR;VVRI
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: b7 bc 7b 17 71 ed 1d 9a bb 3b 70 d8 23 b3 54 1b 95 5c 74 f2 54 97 9a dd 71 8a 02 3c 0a ef 98 66 95 1a 48 48 66 72 fc c3 76 a4 71 b5 26 9a b4 dd ff 00 ea f9 13 72 d6 81 be a0 6e 5d b5 7c e8 57 c3 a6 cf a1 dc b1 a5 f7 61 d1 ee 7a 7d ef 6b 09 50 86 04 b9 dd 5a e1 48 43 b2 2c 72 7e 5b 90 c1 18 e1 bb 7d f4 f0 8b 53 93 ae ea be c0 6f 48 9d d1 ed c1 d3 1b 2d a2 f3 57 be 2f 09 69 aa dd 56 ab ae de d9 32 47 10 b8 bd b2 b0 d3 62 3b c5 e2 15 0d 22 c4 24 93 c3 85 63 52 dd de 50 99 89 19 97 2c 66 dd 47 c7 7f e9 06 2d 79 0f 6d dd 73 a2 da bd 00 dc 9d 30 dd fb a2 9f ab 9b 8a ed b9 2c b7 4d a1 43 13 cd 51 4b b7 68 ed 73 99 aa e5 8a ae 74 4e 2f 5a 08 84 45 17 65 4e 4c f8 2d c4 a3 c3 cb 22 92 54 a9 fe bf f8 15 3a 54 2c be 21 6e bb 0b 7c ef 8b ff 00 52 76 7e ff 00 a6 a8 83 Data Ascii: {q;p#T\tTq<fHHfrvq&rn]\|Waz}kPZHC,r~[}SoH-W/iV2Gb;"$cRP,fG-yms0,MCQKhstN/ZEeNL-"T:T,!n\|Rv~
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 17 47 76 05 bf e9 32 f7 c1 1e 87 f9 d2 b0 96 d4 27 6c cd 4a b2 d7 dd 6b 61 a8 74 cf 85 0d 3a b8 0d e8 41 25 c7 df 43 f1 07 41 9d ae dd d1 69 84 66 f5 bd 77 15 21 38 32 0a 7b 5c 52 71 ec 73 dc cb df be b5 cf d9 1b 41 7d 3d 83 e1 5d a9 95 eb 7a 99 be 05 49 53 ce 18 2c 94 fc 43 7b 60 b4 be 9a 65 c8 0e 8a aa fb 17 c2 9c d1 aa a7 51 f7 ec 35 31 1e 51 87 b3 52 b2 9c 8c 7f 4c 99 d3 6c 1a 33 05 cc 52 25 7d 7c 36 ea 97 ab b7 c5 3c ab 6f 96 64 09 2b c0 ac 7c 36 91 14 90 ac cb 82 40 27 07 df 4c 90 0f 48 f6 46 cb a1 a2 dc 3f 0c 11 ec 2d b9 6b de bd 0d df 36 1b 33 75 f6 ef 5b 45 4f 51 0c 15 12 56 4d 16 e7 4b ad 73 a9 96 de 68 e9 8f 28 99 64 8f 82 84 91 0b 13 93 c5 27 f9 b9 3f c5 7a fe 0b 2f 15 d7 93 02 dd 29 b6 ec 7d 4f ab a0 d9 b5 33 dc 36 bc 7b 95 e9 f6 c5 5c d1 2c Data Ascii: Gv2'lJkat:A%CAifw!82{\RqsA}=]zIS,C{`eQ51QRLl3R%}\|6<od+\|6@'LHF?-k63u[EOQVMKsh(d'?z/)}O36{\,
2024-04-05 23:18:24 UTC	88	IN	Data Raw: 09 6a b5 7c 33 21 52 f9 38 51 9c 0c 9f 42 74 28 36 58 45 75 75 58 d1 46 58 80 19 db b8 52 7d 31 fb 68 38 9a c9 f1 d7 8e 61 90 9c b4 7c 49 61 91 9f 72 07 f7 f7 d0 e2 1b 3b 41 70 82 58 dc cf e2 a2 c3 1a a5 44 90 9f cd 99 89 f2 a8 2d d9 55 40 cf dc eb 50 1b 3f ff d9 Data Ascii: j\|3!R8QBt(6XEuuXFXR}1h8a\|Iar;ApXD-U@P?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	50003	23.47.27.74	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	1168	OUT	GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
2024-04-05 23:18:24 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Content-Type: text/html; charset=UTF-8 Content-Length: 147 Allow: POST Expires: Fri, 05 Apr 2024 23:18:24 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Apr 2024 23:18:24 GMT Connection: close
2024-04-05 23:18:24 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 54 68 69 73 20 41 50 49 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 61 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Method Not Allowed</title></head><body><h1>Method Not Allowed</h1>This API must be called with a HTTP POST request</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	50008	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	404	OUT	GET /steam/apps/2881650/capsule_231x87.jpg?t=1712153694 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/jpeg Content-Length: 11642 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "66099ba5-2d7a" Expires: Wed, 10 Apr 2024 14:14:54 GMT Last-Modified: Sun, 31 Mar 2024 17:21:41 GMT CF-Cache-Status: HIT Age: 166917 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d45f10b3ce-MIA
2024-04-05 23:18:24 UTC	928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 06 03 04 05 07 08 02 09 01 00 ff c4 00 46 10 00 01 03 02 05 02 04 05 03 01 04 06 08 07 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 22 41 51 09 14 32 61 71 15 23 81 42 Data Ascii: JFIF,,CCWF!1"AQ2aq#B
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: bd c1 03 ff 00 4e f8 10 0d a5 52 a1 26 63 81 79 96 2b 7b 52 e2 0a 25 25 e4 5c ed 22 d7 09 23 bf df 0e 8c 82 71 28 92 a9 cf a2 62 6a b0 25 36 d3 89 49 4c 79 a9 52 cd f8 e1 17 0a 3d fd 06 21 51 dc c9 0e 88 ab de e2 81 4b 60 8f dc b9 3e 61 7f 5c 64 51 85 4e 5b 9f 2d 29 94 b8 e1 0d c9 de 0d cd ac 41 ff 00 2c 4f 12 09 50 65 3a a5 be d9 5b 84 a9 20 82 14 78 20 ff 00 eb 82 ea 4e c7 1e 0f 8d 31 4d a5 49 41 5b bb 02 94 6c 05 cf 73 8e 39 da 2d 96 c6 cb c8 15 9a 5c 7d 30 66 9b 16 33 6f 49 55 a2 bc c0 58 6c 6c 02 c9 73 79 3c 10 41 b1 17 f3 73 8f 94 f1 1d 0a ef 53 8d 79 bc 41 45 72 bc 67 75 d5 63 cf bf 8a 3f 47 7d 1c 46 8d de 93 56 d6 84 54 aa 29 37 34 9a 52 c3 e8 fc 79 71 b2 c6 70 d6 08 0d 4d cc 8c 39 97 dc f9 a2 a4 a9 0c 78 29 42 ad ba d6 b5 8f 26 fc 80 6f 7e 4e 3b Data Ascii: NR&cy+{R%%\"#q(bj%6ILyR=!QK`>a\dQN[-)A,OPe:[ x N1MIA[ls9-\}0f3oIUXllsy<AsSyAErguc?G}FVT)74RyqpM9x)B&o~N;
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 3a bc 6a 0c d8 d3 1e 0f 36 eb 41 41 c4 12 45 d2 0a 92 2e 3b 11 cd ac 38 ed 8f 81 71 ae 93 77 fa 51 df fa 17 56 9c a3 14 b1 9f aa d7 67 84 f1 e2 bd a7 db f8 52 f6 da 56 3e ab ce a1 38 b6 f7 78 ce 5b 79 f3 fc 31 b9 5b f5 71 9e b2 ec 8a 6d 36 9a 99 09 ae 98 e9 0d c8 95 60 4c 8f 35 c8 ba 6c 0d 8f 3c 58 02 6c 3d 71 eb 78 0f 4d bc b1 b5 ad 5a e6 1e 8d 54 69 c6 1b ec 92 7b e1 ee b3 db 3b bc 64 f3 9c 55 7b 42 ee e2 9d 3a 2d 49 c1 3c b5 d3 7c 6d ee c6 fe d3 2a 65 4a 21 78 a9 e5 85 29 d5 d8 36 84 8b 90 3d ff 00 27 ff 00 7d f1 f5 48 b5 15 96 78 19 bc bc 22 27 37 ae 49 9c 10 e3 2e b6 c3 57 4a 14 f2 0a 77 9f ea 57 3f fb b0 c2 15 61 53 ec 49 3f 61 a3 95 ae a0 e2 d0 77 81 63 72 38 be 36 a3 5b 16 82 82 b6 de e2 e3 61 1f 55 bd 71 4c 57 43 56 cd 45 be 16 d1 cd 80 2a d5 d0 Data Ascii: :j6AAE.;8qwQVgRV>8x[y1[qm6`L5l<Xl=qxMZTi{;dU{B:-I<\|meJ!x)6='}Hx"'7I.WJwW?aSI?awcr86[aUqLWCVE
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 92 ff 00 6b 41 45 78 bf 94 77 51 af f5 73 4a 8c b5 57 34 ff 00 27 67 8a 69 17 76 0b 65 b2 ab 7a 80 0b a9 b9 ff 00 65 5f 8c 75 b4 ad b8 02 b4 b1 6d 79 5a 84 fb 4b 7f fe 5f de 8d 92 9e a5 15 f5 e9 c6 4b e7 cc a7 eb 70 b4 1b 5b ab 4b cb 99 cf 29 4e e9 f3 51 d6 02 50 f1 6b c2 82 e3 87 8b 29 04 25 00 13 73 75 25 bb ff 00 7c e3 dc 50 a9 c5 3a 05 15 79 a7 5c c7 51 b4 5d b3 99 a5 e4 f7 7f 07 2f e9 47 59 35 65 73 2f 47 5a 3e 8a a7 f6 f9 f8 7b 4c eb ae 5d 35 67 3e 9e 2a 81 aa f4 54 cc a3 4a 04 42 ad d3 d4 57 16 48 ee 05 ed 74 aa dc ec 55 8f 72 2e 39 c7 d4 78 73 8a f4 ee 25 a4 e5 69 2e 5a 91 fb 50 96 d2 8f e6 bc d7 bf 0f 63 a4 ba b1 ad 66 f1 35 b7 66 ba 11 ce 6b 9d 59 7d 3f 31 a3 c6 9f 0f f4 21 98 c6 69 13 bc ff 00 35 f3 1f 2a 63 78 77 dd b7 c3 db cd b6 de fe b6 e3 Data Ascii: kAExwQsJW4'giveze_umyZK_Kp[K)NQPk)%su%\|P:y\Q]/GY5es/GZ>{L]5g>TJBWHtUr.9xs%i.ZPcf5fkY}?1!i5cxw
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 6a 55 28 c1 c6 37 31 cc 25 df ba 65 28 b9 f5 4e 97 e9 11 68 39 b1 d4 6a f7 4d 19 91 b4 b7 0a a6 52 24 39 4e 42 f9 4a 6e 3b 00 39 00 10 0d b7 36 50 a0 a4 e3 de 46 9d 0e 2d ab 2b ab 05 ea 7a bd 1d e5 1e 8a 6d 75 fc 9e 77 59 c4 f9 a3 86 75 79 95 84 79 2a ff 00 a9 6f 2e 8f c3 e7 fc 60 cf 7d 4d f4 bc 74 bc d3 f3 96 4e 9e 33 26 97 55 92 17 4f ab b3 fb bf 2d ba e5 2d 3c 40 fe 02 8d af 6b 1b 28 58 fd 3b 84 b8 bf f4 c3 96 9d a8 c7 d1 5e 53 da 51 7b 73 63 bc 7f 15 db aa ca dc e9 af ac 3d 5f 15 a9 3e 6a 6f a3 fc cc f2 9b 34 80 02 ee 42 ef 6e c2 de f8 fa 59 d3 74 3d 62 a0 6a 8f 4f 7d 5e f4 61 90 74 cf 3f 6a 53 7a 71 53 ca c8 84 87 da 91 21 b8 ee 97 62 b0 b8 e9 5a 4b a0 a1 c6 d6 85 95 59 26 e0 90 0f 6e 45 06 ba a6 d7 4d 15 d1 ce 8a e8 9a 09 a5 f9 d5 bd 42 9a 26 c7 5b Data Ascii: jU(71%e(Nh9jMR$9NBJn;96PF-+zmuwYuyy*o.`}MtN3&UO--<@k(X;^SQ{sc=_>jo4BnYt=bjO}^at?jSzqS!bZKY&nEMB&[
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: b3 f5 8d 56 b7 d8 a7 1d f9 73 b2 e9 f0 ca 5f cb 04 f7 67 57 bd f4 7d 5e d9 72 51 8f 57 e3 f3 ff 00 2c ab fa 8b d6 48 8c 64 e8 ba 3d a3 ed 2a 95 a7 b4 df 24 b9 bc a9 da ab 97 ba 89 27 9d 85 5e 62 7f ac fa 04 80 0f b6 e1 4e 14 ba 95 db e2 2e 20 7c d7 73 de 31 ed 4d 76 f7 e3 6f e5 5e 2f 2c eb 6f 6f 60 a1 ea 96 bb 53 5d fc 4c b0 ac af 31 2a 0d b9 b7 ca ad c5 2a 4a 85 fe dd b1 f5 fc 1d 0e 0d f7 f1 04 e8 ab 4d 74 c3 43 72 16 7a d2 fa 24 ba 62 ab 33 d9 6a 4f 8b 39 e9 41 c6 de 8c b7 5a e1 44 d8 dd 1d c5 af 7f c6 21 0b 0b aa 7f 86 ae 9b e9 6f 49 73 33 56 55 a1 cb 6f 3e d1 22 c0 93 32 43 b5 17 9c 4b fe 76 d1 24 96 d4 a2 90 2c a5 ab 80 2d b7 8f 63 50 45 77 99 ba 2f d3 1c a3 f0 e1 89 aa 55 2a 14 b7 b5 26 6c 16 5e 62 60 a8 bc 11 e2 bf 30 25 07 c2 be cb 25 95 5e db 79 Data Ascii: Vs_gW}^rQW,Hd=$'^bN. \|s1Mvo^/,oo`S]L1JMtCrz$b3jO9AZD!oIs3VUo>"2CKv$,-cPEw/U&l^b`0%%^y
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 70 ca f0 bc 5d 81 b0 77 5b 67 3b ad 6f bd f8 c7 d2 8e 98 88 45 02 96 fc 7d 8c be f3 aa 03 ca 95 45 0b 23 f8 db fe 18 03 d3 4a 35 0d 1a df d2 2e 88 c5 57 8d 29 b8 b5 ba 43 0f 92 c0 dc 5b 8d 21 51 dc dc 9f e9 f2 21 57 fc e0 09 9a c6 60 8d a9 da 95 d4 c6 9d ac bd 39 27 2d c5 61 98 e6 fb 02 fe 55 d0 b0 8f be f7 9b bd bd 40 c0 15 ff 00 55 14 88 d1 fa 5d d1 0d 31 f0 1d 8f 2a ae aa 6c 46 62 b6 e1 4a b7 35 19 28 d8 4d af f5 ba 8c 01 77 6a 0e 9a 66 aa 76 6c d1 06 32 5d 37 c7 cb b9 35 fd b3 1c 32 9b 6c a5 8f 05 31 6c 12 a2 0a 88 65 4e 9e 2f dc 60 0c f7 ae ba 4a 68 5f 10 fd 3b cd 71 d5 1d b6 2b b2 e1 4a 5a 2c 52 b5 3a d7 ec af ed c2 50 d9 ff 00 6b 9c 01 79 67 5d 00 d2 0d 4d ea 76 2d 7a ad 53 9e f6 a3 d1 e3 43 a8 26 98 dc 82 86 52 cb 2e 5d a5 d8 a3 9f 35 ae 02 ef db Data Ascii: p]w[g;oE}E#J5.W)C[!Q!W`9'-aU@U]1*lFbJ5(Mwjfvl2]752l1leN/`Jh_;q+JZ,R:Pkyg]Mv-zSC&R.]5
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 97 40 0e dd cb 24 2b c4 4d 8a 77 5b 90 7b 60 30 06 f4 79 d5 d5 4b 43 6b 15 b8 f5 ca 34 da b6 5c 9e d2 56 a8 50 0a 7c 76 5f 4f d0 ea 12 b5 04 90 a4 95 05 58 8b f9 4d fc b6 20 14 e9 c7 5e 63 4f 75 57 50 a7 d5 32 44 e9 f9 2f 35 4e 5c cf 97 01 b4 cb 60 92 a0 37 02 76 2c 14 9d aa 49 3e 82 ca e0 82 01 14 7f 88 5e 90 e9 5d 0e b5 fe 8b f4 aa 65 1a bb 31 a0 0a 9f 61 98 ec 92 9b 84 a9 65 0b 5a 94 12 54 4e d0 05 ef dc 5e f8 14 c4 6e 6a 2b 15 0a 82 9d 97 04 a6 43 ae 29 d7 1c 52 42 54 a5 1b dc 92 38 f5 f6 c5 c1 30 09 67 f9 e8 34 3a 94 46 d9 9a 55 20 16 d2 e4 87 5b d8 83 7b dc 84 9e d6 06 d8 86 49 64 a7 b2 7c 95 53 2b e8 7d 0b 49 52 1b 74 5c 73 dd 0a 1f f3 c0 24 30 a3 b6 af d5 e3 a5 0e 59 41 76 0a 4e 08 8b a8 65 22 4b 41 87 1b e1 46 d6 b5 b1 4c b2 42 b1 50 71 0a 3b 89 Data Ascii: @$+Mw[{`0yKCk4\VP\|v_OXM ^cOuWP2D/5N\`7v,I>^]e1aeZTN^nj+C)RBT80g4:FU [{Id\|S+}IRt\s$0YAvNe"KAFLBPq;
2024-04-05 23:18:24 UTC	1131	IN	Data Raw: 2b b9 27 bf be 00 68 f5 5e 23 a5 85 37 10 3e d4 b3 65 a8 95 21 b4 f7 36 2b ee a3 c7 d5 ff 00 21 88 07 02 bb 02 4f 81 e1 50 92 20 c4 70 ed 0c 4a 3e 23 a2 f6 0e 59 5c a4 a8 8d 89 07 d0 15 5b 0c 01 8b d9 d2 19 8f 26 a5 52 a6 85 ee de cc 45 36 b0 a4 a0 81 ce de 3c c4 a8 84 80 4f 6c 5c 02 39 aa ea 58 2a 90 87 1c 6d d2 d9 08 4a 10 10 95 7a 5b 93 62 77 13 fc 0c 42 8e 53 9b 26 c4 76 3a 14 a2 6c da 5b 42 9d 69 2a 0a b1 de 48 1c 10 4d bd 3d bf 38 04 87 df ad c4 a9 c3 aa 47 54 f5 3c fa df f1 ee b4 96 ec 41 0b 0a 29 dd da fc db ef ce 29 3b 03 55 59 34 0a 84 d6 dc 62 6a 50 97 cd dd 26 3b 89 52 b7 83 bb cd fd 24 0e 40 e7 0d ca 86 13 29 28 30 64 53 98 aa a5 c5 46 29 f0 c3 a1 6d 97 07 f4 92 78 e7 b7 fb b0 43 ae e2 2f 4b 9a d2 5b 8b de 78 24 58 38 4e f1 6e 77 76 dd f6 23 Data Ascii: +'h^#7>e!6+!OP pJ>#Y\[&RE6<Ol\9XmJz[bwBS&v:l[BiHM=8GT<A));UY4bjP&;R$@)(0dSF)mxC/K[x$X8Nnwv#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	50005	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	400	OUT	GET /steam/apps/730/capsule_231x87.jpg?t=1698860631 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/jpeg Content-Length: 9528 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "6508d054-2538" Expires: Wed, 03 Apr 2024 15:33:04 GMT Last-Modified: Mon, 18 Sep 2023 22:33:56 GMT CF-Cache-Status: HIT Age: 283281 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d45cb22257-MIA
2024-04-05 23:18:24 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 04 05 07 08 02 03 06 01 09 ff c4 00 45 10 00 01 03 03 03 02 04 03 03 07 0a 04 07 00 00 00 01 02 03 04 00 05 11 06 12 21 07 31 08 13 41 51 22 61 81 14 32 71 09 15 16 23 Data Ascii: JFIFCCWE!1AQ"a2q#
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 50 84 50 84 50 85 71 6b d9 0b cc 88 24 24 12 7b 0a 10 9a d7 b9 6b 52 8e 79 f9 d0 84 96 62 f6 a4 23 82 4f 27 2a f4 a1 09 26 df e6 8f eb 1a 10 a8 37 e5 34 d7 7f 69 bd 68 bd 13 6e 8b 26 55 d5 96 dd b9 ba 94 67 cb 01 c2 5a 6b 1c f2 af 81 de e3 80 47 3c 9a 47 b3 f6 66 a3 a3 85 b9 33 b0 85 3d 06 bd f5 05 3a 40 97 1c 00 37 55 4b a7 da 09 db ab 53 59 ba 5d 1d c3 03 73 90 9a 8e ee 5b 5f 1f 79 6a 6d 29 1f 45 1a c7 d0 d7 6c b4 ba be 99 d4 b8 b8 84 48 7b 64 e6 71 b9 fc 16 c1 4b 42 be bc 63 99 0e ea 6e 38 1d 8f 1c 00 3e 28 8d 78 4e 89 d6 56 c8 4d be b4 b3 1b 7c 92 78 27 e3 28 49 0a 39 fd a0 81 df 18 f8 0f b5 6c b7 97 b6 77 b4 a9 d6 b5 07 ac 33 3b f8 7c fc a1 6b fe 82 a5 ad 57 53 ab c9 7d 9e d1 49 8c d6 9c 8e 88 0d be dc 10 a5 98 e6 43 a1 e2 b6 ca c9 4a d2 a0 b5 7c 04 Data Ascii: PPPqk$${kRyb#O'*&74ihn&UgZkG<Gf3=:@7UKSY]s[_yjm)ElH{dqKBcn8>(xNVM\|x'(I9lw3;\|kWS}ICJ\|
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 92 e6 f2 5e 49 dd 9e fc d5 c2 64 67 75 00 de 53 c4 7b dc e7 3c a9 62 7a db 9d 15 d4 b8 c3 bb c8 5a 14 9e 46 d5 7a 10 79 1e de 94 e6 86 35 b8 0a 52 e7 3c 64 a9 5f a3 be 22 99 e9 7d ad 31 de b4 0b ca 58 41 53 76 f7 5c 28 8a eb e4 e4 39 21 29 23 cc 4a 71 c2 09 f8 8e 32 70 36 9c 85 1b 8a 74 99 03 0e e6 46 fe 00 f2 f1 19 55 c9 56 bb c3 df e5 26 bc df 75 3c fb 4e b2 81 65 b7 5b 9f 84 e2 ad f2 62 b4 e3 4a 6d f4 36 4a 10 a1 b8 a5 49 56 d0 9c 24 24 8e 31 9a c1 ea 0f 34 2d aa dc 51 69 24 09 03 99 3f de ea ed 95 26 dc 57 65 27 98 04 e4 f7 73 55 0f ad 3a bd 9b b5 f9 f9 86 e5 3a 54 d7 16 b7 5c 71 6b 00 a9 c5 15 a8 9f 98 24 a4 91 8e 32 a0 38 c1 ad 47 47 a1 54 34 b9 ed 19 fe fe 3b f3 ec f0 5b 16 ab 52 97 17 08 26 46 df 8f f4 51 ab da 9d ef b3 a9 85 93 20 17 0a d3 21 d2 Data Ascii: ^IdguS{<bzZFzy5R<d_"}1XASv\(9!)#Jq2p6tFUV&u<Ne[bJm6JIV$$14-Qi$?&We'sU::T\qk$28GGT4;[R&FQ !
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: da 4d cb 7a 43 76 29 d4 b7 a6 ca 54 fa ee 86 c1 20 6c 09 ec 9c 9e d8 52 6a 56 e7 44 b6 35 19 5d ef aa fe a8 97 4c 13 b9 03 b6 30 3b 25 3e ea 5b d4 9b 33 17 19 cc c0 e9 4b f0 63 ef 5b 4d 23 f5 92 1c 40 ce d4 84 a7 ba c8 c0 c0 e3 27 da b2 37 97 4f b4 65 4a ad 65 a9 63 64 81 bb 88 e4 20 73 3f 35 46 d6 83 2b b9 94 dc eb 90 e3 12 76 00 f3 c9 e4 b3 d2 16 db 84 fd 03 74 d7 2c 68 fb 4d ce f9 75 79 a6 e0 da 51 6f 06 3b 2c 36 76 12 94 e4 63 27 7a 89 cf 38 4f bd 45 a7 d1 af 5b 4e ab ab b6 d5 8f ab 50 80 d6 70 75 43 46 24 0e 53 93 33 9c 22 f2 a5 2a 77 ac d3 5d 70 e6 d3 60 25 ce e2 c9 27 3b f7 60 7c 53 b6 8f 72 e2 f3 17 a9 fa df a7 fa 7e c5 64 b7 c3 5b ea 52 2d c9 4b 8f 2b f7 53 95 11 d8 1f a9 1e f5 7b 4f 75 77 36 b5 6d 5a c6 9d 3a 4c 69 3e e0 93 dc 24 9e ff 00 c1 53 Data Ascii: MzCv)T lRjVD5]L0;%>[3Kc[M#@'7OeJecd s?5F+vt,hMuyQo;,6vc'z8OE[NPpuCF$S3"*w]p`%';`\|Sr~d[R-K+S{Ouw6mZ:Li>$S
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 34 34 7d 2f 2d 2c 26 3a 12 da 5d 92 8d de 6c 80 8e c1 64 9c 72 40 27 03 92 05 64 af ba 51 7b 7f 60 dd 3e ac 70 88 93 99 31 db 9f 02 7b c2 a1 69 a0 5a d9 de 1b ca 73 26 60 62 04 f6 7c 97 36 cf 53 ae 36 be 9f cf d1 f0 a3 47 62 24 f7 83 d2 a5 80 7c e7 30 46 11 9c e0 0f 84 7a 7b fb d5 1b 7d 5e b5 0d 39 fa 75 36 80 d7 99 27 99 db 1b ed 85 90 7e 99 4a ad eb 6f aa 12 5c d1 00 72 1b e5 38 f4 db ac 93 7a 63 63 b8 db a3 59 ad b7 36 ae 4a 0a 90 26 b6 a5 6f 46 dd bb 0e 08 05 38 27 83 fb c6 af 68 fd 20 ab a4 d2 a9 41 94 9a e6 bf 7e 20 73 88 8d f2 37 f8 aa da 96 8b 4f 53 aa ca af a8 e6 96 6d 1f 3f 14 be f1 d6 a4 df ec 93 60 b7 a2 74 c5 b1 52 1b 2d 09 51 60 24 3a d8 3d ca 4f a1 c7 19 f4 a7 de 74 88 5c 50 7d 06 da 52 6f 10 89 0d c8 f0 ef 50 db e8 86 85 56 d5 37 35 1d 19 Data Ascii: 44}/-,&:]ldr@'dQ{`>p1{iZs&`b\|6S6Gb$\|0Fz{}^9u6'~Jo\r8zccY6J&oF8'h A~ s7OSm?`tR-Q`$:=Ot\P}RoPV75
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 53 68 20 30 02 76 18 ce 0f 28 f3 94 d3 ad dd b9 b7 d2 07 d9 d5 3a 72 d3 0f 53 5e 66 a2 0d b6 14 18 c9 4a 93 95 27 0a 24 29 5f 17 0a c6 0f aa 47 ad 52 d4 4d c7 b1 8b 35 0b 76 36 bd 57 06 b1 ad 03 b4 67 73 9d f9 f6 76 ab 96 22 89 d5 03 ac ab 38 d2 a6 d2 e7 12 4f 7e 36 18 db f1 59 1d 01 6d 9b ae f4 66 80 8d 1a 33 b0 f4 dc 64 dd 2f 2f a5 b4 e5 f7 7f 61 2a e3 3c a8 95 10 7f 65 7f 2a b3 ec ca 2f be b5 d1 e9 b4 16 d0 01 f5 0c 6e 79 03 e2 73 1d 85 33 da 15 59 67 73 a9 bc 90 ea c7 85 82 76 1c cf 90 c4 f6 85 bf 5f 68 db 0f 4d e5 5c fa 83 a8 ed 1f a4 13 1d 92 96 a0 5b 63 34 13 12 22 79 0d 6f e3 19 c0 04 a8 82 37 2b 80 4e 09 7e a5 61 69 a4 3a a6 b1 7b 4b d2 38 9e ab 40 ea b7 fe 59 f2 19 31 12 70 27 2a 3d 3e f6 e7 52 6b 34 bb 5a 9e 8d a0 4b 9c 4f 59 dd b1 f4 13 b6 e7 Data Ascii: Sh 0v(:rS^fJ'$)_GRM5v6Wgsv"8O~6Ymf3d//a<e/nys3Ygsv_hM\[c4"yo7+N~ai:{K8@Y1p'*=>Rk4ZKOY
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 1e c4 b6 2f a0 64 c5 1f 74 62 3c 4e 37 e7 ba 45 a1 3a 9d 76 d2 16 6b cd 99 96 62 5c 2d 17 34 6d 91 0e 7b 6b 52 01 c6 37 27 6a 92 52 ac 7a e7 d0 7a 81 55 ac b5 ab 8d 3e 85 5b 56 34 3a 9d 41 96 ba 48 f1 10 44 1f e9 d8 14 f7 ba 5d 0b ca b4 eb b8 96 bd 9b 11 13 e0 64 19 0b ad b0 f8 84 bd d8 b4 bd be c0 9b 25 82 75 be 12 70 d0 9b 0d 6b 24 e4 9d c4 07 00 dd f1 1e 71 ea 7d cd 64 ed 7a 59 77 6b 68 cb 21 46 9b 98 cd b8 9a 4f 6e 7d e8 9c ef 0b 17 71 d1 db 7a f7 0f ba f4 af 6b 9d bc 10 3e 93 1e 69 8b 5c f5 4e 6e ba 81 1e 23 f6 7b 35 a9 a6 5c f3 73 6b 88 59 52 ce 08 01 44 a8 e4 0c 9e 2b 19 a9 eb 95 75 4a 6d a6 fa 4c 60 06 7a 8d 89 f1 c9 57 ec 34 9a 76 0f 2f 6d 47 b8 91 1d 63 31 e1 80 90 74 eb 55 44 d1 7a a6 35 e2 5c 05 dc 84 74 af ca 69 0f 06 8a 5c 29 20 2f 25 2a e5 Data Ascii: /dtb<N7E:vkb\-4m{kR7'jRzzU>[V4:AHD]d%upk$q}dzYwkh!FOn}qzk>i\Nn#{5\skYRD+uJmL`zW4v/mGc1tUDz5\ti\) /%*
2024-04-05 23:18:24 UTC	385	IN	Data Raw: 5f 03 fa dd 70 b9 dc 3a bd ad 5e bc a4 22 ec ab c4 bf b6 21 2a dc 94 bd e7 2f 78 04 70 40 56 7b 53 5a 31 94 b3 95 cb 7d a9 4c c7 47 96 a2 53 ea 0f a5 32 32 a7 e2 86 e1 21 3c 95 1e d5 22 82 17 80 66 84 01 2b d0 93 ed 44 a5 e1 2b 72 40 71 ce 3d 29 53 0c ec ad bf 82 48 4e a3 54 de 9e c0 f2 93 6e 08 59 cf 65 29 c4 91 fd c9 35 cb ff 00 c4 27 34 58 d1 6f 32 f9 f8 03 3f 30 ba 0f 43 1a 7d 6a ab b9 70 fd 47 f2 55 ab a9 91 1e 85 d4 9d 52 d3 c9 da ea 2e 92 72 32 0f 77 54 7d 09 f9 56 f9 a5 3d af d3 e8 39 bb 70 37 e4 b4 ed 40 16 5e 56 6b b7 e2 3f 32 a5 9f 0a d7 5f 23 ad 3a 69 bd d8 32 11 21 b5 0e 79 1f 67 70 8f ef 09 ad 63 a6 34 f8 f4 8a c7 b3 84 ff 00 dc 16 cb d1 9a 9c 37 f4 db db 3f 23 fd 15 f6 4c 46 11 29 72 52 cb 62 42 d2 10 a7 42 46 f5 24 12 40 27 be 06 4f 1f 33 Data Ascii: _p:^"!*/xp@V{SZ1}LGS22!<"f+D+r@q=)SHNTnYe)5'4Xo2?0C}jpGUR.r2wT}V=9p7@^Vk?2_#:i2!ygpc47?#LF)rRbBBF$@'O3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	50006	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	404	OUT	GET /steam/apps/1091500/capsule_231x87.jpg?t=1706698946 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/jpeg Content-Length: 10011 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "622f469e-271b" Expires: Sat, 06 Apr 2024 03:42:38 GMT Last-Modified: Mon, 14 Mar 2022 13:43:58 GMT CF-Cache-Status: HIT Age: 89236 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d468767473-MIA
2024-04-05 23:18:24 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 07 04 06 08 01 03 09 02 0a ff c4 00 42 10 00 01 02 05 02 04 02 07 04 08 03 09 00 00 00 00 01 02 03 00 04 05 06 11 07 12 08 13 21 31 22 41 09 14 15 32 51 61 94 17 42 Data Ascii: JFIFCCWB!1"A2QaB
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 5e 6a e9 c4 72 e5 36 90 44 82 24 11 20 89 04 48 22 41 12 08 90 44 82 26 20 89 04 48 22 c5 95 aa 49 cf 4c cd cb cb 4d 33 30 fc a2 c3 53 0d b4 e0 52 99 59 48 50 4a c0 f7 4e d2 93 83 d7 04 1f 31 17 df 42 ad 26 36 a3 da 40 76 a0 91 00 81 a4 8e ba f4 5e 43 81 24 03 a8 59 5d a2 c2 f4 90 44 82 24 11 22 a8 bc 52 82 52 49 21 29 1d 49 3e 50 02 74 0a 8b 9b 75 c7 8f ed 29 d1 71 31 24 dd 53 f4 be e0 6f 29 f6 65 0d 49 74 21 43 c9 d7 bd c4 75 ee 32 54 3f 56 3a a6 01 e8 db 1d c7 22 a3 d9 d8 52 3f 59 fa 18 f0 6e e7 c2 60 1e aa 32 be 23 46 8e 80 e6 3e 1f aa e7 49 4b 87 89 ae 39 d5 b6 9c 7e ca 74 da 60 e1 53 0c ef 69 4f b6 7e 0b e8 eb ff 00 0f 0e c6 ce 7a c7 6f 6f 0f f0 77 a3 ba 4d b9 c4 dd da 57 89 19 80 73 cf f0 53 d8 0e 8e 74 01 fb eb 58 7e 23 75 88 3c d1 b5 6e 6e b1 a3 Data Ascii: ^jr6D$ H"AD& H"ILM30SRYHPJN1B&6@v^C$Y]D$"RRI!)I>Ptu)q1$So)eIt!Cu2T?V:"R?Yn`2#F>IK9~t`SiO~zoowMWsStX~#u<nn
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: d3 f1 8d c7 11 f4 7f 8b e1 58 57 d2 f7 8e 63 59 0d 39 49 39 fb c4 00 23 2f b5 ae a2 74 83 d1 61 33 11 a3 52 a8 a4 d9 92 63 c3 fb d1 48 6b 7f 17 da 69 a0 a1 72 b5 ca d8 a8 d7 fb 37 41 a4 01 31 38 a5 79 05 24 1c 37 9f df 29 f9 66 30 b8 7f 81 f1 ae 23 21 d6 d4 b2 d3 3f 5d da 37 dd cd df ca 0f b9 5d b8 be a3 6c 0e 63 af 4f ef 65 53 c8 4d 71 0d c5 4c b2 66 12 e0 d0 9d 3e 9a c9 4f 28 17 6b b3 6d 75 19 dc 40 e4 e4 60 82 02 08 fd e1 df a8 54 c3 38 33 81 0c 62 4e 37 97 6d fa 83 d9 69 f1 1a b5 bf cc 5e ef b8 16 be 2e ef b1 2d 2d 1b 95 9f bc 76 f7 73 77 ba 07 de 5d 33 a7 5a 79 4a d2 eb 62 52 df a2 34 1a a6 cb 20 00 54 32 f3 ce 9e ae 3c ea fb b8 e2 d5 95 29 47 a9 24 c7 1c e2 0c 7a a7 10 d6 17 37 0d 22 a0 91 bf 74 32 7b 8c 63 62 1a d6 09 fe 22 4b 8e a4 93 3b 67 67 ea Data Ascii: XWcY9I9#/ta3RcHkir7A18y$7)f0#!?]7]lcOeSMqLf>O(kmu@`T83bN7mi^.--vsw]3ZyJbR4 T2<)G$z7"t2{cb"K;gg
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 92 d9 3f 28 c0 18 13 f0 0a 3e bf 8a 62 b7 35 03 37 ef bc b7 e4 a6 0b bc e4 90 39 ab 55 0d bd 58 a7 46 d9 a6 7a 01 3f 12 40 1f 10 ad 3b 6b d1 65 55 bb ab 06 b5 a9 f7 fb 6f 4d 3d 82 ec ad bb 26 96 c1 1f 00 e2 92 94 81 fc 1b 8d 1f 15 f4 cd 87 d0 05 98 75 07 d6 70 d2 5c 43 07 ff 00 67 1f 7e 52 a4 6d b0 5b 80 d0 dd 29 b7 de e3 fd 00 f8 95 85 c6 f5 7a db e1 eb 42 68 fa 07 a6 ef ac 0a 93 ca 98 a9 87 27 8b ce 4b cb 25 61 6a 4b 8a 52 bc 05 d7 70 70 30 36 a1 c1 80 15 d7 0f 80 ed af 78 bb 1c a9 c5 78 9d 10 d0 c1 95 80 36 01 31 13 a9 24 e5 69 89 24 ee 20 f7 61 65 de 39 96 34 05 ab 5e 5c 4e a6 77 f2 d0 7f 7e f5 52 e9 86 a1 f0 f9 a7 3a 73 43 a3 b7 a6 8e eb 0e a1 38 8e 6c f4 cb f2 cb 6e 5f 9e be bc 96 f2 95 a8 a5 1d 11 90 de 14 52 54 3d ec 0e 93 7f 67 c5 f8 86 21 50 d9 Data Ascii: ?(>b579UXFz?@;keUoM=&up\Cg~Rm[)zBh'K%ajKRpp06xx61$i$ ae94^\Nw~R:sC8ln_RT=g!P
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 63 c6 87 52 e9 80 4f 49 e4 06 cd 07 4f 12 e2 56 d5 c3 3f 03 13 17 4d 36 91 5e be aa 75 d4 d0 a5 d2 91 27 41 aa 4a 32 c1 7d 82 02 bf c2 f1 aa 59 0a 57 bc 90 42 9c db b9 58 c8 8b 9c 69 e9 33 0f e1 c7 3e d3 0a 8a d7 5b 13 03 23 23 93 a3 52 e1 27 ba 0e 87 da 33 dd 38 56 18 55 ce 22 73 d5 02 9d 2d e4 12 5c 4f 86 c0 8e 8e 23 f8 41 dd 75 46 b7 e8 11 d4 9d 26 6e cb b5 2b 66 c3 6e 55 68 5c b0 91 94 6d 72 a5 29 04 72 dd 64 8c 29 1d 77 0c 10 42 82 55 9e 98 3f 3d f0 b7 1e 56 c2 b1 d7 e3 58 b0 35 de f6 96 97 68 5c df e0 07 ba 07 2c a3 28 03 40 40 d0 ed b7 b8 3d 3a b6 ad b6 b7 00 00 66 24 80 7c c8 d6 79 c9 99 e7 d4 53 b6 97 a3 5a cb 44 e4 bd 46 fd b9 eb fa 83 51 46 d5 2d 35 09 82 dc ba 94 36 f6 40 25 58 c2 40 c1 51 c8 8e 83 89 7a 6c b8 a8 f2 eb 0b 26 ce d9 aa 38 b8 fc Data Ascii: cROIOV?M6^u'AJ2}YWBXi3>[##R'38VU"s-\O#AuF&n+fnUh\mr)rd)wBU?=VX5h\,(@@=:f$\|ySZDFQF-56@%X@Qzl&8
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: a9 5a d5 00 db 75 07 a5 cf bc db 53 67 01 cc 1c 29 29 73 18 29 03 71 cc 7d 0f 4b 8f 38 7f 8e b0 ff 00 a1 f8 95 bd 83 ce a1 e3 d9 0e ea d7 19 2c f2 7c 88 90 5e 25 6a 15 b0 cb ec 36 a9 b9 b4 39 e0 78 fc 1c c1 bf 9b 75 9d 72 e8 ba 03 4c 35 ea d5 d5 27 9f a7 c9 4c 3d 4a b8 e5 00 f5 db 76 ae c9 95 a8 4a 9f df 65 7d 71 fb c9 ca 4f 91 31 cb 38 9f d1 c6 2b 80 30 de 5b 1f 59 b5 dc 54 67 21 c8 bd ba 96 8f bc 0b 99 f7 94 be 1f c4 16 f7 44 52 b8 1d 9d 43 a4 13 2d 27 a3 5d b1 3e 06 1d f7 55 8d 1c 99 6d 29 e7 04 48 22 41 12 08 bc 10 45 ec 11 20 89 04 5c df c5 8e a6 5e f3 94 d7 b4 cf 48 29 53 75 9b ee aa ce d9 f9 f9 42 1b 66 89 2a b1 ef b8 f9 21 2d ba e0 ce c1 9d c0 02 b1 83 b3 77 5e e0 6c 06 c4 bc 63 b8 fb db 4e d2 99 ee e6 ff 00 d4 78 e4 06 ee 0d dd c0 03 26 04 11 9a Data Ascii: ZuSg))s)q}K8,\|^%j69xurL5'L=JvJe}qO18+0[YTg!DRC-']>Um)H"AE \^H)SuBf*!-w^lcNx&
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 7c 16 35 a5 6a 4a 59 f4 81 25 2c b7 1f 75 c7 14 fc d4 e3 f8 2f 4d be ae ab 79 c2 00 05 4a 3f 00 00 18 4a 40 48 00 66 63 18 b5 5c 5e e3 b5 70 ca c6 8c ac 60 f6 58 c1 b3 47 96 e4 ee e7 12 e3 a9 2a d5 ad b0 b6 64 4c b8 ea 4f 32 7a fe 83 90 d1 4d 79 c4 12 cc 48 22 41 12 08 90 44 82 24 11 78 b5 06 d2 54 4e 12 06 4c 54 02 4c 05 45 51 69 2d 88 8a ed cb 54 d5 4b 96 8a a9 7b b6 b0 b5 b1 4d 45 41 9c 4c 52 a9 48 51 4c bc b8 49 27 94 b5 8d cf 38 07 5d ef a9 27 a2 40 1d 27 88 31 47 61 96 94 f8 6b 0e ac 3b 16 34 1a a5 84 11 52 ab b5 77 78 7b 4c 66 8c 03 62 5b 26 74 88 6b 6a 22 e6 a1 bc ac dd 67 ba 0f 20 34 98 3c ce a6 7a 44 44 99 b7 bb c7 35 53 4b 0c 52 24 c4 f2 a7 04 ba 3d 65 7e f3 98 ea 7a 63 af f2 8d 80 e3 f8 a3 ac 1b 85 9a ee ec 1b b3 79 0d 67 4e 63 53 27 c5 46 8c Data Ascii: \|5jJY%,u/MyJ?J@Hfc\^p`XG*dLO2zMyH"AD$xTNLTLEQi-TK{MEALRHQLI'8]'@'1Gak;4Rwx{Lfb[&tkj"g 4<zDD5SKR$=e~zcygNcS'F
2024-04-05 23:18:24 UTC	868	IN	Data Raw: fd 5a 41 54 e6 13 41 9b 49 4a 10 ae aa 71 65 c7 06 48 21 20 00 07 45 2f c4 22 32 f3 01 c3 ae df 4c d4 b5 a6 ec 87 30 96 8f 6a 20 69 1b 6b 3b ee 00 8d 65 b0 b8 8d 4c 60 e4 18 6d 46 b4 48 cd 9b 36 ad 99 20 46 d3 11 b7 39 e5 0e ab d7 7f dc e1 6a 09 b9 6b 0a 48 3d 09 9e 74 12 3f 86 e8 93 fa 36 c7 ec 19 f2 8f d1 4c 8a 95 39 9f c5 79 f6 81 74 7e 24 ab fd 7b bf 9a 1f 46 d8 fd 83 3e 51 fa 2a f6 8f ea 53 ed 02 e8 fc 49 57 fa e7 7f 34 3e 8d b1 fb 06 7c a3 f4 4e d1 fd 4a 7d a0 5d 1f 89 2a ff 00 5c ef e6 87 d1 b6 3f 60 cf 94 7e 89 da 3f a9 4f b4 0b a3 f1 25 5f eb dd fc d0 fa 36 c7 ec 19 f2 8f d1 3b 47 f5 29 f6 81 74 7e 24 ab fd 73 bf 9a 1f 46 58 fd 83 3e 51 fa 27 68 fe a5 3e d0 2e 8f c4 95 7f ae 77 f3 43 e8 db 1f b0 67 ca 3f 44 ed 1f d4 af 53 a8 17 3e e1 ba e4 ab 91 Data Ascii: ZATAIJqeH! E/"2L0j ik;eL`mFH6 F9jkH=t?6L9yt~${F>QSIW4>\|NJ}]\?`~?O%_6;G)t~$sFX>Q'h>.wCg?DS>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.5	50010	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	635	OUT	GET /store/about/cta_hero_steamworks_pt1.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	296	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/png Content-Length: 12815 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-320f" CF-Cache-Status: HIT Age: 749 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d48ae8a4f7-MIA
2024-04-05 23:18:24 UTC	1073	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 88 00 00 02 dc 08 06 00 00 00 8c e3 8b 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 8d cb 57 ae 3e b7 7f f7 6b fb b7 5f dc bf 65 ff 3d 6b cf 03 00 00 87 b8 b9 7f 7b 73 ff f6 ed fd db 37 d6 df b9 76 73 9c 37 f6 e1 67 53 4f f8 90 6a 88 69 9c 03 d1 f2 95 ab 5f dc bf fb 9d f4 c3 28 04 00 00 70 1c df d8 bf fd f1 fa 3b d7 5e 1d c7 8d 13 88 20 b8 71 0c 44 cb 57 ae be b8 7f f7 47 49 18 02 00 00 06 2f 0b 45 bf 3b 6e 67 14 3d ec 42 3e 83 08 18 0b cb 57 ae be b4 7f f7 ad 24 0e 01 00 00 8f 47 f6 f1 15 d7 f7 df 7b fc da 38 6e 9c 33 88 20 a8 71 3a 83 68 ff 09 fa eb fb 77 5f b4 57 01 00 80 13 f2 a5 f5 77 ae bd 3c 0e 1b e2 0c 22 60 2c 88 43 00 00 c0 29 f8 fa 8f 3e fb 74 6c 08 44 c0 c8 da 7f 42 ce 3e 6f e8 8b 46 02 00 00 38 05 5f 1f a7 cb cd 5c 62 06 41 8d fa 25 66 3f 7a 22 fe 33 7b 12 00 00 38 45 3b fb b7 e7 47 f9 83 ab 5d 62 06 8c ac e5 2b 57 67 f7 ef Data Ascii: W>k_e=k{s7vs7gSOji_(p;^ qDWGI/E;ng=B>W$G{8n3 q:hw_Ww<"`,C)>tlDB>oF8_\bA%f?z"3{8E;G]b+Wg
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 1e 39 cd c6 ee 83 f4 ad dd 9d 81 8d 49 16 87 b2 fd 71 90 ff dc 7e 3f bd de bd 9f 7e ae 70 f6 d1 cb d9 eb f6 02 57 16 89 00 00 60 5c 08 44 00 39 65 01 a4 9f 08 f2 b8 0c f2 8c a4 d3 f4 e7 dd 7b 29 75 87 6f 4c b2 b3 88 fa 3d 93 08 00 00 c6 85 4b cc 00 00 00 00 82 13 88 00 00 00 00 82 13 88 00 00 00 00 82 13 88 00 00 00 00 82 13 88 00 00 00 00 82 13 88 00 00 00 00 82 f3 35 f7 00 47 50 ae cc f7 35 5d ab 51 4b bb dd ce c0 1f 7f aa 54 4e c5 33 e5 b1 1a d3 dd 6e 7b 60 5f 55 7f f1 67 ce 8c dd 31 b7 73 a7 9b 76 ee 76 8f bd 9c c9 42 31 95 a6 67 8e bd 9c e3 1e db 83 5a 0f 60 78 0d e2 35 b0 df d7 db 83 74 1e 34 53 bb d5 b4 43 00 0e 21 10 01 e4 50 9a ae a4 a7 2e bf d0 7b 73 db f7 1b fb cd f5 74 f7 d6 ea c0 d6 61 e1 d2 b3 69 e6 fc d2 58 8e 6f f6 07 fc c6 0f 5e 3f f2 1f Data Ascii: 9Iq~?~pW`\D9e{)uoL=K5GP5]QKTN3n{`_Ug1svvB1gZ`x5t4SC!P.{staiXo^?
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: a6 fc c8 69 b2 33 9f 86 31 6e 01 00 00 83 25 10 01 e4 b4 b3 b9 3e 36 db 92 c5 ae ec 06 00 00 c4 e6 12 33 00 00 00 80 e0 04 22 00 00 00 80 e0 04 22 00 00 00 80 e0 04 22 00 00 00 80 e0 04 22 00 00 00 80 e0 04 22 00 00 00 80 e0 7c cd 3d 40 50 e7 96 56 52 b9 32 37 b4 eb 77 f7 d6 6a 6a 35 ea 07 4e 33 73 7e 69 ff b6 78 e8 b2 9a f5 ed 74 6f 63 ed d0 e9 a6 7e e1 97 d3 99 fd 1b 47 d7 59 fd 5e 6a 7d e3 4f 0f 9d ae df 7d 77 5a 76 36 d7 d3 fd ed 3b 76 28 00 10 86 40 04 90 43 69 ba 92 9e 78 fa 72 2a 57 e6 fb 9a be dd 6a a6 ea ed 1b a9 b6 b5 31 54 db 91 bd 39 9f 5f 7c 66 a8 c7 fa a9 cb 2f a4 1b 6f bc 72 e0 be 58 b8 f4 6c 5f cb ca f6 57 a3 56 4d cd 7a f5 91 d3 14 9e 7e 26 95 7f f3 2b 0e f2 63 2a 5c fe 5c ea de 5a 4b 9d 37 fe 6a 20 fb ee b4 64 c7 cc cd ef 7f a7 f7 3b 0c Data Ascii: i31n%>63"""""\|=@PVR27wjj5N3s~ixtoc~GY^j}O}wZv6;v(@CixrWj1T9_\|f/orXl_WVMz~&+c\\ZK7j d;
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 06 00 80 40 04 22 80 1c b2 b3 81 de 5f bb 3e 92 eb 5e db da e8 dd 4f 95 ca 07 4e d7 a8 55 47 ee 8c 27 00 00 e0 78 04 22 80 40 1e 46 22 00 00 80 8f f3 19 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 f9 9a 7b 80 1c 26 0b c5 f4 c4 d3 97 d3 54 a9 dc d7 f4 dd 4e 27 55 6f af a5 56 a3 6e f0 00 00 80 a1 25 10 01 e4 90 c5 a1 99 f3 4b b9 e6 99 9e 99 4f 37 de 78 c5 e0 01 00 00 43 4b 20 02 c8 a1 df 33 87 3e 2e 3b eb a8 5c 99 4f cd 7a 75 28 b6 21 5b 97 d9 85 e5 54 28 7a 09 00 c8 2b 3b 33 b4 7e 6f 23 dd df be 13 f2 b9 b8 59 df 4e db 1f dc 4c bb dd 8e 83 01 60 cc 78 77 00 10 48 16 b8 9e ba fc 73 06 02 e0 18 ce ce 5d 48 b7 de 7e ed c8 97 0f 8f f2 73 71 16 b6 b2 7f f8 b8 7b 6b d5 81 00 30 66 7c Data Ascii: @"_>^ONUG'x"@F"DDDDDD{&TN'UoVn%KO7xCK 3>.;\Ozu(![T(z+;3~o#YNL`xwHs]H~sq{k0f\|
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: e6 ef 47 6d eb 76 ee b3 04 01 00 c6 81 40 04 10 4c 16 61 ee de 5a 1d e9 6d c8 de c0 0f 72 1b b2 33 5f 3e fa ef ff c9 c1 31 82 fb 0e 00 80 c1 f0 19 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 f9 16 33 80 9c b2 af 88 9f 2a 95 fb 9a b6 db 69 f7 f5 b5 ed 27 e9 97 bf 58 49 3f ff 2b d3 43 39 b6 1f 7d b8 97 be fd bf ee a7 bf fe 8b c6 a1 fb e0 89 a7 2f a7 c9 c2 c1 2f 63 cd 7a 35 dd fe bb eb 87 8e 7f bf cb 3b 2d 3b 9b eb be f9 0b 00 80 c7 4a 20 02 c8 e1 dc d2 4a 9a 5f 7c 26 d7 3c 59 7c b8 f5 f6 6b 43 b1 fe 9f ba 58 1c da 38 94 f9 c4 27 27 7a 01 6b f5 bb ad b4 73 b7 fb 53 a7 c9 22 ce c2 a5 67 fb 5a 5e b9 32 9f e6 3e 75 31 dd db 58 3b 70 ba 7e 97 77 5a 66 17 96 d3 fd ed 3b bd e0 05 00 00 8f 83 4b cc 00 72 28 Data Ascii: Gmv@LaZmr3_>1DDDDD3*i'XI?+C9}//cz5;-;J J_\|&<Y\|kCX8''zksS"gZ^2>u1X;p~wZf;Kr(
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 df 62 06 90 d3 54 a9 9c 8a 67 ca 7d 4f ef db a0 00 00 80 61 27 10 01 e4 70 76 ee 42 7a 72 e5 f9 5c f3 64 81 e8 bd d5 d7 07 b6 0e 93 85 62 9a 39 bf 94 0a c5 a9 13 d9 e6 76 ab 99 ee 6f 6f a6 dd 6e e7 d0 69 9f 7b b1 9c 66 2f 14 4e 64 bd 3e fa 70 37 ad 7e b7 95 76 ee 76 0f 9d b6 5c 99 4f d3 33 f3 8f fc 79 b7 d3 4e 1f ee dc e9 6d eb 41 4a d3 95 fd 63 60 c1 2f 02 03 3f 6e b2 df b1 56 a3 6e 50 01 80 53 23 10 01 e4 30 bb b0 9c 7b 9e 2c 4e 64 67 1d 1d f6 26 b2 1f 59 1c 7a ea f2 0b bd 37 9c 27 bd dd b7 de 7e ed c0 69 be f0 d2 5c ba f8 33 67 4e 74 bd 7e f1 37 ce a6 ff f2 6f ef 1d 18 89 ce 2d ad a4 f9 c5 67 0e 5d 56 36 dd 7b ab df 7d e4 9b f4 a3 c4 41 c6 5f 76 dc 64 bf 1b Data Ascii: 8 8 8 8 8bTg}Oa'pvBzr\db9vooni{f/Nd>p7~vv\O3yNmAJc`/?nVnPS#0{,Ndg&Yz7'~i\3gNt~7o-g]V6{}A_vd
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 e0 04 ec 76 db 06 01 00 00 18 5a 02 11 40 0e cd fa 76 ee 79 5a 8d 7a ef 76 5a 8f 7f d2 da ad e6 a1 d3 fc 60 b7 d9 d7 b2 ea 7b dd f4 37 bb f5 81 8d 49 a3 56 3d f0 e7 b7 f7 5a 7d 2f 2b cf b4 00 00 30 ec 8a 86 00 a0 7f f7 36 d6 7a 91 61 7a 66 be af e9 bb 9d 76 aa 6d 6d 0c f4 f1 b3 65 9e 9d bb 30 94 e3 93 85 b0 6c 1d 0f f3 e5 07 37 d2 6f 4d 3d 99 16 27 4a 8f 9c 26 0b 30 ff b5 73 67 60 63 b2 b3 b9 9e 9a f5 83 03 d1 1f b6 df db 7f dc 07 e9 67 27 2b 8f 9c a6 be d7 49 df ec 56 7b d3 01 00 c0 b8 98 d8 db db 33 0a 10 f1 97 7f 62 62 e4 d6 79 f9 ca d5 97 f6 ef be 7a dc e5 ec 36 ee 39 00 00 00 80 9f 30 Data Ascii: 8 8 8 8 8 8 8 8vZ@vyZzvZ`{7IV=Z}/+06zazfvmme0l7oM='J&0sg`cg'+IV{3bbyz690
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: ec 4a 08 68 62 62 62 e4 b7 61 f9 ca d5 eb e9 98 df 68 06 00 00 70 0c 5f 5b 7f e7 da ef 8e f2 06 3c ec 42 ce 20 02 46 d9 e7 f7 6f 3b 86 01 00 00 38 05 df 18 f5 38 f4 71 02 11 30 b2 f6 9f 8c b3 38 24 12 01 00 00 27 ed d5 34 26 97 96 3d e4 12 33 08 6a 1c 2e 31 7b 68 f9 ca d5 d9 fd bb 6f 25 97 9b 01 00 00 8f df cb eb ef 5c 1b 9b 38 f4 b0 0b 09 44 10 d4 38 05 a2 87 96 af 5c 7d 69 ff ee ab f6 2e 00 00 f0 18 64 57 2e 7c 69 fd 9d 6b df 18 a7 8d f2 19 44 c0 d8 d9 7f a2 7e 69 ff ee d2 fe ed 65 a3 01 00 00 0c 48 16 86 b2 6f 51 be 34 6e 71 e8 e3 9c 41 04 41 8d e3 19 44 1f b7 7c e5 ea c5 fd bb 5f db bf 7d 21 b9 f4 0c 00 00 c8 2f 8b 41 df 4c 3f fc 30 ea b1 fd dc 53 97 98 41 70 e3 1e 88 fe be e5 2b 57 5f dc bf cb 3e ab 48 2c 02 00 00 1e e5 d5 fd db ce fa 3b d7 de 8c b2 Data Ascii: Jhbbbahp_[<B Fo;88q08$'4&=3j.1{ho%\8D8\}i.dW.\|ikD~ieHoQ4nqAAD\|_}!/AL?0SAp+W_>H,;
2024-04-05 23:18:24 UTC	790	IN	Data Raw: 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c Data Ascii: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.5	50007	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	404	OUT	GET /steam/apps/2399830/capsule_231x87.jpg?t=1712339593 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/jpeg Content-Length: 16176 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "65034ee1-3f30" Expires: Fri, 12 Apr 2024 17:53:14 GMT Last-Modified: Thu, 14 Sep 2023 18:20:17 GMT CF-Cache-Status: HIT Age: 19496 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d46eb91273-MIA
2024-04-05 23:18:24 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 03 00 03 01 01 01 01 00 00 00 00 00 00 00 00 05 06 07 03 04 08 02 01 00 09 ff c4 00 3b 10 00 02 01 03 03 03 02 04 05 03 03 02 06 03 00 00 01 02 03 04 05 11 06 12 21 00 07 31 13 22 14 32 41 51 08 15 23 61 71 42 81 91 Data Ascii: JFIFCCW;!1"2AQ#aqB
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: c9 c7 d3 c7 47 41 4c 52 eb 06 8d 68 8d 77 4d a5 6a 29 ec b7 f5 92 4a 79 e5 2f ea 52 16 69 20 24 70 a1 4f cc 0e 39 c7 3c f4 4f 1e 52 a6 fe bb d2 ea 6d 0e 10 97 27 ca ad fa 7e ff 00 a7 75 34 66 5b 5c 71 ce a0 fa 72 c5 2e 55 d3 c1 01 97 f8 1f bf 55 8a 56 21 06 16 62 ac 52 ce 19 72 52 9a 15 ae 6f 5f 0e 91 d3 53 ca bb 63 62 1a 28 e4 50 50 83 c0 c0 e7 a1 36 33 a8 92 66 8e b2 10 00 16 a0 36 f9 ae 35 7b d8 52 4d 5e aa e1 e6 9d 58 30 45 3f 37 27 c9 c7 81 d3 a8 74 b4 2c 6d c2 ab dd c3 a1 fd 45 f8 fc d6 bf 5d 7b db a4 f4 e5 6c 9a 7a a6 a6 5b 2b c5 36 7e 22 b0 ac 71 48 d8 1b 81 24 f0 46 e5 27 20 01 b8 67 c8 e9 15 e7 79 5d e3 84 53 08 2d e1 d3 dd 36 08 af ba 87 5f d0 dc ac 34 eb 68 6a 4b ad 3d 3f bf e2 69 e6 0e b1 b7 3b b0 ca 70 48 c8 e9 a6 50 0c 99 a8 2d 73 00 54 d3 Data Ascii: GALRhwMj)Jy/Ri $pO9<ORm'~u4f[\qr.UUV!bRrRo_Scb(PP63f65{RM^X0E?7't,mE]{lz[+6~"qH$F' gy]S-6_4hjK=?i;pHP-sT
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 8c 12 a3 d5 7a 98 65 00 12 4e dc 6d 27 eb c9 0a 33 8e 63 4a 95 20 88 15 a7 6b 00 94 a6 08 24 9d 4d 73 f6 a1 fc 4d f7 5f 47 67 f3 0b ed ee 5b 5b be f8 6f 34 a8 92 3c c1 4e 37 4c 95 09 23 1e 54 0c 29 11 e0 7f d3 3b 99 49 11 89 4a bc 26 de 9f 8a 59 cc 22 d2 33 22 f5 35 be fe 35 7b 85 74 a9 a3 a6 87 b8 37 aa 4b 72 95 6a b1 05 43 c2 67 01 bd e1 01 da 21 c8 1f 2a 9c 64 9c 14 5f 68 69 4a 0b d2 d4 92 1b 52 26 4c f0 a1 31 6b fa de e2 d6 5a 60 ab ee 05 e5 2a 62 9e 58 68 ec b5 36 e6 aa a4 68 58 02 2a 51 20 94 05 2c ed 22 fa 30 46 42 7a 4d ee 3b 89 3c 08 6c 9b cc 74 99 fa fb 13 14 25 e7 cb 70 27 ac 47 a8 3f 58 9a 74 ec 07 78 ab 74 5f 79 20 d3 d5 77 fb 25 c2 c1 75 8d 29 64 b8 52 ac d1 a4 a5 c8 08 36 ce ca f1 14 93 01 b7 a8 f6 87 23 82 09 eb 6b 4a 5c 00 69 a6 ff 00 7a Data Ascii: zeNm'3cJ k$MsM_Gg[[o4<N7L#T);IJ&Y"3"55{t7KrjCg!d_hiJR&L1kZ`bXh6hX*Q ,"0FBzM;<lt%p'G?Xtxt_y w%u)dR6#kJ\iz
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: f0 d9 f2 54 83 a2 2c 27 29 53 66 2f 69 bd e0 fe 45 50 0e d1 c5 0c 1a 51 89 41 52 80 19 a2 d6 b0 9e a4 03 e7 43 2f 72 cf a1 69 ad 8b 6e ba b5 ae 8a be 38 a9 9e aa 24 22 3a 7a c3 c4 13 b6 73 84 71 88 df 39 fa 37 95 e6 b9 b5 ab 0a d7 76 e7 84 84 c8 04 cd 87 ee 13 a1 83 78 d8 1e 15 0c 23 6d f6 93 aa 71 00 38 14 a2 09 00 a6 f3 e0 54 6a 09 4d 89 17 24 1d f5 5b a4 fc 51 7c 54 f3 e9 8e e7 d9 d6 ae 28 a4 6a 67 ad 00 89 a9 99 49 04 12 32 c3 07 ea b9 1f f6 9e a3 9d a5 2b fc 89 ca 78 81 ee 9f c4 1a d2 b6 31 f8 64 e6 c2 af bd 48 fe 0b 37 ff 00 d5 cd 7c 95 98 1f f6 14 e5 6a b3 5b 74 79 ff 00 55 50 dc a1 ae d3 a9 47 51 32 57 6f 0a 62 8f d1 7e 5c 8c 8c 00 49 dc 33 9c 78 ce 07 48 f6 90 5b 2c 93 b1 dc 68 6b 57 d8 78 a6 3b 41 df 05 94 2c 52 44 29 27 81 1f 01 17 9a e7 bd 51 Data Ascii: T,')Sf/iEPQARC/rin8$":zsq97vx#mq8TjM$[Q\|T(jgI2+x1dH7\|j[tyUPGQ2Wob~\I3xH[,hkWx;A,RD)'Q
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 26 fd 07 41 b0 1d 75 93 46 b4 7d 82 f3 35 85 e2 b1 db a3 ba ea 0a c7 41 34 45 bd 35 a6 84 30 24 3b 12 31 9f a8 1c 8f 68 e3 0d d7 0c ae 70 e8 31 3f b8 f0 07 40 39 9f a0 eb 53 70 86 40 7d c1 6d b9 9e 27 90 f7 e9 5d 2b a9 b5 52 76 83 b7 34 51 50 24 12 df aa 24 4a 5b 7c 25 37 0a 9b 8c 9f 29 c1 f3 1c 40 6f 39 f0 a8 b9 f3 d5 ce 15 9c a1 2d 37 d0 75 ac 56 31 49 70 af 10 f1 b0 b9 e4 05 45 2a b4 83 d3 f6 f2 19 ad f7 29 17 57 da 44 97 da 3b d3 1f d4 96 e2 2a 72 d2 39 fa 89 32 ca c3 fd ad fb 0e b7 ee 76 62 7f 42 19 47 ee 06 67 9c 5f c8 d7 cc d8 ed 62 7b 48 ba e8 f0 1b 47 2d bc c6 b5 6d ac d5 36 4e f3 76 86 87 51 d3 52 0a 74 a9 47 a7 b8 5b 7e b6 fa e8 ce da 8a 72 bf 4d 8f ee 5c f9 56 04 75 87 2a 24 c2 fe 7c de b7 6c 60 91 86 59 2c 9b 1b 8f 7f ec 57 3f 77 5e e1 1d 7d Data Ascii: &AuF}5A4E50$;1hp1?@9Sp@}m']+Rv4QP$$J[\|%7)@o9-7uV1IpE)WD;r92vbBGg_b{HG-m6NvQRtG[~rM\Vu*$\|l`Y,W?w^}
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 3e 73 85 f3 82 7a 32 60 89 59 b5 2a ea 94 85 1e ec 6b a6 c7 5f 41 ed 54 05 d0 ba 4a cd 4d 6e b8 53 5e 25 d6 13 34 2b 50 56 4a 7f 46 9e 19 98 23 27 1b 98 c9 85 03 27 71 52 41 00 60 2b b4 3b 90 e8 84 2b af cf 9e 9a a4 5f 70 28 e7 16 b4 75 dc fb 6d fd 30 69 9a 31 75 a8 ad d4 97 c9 d2 2a 64 9c 88 a5 96 23 b2 7a b3 ee 39 c0 da 15 41 dc 73 80 49 45 f0 c7 05 79 e4 e1 5b 91 73 b0 f9 b0 de 99 c0 60 57 8d 76 3f 88 d4 fc e3 55 1d 1b a8 1f 4a d5 46 e6 9d 68 fd 58 81 05 18 38 75 3e 3d c3 21 bc 9e 72 72 49 e8 98 55 a1 4d 78 4c ce a7 89 de 7f 1b 0a 73 1d 85 82 41 10 38 72 a7 68 bb 67 7c ee 46 be a3 d5 35 9a a2 d5 b6 df 07 a3 6b b5 cb 1c ea b4 91 6c 25 a4 6d a8 c1 a5 77 db 92 0f 0b 18 03 3b 8e 34 bd 9b 8b 67 0a b2 eb d7 8d 34 b7 1d 6b e6 1d bd d9 58 8c 4b 07 0f 86 80 0e Data Ascii: >sz2`Yk_ATJMnS^%4+PVJF#''qRA`+;+_p(um0i1ud#z9AsIEy[s`Wv?UJFhX8u>=!rrIUMxLsA8rhg\|F5kl%mw;4g4kXK
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 1d 1d c6 17 ad 35 11 39 b5 b5 34 ab 34 55 18 5f 5f 62 31 58 d0 36 37 12 c5 06 40 3b 58 a9 e7 c1 12 d2 08 b1 a5 d0 b2 0e 93 f3 e7 9d 5f fb 03 db 2b 5f 75 da ed 4f 2d 0d 2d 9a c1 2c 70 fc 5c 76 d3 31 f5 d0 b6 f1 12 bc ef 2b aa 86 44 6c fa 99 3b 47 b7 3e e5 26 14 17 9c 85 12 06 87 d7 e7 d2 bb 8e 52 70 cc 8c b0 66 e0 c5 ec 22 f1 16 bd b9 cd e9 a2 1d 33 4d a8 35 84 94 31 55 7c 05 04 f5 92 b7 c4 d4 3c 93 98 e2 dc ce d2 31 25 9e 46 db 96 24 92 ce c4 92 49 39 e9 d7 96 9c cb 58 d2 e7 e7 1a ac c1 34 e3 89 6d 9d 54 40 1e 7e c3 d8 55 53 b7 fa f2 8a ae db 76 a9 b2 59 eb a8 34 46 9c 8a 3f 56 57 9e 36 9c 46 d2 0c bc 91 7f 5b 49 f3 30 19 23 38 03 03 ac 4e 2f 10 87 dc 04 a6 67 db 41 f5 fa eb 5f 61 63 b3 8e 05 a4 b0 14 02 8f d4 8d 68 0e a9 ee 1f 6f b4 de bc ae b7 47 4e f4 Data Ascii: 5944U__b1X67@;X_+_uO--,p\v1+Dl;G>&Rpf"3M51U\|<1%F$I9X4mT@~USvY4F?VW6F[I0#8N/gA_achoGN
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 4b 34 b0 6c da ce 1a 09 8a 92 8c 17 68 c4 84 8c b1 cb aa e5 ba e8 81 a9 a5 17 85 0e 5d ab 1e 1f 2e 3a 52 fd c2 cf 79 b0 d3 4d 6c d4 36 69 a8 a7 99 05 7d 2c 6f 1e 21 ad 05 c4 13 b4 05 72 ac 8f b5 4b 2a f2 8f ed 20 6d 19 e9 41 4a 81 3b d5 4c fe e4 6e 3d eb 02 5d 6b ff 00 2f 9e df 76 8a a1 ab 22 65 98 d7 ce a4 3d 54 28 09 f5 1d 71 96 99 72 bb b1 ff 00 50 30 3f 36 43 f0 c4 c8 af 09 88 34 89 a8 e9 e5 a2 bd bc f4 93 34 4f 3c 87 d4 da 41 46 38 0c 32 a7 8c 7b 88 ff 00 f5 07 ce 49 92 40 55 8d 77 31 02 d5 ab fe ab bb dd e3 8a 7a 70 b4 cf 13 16 12 52 b4 86 60 08 c0 3e e6 6d bc 01 ca f3 cf f8 ef 77 62 ad aa 32 07 87 7a e8 7f c3 a7 78 2d 7d b9 ac bb 59 af fe 95 34 97 1a 45 a8 7a ba 58 52 38 e1 9d 37 b1 46 8e 35 0a 32 1c fb 86 39 41 80 77 83 d4 5b 73 ba 52 94 ad e2 a2 Data Ascii: K4lh].:RyMl6i},o!rK* mAJ;Ln=]k/v"e=T(qrP0?6C44O<AF82{I@Uw1zpR`>mwb2zx-}Y4EzXR87F529Aw[sR
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: a2 30 45 04 4e a9 12 ec 5f 4a 11 c2 c7 fa 50 92 e9 b7 20 46 36 7c 83 66 70 39 58 7e eb 0f 9b 5a bc 49 41 39 8d ce b3 af 1b 9e 3b df eb 42 aa e3 5b 7d ac 40 64 75 97 24 6c 46 68 a5 29 b0 9c 18 ff 00 da a5 24 1b b7 2f 9d c7 c0 6e 89 00 03 49 10 54 a0 07 cf 9c 28 55 7e ba a4 6b 2d 5a 44 d2 7e 64 29 c4 91 54 ef 58 a2 82 a0 ce 51 b6 a8 4f 74 4d 4e 12 3c 1c 36 f0 19 b7 0c 05 ec a1 69 b6 b1 f3 d7 4a 5c a5 f6 5c 39 ac 9c c0 1e 10 6d af 23 73 f4 af 77 bd 7b 6e d6 d7 f7 69 ec 14 d4 71 54 42 24 a7 92 85 e5 49 29 1d 52 34 52 cd 23 90 cb ba 35 2c 87 1f 38 5d ca 0a 85 60 65 75 79 53 a1 d0 70 d8 6b ed c3 7e 08 a8 ad b6 ff 00 fd 09 b8 d5 51 04 8b f0 d7 80 31 b4 57 9d 53 4d 25 aa 58 eb 24 88 ca f4 d8 ab 88 b0 cf a9 11 dc 1b 1f 56 0c 37 63 3e 08 5c f2 3a 40 a4 83 94 fc e1 Data Ascii: 0EN_JP F6\|fp9X~ZIA9;B[}@du$lFh)$/nIT(U~k-ZD~d)TXQOtMN<6iJ\\9m#sw{niqTB$I)R4R#5,8]`euySpk~Q1WSM%X$V7c>\:@
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: c4 ef f7 b4 59 85 9c 6a 0a 58 ff 00 96 e7 6d 7a 79 98 b5 6f 90 a4 34 09 55 ce b6 26 fc ae 6d 3c 6d c0 4d ea 69 ab af 56 dd 5b 56 96 db 6b dc 65 8e 69 06 25 9e 98 2d 5d 63 8a 65 8e 4c fa 8a 09 f6 a4 8e 5c 05 67 33 14 2b ef 32 8f 14 a1 47 23 62 dd 2e 6d 7f 62 78 92 4d 0c 3c e0 05 d7 8f d6 c2 49 80 7d 40 31 60 00 a4 b5 b9 41 63 d8 d1 24 75 15 62 24 9c 4c b9 21 63 28 8e 63 05 b2 cc cc a4 21 46 38 52 4e 42 87 72 b3 6a 13 d4 fc f9 c2 ab 71 a7 35 c0 88 d4 71 db d2 74 8b 1f 49 1d 7a 86 e9 51 4b 2c 93 2b 4f 1c 54 30 d7 4c e6 45 97 f4 a5 64 8d 64 2d bb 73 16 91 80 20 83 b5 bf 62 bd 75 68 55 fe 7c bd 26 c6 21 07 28 98 d4 79 c7 1e 94 1a 8a b6 78 04 72 47 1c 73 d4 14 27 d2 90 b0 f5 06 dd a7 90 ca 78 f3 f3 03 f4 1f 4c 2a 81 0b 06 af 9d 95 e1 94 91 72 41 b7 21 a9 f2 af Data Ascii: YjXmzyo4U&m<mMiV[Vkei%-]ceL\g3+2G#b.mbxM<I}@1`Ac$ub$L!c(c!F8RNBrjq5qtIzQK,+OT0LEdd-s buhU\|&!(yxrGs'xL*rA!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.5	50011	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	635	OUT	GET /store/about/cta_hero_steamworks_pt2.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/png Content-Length: 36605 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-8efd" CF-Cache-Status: HIT Age: 5045 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d48a974c2b-MIA
2024-04-05 23:18:24 UTC	1072	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 88 00 00 02 dc 08 06 00 00 00 8c e3 8b 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 Data Ascii: @N@p"4D' h8@N@p"4D' h8@N@p"4D' h8@N@p"4D' h8@N@p
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 Data Ascii: p"4D' h8@N@p"4D' h8@N@p"4D' h8@N@p"4D' h8@N@p"
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: bc fb c7 a7 dd 8f dc 0f 86 7c c9 71 fa 87 d7 ff d7 75 eb f1 1f 6e a7 df ef 6e c2 8f fc fb f8 b2 21 ff df 77 f9 b7 ec fe 39 fb fd 37 5f 7d f9 f7 5e 25 00 00 00 96 49 40 c4 da 79 f2 ec c5 71 fb 97 3c 04 fa a0 75 1f 06 3d ef fe ff cb f6 7c c8 ff 77 3c e6 f1 e7 bf cd 83 a5 af db 1f df 74 7f cd 3e be f9 ea cb af bd d2 00 00 00 cc 8b 80 88 5a 7a f2 ec 45 84 2e 4f 5b 9d f0 e5 49 f2 fb c7 6b f4 34 9f 8f 79 fe f1 4b 1e 20 fd 75 eb 3e 38 fa c2 d9 01 00 00 40 59 02 22 2a 2d 69 07 8b 8f 3f 6a 75 82 a0 63 47 26 93 07 48 c7 c9 f1 8a 5f be ee 7e 44 70 14 21 d2 df ab 38 02 00 00 60 1c 01 11 95 d2 6d 0f cb c3 a0 f8 fd 53 47 a5 b4 a7 ad 81 20 ad 7d 5c f3 39 47 79 68 f4 c5 37 5f 7d f9 da a1 02 00 00 20 08 88 58 99 6e 75 d0 71 ab 13 08 fd a0 a5 32 68 91 f2 63 7d 9c 1c ff af Data Ascii: \|qunn!w97_}^%I@yq<u=\|w<t>ZzE.O[Ik4yK u>8@Y"*-i?jucG&H_~Dp!8`mSG }\9Gyh7_} Xnuq2hc}
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: b0 f5 e0 c9 7d 05 d2 60 40 14 9f 9b 0e ad 8e 00 e6 f0 c3 ef 8d 6d ef ba be 38 ef 0b 67 06 45 50 93 b6 bb 15 3a 06 33 84 46 21 da e3 86 1d 9b 08 b4 22 2c 1a d5 9e 37 a3 5f b4 3a 55 45 5f b8 5a a9 12 01 11 00 00 eb 4e 40 d4 10 4f 9e bd 78 da fe e5 b3 d6 9c db c8 22 b0 88 e0 62 b0 25 2b 35 d8 76 f5 de 49 d8 ad 60 99 36 0c ba 5f c0 75 2a 5d c6 cd d1 29 53 95 93 05 3d af be ed 85 36 f1 f9 47 1f ff 5e eb 3f fc f1 d5 d8 80 28 0c 0b 96 8e 3e fc de c4 e7 30 cf aa a2 61 ca 84 46 f1 fd 77 8f 1e f4 b5 c8 0d 7b bc 0b 0a 8b be 68 75 e6 14 fd d2 d5 4b 15 08 88 00 00 58 77 02 a2 35 97 cc 17 7a 39 af ef 99 b5 8f ed 1f 0c ad 14 4a 45 08 71 fe f6 bb 42 33 6c f2 a0 29 be 6f 59 11 72 44 f5 4d 54 0b 0d 3d c9 0b cc f5 19 66 b0 ea 29 02 9e f8 fa ff e0 3f bf 98 18 10 85 c1 d6 b4 Data Ascii: }`@m8gEP:3F!",7_:UE_ZN@Ox"b%+5vI`6_u*])S=6G^?(>0aFw{huKXw5z9JEqB3l)oYrDMT=f)?
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: b3 a9 43 87 ad ad 2c bc 99 a5 8a 23 2c a3 6a 28 0f 19 16 15 0e 8d 93 86 27 f1 33 0f 3e f8 70 e2 d7 fc 47 ff ea a6 f5 f0 e9 fd 62 f1 6f 3e 2b 37 db 27 5e 93 93 6f ff b1 f7 5c 0f 1e 7d 38 53 80 57 f6 79 e6 cf 75 d8 0e 6d b3 b8 3c 3b c9 e6 11 2d e2 3c 9c 53 50 f4 45 ab 13 14 fd bd bb 0c 65 09 88 00 00 58 77 86 54 57 cc ac ed 64 f3 68 25 eb 2c 86 96 53 35 94 2d fe 57 14 0e 85 08 1d 72 31 b4 bb 48 90 b1 b1 71 d1 fe df 9b be 63 52 fa c2 db db eb 85 1d d7 97 ef 16 1e 10 e5 e7 43 1e 12 c5 b1 8e 63 1e c7 79 5e 21 51 cc 1e 8a 2a a8 b4 9a 28 82 9d d8 1d 6e d6 6a a2 3c 68 8a 73 7b 86 a0 e8 b8 fd f1 77 ed 6b ec cf 5a 9d 41 d6 da ce 00 00 00 f2 75 97 43 50 0d d1 4e d6 fe f8 cb f6 6f e3 e3 e9 b4 0b e8 a3 8f be 3f 73 38 14 a1 d0 e9 6f 7f d3 17 0e c5 c2 7e ef c1 a3 d6 e1 Data Ascii: C,#,j('3>pGbo>+7'^o\}8SWyum<;-<SPEeXwTWdh%,S5-Wr1HqcRCcy^!Q*(nj<hs{wkZAuCPNo?s8o~
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 1d d0 bd 5b b1 ea a1 ec 42 ac 58 9b d9 a8 d7 6f 99 21 51 58 66 35 d1 94 d7 ca e7 76 39 03 00 00 d6 81 80 68 06 ed 45 e1 cf 5a 25 77 29 8b 05 e8 e0 30 de 69 e5 0b e5 f7 aa 86 b6 77 96 5a 35 94 3f 96 2a 86 43 21 9d 3d 14 c7 3f 0d 62 aa 24 0d ae ae e6 54 21 33 0f c3 42 a2 f3 ef 5e 2d ed e7 2f ab 9a 28 ad b6 2b e9 65 fb e3 d7 ed fb c1 53 77 45 00 00 a0 ae 04 44 53 e8 ce 1b 8a 60 e8 b3 32 5f b7 77 f4 30 5b 80 ce a3 bd 69 d4 e2 38 7e c6 d1 12 ab 86 42 95 c3 a1 a8 30 49 67 fa 54 b1 7a 28 b7 bd b7 d7 f7 b8 d3 e3 b9 6a 83 af 67 9c 7f ef de be 5e f2 f1 e9 54 13 a5 8f a3 af 9a 68 4e c7 2b ce 91 b8 86 4a 5e a7 51 41 68 2e 11 00 00 50 5b 02 a2 92 ba 55 02 d1 52 f6 49 d1 af 89 aa 87 08 86 76 0f 1f cc fc f3 47 b5 d7 44 55 4c 2c 6a e7 f1 33 ca 3e 9e aa 86 43 e1 fa e2 3e Data Ascii: [BXo!QXf5v9hEZ%w)0iwZ5?*C!=?b$T!3B^-/(+eSwEDS`2_w0[i8~B0IgTz(jg^ThN+J^QAh.P[URIvGDUL,j3>C>
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 51 3b 0c 96 79 ed e2 3a 2f 31 c8 5e 48 04 00 00 ac 6e fd d9 b4 27 3c 4d 38 34 cd 2c 9b 3a 55 0d 85 3a 87 43 11 c4 c5 47 ef b1 1f 1c ae d5 39 bb d3 37 ac fa ac 76 8f 7f 58 48 74 71 fa b6 ef 7c ab c4 cd 70 01 d5 44 c3 9e fb 04 42 22 00 00 60 35 6b a2 26 3d d9 65 84 43 75 ab 1a 0a 75 0e 87 42 1a c2 45 05 c8 ba 54 0f f5 ce 9d 64 0e 51 3c d7 34 0c ab 8b 61 41 c9 e0 79 57 15 f3 ae 26 12 12 01 00 00 75 d0 98 80 a8 4c 38 d4 59 d0 7d 5c 3a 1c 8a b6 99 d3 df fd 53 5f 60 91 57 25 54 b1 6a 68 d8 22 3d 16 b1 75 0a 87 c2 cd d5 7d db d5 f6 ee de fa 5d a4 ed 73 28 0d 17 ea 34 ac fa fd eb aa 1e 21 d1 bc ab 89 84 44 00 00 40 e5 d7 9e 4d 78 92 e5 c3 a1 8f fa aa 07 26 b9 bd be 6a 9d be fa 36 6b 9b 49 0d ab 44 a8 92 61 e1 50 3c f7 ba 19 ac 20 5a 47 69 58 59 c5 40 a5 a8 3a 85 Data Ascii: Q;y:/1^Hn'<M84,:U:CG97vXHtq\|pDB"`5k&=eCuuBETdQ<4aAyW&uL8Y}\:S_`W%Tjh"=u}]s(4!D@Mx&j6kIDaP< ZGiXY@:
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 99 61 70 68 75 a8 4b 50 34 18 0e 0d 6b a7 5b 37 4d 9f 3f 94 4b cf d9 a8 20 ca cf e7 b5 bd 59 d5 30 24 8a fb c8 f9 9b 57 59 30 94 06 9b 83 af 5f ba 9b e2 a0 ec 9a 7e f8 41 d1 6b fa 33 43 ab 01 00 80 a9 d6 5c 35 7c cc 3f 6f 15 18 4a 1d ad 1c a3 06 4c c7 62 2c dd ad 2c aa 8c a2 95 e3 e8 a3 ef d7 2a 28 1a 16 0e 8d 6a a7 5b 27 2a 88 ba 17 ef f6 4e df 6b bd ce b3 88 d2 e7 5c 87 90 28 bd 6f 0c b6 ff c5 3d 26 ee 35 71 cf 89 10 3b 77 71 f2 66 64 c8 17 cf 3b 2a 89 0a 8a 79 44 4f fd f3 06 00 00 94 5a 6f d5 e9 c1 b6 17 3d 2f db bf bc 2c b2 88 dc 7f f8 c1 c8 bf bf 3c 7b 7b ff b9 c9 b0 ea f8 7d 5d 82 a2 91 e1 50 cd 06 6b 4f b3 f0 6e fa fc a1 54 df b0 ea cb 77 8d 78 ce 55 0e 89 e2 b1 5c 9e 9d 64 bb 93 0d de 27 b2 41 d5 8f 3f ce ee 31 79 b0 b7 73 70 d8 f7 3c ae ce cf 46 Data Ascii: aphuKP4k[7M?K Y0$WY0_~Ak3C\5\|?oJLb,,(j['Nk\(o=&5q;wqfd;*yDOZo=/,<{{}]PkOnTwxU\d'A?1ysp<F
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 0b 14 96 d5 1e 52 44 1e 14 45 68 15 55 4e a3 2a 3d 22 30 ba 68 bd c9 9e ef e6 f6 76 d6 5a b5 b1 b9 d5 da 6a ff be 49 55 45 aa 87 4a 5c d0 d1 66 d6 2d 9c cb db cc 9a 5e 81 16 c1 4a 3e c4 3b 3f 97 b2 9d de 06 2a 86 e2 ef e7 b1 5d fd bc c4 bc b4 3c 18 ca 86 ed 9f 9e 14 0a c7 23 d8 ba ba 78 57 a4 c5 30 36 02 f8 97 ae 1a 00 00 20 5b 4f 56 e1 41 3c 79 f6 e2 69 ab 40 cb 43 b4 88 15 09 08 62 11 98 86 0a 05 df 51 5f ba 5e 50 d4 7e 5e 51 c9 30 6e 81 3b f8 9c f2 05 6d 7c 8f 08 00 b6 da 1f 11 22 6d ac 61 c5 91 f9 43 c5 65 83 d8 f7 0f 7a a1 63 b4 2d 16 19 e6 be 0e b2 d0 27 ab 36 bb ee 7e dc bc 77 cd 0c 13 d7 51 dc 23 aa 16 3e 66 f3 8f 1e 3c ca 2a 9d f2 d7 72 a7 7d af 28 12 60 1d 3c fc 60 ec 3d a5 eb 79 cc 7c fb e6 ab 2f 7f e6 ca 01 00 00 aa 52 41 14 ad 65 63 57 b1 d9 Data Ascii: RDEhUN="0hvZjIUEJ\f-^J>;?]<#xW06 [OVA<yi@CbQ_^P~^Q0n;m\|"maCezc-'6~wQ#>f<*r}(`<`=y\|/RAecW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.5	50012	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	627	OUT	GET /store/about/logo-steamworks.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/svg+xml Content-Length: 4298 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-10ca" CF-Cache-Status: HIT Age: 749 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d4a87b335f-MIA
2024-04-05 23:18:24 UTC	1070	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 30 22 20 64 3d 22 4d 31 36 2e 36 2c 32 31 2e 34 76 39 2e 38 68 2d 32 2e 33 76 2d 39 2e 38 68 2d 33 76 2d 32 2e 31 68 38 2e 33 76 32 2e 31 48 31 36 2e 36 7a 22 2f 3e 0d 0a 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 33 2e 31 2c 33 31 2e 33 56 31 39 2e 33 68 37 2e 36 76 32 2e 31 68 2d 35 2e 33 76 32 2e 38 68 34 2e 35 76 32 2e 31 68 2d 34 2e 35 76 32 2e 39 68 35 2e 33 76 32 2e 31 48 32 33 2e 31 7a 22 2f 3e 0d 0a 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 34 31 2e 31 2c 33 31 2e 33 6c 2d 30 2e 37 2d 32 2e 31 68 2d 34 2e 31 6c 2d 30 2e 37 2c 32 2e 31 68 2d 32 2e 33 6c 34 2e 32 2d 31 31 2e 39 68 31 2e 38 6c 34 2e 32 2c 31 31 2e 39 48 34 31 2e 31 7a 20 4d 33 38 2e 34 2c 32 32 2e 38 6c 2d 31 2e 35 Data Ascii: 0" d="M16.6,21.4v9.8h-2.3v-9.8h-3v-2.1h8.3v2.1H16.6z"/><path class="st0" d="M23.1,31.3V19.3h7.6v2.1h-5.3v2.8h4.5v2.1h-4.5v2.9h5.3v2.1H23.1z"/><path class="st0" d="M41.1,31.3l-0.7-2.1h-4.1l-0.7,2.1h-2.3l4.2-11.9h1.8l4.2,11.9H41.1z M38.4,22.8l-1.5
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 33 2c 30 2e 32 2c 30 2e 36 2c 30 2e 33 2c 30 2e 38 63 30 2e 31 2c 30 2e 32 2c 30 2e 33 2c 30 2e 35 2c 30 2e 35 2c 30 2e 37 63 30 2e 36 2c 30 2e 36 2c 31 2e 33 2c 30 2e 39 2c 32 2e 32 2c 30 2e 39 73 31 2e 36 2d 30 2e 33 2c 32 2e 32 2d 30 2e 39 63 30 2e 32 2d 30 2e 32 2c 30 2e 34 2d 30 2e 34 2c 30 2e 35 2d 30 2e 37 0d 0a 09 09 09 09 73 30 2e 32 2d 30 2e 35 2c 30 2e 33 2d 30 2e 38 73 30 2e 31 2d 30 2e 37 2c 30 2e 31 2d 31 2e 31 63 30 2d 30 2e 34 2c 30 2d 31 2c 30 2d 31 2e 37 43 38 32 2e 39 2c 32 34 2e 36 2c 38 32 2e 39 2c 32 34 2c 38 32 2e 39 2c 32 33 2e 36 7a 22 2f 3e 0d 0a 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 39 34 2e 38 2c 33 31 2e 33 6c 2d 32 2e 37 2d 35 2e 35 68 2d 33 2e 32 76 35 2e 35 48 38 38 56 31 39 2e 33 68 34 Data Ascii: 3,0.2,0.6,0.3,0.8c0.1,0.2,0.3,0.5,0.5,0.7c0.6,0.6,1.3,0.9,2.2,0.9s1.6-0.3,2.2-0.9c0.2-0.2,0.4-0.4,0.5-0.7s0.2-0.5,0.3-0.8s0.1-0.7,0.1-1.1c0-0.4,0-1,0-1.7C82.9,24.6,82.9,24,82.9,23.6z"/><path class="st0" d="M94.8,31.3l-2.7-5.5h-3.2v5.5H88V19.3h4
2024-04-05 23:18:24 UTC	490	IN	Data Raw: 2c 32 39 2e 31 2c 31 31 38 2e 34 2c 32 39 2e 39 2c 31 31 37 2e 37 2c 33 30 2e 35 7a 22 2f 3e 0d 0a 09 09 3c 2f 67 3e 0d 0a 09 3c 2f 67 3e 0d 0a 09 3c 67 3e 0d 0a 09 09 3c 72 65 63 74 20 78 3d 22 31 33 37 22 20 63 6c 61 73 73 3d 22 73 74 30 22 20 77 69 64 74 68 3d 22 31 33 22 20 68 65 69 67 68 74 3d 22 31 33 22 2f 3e 0d 0a 09 09 3c 72 65 63 74 20 78 3d 22 31 32 37 2e 37 22 20 79 3d 22 31 32 2e 39 22 20 63 6c 61 73 73 3d 22 73 74 30 22 20 77 69 64 74 68 3d 22 39 2e 34 22 20 68 65 69 67 68 74 3d 22 39 2e 34 22 2f 3e 0d 0a 09 09 3c 72 65 63 74 20 78 3d 22 31 30 30 2e 31 22 20 79 3d 22 33 2e 31 22 20 63 6c 61 73 73 3d 22 73 74 30 22 20 77 69 64 74 68 3d 22 36 2e 37 22 20 68 65 69 67 68 74 3d 22 36 2e 37 22 2f 3e 0d 0a 09 3c 2f 67 3e 0d 0a 09 3c 67 3e 0d 0a 09 Data Ascii: ,29.1,118.4,29.9,117.7,30.5z"/></g></g><g><rect x="137" class="st0" width="13" height="13"/><rect x="127.7" y="12.9" class="st0" width="9.4" height="9.4"/><rect x="100.1" y="3.1" class="st0" width="6.7" height="6.7"/></g><g>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.5	50013	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	404	OUT	GET /steam/apps/1962663/capsule_231x87.jpg?t=1712172838 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/jpeg Content-Length: 8619 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "6570a5f6-21ab" Expires: Wed, 10 Apr 2024 19:34:05 GMT Last-Modified: Wed, 06 Dec 2023 16:48:54 GMT CF-Cache-Status: HIT Age: 186251 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d4ab3e2593-MIA
2024-04-05 23:18:24 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 00 03 01 01 00 00 00 00 00 00 00 00 00 06 07 04 05 08 02 03 09 01 00 ff c4 00 53 10 00 01 03 02 04 03 05 04 04 07 0a 0a 0b 00 00 00 01 02 03 04 05 11 00 06 12 21 07 13 31 08 22 41 51 61 14 32 71 81 15 16 91 a1 Data Ascii: JFIFCCWS!1"AQa2q
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: bc 2c e0 b0 e2 62 ab 09 fa 5f e8 d3 4f 5b 68 ff 00 25 e6 f3 35 6b df df 4d bd cf 5e b8 ac f2 f0 ad 11 86 1f 52 f7 40 3f d4 ca c3 cc bf 26 3d 2e 6c a8 4d 38 a6 cc a6 a3 2d 4d dc 1b 7b c0 10 3c 3c 7c 71 6e 4b e4 cf c5 fc 04 19 1b 82 95 2c df 9a fe 84 a9 89 59 71 6a 8c b9 28 72 54 25 12 b0 95 24 58 25 45 37 f7 ba df 09 2c aa 11 b5 b1 e1 85 ce 5c 5e 82 0a d7 65 86 3e 87 ae c9 a2 e7 08 f5 89 d4 90 a0 fc 2f 63 e5 59 49 04 a9 05 5c c5 69 55 81 b6 dd 7c ba e1 17 92 f5 71 1d f8 ca 9b 8c ae 8a 4c cd d9 75 14 2a be 4f 87 f5 8f da 3e b0 be 59 d7 ec 3a 7d 9f ba 15 7b 73 0e be be 98 2b ca 74 f4 07 e2 d3 5b ec be 83 d9 1a 12 b3 14 ea 2a b3 cc 76 67 32 10 a6 da 30 13 cd 75 25 3a 8a 82 39 d7 b0 dc 78 e3 3c b3 39 6c bc 7c 74 9b 56 7c ff 00 14 48 33 b3 21 a2 33 9f 18 95 21 Data Ascii: ,b_O[h%5kM^R@?&=.lM8-M{<<\|qnK,Yqj(rT%$X%E7,\^e>/cYI\iU\|qLuO>Y:}{s+t[vg20u%:9x<9l\|tV\|H3!3!
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 52 47 4c 6d c7 3e 4e 97 44 da 21 26 3b 22 39 75 e5 90 bf c5 6d 29 b8 3f 13 e1 8a bc 8d 3a 42 71 4c a6 92 12 b4 2c 1e e8 3e 58 d7 19 b5 d1 9e 58 d3 4e c8 59 73 33 4d c9 19 96 2d 56 02 d2 b7 98 51 ee ac 5d 2b 49 16 52 4f c4 13 8f 45 4b 9a 30 d7 17 a1 83 2b b4 85 45 6c d4 0c 1a 15 3a 9d 36 62 42 5c 98 d0 25 c2 40 20 28 fe 51 00 ed 7b db 0c a2 bd ce 6d fb 15 95 0e 31 4e ac 42 cb 31 55 4d 61 02 87 26 3c 86 8a 56 ab ba 5a 00 00 7c af 6f 0c 3a 49 5b be c4 db a4 14 b3 da 0e ac d5 52 4c f3 45 8b ad e6 5a 60 a3 98 ab 00 85 38 a0 7e 7c c3 f6 62 1c a0 f5 65 ea 5d d1 d9 48 e3 74 b8 73 a4 ca 66 83 06 21 90 db 4d 96 d9 b8 4f 74 ac ea db c4 eb fb b0 8e 71 e9 33 94 65 d9 df 3e bd 1f 31 2b da 95 0a 2d 3b 53 5c b7 1b 8c 80 35 0b 93 72 7c f7 c7 9f 9b 24 a4 ff 00 a1 bb 14 12 Data Ascii: RGLm>ND!&;"9um)?:BqL,>XXNYs3M-VQ]+IROEK0+El:6bB\%@ (Q{m1NB1UMa&<VZ\|o:I[RLEZ`8~\|be]Htsf!MOtq3e>1+-;S\5r\|$
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 19 bd a4 33 4e 56 ab c0 8f 26 2d 35 99 ed 96 64 20 38 92 eb 72 1b 6f 59 4a 85 b5 6c 77 f5 c3 71 d1 38 bd d1 a3 bb 47 d2 32 fe 51 e0 ee 61 ad 47 a0 42 6e 4b 26 2a 43 91 21 b6 97 ac a9 2d 20 e9 20 5f a2 8e d8 e8 a5 61 97 41 e5 23 21 e5 69 94 78 6e af 2d 52 55 ce 8e 85 2b 5c 06 89 37 46 f7 ee f9 13 80 14 45 77 81 dc 38 7c 92 e7 0f f2 bb 84 80 2e aa 2c 63 fa 98 36 ce e2 be 05 57 6b ac 8f 97 32 97 66 5c fb 32 85 97 e9 74 59 6d 43 6f 97 22 9d 09 b6 1c 47 e1 9b 1d d5 21 20 8d 89 1b 61 a1 b9 6c 49 a5 c5 9e 5e f0 97 35 49 6e b4 f4 49 92 27 4f 7a 66 86 99 d6 a5 38 94 90 4d ee 54 7b b7 db 7f 4c 7a 38 e4 ee 8f 33 24 35 63 33 32 b4 b6 d3 05 5a 4a 6e f1 04 1b 13 ee 2b 1a 19 9e 2a ac df 12 a7 7d 5e cb d5 69 87 f7 c6 18 3c b0 7c 54 46 c0 7c ed 8f cd 5f d3 16 cf bb 86 dd Data Ascii: 3NV&-5d 8roYJlwq8G2QaGBnK&C!- _aA#!ixn-RU+\7FEw8\|.,c6Wk2f\2tYmCo"G! alI^5InI'Ozf8MT{Lz83$5c32ZJn+}^i<\|TF\|_
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 65 5a 33 b7 04 aa 22 57 11 a2 02 00 25 a7 6c 47 fa 87 09 1c 7c 76 17 37 2e cd 17 55 21 34 b9 84 f4 0c af f4 4e 28 00 1f 80 12 58 97 c2 5a 13 b1 d4 56 c9 e7 84 92 2d d2 43 80 fd e3 0c fb 04 7a 3e c2 ab 36 cf 1c ea 74 dd 44 38 fd 0d 97 ed e0 74 3c a1 ff 00 c8 70 37 47 6a c1 95 50 58 83 da cd ba 9a 5c 57 3a 6e 58 5e a6 c8 db ba fa 13 70 7c 3d d1 7f 3b 8f 2c 43 fe cf ec 53 f9 4e 9e da 29 d5 d9 ab 38 83 e7 0b fb eb 18 a4 ba 15 0d cc b9 fc 1e a5 ff 00 35 6b f4 06 19 00 a0 cc 5c 1e c8 b9 ba a6 fd 46 b9 93 e8 75 79 ef 84 87 64 cd a7 b4 eb 8e 04 8b 27 52 94 92 4d 80 00 63 81 48 ce bd b6 78 23 c3 ec a5 d9 c3 34 55 a8 59 26 81 47 aa 32 e4 30 d4 d8 34 d6 99 79 01 52 9a 4a ac b4 a4 11 70 48 3e 87 14 8b 76 4e 51 54 79 b3 91 e3 05 e7 3a 42 55 b8 32 05 c1 36 bf 5f 1c 68 Data Ascii: eZ3"W%lG\|v7.U!4N(XZV-Cz>6tD8t<p7GjPX\W:nX^p\|=;,CSN)85k\Fuyd'RMcHx#4UY&G204yRJpH>vNQTy:BU26_h
2024-04-05 23:18:24 UTC	1369	IN	Data Raw: 37 97 b8 fb 2e 5a fd d4 cd 4a 54 6f 62 94 a8 04 a8 fa f7 54 76 c6 67 24 a6 59 46 e3 66 97 c6 92 22 97 83 b4 68 59 73 3c 67 ba 57 2c a6 7b 12 5b 5b 65 46 ff 00 b9 56 0a 9b 09 f4 17 de de 9e 58 94 15 36 87 96 d2 63 5d e6 51 21 95 b4 e2 42 db 5a 4a 54 93 d0 83 b1 18 a8 85 01 e1 d6 57 57 5a 0c 03 ff 00 80 9f d9 85 e2 be 03 6c 12 97 02 8f 94 f8 b3 96 d9 87 12 3d 39 b9 71 5f 6e cc a0 20 29 7b 69 bf d9 6f 9e 12 92 92 19 5b 8b 19 8e b4 87 da 5b 4e 24 2d b5 a4 a5 49 3d 08 3d 46 2a 21 41 45 e1 e6 5b cb b3 93 32 99 46 8b 0a 52 41 01 d6 93 65 00 45 8e 02 49 06 c9 19 d2 a9 1a 89 94 2b 53 e5 af 44 68 f0 dd 71 67 d0 20 ec 3d 4f 41 ea 71 cf 48 08 00 ec a6 41 e0 26 57 d2 95 20 0f 6a 16 59 b9 ff 00 2a 7b c6 c3 1d 1d a3 84 8f 68 2a d2 e8 5d ac 72 7c fd 83 11 53 4f 53 aa b8 Data Ascii: 7.ZJTobTvg$YFf"hYs<gW,{[[eFVX6c]Q!BZJTWWZl=9q_n ){io[[N$-I==F!AE[2FRAeEI+SDhqg =OAqHA&W jY{h*]r\|SOS
2024-04-05 23:18:24 UTC	845	IN	Data Raw: a6 34 a7 f4 90 7d 92 9f ed a7 c5 d6 1a 75 c5 e6 e9 ac c7 25 1a 5f 76 89 0e c9 bf 51 fb c8 1b f8 60 a7 7d 1c 0a 67 de d6 1c 45 cf 99 76 66 5e aa e7 07 aa 94 49 ed 84 49 65 54 a8 8d 73 00 5e ab 6a 43 41 43 70 0e c4 61 d5 88 da f9 03 5d cd ae bd 96 64 d0 86 66 ff 00 a3 64 72 83 91 8c 44 8f 70 20 24 6a d3 a8 0f c1 37 70 08 be 84 93 72 06 02 72 5e c7 54 7d 98 11 25 c8 ac 49 71 02 49 79 09 36 0a 4a 6c 0f a8 c5 2d d0 9a b1 bd f5 6e 67 3d b6 d9 9b 19 69 70 7b e8 6c a4 03 d2 d6 22 f8 f8 ce 48 fa 55 16 77 c7 ca 75 68 52 75 fb 43 48 71 ab 2b a5 c1 df fe 58 3c 90 38 b4 5a e7 56 6b 79 ca a4 8a 93 cf b1 15 ce 5a 5a 59 6d 4a de dd 7c 3d 70 63 28 c5 51 cd 37 b2 b9 34 8a 8d 39 49 34 cc d3 34 3e 01 e5 04 ea 40 b5 f7 17 d5 b6 0a 6a 5f 74 45 71 6b a6 40 87 97 f3 95 2a 53 72 Data Ascii: 4}u%_vQ`}gEvf^IIeTs^jCACpa]dfdrDp $j7prr^T}%IqIy6Jl-ng=ip{l"HUwuhRuCHq+X<8ZVkyZZYmJ\|=pc(Q749I44>@j_tEqk@*Sr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.5	50014	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	626	OUT	GET /store/about/icon-steamchat.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/svg+xml Content-Length: 775 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-307" CF-Cache-Status: HIT Age: 1041 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d5090fda33-MIA
2024-04-05 23:18:24 UTC	775	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.5	50015	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	625	OUT	GET /store/about/icon-gamehubs.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/svg+xml Content-Length: 1693 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-69d" CF-Cache-Status: HIT Age: 5045 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d51eeea569-MIA
2024-04-05 23:18:24 UTC	1070	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 39 2e 37 32 34 22 20 68 65 69 67 68 74 3d 22 33 39 2e 37 32 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 2e 37 32 34 20 33 39 2e 37 32 36 22 3e 0d 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 31 31 32 34 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 31 31 32 34 22 20 64 3d 22 4d 31 35 37 31 2e 38 38 35 2c 32 35 37 33 2e 33 34 33 61 34 2e 39 36 36 2c 34 2e 39 36 36 2c 30 2c 31 2c 30 2d 37 2e 32 2c 30 2c 37 2e 35 2c 37 2e 35 2c 30 2c 30 2c 30 2d 31 2e 33 2e 39 31 37 2c 38 2e 37 34 39 2c 38 2e 37 34 39 2c 30 2c 30 2c 30 2d 33 2e 34 38 34 2d 33 2e 33 33 38 2c 36 2e 32 30 37 2c 36 2e 32 30 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="39.724" height="39.726" viewBox="0 0 39.724 39.726"> <path id="Path_1124" data-name="Path 1124" d="M1571.885,2573.343a4.966,4.966,0,1,0-7.2,0,7.5,7.5,0,0,0-1.3.917,8.749,8.749,0,0,0-3.484-3.338,6.207,6.207
2024-04-05 23:18:24 UTC	623	IN	Data Raw: 2e 39 34 2c 32 35 38 30 2e 34 38 33 5a 6d 32 32 2e 33 34 35 2d 31 33 2e 30 33 34 61 32 2e 34 38 33 2c 32 2e 34 38 33 2c 30 2c 31 2c 31 2d 32 2e 34 38 33 2c 32 2e 34 38 33 41 32 2e 34 38 32 2c 32 2e 34 38 32 2c 30 2c 30 2c 31 2c 31 35 36 38 2e 32 38 34 2c 32 35 36 37 2e 34 34 38 5a 6d 2d 31 32 2e 34 31 34 2d 34 2e 39 36 35 61 33 2e 37 32 34 2c 33 2e 37 32 34 2c 30 2c 31 2c 31 2d 33 2e 37 32 34 2c 33 2e 37 32 34 41 33 2e 37 32 35 2c 33 2e 37 32 35 2c 30 2c 30 2c 31 2c 31 35 35 35 2e 38 37 31 2c 32 35 36 32 2e 34 38 33 5a 6d 36 2e 32 30 37 2c 32 34 2e 38 32 37 68 2d 31 2e 32 34 31 76 2d 38 2e 30 36 39 61 2e 36 32 31 2e 36 32 31 2c 30 2c 31 2c 30 2d 31 2e 32 34 31 2c 30 76 31 38 68 2d 33 2e 31 76 2d 39 2e 39 33 31 61 2e 36 32 31 2e 36 32 31 2c 30 2c 30 2c 30 Data Ascii: .94,2580.483Zm22.345-13.034a2.483,2.483,0,1,1-2.483,2.483A2.482,2.482,0,0,1,1568.284,2567.448Zm-12.414-4.965a3.724,3.724,0,1,1-3.724,3.724A3.725,3.725,0,0,1,1555.871,2562.483Zm6.207,24.827h-1.241v-8.069a.621.621,0,1,0-1.241,0v18h-3.1v-9.931a.621.621,0,0,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.5	50016	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	627	OUT	GET /store/about/icon-broadcasts.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:24 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:24 GMT Content-Type: image/svg+xml Content-Length: 1536 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-600" CF-Cache-Status: HIT Age: 5045 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d52ea3b3dd-MIA
2024-04-05 23:18:24 UTC	1070	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:24 UTC	466	IN	Data Raw: 30 2e 38 56 31 30 2e 36 43 32 31 2e 38 2c 31 30 2e 31 2c 32 31 2e 34 2c 39 2e 37 2c 32 30 2e 39 2c 39 2e 37 4c 32 30 2e 39 2c 39 2e 37 7a 0d 0a 09 20 4d 32 34 2e 33 2c 31 30 2e 36 63 30 2e 35 2c 30 2c 30 2e 38 2c 30 2e 34 2c 30 2e 38 2c 30 2e 38 63 30 2c 30 2e 35 2d 30 2e 34 2c 30 2e 38 2d 30 2e 38 2c 30 2e 38 63 2d 30 2e 35 2c 30 2d 30 2e 38 2d 30 2e 34 2d 30 2e 38 2d 30 2e 38 43 32 33 2e 34 2c 31 31 2c 32 33 2e 38 2c 31 30 2e 36 2c 32 34 2e 33 2c 31 30 2e 36 20 4d 32 34 2e 33 2c 39 2e 37 0d 0a 09 63 2d 30 2e 39 2c 30 2d 31 2e 37 2c 30 2e 38 2d 31 2e 37 2c 31 2e 37 73 30 2e 38 2c 31 2e 37 2c 31 2e 37 2c 31 2e 37 73 31 2e 37 2d 30 2e 38 2c 31 2e 37 2d 31 2e 37 53 32 35 2e 32 2c 39 2e 37 2c 32 34 2e 33 2c 39 2e 37 4c 32 34 2e 33 2c 39 2e 37 7a 20 4d 32 34 Data Ascii: 0.8V10.6C21.8,10.1,21.4,9.7,20.9,9.7L20.9,9.7z M24.3,10.6c0.5,0,0.8,0.4,0.8,0.8c0,0.5-0.4,0.8-0.8,0.8c-0.5,0-0.8-0.4-0.8-0.8C23.4,11,23.8,10.6,24.3,10.6 M24.3,9.7c-0.9,0-1.7,0.8-1.7,1.7s0.8,1.7,1.7,1.7s1.7-0.8,1.7-1.7S25.2,9.7,24.3,9.7L24.3,9.7z M24

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.5	50002	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:24 UTC	1440	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=906334581&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=153530237&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1712359100%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011819%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359100&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:25 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:25 GMT Expires: Fri, 05-Apr-2024 23:18:25 GMT Last-Modified: Fri, 05-Apr-2024 23:18:25 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.5	50018	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	404	OUT	GET /steam/apps/1086940/capsule_231x87.jpg?t=1711532262 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/jpeg Content-Length: 16505 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "656ef0e8-4079" Expires: Wed, 10 Apr 2024 09:37:48 GMT Last-Modified: Tue, 05 Dec 2023 09:44:08 GMT CF-Cache-Status: HIT Age: 221913 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d7cd00a56a-MIA
2024-04-05 23:18:25 UTC	928	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 03 02 01 00 09 ff c4 00 41 10 00 02 01 03 03 03 02 04 04 03 06 03 07 05 00 00 01 02 03 04 05 11 06 12 21 00 07 31 13 41 14 22 51 61 08 23 32 71 15 42 81 16 Data Ascii: JFIFCCWA!1A"Qa#2qB
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 8c ea 2b 5a 57 d3 7c 9c 3b c1 21 85 f6 e3 ce 23 2a c7 ff 00 99 43 6a c1 b7 e2 eb b6 56 cb cf df e2 0d 39 7e f5 9b be 12 9b b4 2a 7b 23 a1 5e 62 20 7f d5 49 a3 0b 27 69 67 b9 42 f5 6e c7 6c 6d 9f 86 58 19 a4 38 27 0a 40 fa f9 e3 db ab 24 f0 f4 10 56 b3 1e 15 11 71 c6 c3 47 b3 40 92 79 ce 07 8f a5 45 97 b4 b5 f5 34 93 d6 b8 14 b1 44 4e f4 74 2b 81 9e 15 7e a7 fd ba da 6c 12 a1 93 f0 ac 87 1c 65 0b 0d 03 24 ed f7 34 b6 bd d8 5e 96 47 c2 34 4b b8 ed 0f ee 3e dd 4e 5d 59 14 f7 93 b5 54 31 72 16 04 99 34 33 3a b4 2c 41 23 8f 3d 22 5b 45 39 a6 69 50 55 48 a3 a8 8d 54 6f e4 e7 cf d3 ad 69 8a d6 b4 93 b5 5c d1 de 12 16 11 85 f5 17 c0 f9 ba 2d 0b 8c 50 dd 99 39 ab 89 c7 af 4c 0a c4 49 c0 e0 f4 42 86 a1 8a d4 85 04 aa 09 aa 5a fa 25 4c b1 05 7e a3 a0 1c 68 83 34 c5 Data Ascii: +ZW\|;!#CjV9~{#^b I'igBnlmX8'@$VqG@yE4DNt+~le$4^G4K>N]YT1r43:,A#="[E9iPUHToi\-P9LIBZ%L~h4
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 20 62 b6 5b 28 28 c1 a0 3b ad 1d 6e 9f d5 17 2b 45 58 29 51 47 30 57 c0 c6 32 01 ff 00 d7 a9 2e 1d 75 fa a6 12 e8 3b d5 6d fd a8 b6 75 4d 9e 54 ed ec dd c6 09 68 6a 22 95 0c b5 08 c0 33 60 6d 0a 7c 67 3e f9 ea b6 cd c8 04 73 fa 54 2f 15 42 b0 41 c5 35 6b 22 82 d1 14 92 48 85 54 8d ea 00 f3 91 e0 f4 d3 09 ef 72 a4 4d 12 ae e8 de 96 da da ae 19 17 e6 60 27 90 06 01 4e 78 fa 7d ba 0d d2 79 d3 8b 7c ed 49 ab c5 41 82 a9 a3 24 b1 c9 c7 3d 2c 59 d2 62 9e 34 35 09 aa 0a aa 89 6b ea 0c 0a a0 e3 df a1 14 a2 b3 14 62 50 10 35 54 a7 b5 bf c1 46 91 86 69 5c 65 51 47 27 ec 3a f5 50 da 0a 96 60 57 ad ea 71 70 91 26 a8 a5 8d ed b5 4c 93 fe 44 cb c3 46 c7 0c bf 62 3c 83 f6 3d 04 d3 cd 3d de 6d 52 3c 36 f7 f3 f4 a6 4e 30 e3 5d d7 13 07 a1 de b5 e5 ce 31 4b 45 cf eb 2b c9 Data Ascii: b[((;n+EX)QG0W2.u;muMThj"3`m\|g>sT/BA5k"HTrM`'Nx}y\|IA$=,Yb45kbP5TFi\eQG':P`Wqp&LDFb<==mR<6N0]1KE+
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 43 02 48 5d a4 0d d9 08 f8 f7 b4 2e ad b3 67 68 da 92 55 82 bd 3b 03 bc 01 93 e7 cb 94 d3 1e 09 c0 90 d3 82 f2 e9 40 84 e4 24 1c 9f a4 78 73 e7 43 1d f0 b7 69 99 bb a9 49 70 d2 97 86 be 69 ab a5 b6 9a 35 aa a0 55 dc 27 a6 89 69 a6 52 ae c0 fc cd 10 90 16 23 2b 2a 9c fb 9d 7e cd b8 bf d3 16 1c 4c 29 27 69 19 04 92 0f ae 6b 77 1c 48 ed 7b 72 70 af a7 d8 45 1d f6 56 cd 63 bd 94 b5 50 dd e0 7b b3 48 f1 ad ae b9 4d 3d 46 e0 a5 b8 8d b9 94 e0 1f f9 7b bd b1 9c 8c d1 8e 3f 6b 66 54 9b 84 29 24 6f 89 8f 71 98 f1 a9 7b 8e 05 77 7a 03 96 ea 4a 92 76 33 1e 99 14 d1 d5 7a 53 50 53 e9 4a ed 48 d5 f6 1f e0 4a cb 1c 95 af 72 8c a9 ff 00 09 51 93 c9 e3 e5 19 6f b7 42 2b db 9e 1c 7b b6 e9 52 cf 80 1f 53 59 b1 ec 45 ec c3 ca 4a 3c e7 e8 29 1b a8 2d 94 74 13 35 ea e5 ac 6d Data Ascii: CH].ghU;@$xsCiIpi5U'iR#+*~L)'ikwH{rpEVcP{HM=F{?kfT)$oq{wzJv3zSPSJHJrQoB+{RSYEJ<)-t5m
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 24 d6 67 ec df 6a 3b ab 78 7a 5d 4d a3 f5 65 fe 0d 57 13 89 e9 64 8a e3 33 bc f2 96 e1 5c 33 10 ca c7 86 dc 31 82 77 71 9e bb 25 ff 00 06 b4 b3 b0 72 e5 67 49 48 c1 1b 93 c8 79 93 88 ae 4b 61 ed 35 d5 d7 13 45 98 ef 24 98 20 ec 07 33 e9 bc d3 37 f1 fb 70 b6 eb 4e e2 e8 8d 29 6f 86 2d 47 ad 62 86 3a 0b b3 db e3 32 49 fc 42 4f 9a 4a 48 f6 e7 76 d7 65 22 30 4e c3 29 51 82 48 ea 3b d9 d7 54 8b 95 b4 55 2d e9 04 83 b0 51 27 6f 49 04 f3 81 d2 ad 38 db 09 36 88 78 0f f7 35 10 98 dc a4 0e 7f 08 f5 eb 48 3a 4f c3 fe a6 b1 eb 91 a6 ed 17 3b 25 5d ea b4 1a 0a cd 2b 16 a4 a2 8e be 55 7f 95 e9 fd 3f 58 12 e7 8f c9 27 71 20 02 bc 70 d3 8b 2a cc 82 a6 64 a8 6c 52 92 73 d3 1e ea 5f c3 3f 58 98 43 e9 84 f4 24 6d d7 3e fa 21 b5 e9 db ff 00 6e ed 1d cb d3 97 2a 3b 44 92 db Data Ascii: $gj;xz]MeWd3\31wq%rgIHyKa5E$ 37pN)o-Gb:2IBOJHve"0N)QH;TU-Q'oI86x5H:O;%]+U?X'q pdlRs_?XC$m>!n;D
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: a5 fe 82 af 3d bd d6 b6 cb c5 c2 71 45 4f 47 50 1d aa 66 07 6c 59 38 de 71 c9 c1 20 f1 f4 1d 56 59 96 dc 7d b4 ac c2 64 49 e9 9f a6 f5 01 7c c3 96 d6 8f 38 d8 3a c2 55 11 83 24 11 83 ca 76 a2 ff 00 c4 5e bf a6 d6 7a 29 ed d4 d5 d0 54 09 2e 31 c8 25 a6 90 94 aa 84 b1 70 f9 03 05 54 31 42 32 4e e8 f3 e0 8e ba 6f 1f e2 ad 3d 64 6c f5 ea 50 58 20 8d 94 82 37 f4 38 23 95 72 5f 67 38 09 b5 7d 37 61 1a 41 48 04 1d d2 a0 60 8f 50 35 03 cc 1e b4 b2 ed cf 6c a4 ee 46 a2 a8 a6 b7 81 05 54 2b b7 7d 53 94 33 b1 f0 4e d0 40 20 79 fa f0 7c e7 ae 58 e5 f3 6c 28 6b 04 cf 4a e8 eb b6 5e 93 a3 00 53 72 9f b4 95 1a 0f b7 fa b2 0d 53 eb 50 d4 d1 54 c3 35 be 9c 4a 1e 3a 89 9c 34 72 7a 64 0c 0c 06 89 dc 79 3b 50 9f 3d 57 f0 db 84 a9 b5 29 bd a4 6f 51 7c 41 2b 2f b6 98 cc 19 3e Data Ascii: =qEOGPflY8q VY}dI\|8:U$v^z)T.1%pT1B2No=dlPX 78#r_g8}7aAH`P5lFT+}S3N@ y\|Xl(kJ^SrSPT5J:4rzdy;P=W)oQ\|A+/>
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 3b 30 49 0a 74 f3 81 26 e1 37 4a 29 70 ad ac e4 f3 c8 d3 b9 99 19 c8 80 41 ce 73 48 b8 ea 6d ff 00 46 92 e2 02 1e c7 74 1d 84 66 7c cf 2f 95 06 4e d2 6d 8d 63 89 30 b9 c7 df ab d5 4f 2a e7 c8 00 cc 9a d2 5a 12 64 a5 f8 76 48 8c f5 0a 09 66 53 fc a7 db a0 ee 2e 5b 29 29 52 4f ba 8d b6 e1 b7 2b 5c b6 e2 63 ce 88 35 15 82 5d 41 53 4c eb 4d 3f a4 8e bb a0 85 32 f2 f3 ca 83 9f 27 c0 fd fa 8c b9 b9 69 00 f7 09 f4 ae a7 c1 f8 4d e1 10 a7 92 31 8e f0 df 94 d1 12 cd a2 35 4e a7 5b 34 35 f4 d6 8d 59 41 3d 4c 2b 5d 67 b5 7c 3d 15 cd 44 e4 6d 8e 14 38 09 4d bb d1 35 04 7e 61 0d 9c 85 07 a9 2b eb 94 1e ef 64 14 9f cf 77 9d 5f 70 74 dc 5a 24 97 0e b5 11 25 25 50 52 00 de 4c cc f4 e4 69 b7 a3 35 ad 1e 81 b2 dc 93 51 eb 8b 6a d1 51 20 ab a6 a8 28 86 4a 09 54 ed 2f b4 01 Data Ascii: ;0It&7J)pAsHmFtf\|/Nmc0O*ZdvHfS.[))RO+\c5]ASLM?2'iM15N[45YA=L+]g\|=Dm8M5~a+dw_ptZ$%%PRLi5QjQ (JT/
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 20 e8 6b 2b 75 5c 95 21 4a c7 41 8f 4a 3a f6 e5 36 e0 38 44 9e 5a 8c fa c5 5f 76 97 f0 f5 5b dd ad 55 51 66 8a f3 4d 60 b6 db ed d5 17 8b d5 fe e4 59 a9 a8 69 90 61 a4 90 06 0d 23 17 65 01 41 e4 96 27 80 73 b7 8c 06 ac 92 da 54 44 00 4c 79 46 c2 0f cb 78 03 26 87 e0 ce bd 78 b7 0a 41 2b 51 03 d4 cf 3c 7f 81 43 b7 1d 13 a5 e9 41 a3 d3 77 4a cd 49 6d 89 ca ff 00 15 ab b7 0a 24 98 ff 00 f8 a3 f5 1d b6 fd db 69 3f 4c 72 5c 70 d5 39 72 ce a7 9b d0 4e c2 64 c7 8f 4f 8d 28 e2 29 45 ab a5 2d 39 ae 37 20 18 9f 03 ce a5 db bb 4d 79 a8 a2 6b 95 05 92 e5 59 44 b9 06 78 69 24 92 15 c7 9f 98 02 07 45 b8 6d 2d d7 df 5a 52 a3 d4 80 68 14 7e aa e5 10 84 a9 40 74 04 d4 2a 4d 11 47 56 be b4 b4 a3 2a 7f 51 5f 7c ff 00 a7 4c 11 6e db 89 98 c5 02 bb 97 5a 25 33 14 4b 41 db 1b Data Ascii: k+u\!JAJ:68DZ_v[UQfM`Yia#eA'sTDLyFx&xA+Q<CAwJIm$i?Lr\p9rNdO()E-97 MykYDxi$Em-ZRh~@tMGVQ_\|LnZ%3KA
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 48 a4 0a 4c 8a a4 c8 63 50 37 22 48 63 6c ae 3a 81 bd b8 bb 65 de d9 c4 92 53 9d 30 04 81 9e e9 1f 5e bb 09 15 d4 2d 6d ed d6 c7 67 6c b0 50 ac 6a ce 09 c7 78 1f 84 7b f7 aa 3d 03 42 bd aa ec 26 b8 d6 74 b4 d6 d6 d7 d6 2b d2 da 29 2e 12 ac 55 c9 6a 58 d5 99 ea a0 46 ca 17 94 8d 91 c8 e8 76 94 62 bc f5 b6 f7 8d ae e4 b2 d3 48 ff 00 6d 69 4a a7 c1 53 18 e5 10 3d 4c 40 c1 a1 f8 67 05 43 2a 7d d7 d5 de 41 52 63 c5 31 23 c7 7c f8 41 ce 45 72 fc 34 6b fe e3 dc 1f bb 7a 86 e9 7d b9 6a 2a 0b 3e 8e ac b8 56 57 57 a8 ab 16 db 81 3f dc e4 57 90 30 49 32 ae 40 ff 00 00 63 b7 03 a0 5d 1a 5a d4 d2 7b da 92 07 94 81 3c b6 9d f7 f8 d3 74 2c 2d d0 87 20 8c 9f 0e b1 e5 1c bc aa a3 b5 5a cf 51 c7 f8 5d ee e5 ca 6d 57 76 a9 96 8a 1a 58 68 a8 de a0 bc 70 4b 2d 4f ad 24 e5 4f Data Ascii: HLcP7"Hcl:eS0^-mglPjx{=B&t+).UjXFvbHmiJS=L@gC}ARc1#\|AEr4kz}j>VWW?W0I2@c]Z{<t,- ZQ]mWvXhpK-O$O
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 4f f1 58 b0 d9 54 69 46 de 83 cf 39 51 e5 41 14 92 44 cd 1c b2 3c 8d ce ec 63 2c ef fd 7d bc e7 a0 db 50 10 7f 26 99 38 83 04 0f c1 50 ea e6 8b 26 3d c0 ae 32 a4 1c 92 49 3f e5 ef d6 0a 22 62 b2 48 31 22 b5 9f 64 7f 10 7a 2f b9 1d 84 b8 76 1f ba 17 63 a6 c7 a6 e2 c3 7e af c9 a5 a3 97 78 92 35 91 87 29 89 55 58 1c 63 69 91 49 19 07 a8 0b ab 1b 8b 4b b1 72 d2 64 05 48 f0 07 f7 24 e3 63 c8 e7 97 4a b8 61 e6 af 6d 8b 73 de 22 14 39 98 fd aa 1d 7c 45 43 bc 76 8b b9 5a 7e df 0c 34 fa 70 ea ba 62 36 d3 de b4 c3 2d ce 96 54 ce 33 ea 42 5b 66 78 38 7d a7 c7 1d 5d db f1 7b 67 1b 05 67 49 e8 77 fb 1f 42 6b 9e 5c 70 4b 96 9e 29 48 9f cf 1c fb ea d2 c9 a9 28 bf 0f 1a 62 fb 73 b9 4d 14 5d e3 b9 46 94 d6 7b 75 21 8e a2 7b 25 33 2b 2c 93 55 63 70 47 95 64 28 b0 e3 d4 fd Data Ascii: OXTiF9QAD<c,}P&8P&=2I?"bH1"dz/vc~x5)UXciIKrdH$cJams"9\|ECvZ~4pb6-T3B[fx8}]{ggIwBk\pK)H(bsM]F{u!{%3+,UcpGd(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.5	50019	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	404	OUT	GET /steam/apps/2519060/capsule_231x87.jpg?t=1712178634 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/jpeg Content-Length: 9277 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "64d26f5f-243d" Expires: Wed, 10 Apr 2024 21:11:15 GMT Last-Modified: Tue, 08 Aug 2023 16:37:51 GMT CF-Cache-Status: HIT Age: 180428 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d7da370331-MIA
2024-04-05 23:18:25 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 1c 00 1c 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 00 04 06 07 02 03 08 01 09 ff c4 00 42 10 00 01 03 02 05 02 04 03 04 06 08 06 03 00 00 00 01 02 03 04 05 11 00 06 07 12 21 08 31 13 22 41 51 14 32 71 15 61 81 91 23 36 Data Ascii: JFIFCCWB!1"AQ2qa#6
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: d0 b3 72 54 45 f1 ad 89 72 32 80 71 17 a9 a5 de 7f b3 f8 47 02 7b a2 6c 81 a7 95 bc d6 6c 92 45 fe e8 28 f5 52 bb 4e 4a 94 96 81 74 fb 81 c6 2c e1 c7 98 ea ed 16 93 c4 78 c7 0e 69 2d 88 73 28 9c c9 6d 4b 51 f2 14 ab 17 11 b1 cc 1b ae 6f 95 95 16 49 da 8a 15 25 9d a7 13 18 e5 ad e4 45 49 b0 48 bf 38 76 d4 0e 5d 75 58 91 85 26 d2 4f 6c 61 64 2f 70 94 b4 b0 21 7b e9 81 65 4f 1a e9 fb 54 a4 44 a3 4a 6b 4d b3 73 b1 ab 45 29 a5 bc 8a 0c a2 89 e5 4d a9 c4 86 0f 87 67 6e 84 a9 63 6d ee 94 93 d8 5f 0a 09 b2 b5 54 74 17 53 69 12 19 8f 3f 4e b3 64 27 de a8 37 49 69 a9 14 39 4d a9 c9 ab 6c 3a dc 64 82 d8 25 e5 36 42 c3 63 cc 52 41 02 dc e3 29 2a 32 d6 55 ad 3f 99 93 96 da a3 cf 73 30 aa 5f d9 e9 a4 22 2a cc b3 27 7e cf 00 33 6d fe 26 ff 00 2e cb 5e fc 5a f8 10 a5 d5 Data Ascii: rTEr2qG{llE(RNJt,xi-s(mKQoI%EIH8v]uX&Olad/p!{eOTDJkMsE)Mgncm_TtSi?Nd'7Ii9Ml:d%6BcRA)2U?s0_"'~3m&.^Z
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 4a b7 17 e3 8b f3 8a e7 42 c1 0b 44 3e 6b 71 c6 e3 13 cf 9d 24 dc 45 c7 e8 93 a5 02 6b ae 9a 5f b9 13 79 a8 53 c0 6b 71 43 a5 a5 3c 1a 55 ae e2 4f 6e 7b 5e f6 c4 21 de c5 e2 3b 5d 5f 97 e8 b6 f1 2f 0f e2 35 0c 44 f3 72 97 72 9a b7 0d 80 bd 83 ae bf 15 1d a9 53 9b 86 d9 4b 63 cc 7b fa db 16 11 4a e7 9d 56 a9 9d 85 1e 34 74 c1 af 55 14 9e c7 98 f1 8b 88 9c b9 ce 64 3a a1 6a 45 95 6c 4b 05 6b af 6d 1a 4d 56 9b 61 e0 ab dc 15 89 d3 86 5a a6 67 0e a0 34 ca 83 59 8a 99 f4 9a a6 67 a5 c1 9b 15 64 84 bc c3 92 da 43 88 24 10 40 29 51 1c 1b f3 81 22 b4 34 be 9e 75 4f d1 66 89 57 f4 e7 56 f2 d6 98 64 88 f9 7f 52 f2 3c 08 95 c4 aa 3b ce ad 52 18 5a 56 e1 4a 52 a5 ab 76 e4 34 f2 2d 6b ef 08 f7 e5 54 90 09 55 1f 40 dd 2d 69 61 d0 88 5a 85 ac 99 5d bc c4 ee 76 cd 10 f2 Data Ascii: JBD>kq$Ek_ySkqC<UOn{^!;]_/5DrrSKc{JV4tUd:jElKkmMVaZg4YgdC$@)Q"4uOfWVdR<;RZVJRv4-kTU@-iaZ]v
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 20 21 0e 36 e9 69 25 29 09 48 de b0 41 79 45 5c 28 13 95 80 a5 d9 b3 aa 97 8f 51 fa 93 a3 99 e3 44 ab b5 17 f5 1e 3d 3e 2a 32 ec 5a c4 5f 8a 27 e1 7c 35 25 6f 34 f7 86 94 29 03 7e f0 e0 28 00 ee f7 02 14 5f 36 d3 f4 57 a1 9c c9 94 f3 f5 73 a5 fc e1 94 aa 29 96 bf b2 6a 23 35 b5 3d b4 be 84 72 14 94 4c 71 20 ed 51 b0 58 e6 c6 d7 da 6c 2c 2b ae 80 9c f9 ab da 5f 9e e9 b9 e7 a7 2a cd 7b 2a ea 15 61 39 81 11 69 d9 ae 9a c2 4c 42 dc 53 18 29 7f 14 db 81 7f d5 9b 5a ad 6e 4d bb 5c 60 42 88 e9 f6 9c 64 fe 99 75 87 28 cd ca fd 27 e7 0a 26 76 ac 89 91 28 cf af 37 c5 92 c3 8a 4c 75 b8 f3 6a 5a a6 ad a4 2b c2 4b 84 05 d8 90 95 6d b9 18 10 a5 ac 64 bd 45 cf 5a 26 72 2e a5 74 ef 98 e6 97 f3 05 4f 30 c8 14 0c e5 4c 8c da 1d 95 51 97 2d 28 43 82 5a 56 52 91 2b 69 bd ae Data Ascii: !6i%)HAyE\(QD=>2Z_'\|5%o4)~(_6Ws)j#5=rLq QXl,+_{*a9iLBS)ZnM\`Bdu('&v(7LujZ+KmdEZ&r.tO0LQ-(CZVR+i
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 9b f1 0f 25 c9 cb 8e 95 00 1a 4a 82 de 2d 8b 79 52 40 b6 04 2e 8b d5 2d 55 d1 9d 14 d7 5d 2a a1 b3 ae d1 b2 35 3f 49 22 9a 63 f9 3c 65 b9 b3 84 c0 f3 29 43 9e 2c 96 bc 9b 8b 5b 39 da a2 95 ee 51 e4 90 04 29 36 50 d1 8a 0e 88 75 03 d4 45 65 2d 09 19 33 3e 64 f3 99 62 c6 86 e8 41 79 29 f1 be 3d b6 94 38 e1 4f 36 b0 47 09 12 5b c0 85 46 f4 19 52 d1 4c d7 99 33 95 7b 43 72 6d 5e 8d ab 59 7a 8c eb f4 aa 46 6c ae a9 f8 d5 14 2c 14 2c 02 9e d6 56 c4 92 7b 78 89 3d af 61 0a d1 a1 e4 2a 96 ab 74 33 a5 2c d5 f4 41 7a c5 57 4c f9 72 a6 50 0e 65 ff 00 e3 aa 80 f1 91 2c 38 e9 5a 96 92 ab 29 45 1e 19 37 1b af e9 81 0b 83 ba e6 d1 19 f9 05 ac b3 2d 8e 9e 9e d1 38 89 6a 4b 92 94 33 78 cc 09 9a 37 b0 84 a9 4a 0b 57 83 b1 4b 09 f4 dc 5d ff 00 97 02 17 23 60 42 ec ac 70 c5 Data Ascii: %J-yR@.-U]5?I"c<e)C,[9Q)6PuEe-3>dbAy)=8O6G[FRL3{Crm^YzFl,,V{x=at3,AzWLrPe,8Z)E7-8jK3x7JWK]#`Bp
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 03 ca 02 e1 49 1d 92 a5 73 7f 4b f3 6c 6d 50 bc b1 a7 98 d8 5e 66 ca c1 30 38 b6 f5 43 19 a9 54 72 78 5c c8 2e b3 11 d9 21 51 e6 53 1c 5a 24 34 e8 49 00 b6 eb 57 37 07 8b 5c 73 dc 1e 38 b0 06 c6 8a 99 cc 0e b6 b8 6d fb d0 a1 b9 9f 4d e5 bc d9 9f 45 8c bb 3a 02 e5 51 1b 0a 2f c5 58 f9 b6 a4 dc b8 df 37 0a 17 20 1b 1e d7 2b b0 13 6c 71 d9 df 6f 9f ea b7 69 ca f3 02 69 73 91 4c a0 d4 a6 b6 f2 93 69 50 a2 ad c4 20 a3 e7 07 68 37 3e 64 de dc f6 e3 0d 48 db a3 74 9f 6b c3 6d a5 1b aa bb 99 67 40 7a 32 2a 08 a6 b8 d0 0a 71 6b 92 5a 50 48 ee 08 ef cf 6b 5b 0d 35 83 73 a8 4e 17 f9 68 50 d5 e4 21 4f 8a 0b 70 1f 2b 71 09 09 54 86 ed e7 06 e7 69 04 81 7b 11 7b fa e1 c6 c8 1d bd 26 dc df 24 c6 6c 19 11 58 8e b7 0a 8c 94 95 b6 19 20 28 d8 dc a4 0f 53 7b 1e fc e1 12 00 Data Ascii: IsKlmP^f08CTrx\.!QSZ$4IW7\s8mME:Q/X7 +lqoiisLiP h7>dHtkmg@z2*qkZPHk[5sNhP!Op+qTi{{&$lX (S{
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 42 58 10 96 04 2e ca c7 0c 5f 54 d0 ea fb 4e bb 4f 71 0d a8 23 75 85 cf a7 3c 9c 58 e0 34 3a 76 82 b4 5e da 65 bf 07 82 cd 90 35 aa d3 d4 d2 87 51 61 3a f2 d3 11 a0 5a 7c b8 94 a1 9b 58 25 0a 17 b2 95 fe 7f fa c6 f0 43 45 bd 78 8b 33 2a 79 98 d8 a4 3e 16 dd 7b 2c d9 41 f3 a5 72 7e 5c ac d0 e9 ad 13 15 2d 36 5d 3b 13 e7 0a 58 28 2a fb cd af f9 e2 4c 31 b5 ed 73 8a ab 12 90 d2 d6 ec 6b e2 bb 17 41 d3 43 81 91 68 10 be c6 8f 2c 4d 43 2b 25 c4 24 95 29 c5 58 93 ba c0 90 ab 0b 1f 6c 54 49 66 57 73 2b e6 f8 21 6f 26 c8 2e a2 39 93 33 0b ab d3 9c da 96 28 b4 58 d3 5d 93 48 cf 0e ad 4c 86 e5 14 f9 da 50 17 09 17 f2 01 db 80 49 f5 c4 88 0b d9 ac 7b f9 26 72 59 1c 8c e6 90 68 6b f7 6b 9b f3 6e 41 ad 64 3c d4 aa 45 7c 31 22 9c b2 05 3e b5 11 3e 24 69 17 17 01 2b b6 Data Ascii: BX._TNOq#u<X4:v^e5Qa:Z\|X%CEx3y>{,Ar~\-6];X(L1skACh,MC+%$)XlTIfWs+!o&.93(X]HLPI{&rYhkknAd<E\|1">>$i+
2024-04-05 23:18:25 UTC	134	IN	Data Raw: 89 b1 0c dc 5d 2b 4a 8a 4a 7d 0f 03 9f e1 88 4f b2 75 5b 66 20 63 63 b1 a1 06 ab dc 35 fb 93 a8 eb f3 83 dc 61 a2 15 8c 6f 37 6b 34 8d ab 57 a7 37 e3 07 44 01 4e 29 8d 49 af 0d a0 38 00 24 70 3d f0 f4 46 ca ac cd 8f 91 9e ca 4d 23 30 16 a2 08 16 b6 1d 73 a9 57 c1 10 79 a2 99 a9 16 07 0f 82 ab 5c dd 13 37 d0 46 1f 69 55 53 34 85 a3 0e 28 89 60 42 58 10 96 04 25 81 09 60 42 58 10 96 04 25 81 0b ff d9 Data Ascii: ]+JJ}Ou[f cc5ao7k4W7DN)I8$p=FM#0sWy\7FiUS4(`BX%`BX%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.5	50020	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	388	OUT	GET /store/about/cta_hero_community.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/png Content-Length: 31506 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-7b12" CF-Cache-Status: HIT Age: 5046 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d7e9a62257-MIA
2024-04-05 23:18:25 UTC	1072	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 7a b4 49 44 41 54 78 da ec dd 7b 90 5c f7 95 d8 f7 73 1f fd 98 9e 37 30 78 10 24 88 01 49 81 14 49 89 a0 44 93 e2 3e 24 10 f2 be 5c 54 89 54 16 72 2a 71 15 c1 94 cb f1 16 fe 90 b8 f9 2b ce 56 51 aa 4a e2 4a b9 b2 a4 52 85 6c ca d9 14 21 27 4e d9 cb b2 49 ad 64 a7 1c 8b 20 a4 dd 98 84 44 49 43 91 82 48 4a 14 06 04 88 e7 0c e6 3d fd be 37 bf 73 ef ed 41 a3 d1 3d cf 7e f7 f7 23 5d de 9e 9e ee fb f8 75 4f f7 fd 1d 9c df f9 89 00 00 00 00 00 00 00 00 00 00 00 00 74 3b 8b 26 00 00 00 80 3a 7c e4 d8 88 59 dd 61 96 b1 b2 bb 0b 66 99 32 cb e4 c9 97 8f Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<zIDATx{\s70x$IID>$\TTr*q+VQJJRl!'NId DICHJ=7sA=~#]uOt;&:\|Yaf2
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: e3 66 39 25 e1 90 93 8d 1e e3 d9 e8 f9 87 cc ed 57 cc fa 5b d1 b9 97 1f f7 77 78 9b 00 40 4b 8c 49 f5 62 96 eb 1e 6e 61 1e bb 68 3e df 17 cd cd 81 b2 bb 07 b4 36 12 b3 28 01 00 36 82 a2 96 40 9d 99 8b 31 fd d7 ff d2 50 8d 60 56 0d 09 6b 27 3c 5f f6 b0 6f 6d e4 a2 4d a7 e9 8c 3a fa cf cb cd e3 7e eb 7d e1 57 be bd a3 66 39 6b f6 fb d4 06 b7 f1 5c d9 ed a7 ca ce bd 74 dc 27 d6 9a 96 14 00 d0 30 d5 a6 fa bc b0 89 ed 54 7b ce 6e 9a 17 00 b0 11 04 24 80 c6 78 56 6a 17 6d fc 66 59 b1 c7 35 1d 3e 72 ec eb 51 a7 7e bc 7c 1b 66 19 95 fa 0f 7d d8 1f 6d bb 14 98 d0 20 c2 2b e6 18 5e 5a ef 06 cc b9 69 30 a6 7c 56 8d 72 2f 9a df 3f cb db 03 00 9a 2f 9a dd 69 a0 e2 ee 45 cd 78 d8 e8 b6 cc 73 74 78 46 65 56 c5 ee 68 48 08 00 00 eb 62 d1 04 40 43 2f fe b4 d6 43 29 c3 40 Data Ascii: f9%W[wx@KIbnah>6(6@1P`Vk'<_omM:~}Wf9k\t'0T{n$xVjmfY5>rQ~\|f}m +^Zi0\|Vr/?/iExstxFeVhHb@C/C)@
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 3a c3 36 00 a0 b1 9f b9 bf 96 70 16 8e 5a 43 38 0e b6 cb 10 8e b2 21 1a f7 49 f5 7a 11 5a 90 f3 2d 73 4e 17 78 65 01 a0 f7 10 90 00 9a 7f 71 a6 ff 72 75 30 fa 71 a2 8b 66 a5 38 15 ad 47 cc 39 12 94 00 80 06 32 df 1d 53 da 91 97 ea 53 83 aa 71 9d 4e 33 1a e6 d1 aa ef bb 81 e8 fb 6e 77 8d 87 04 e7 60 ce 65 91 57 14 00 7a 13 01 09 a0 f9 0e 95 dd ee a6 19 29 ca cf e5 0b bc cc 00 d0 58 3a dd e7 1a 43 38 c6 cc f2 48 14 18 68 2a b3 4f dd f7 5a 43 34 de 65 88 06 00 f4 36 02 12 40 f3 95 77 d6 4f 75 d1 85 71 f9 d0 93 43 bc cc 00 d0 b4 cf 5f 1d c2 f1 9e 54 1f c2 91 94 30 28 31 d6 ac e3 89 86 8b ac 36 a5 27 43 34 00 00 01 02 12 40 f3 1d 2a bb 88 3c d5 65 e7 56 3a 9f 83 ed 58 54 0d 00 ba 55 34 4d a6 4e 0d da 0e c3 1f 6a 65 3d e8 2c 20 6f 32 44 03 00 50 42 40 02 68 a2 Data Ascii: :6pZC8!IzZ-sNxeqru0qf8G92SSqN3nw`eWz)X:C8HhOZC4e6@wOuqC_T0(16'C4@<eV:XTU4MNje=, o2DPB@h
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: a4 9f 68 d7 93 8c 02 08 cf d5 61 53 f5 da 0e 00 f4 32 ed d4 57 2b 36 39 22 b5 83 11 41 30 61 b3 c1 88 8a ef 84 c9 e8 bb af d6 f4 a0 03 35 8e 63 36 0a 6a 00 00 7a 98 43 13 00 f5 71 f6 cc 8f 33 fb 1f 78 f4 5f 4b 38 a7 fb f8 26 37 f3 a2 b9 40 7b b6 03 ce 75 c2 9c eb db d1 b9 6e 26 53 e2 94 59 fe a8 54 c5 1d 00 b0 e9 cf 63 cf 7c 1e 2f 9b 9b 3b d7 f9 14 cd 8a 38 63 9e 57 a8 f3 f7 9f 16 c4 8c cb fa 0a 55 ea be f5 18 72 bc 82 00 d0 db 2c 9a 00 a8 bf 55 52 58 57 33 d1 89 c3 17 74 aa 37 d9 58 50 62 82 61 1a 00 50 f7 cf 62 1d a2 a1 85 26 6b 0d c7 d5 0c 86 77 1b 9d 95 10 15 b4 bc af d5 c7 01 00 e8 0c 04 24 00 00 00 ba c0 e1 23 c7 34 08 a0 c5 23 47 a2 45 33 11 b4 e3 7f f9 e4 cb c7 2f 37 f9 38 34 40 32 56 71 1c 53 d1 b1 14 78 b5 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: haS2W+69"A0a5c6jzCq3x_K8&7@{un&SYTc\|/;8cWUr,URXW3t7XPbaPb&kw$#4#GE3/784@2VqSx
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 75 da 37 33 35 e8 48 59 21 c8 6a ea 52 1c 32 da 47 f9 7e 74 9b 4f 54 0c c9 38 65 1e f7 cd a8 cf 53 3a 17 0d 20 1c 95 30 58 51 da 56 e9 be b5 b6 75 42 c2 c0 45 e9 b1 a5 69 4e 9f e5 1d 53 7f 64 48 74 b1 a8 70 e5 2b 42 30 02 68 dc 87 68 30 54 83 ec 08 00 a8 37 df f7 1e 9f b9 7a 49 3b 19 83 0c df 00 ea 2f 2a ea 78 36 ea c8 d7 5a 6a 39 b8 c6 f3 ce d6 1a 36 b1 41 5f ab f8 f9 89 6a f5 21 a2 e0 c7 13 72 73 a6 c4 33 6b 6c eb e9 5a db 32 8b 06 1f 26 cb ee 66 d8 06 01 09 6c 82 06 23 c6 69 06 a0 31 28 64 09 00 8d a5 99 12 17 3e fc c5 7f 23 e1 bf c6 f2 81 0b d4 2f 18 a1 7d 84 97 a4 71 ff 70 19 d4 6a a8 31 6c 62 23 0e 95 dd 7e 75 b5 62 95 51 50 e2 44 d9 5d 95 01 91 f2 9f 27 d6 31 5d e8 37 cb cf 67 8d 8c 10 6c 12 1f ec 5d 6a df fd 8f 7d 5d d6 57 ac 05 c0 66 3f 40 09 46 Data Ascii: u735HY!jR2G~tOT8eS: 0XQVuBEiNSdHtp+B0hh0T7zI;/*x6Zj96A_j!rs3klZ2&fl#i1(d>#/}qpj1lb#~ubQPD]'1]7gl]j}]Wf?@F
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: af c3 69 02 00 3d fd 21 68 db 41 86 04 00 00 40 37 31 1d 64 2d ac b8 df 2c 27 68 8d 86 98 94 b0 78 e5 c3 a6 ad a9 dd b1 49 cc b2 01 a0 a7 91 1d 01 00 00 ba 95 e9 28 6b a7 f9 d9 c3 47 8e 69 c7 f9 90 84 d3 56 ee 93 d5 a7 07 ad 27 1d 42 f2 76 97 35 ab 0e 87 99 88 da 16 5b 44 40 02 40 cf 72 1c 82 11 00 00 a0 fb 45 b5 25 5e 15 66 e1 40 9b 61 c8 06 80 9e 44 21 4b 00 00 00 a0 b5 b8 1a 07 d0 9b 1f 7e 0c d5 00 00 00 00 5a 7b 4d 4e 13 00 e8 b9 0f 3e 0a 59 02 00 00 00 ad bf 2e a7 09 00 f4 dc 07 1f d9 11 00 00 00 40 eb af cb 69 02 00 3d f5 a1 47 30 02 00 00 00 68 8f 6b 73 9a 00 40 af d0 61 1a 3a 5c 03 00 00 00 40 eb 71 65 0e a0 77 3e f0 c8 8e 00 00 00 00 da e7 fa 9c 26 00 d0 0b 74 8a 4f 0a 59 02 00 00 00 ed 83 80 04 80 9e e0 38 7c dc 01 00 00 00 ed 84 2b 74 00 dd ff Data Ascii: i=!hA@71d-,'hxI(kGiV'Bv5[D@@rE%^f@aD!K~Z{MN>Y.@i=G0hks@a:\@qew>&tOY8\|+t
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 19 38 3e 60 f6 8d f6 d7 3f 38 22 fd 43 a3 e2 c6 e2 34 46 07 b1 82 1a 96 14 b2 04 80 7a 29 e4 73 92 4d 2f c9 e2 dc 75 1a 03 00 d0 b1 1a 1e 90 88 86 44 1c 68 f3 76 08 0a 5d 9a e5 7f e6 2d d1 9e 12 c9 94 ec b8 7d 3c 58 03 00 00 91 81 e1 6d 32 bc 7d 97 5c fb 78 52 72 d9 34 0d 02 00 e8 38 0d 1d b2 11 4d ef 79 b8 43 da e2 80 39 de 2f f2 96 68 3f 6e 2c 21 7b c6 ef 25 18 01 00 c0 2d df 91 71 d9 75 e7 dd 12 4f f4 d1 18 00 80 8e d3 e8 1a 12 9a 1d d1 49 bd c8 27 a3 7a 17 68 23 3b 6f 1f 17 9b d9 19 00 00 a8 7e 31 67 3b b2 fd b6 bd 34 04 00 a0 f3 be c3 1a b5 e1 28 3b a2 d3 8a 45 6a 30 82 2c 89 36 a2 d9 11 7d fd 83 34 04 00 00 ab d0 0c 89 64 6a 80 86 00 00 74 94 46 66 48 74 ea 74 9a cc b8 d1 46 62 71 8a 57 02 00 b0 1e 04 24 00 00 9d a6 91 01 89 87 3a b4 4d b6 fb be 7f Data Ascii: 8>`?8"C4Fz)sM/uDhv]-}<Xm2}\xRr48MyC9/h?n,!{%-quOI'zh#;o~1g;4(;Ej0,6}4djtFfHttFbqW$:M
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: fa 7f 22 37 67 1c c8 2a 9d fe a3 e6 39 1a 18 78 cd 2c 6f 34 3a 63 22 ca 88 d0 21 24 eb 9d b5 63 25 a3 83 6c 09 74 2b b2 23 00 00 00 00 b4 4a 5d 02 12 51 60 e1 c9 4d 3c 55 87 74 7c 55 c2 8c 84 b7 a5 ce d3 75 46 d3 87 ea 30 8c 83 72 f3 f0 91 8d 78 32 0a b6 fc 05 b3 78 a0 9b 10 8c 00 00 00 00 d0 4a 5b 0a 48 ac 73 88 c6 7a e8 76 34 70 f0 b8 d9 a6 76 fa 75 56 8d 0b 66 79 5f 36 30 9d 67 14 80 b8 c3 2c f7 4a 98 09 b1 bd 4e ed a4 db fa 1f cc f6 ff 9c 21 1c e8 06 3a 4c 83 69 3e 01 00 00 00 b4 d2 a6 03 12 51 30 e2 4f 25 1c da 50 4f ba dd 83 d1 f2 64 b4 2f 5d 7d b0 ca 73 b6 4b fd 82 0f ab 1d d7 9f 46 33 85 4c f0 d6 41 27 23 3b 02 00 00 00 40 ab 6d 2a 20 d1 c0 60 c4 6a 0e b4 41 7b e9 79 ff 89 39 ff 13 ad 28 c8 09 d4 03 85 2c 01 00 00 00 b4 45 df 64 a3 4f 68 51 30 a2 Data Ascii: "7g9x,o4:c"!$c%lt+#J]Q`M<Ut\|UuF0rx2xJ[Hszv4pvuVfy_60g,JN!:Li>Q0O%POd/]}sKF3LA'#;@m `jA{y9(,EdOhQ0
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 00 00 00 6b d1 e2 96 64 49 00 00 ea 89 80 04 00 00 00 d6 c5 71 98 06 14 00 50 3f 04 24 00 00 00 b0 4e 96 d8 36 41 09 00 40 7d 10 90 00 00 00 c0 fa 2f 1e 29 70 09 00 a8 d7 77 0a 4d 00 00 00 80 0d 5d 40 52 e0 12 00 50 8f ef 13 9a 00 00 00 00 1b 41 81 4b 00 40 3d 10 90 00 00 00 c0 c6 2f 22 a9 25 01 00 d8 ea 77 09 4d 00 00 00 80 8d d2 0c 09 86 6e 00 00 b6 82 6f 11 00 00 00 6c ee 42 92 2c 09 00 c0 56 be 47 68 02 00 00 00 6c 96 e3 10 94 00 00 6c 0e 01 09 00 00 00 6c 1a 05 2e 01 00 9b 45 40 02 00 00 00 5b bb a0 64 e8 06 00 60 33 df 1f 34 01 00 00 00 b6 82 02 97 00 80 cd e0 9b 03 00 00 00 5b bf a8 24 4b 02 00 b0 d1 ef 0e 9a 00 00 00 00 75 b9 b0 24 28 01 00 d8 c8 f7 06 4d 00 00 00 80 ba 5c 58 da 14 b8 04 00 6c e0 7b 83 26 00 00 00 40 dd 2e 2e c9 92 00 00 ac f7 3b Data Ascii: kdIqP?$N6A@}/)pwM]@RPAK@=/"%wMnolB,VGhlll.E@[d`34[$Ku$(M\Xl{&@..;
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 7e cc 95 c4 40 5f 90 35 11 33 db 1f db 96 96 5d 63 cb 32 36 9a 90 bb ee 48 c8 fc e2 55 59 ce fa f2 f1 b5 9c d9 e4 a5 20 db 22 36 bc 37 18 c6 41 60 02 00 01 09 00 0d d7 3f 34 4a 23 80 bf 03 f3 77 40 40 02 d8 44 a7 da d2 d9 1c c8 92 d8 98 30 ab a1 a8 33 67 e4 b3 52 cc 2d 4b 3c 66 cb d8 48 5c ee b9 33 21 03 fd b6 3c fe c8 76 d9 b9 2b 21 3b 77 26 24 31 34 28 76 2c 16 3d 35 ca 88 28 6d 67 e5 85 58 f9 cf cd bf d3 e2 97 ae 1b d4 fc 90 fe b8 c4 9c bc c4 f4 f5 32 dd 8a 54 5f 4c 3e 75 20 29 b3 0b 9e 64 b2 be 2c 2e 67 a5 50 f0 c5 c9 2d 89 38 09 b1 9c b8 79 1c 41 09 00 04 24 00 34 88 66 46 68 31 2c a0 d7 25 53 03 34 02 b0 49 5a 5c b1 50 60 1a d0 f5 c7 23 7c 91 42 46 b2 8b 33 b2 bc 30 13 04 23 76 6e 8b cb 1f 3c be 4d 9e fe c3 7e b9 7d b7 23 b7 1d d8 1b 04 21 74 f1 8b Data Ascii: ~@_53]c26HUY "67A`?4J#w@@D03gR-K<fH\3!<v+!;w&$14(v,=5(mgX2T_L>u )d,.gP-8yA$4fFh1,%S4IZ\P`#\|BF30#vn<M~}#!t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.5	50021	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	404	OUT	GET /steam/apps/1172470/capsule_231x87.jpg?t=1708706824 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/jpeg Content-Length: 9608 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "65baba39-2588" Expires: Wed, 03 Apr 2024 15:33:12 GMT Last-Modified: Wed, 31 Jan 2024 21:23:05 GMT CF-Cache-Status: HIT Age: 283279 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d7fae967e1-MIA
2024-04-05 23:18:25 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 02 03 06 07 08 09 00 01 05 04 0a ff c4 00 56 10 00 01 03 02 03 05 05 04 04 08 08 07 11 00 00 00 01 02 03 04 05 11 00 06 07 08 12 13 21 31 09 22 41 51 61 14 32 71 81 23 42 Data Ascii: JFIFCCWV!1"AQa2q#B
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 90 32 9c 0a ab fe ca 99 b3 dc 52 52 ab 02 a5 21 24 03 de 29 f8 58 1b df a6 2e a0 f1 4a 6b 3b 18 c8 71 d9 d0 25 57 5b 53 52 99 87 bb 00 77 0f 59 dd 06 03 f9 11 b9 7b f4 af 54 b2 16 ac d1 a5 4a c8 79 86 97 99 60 53 9d 10 df 72 9a 77 92 c2 ed 74 a4 dc 0f ab d0 f4 38 c4 04 9c 49 93 b7 9e d2 a6 ca 4d a4 d0 c6 08 00 40 e4 32 5c 8d 46 da 5b 4a 74 7f 30 22 87 9c f3 dd 23 2d 56 16 c2 65 26 14 c5 28 39 c2 51 50 4a bb a9 3c 89 4a be cc 04 ab 03 57 a3 25 6a f6 4d d7 68 2f ff 00 01 33 2c 3c cf 4c 65 e0 cd 46 5c 02 a2 96 b9 6f 06 89 50 1c d4 3f 55 fc f1 93 45 c2 93 4d 6d a3 01 cf 7f 4c d6 3d a0 3b 50 53 6e 6f 91 3b 80 f1 1e 71 80 e2 67 62 70 58 68 86 92 02 77 40 e4 00 e8 05 ce 31 80 80 ad 68 00 00 d1 80 fb 85 c9 a7 b6 6b 35 55 d4 54 2f 16 36 f3 31 01 e8 a3 d1 6e 7c fa Data Ascii: 2RR!$)X.Jk;q%W[SRwY{TJy`Srwt8IM@2\F[Jt0"#-Ve&(9QPJ<JW%jMh/3,<LeF\oP?UEMmL=;PSno;qgbpXhw@1hk5UT/61n\|
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 26 f7 aa 1d cd 07 2e 6e 38 0e 73 b0 a9 57 1d 80 d3 0d a1 b4 06 d0 94 25 29 4a 45 80 00 72 03 1a 14 c9 92 be 82 b1 ac a6 d0 c6 08 03 00 06 40 6c 01 53 77 6d 65 79 32 f6 85 c9 b4 84 2b 7b d8 32 ca 1d 5a 7f 35 4e c9 7f fd 48 4e 22 9a 8a da ab a6 af c0 7f 4b 58 2d a6 03 75 9c 9d 12 ac a7 dd e4 94 b4 5d 90 14 f2 bd 00 68 fc 6d eb 8c bb 43 5a dd 40 d3 3d d1 3e f5 ab dc 26 d2 7f 18 eb 43 48 1d b3 f5 67 6b 40 68 91 c2 41 8e 4a f9 b6 53 cc 0c 66 bd 9a 34 ba a5 0d b5 b7 19 cc b9 09 b6 d0 e3 9b eb 01 b6 92 dd 94 af 15 77 79 fa df 18 c1 6c ea 22 f6 d7 a4 8d 02 c8 97 ff 00 a4 df fe 57 b0 8a 6a 3f f6 26 0b ed 11 9d 7f f2 b2 ff 00 6c 8d 88 84 28 71 b4 90 b6 d1 1a a6 3f ef 55 57 f6 c7 70 ca 15 fd 6c b0 95 1d 98 74 86 c0 ff 00 c5 1a 57 ec ad e2 60 a4 a9 57 b4 9b fc 36 b5 Data Ascii: &.n8sW%)JEr@lSwmey2+{2Z5NHN"KX-u]hmCZ@=>&CHgk@hAJSf4wyl"Wj?&l(q?UWpltW`W6
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 1e a7 21 d7 72 55 b4 b7 38 62 cd 5b af 55 0f 33 8a 61 5a 01 d8 85 bc ef fd 98 f8 dc e0 44 15 af a5 3f 94 4a 7e 08 bf de 70 42 20 a2 9a 4a b7 4d de 5d b7 8f ba 00 f1 c1 08 00 ac 2d 03 c9 4b 71 7f e5 28 e0 44 20 86 5a 4f 44 0f 98 bf df 83 14 e1 69 93 b9 bf bb dd ef 1f 74 5b 04 20 05 0e cb 64 a1 58 ec 12 57 cd 00 44 a3 92 d9 37 c2 95 44 84 34 b6 47 8e 09 50 94 22 83 b8 af 86 09 c1 00 89 42 0d 9b 78 61 ca 81 29 c8 d1 2c 8e 73 16 61 fc 21 25 bd e8 30 08 59 de 1c 96 e7 d5 4f cb de 3f 01 e7 8c 4b 75 ab f0 96 52 1b e3 a9 80 e0 dd a7 ae 5f f1 77 37 a2 dd 18 ff 00 39 7b 7e 3a d0 d9 a1 67 82 77 39 fe ab 7a 78 8f 20 0f 89 48 d7 1b 3c 27 3a 7b a7 ee c6 89 2b db f2 9b dd 63 ce 07 2e 65 a4 c2 8c e6 ed 42 7a 78 48 b1 e6 84 5b be af b0 d8 7c 6f e1 8c bb be ca 6d b6 b0 d2 Data Ascii: !rU8b[U3aZD?J~pB JM]-Kq(D ZODit[ dXWD7D4GP"Bxa),sa!%0YO?KuR_w79{~:gw9zx H<':{+c.eBzxH[\|om
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 2a 44 4c 8f 36 05 15 ec c4 ed 5a 04 25 b8 d3 cb 5c 84 30 db 6b 8c 16 96 d2 a2 91 bf bc 82 9b 8e 5b a6 c4 e0 42 96 ba 3b d8 b7 96 72 b6 6e 85 58 cf 99 ed cc e3 4a 8a e2 5e 14 58 54 d3 0d b9 24 1b 84 ba e1 71 6a dc 3e 29 48 04 8f ac 30 e1 12 ac 3e 2d 55 a6 d5 22 3f 05 0c b5 0d 61 95 16 c8 08 40 dd 05 36 4f 95 8a 45 87 4c 01 25 41 bd a4 6f 36 fe db 1a a2 b6 9c 4b a8 32 e3 59 48 50 20 ff 00 23 63 c4 61 29 05 6d 3d 9a 9f e0 43 a5 ff 00 e6 66 fe df 23 13 6a ac e6 a4 b9 56 e8 24 de c3 9f 2c 49 56 4c 09 2a 38 6d 77 9f 97 a7 5a 05 aa 39 99 6b 2c 4a 66 8c b4 05 ab a2 1e 7f f9 3c 36 6c 7a d9 4e 97 08 f3 03 1c 8b c8 a5 40 06 ec c0 73 38 bd df 06 8e 0b 8c a0 c7 54 ae 5c 7d 52 0b bf f6 8e eb 78 86 37 13 fc 88 3b d5 1d ec f9 a4 6f eb b6 b2 65 5c 83 1e 51 84 ed 6e 51 8f Data Ascii: DL6Z%\0k[B;rnXJ^XT$qj>)H0>-U"?a@6OEL%Ao6K2YHP #ca)m=Cf#jV$,IVL8mwZ9k,Jf<6lzN@s8T\}Rx7;oe\QnQ
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 58 89 4c 8c 84 87 a4 ab 73 78 81 dd 16 25 4a 3e 80 73 c6 3d a2 b3 2c f4 5d 59 d9 0f 7e e1 d4 ae 6e e3 b9 ed 57 e5 e1 46 ef b3 78 aa 18 9d 80 66 5c 78 01 8a 97 14 5a 04 4a 25 2a 2d 3e 2b 09 44 78 ed 86 d0 2d cc fa 9f 53 d4 fc 71 d7 e5 ee 73 8b de 7b c7 12 be 86 dd d6 0b 3d d7 63 a5 61 b2 88 a7 4c 00 3a 6d 3c 49 c4 9d a4 94 5e 60 a8 42 cb 94 69 75 39 48 01 98 e8 de 29 04 82 a3 d0 24 7a 93 61 f3 c6 45 9a 8b ed 35 5b 45 99 9f b2 7a 05 8d 7c 5e 96 6b 92 c1 56 f0 b5 1e e5 31 3c 49 c8 01 c4 98 03 89 4c ee 93 65 c7 f3 a6 6a a8 e6 ea a2 77 d2 cb 8a 2d 8b 9b 17 ad ca de 88 4d ad f2 f2 c7 39 7b d6 65 3a 6d b1 51 ca 3f f9 f9 b8 e2 7a af 39 7a 3a ba ad 3a 49 7d d7 d2 ab cf 10 c7 4b 77 1a 87 28 e1 4d b0 06 e3 ab 19 25 8e bb e9 7d 53 56 34 93 31 65 2a 3d 5d aa 24 ba bc Data Ascii: XLsx%J>s=,]Y~nWFxf\xZJ%->+Dx-Sqs{=caL:m<I^`Biu9H)$zaE5[Ez\|^kV1<ILejw-M9{e:mQ?z9z::I}Kw(M%}SV41e=]$
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 5b 17 7b 28 66 cd 54 d4 4d b1 b5 52 85 13 51 19 a1 e9 f6 9f ca a3 85 e5 a1 41 8f 21 75 26 e5 c1 0f 2d 26 51 21 c6 ac b0 a3 71 bd ef 5b 95 b9 83 34 6c 4d 2e d5 bb 67 67 ed 25 d4 9d 6e c9 f4 0a c4 58 52 68 d9 52 95 5d cb 8b 7a 13 4e 70 1d 32 d8 44 c4 f7 87 d2 15 b4 fa 94 02 af bb c3 24 5b c4 28 01 2e 36 e8 d6 4d 4c d3 9c c5 95 a9 3a 73 9c 19 ca 29 5e 56 cc 79 92 7a 9d a4 b1 3c c8 fc 1d 19 0f a1 af a5 1d c0 be fa 37 87 4d eb d8 da d8 91 1b 4a 84 18 18 66 bd fa 93 aa da 87 33 47 f6 73 6f 27 e6 88 b9 2b 32 6a 3c ba 7b 15 0a d8 a4 35 3c 32 a7 e9 cb 92 e1 43 0e 10 93 77 00 f1 16 1e 38 1c e2 fc 5c a4 d6 b5 a0 35 a2 00 c0 72 4f 36 91 d3 35 3d 59 2b 25 48 d4 4a ec 36 33 64 56 1c 4e 61 83 4e 8c db 91 a7 2c a9 61 b2 95 80 38 64 27 86 a3 b8 2c 4d c5 ad 80 04 27 32 33 Data Ascii: [{(fTMRQA!u&-&Q!q[4lM.gg%nXRhR]zNp2D$[(.6ML:s)^Vyz<7MJf3Gso'+2j<{5<2Cw8\5rO65=Y+%HJ63dVNaN,a8d',M'23
2024-04-05 23:18:25 UTC	465	IN	Data Raw: 20 81 c8 7e fc 71 10 bb 0c 19 c0 28 ff 00 99 aa 8f 6a fe a9 46 a2 c6 5b 8d 52 62 29 6c 82 6c 08 42 0f d3 b9 6b fb c4 80 91 e8 01 f3 c6 f3 67 a6 db aa c0 6b bc 77 cc 1e a7 c2 39 0c ca f3 c5 f9 4a ae 99 e9 03 2c 0d 31 46 99 20 1e 03 f5 1d 07 69 8d 51 c0 03 bd 48 28 86 3c 18 ac c6 8e c1 69 86 50 1b 6d b4 81 64 a4 0b 00 39 f9 0c 68 ee 2e 79 2e 71 92 57 a1 28 d2 a7 67 a4 da 34 5b 0d 68 00 0d c0 60 02 31 72 87 09 76 42 fd d3 e5 fb f1 08 56 ce 08 4d 49 fa 34 fd 1a fa 0f 2f df 82 13 05 0c 3e 4f e4 95 f6 8f df 82 11 28 2b 75 45 0a fa 25 74 3e 23 00 08 41 6d c5 f0 d3 f4 47 dd 1e 23 0e 11 28 45 e7 2d fc d2 bf ac 30 42 24 a0 29 e7 37 4d db 57 f5 86 18 09 49 45 36 eb bc 14 8e 12 ad ba 39 6f 0c 38 0a 33 82 df 19 db 5b 84 ab 79 6f 0c 10 89 28 a7 5d 78 a4 23 75 4d a2 fb Data Ascii: ~q(jF[Rb)llBkgkw9J,1F iQH(<iPmd9h.y.qW(g4[h`1rvBVMI4/>O(+uE%t>#AmG#(E-0B$)7MWIE69o83[yo(]x#uM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.5	50022	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	403	OUT	GET /steam/apps/252490/capsule_231x87.jpg?t=1701938429 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	440	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/jpeg Content-Length: 4628 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=604800 Cache-Control: public Cf-Bgj: h2pri ETag: "5dbaf08e-1214" Expires: Wed, 03 Apr 2024 16:42:55 GMT Last-Modified: Thu, 31 Oct 2019 14:32:46 GMT CF-Cache-Status: HIT Age: 492645 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d7fad18d96-MIA
2024-04-05 23:18:25 UTC	929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 57 00 e7 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 07 08 02 05 06 09 03 04 ff c4 00 56 10 00 00 04 04 03 03 02 0f 0a 0b 04 0b 00 00 00 00 00 01 02 03 04 05 06 11 07 12 21 08 31 41 18 d2 13 14 36 51 55 56 61 71 74 75 Data Ascii: JFIFHHCCWV!1A6QUVaqtu
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: b0 8d 44 9b 69 84 49 92 73 a0 94 65 7c da da e2 e0 44 d8 d9 82 90 d8 4f 58 c8 e4 ac 4d 1d 98 a2 62 ca 5d 53 ae 34 48 34 5d c3 45 88 88 ce fb 80 4d bc 83 e5 7d b6 c6 79 9a 79 c1 80 f9 07 ca bb 6d 8c f3 34 f3 83 00 e4 1f 2a ed b6 33 cc d1 ce 0c 03 90 7c ab 77 e1 6c 67 99 a3 9c 18 10 a4 8f 04 a1 a7 18 f7 15 87 a7 34 75 b8 66 5d 79 be 9e 26 48 d6 79 1b 35 91 e5 bd b5 b5 b7 88 a9 a8 b6 10 95 f1 ab a3 3c cd 1c e1 70 87 c8 3e 57 db 74 61 fe e6 8e 70 60 1c 84 65 7d b6 c6 79 9a 39 c1 81 f2 8d d8 62 57 09 08 fb c5 56 45 99 b6 da 97 6e 93 4f 02 bf eb 06 05 41 b8 83 22 01 89 ee 01 b3 a4 8f f2 ae 4a 7f f1 ac 7a c4 8e 2e af d1 ee 76 67 c1 db 6c 9f 58 e9 fb 74 7e e8 5b 11 ab 1f ab 40 08 97 1b 66 d3 59 24 7c b1 d8 09 84 54 1b 4f 36 b4 a9 2c 3a a4 91 a9 26 5a d8 bb 8a 1e Data Ascii: DiIse\|DOXMb]S4H4]EM}yym4*3\|wlg4uf]y&Hy5<p>Wtap`e}y9bWVEnOA"Jz.vglXt~[@fY$\|TO6,:&Z
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 9f 3f 86 26 38 f1 fa 36 4e c7 d4 6d 1b d1 b4 37 bf 8e ba 67 f0 45 73 33 1c b5 72 67 e1 c9 fa 3a 58 0a c9 89 1c 24 a2 0e a0 36 60 a7 11 a4 44 b6 98 2d 13 d6 52 ed f1 6f a7 ce 3a eb 9a 3a af d5 72 bd 36 66 8a 79 e7 f8 e9 7a 4d 3e d9 b7 a1 b7 a7 b1 b4 f1 45 fb 9c b1 1c dd 13 3d 19 f1 f8 3a f1 d3 bd 8b 47 5d 75 19 3c f0 27 7f 90 c7 37 45 e9 36 fa e3 c5 d2 ed bf 56 6a 7b 15 78 4b a4 d8 3b a8 3a 8f c6 45 ea 92 36 8c 3f 2b 27 5c 47 c3 e9 7e 27 52 71 74 f4 d1 e8 98 78 28 95 21 4b 5c 22 d2 97 0b 2a 89 45 63 52 54 5b cb ac 28 86 79 0a d0 9d 97 a8 bc e1 8f 62 18 12 f6 16 e1 84 b3 09 29 83 91 4a 62 22 e2 a1 0d f5 c4 67 8d 5a 54 e6 65 11 11 95 d2 94 95 bd e9 70 01 15 6d c3 f2 3d 05 e3 86 7d 53 c1 22 40 d9 e0 fe 04 e8 ef 00 4f a4 c2 04 13 b7 c6 8a a2 fb d1 7f 62 24 aa Data Ascii: ?&86Nm7gEs3rg:X$6`D-Ro::r6fyzM>E=:G]u<'7E6Vj{xK;:E6?+'\G~'Rqtx(!K\"*EcRT[(yb)Jb"gZTepm=}S"@Ob$
2024-04-05 23:18:25 UTC	961	IN	Data Raw: 0b b9 18 c6 45 aa 2c 33 a4 3b 55 92 6b ff 00 2f 67 9a 28 3d cc e9 0b f5 2d 24 bf 8b d9 e6 80 fa c3 61 f5 2f 05 10 d4 44 3d 37 28 62 21 a5 13 8d ba d4 0b 49 52 14 47 72 32 32 4d c8 c8 f8 80 da cc 23 0e 09 09 5d bd ef 13 3d c5 f3 ee fa 4c 8b ba 28 f3 63 1e 5c e8 d8 c7 57 2e d6 cd 1e e1 fa 06 03 83 24 82 bd 21 d9 c6 2c a2 30 6a 96 6e df 9b 83 4a 6e 5c 75 3f 9b eb bf 70 86 50 88 3b 6e d5 67 7a 8b d6 ff 00 eb df 61 fd 7f 91 09 22 aa 16 84 20 60 1d be 70 08 c0 7d a5 d1 cb 95 cc 61 63 10 94 ad 70 ee a1 e4 a5 5b 8c d2 64 64 47 f4 0f 9d ca 22 e5 15 51 3c f1 8e f7 27 4d 7e ad 2d fa 2f d3 19 9a 66 27 ba 72 90 7d de a7 65 fe c1 00 7f f6 af 9c 3a 0e 03 b1 ed 4f d3 c9 b0 7e dd eb fd d5 1f f2 fe c7 ca 06 7b d8 f9 7f f0 af 9c 31 e0 2d 3f b5 3f 4f 26 7f 6f 76 87 ba a3 ba Data Ascii: E,3;Uk/g(=-$a/D=7(b!IRGr22M#]=L(c\W.$!,0jnJn\u?pP;ngza" `p}acp[ddG"Q<'M~-/f'r}e:O~{1-??O&ov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.5	50023	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	630	OUT	GET /store/about/icon-steamworkshop.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/svg+xml Content-Length: 1472 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-5c0" CF-Cache-Status: HIT Age: 5046 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d80ebe7436-MIA
2024-04-05 23:18:25 UTC	1070	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:25 UTC	402	IN	Data Raw: 2e 34 63 30 2c 30 2e 39 2c 30 2e 38 2c 31 2e 37 2c 31 2e 37 2c 31 2e 37 68 33 2e 34 63 30 2e 39 2c 30 2c 31 2e 37 2d 30 2e 38 2c 31 2e 37 2d 31 2e 37 0d 0a 09 76 2d 33 2e 34 43 32 38 2e 36 2c 31 38 2e 39 2c 32 37 2e 38 2c 31 38 2e 31 2c 32 36 2e 39 2c 31 38 2e 31 7a 20 4d 32 36 2e 31 2c 37 2e 31 63 30 2e 35 2c 30 2c 30 2e 39 2c 30 2e 34 2c 30 2e 39 2c 30 2e 39 63 30 2c 30 2e 35 2d 30 2e 34 2c 30 2e 39 2d 30 2e 39 2c 30 2e 39 63 2d 30 2e 35 2c 30 2d 30 2e 39 2d 30 2e 34 2d 30 2e 39 2d 30 2e 39 0d 0a 09 43 32 35 2e 32 2c 37 2e 35 2c 32 35 2e 36 2c 37 2e 31 2c 32 36 2e 31 2c 37 2e 31 7a 20 4d 33 2e 39 2c 38 2e 38 63 2d 30 2e 35 2c 30 2d 30 2e 39 2d 30 2e 34 2d 30 2e 39 2d 30 2e 39 63 30 2d 30 2e 35 2c 30 2e 34 2d 30 2e 39 2c 30 2e 39 2d 30 2e 39 63 30 2e 35 Data Ascii: .4c0,0.9,0.8,1.7,1.7,1.7h3.4c0.9,0,1.7-0.8,1.7-1.7v-3.4C28.6,18.9,27.8,18.1,26.9,18.1z M26.1,7.1c0.5,0,0.9,0.4,0.9,0.9c0,0.5-0.4,0.9-0.9,0.9c-0.5,0-0.9-0.4-0.9-0.9C25.2,7.5,25.6,7.1,26.1,7.1z M3.9,8.8c-0.5,0-0.9-0.4-0.9-0.9c0-0.5,0.4-0.9,0.9-0.9c0.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.5	50025	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	628	OUT	GET /store/about/icon-steammobile.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/svg+xml Content-Length: 1032 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-408" CF-Cache-Status: HIT Age: 212 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d8583cdb25-MIA
2024-04-05 23:18:25 UTC	1032	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.5	50026	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	628	OUT	GET /store/about/icon-earlyaccess.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/svg+xml Content-Length: 909 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-38d" CF-Cache-Status: HIT Age: 5046 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d85be67416-MIA
2024-04-05 23:18:25 UTC	909	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.5	50024	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	392	OUT	GET /store/about/cta_hero_community_pt1.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	296	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/png Content-Length: 9460 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-24f4" CF-Cache-Status: HIT Age: 5046 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d858ffdab5-MIA
2024-04-05 23:18:25 UTC	1073	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 24 96 49 44 41 54 78 da ec dd 4f 8b 1b 57 9b 28 f0 72 62 06 2f bc e8 17 cc e0 45 20 32 78 61 48 60 3a 10 42 16 17 22 6b 37 ab b4 17 82 7b 57 6e ef 2e 68 91 f8 13 38 fe 04 6d 2f 1a ee ce 9d e5 d0 0b 77 be 40 5b 81 bb 78 21 81 b7 03 21 84 4b c0 1a f0 c2 0b c3 db 17 cc 8b 19 cc cc 9c 63 1d c5 65 b9 4a ff ba a4 56 95 7e 3f 38 48 5d 52 95 aa 8e 84 54 f5 f4 79 9e 93 65 00 00 00 00 00 00 00 00 4d 77 41 17 00 00 10 75 ba bd ad 70 f3 51 68 57 72 8b 5f 87 f6 22 b4 c1 f1 e1 fe 2b bd 04 40 55 04 24 00 00 88 c1 88 56 b8 69 4d 78 4a 0c 4c fc 71 7c b8 ff 5c Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<$IDATxOW(rb/E 2xaH`:B"k7{Wn.h8m/w@[x!!KceJV~?8H]RTyeMwAupQhWr_"+@U$ViMxJLq\|\
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 16 ff fb 3f 4a d5 78 33 ab 46 36 ac 9d 70 2f f7 b4 87 f3 9c b4 c5 69 3a d3 85 fe bd ec dd bc df aa 4f fc f2 db db 0d ed 69 78 dd 9d 39 b7 71 37 77 7f 27 77 ec a3 fd 3e 98 36 2d 29 00 4b 53 34 d5 e7 b3 05 b6 53 b4 ce 55 dd 0b c0 3c 04 24 60 39 ee 64 e5 45 1b ef e7 8a 3d 4e d5 e9 f6 be 4d 17 f5 ad fc 36 42 fb 4b 56 7d ea c3 b5 b4 ed 51 60 22 06 11 1e 87 7d 78 34 eb 06 c2 b1 c5 60 4c 7e 56 8d bc 07 e1 f1 3b 3e 1e 00 ab 97 66 77 ba 3c b6 f8 65 1c f1 30 ef b6 c2 3a 31 3d 63 7c 54 c5 d5 94 12 02 00 33 b9 a0 0b 60 a9 27 7f b1 d6 c3 68 84 41 bc 40 3f 0a 27 71 83 39 d6 8f 81 80 dd dc a2 7e 68 77 46 db 08 8f c7 40 45 7b 6c b5 59 6a 53 14 d6 a1 08 db bd 90 3b 69 dd 1b 7b ed b8 dd 9b f3 8e ec 48 fb 17 f7 b7 3f cf b1 03 f0 e7 77 e9 95 f4 bd 7d f9 8c 9b ba 94 5a de ef Data Ascii: ?Jx3F6p/i:Oix9q7w'w>6-)KS4SU<$`9dE=NM6BKV}Q`"}x4`L~V;>fw<e0:1=c\|T3`'hA@?'q9~hwF@E{lYjS;i{H?w}Z
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 02 12 b0 7a ed dc fd 26 cd 48 91 3f 96 af bc cd 00 cb 15 a7 fb 9c 92 c2 71 25 b4 cf 53 60 60 a5 c2 6b c6 d7 9e 96 a2 f1 ab 14 0d 80 cd 26 20 01 ab 97 bf 58 ef 37 e8 c4 38 9f 7a d2 f6 36 03 ac ec fb 37 a6 70 fc 9e 15 a7 70 5c ca 86 41 89 2b ab da 9f 94 2e 32 69 4a 4f 29 1a 00 bc 21 20 01 ab d7 ce 9d 44 f6 1b 76 6c a3 e3 d9 5e c7 a2 6a 00 4d 95 a6 c9 8c 53 83 ae 43 fa 43 d9 a8 87 38 0b c8 5f a5 68 00 30 22 20 01 2b 34 56 3f a2 df c0 43 fc 31 77 7f db 3b 0e b0 3a e9 42 ff a4 20 20 f0 3a d5 9c 58 95 a2 d7 7a 19 f6 e1 44 8a 06 00 79 02 12 b0 5a db 25 17 ef 4d 71 92 bb df f6 76 03 ac 5c 4c d1 b8 38 43 80 60 69 62 6d 8b 6c 38 7b 46 de e5 f3 2c b0 09 c0 7a f2 c3 00 4b 10 4e ba 62 e0 61 ab e0 c2 fc 5f f2 f7 c3 f3 be cb 5d c8 d7 6e c6 8d 94 27 bc 93 3b d6 8f 73 0f Data Ascii: z&H?q%S``k& X78z67pp\A+.2iJO)! Dvl^jMSCC8_h0" +4V?C1w;:B :XzDyZ%Mqv\L8C`ibml8{F,zKNba_]n';s
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 34 00 2a ff 2e 8e 29 1a b1 d0 64 59 3a 6e 1c c1 f0 eb b2 47 25 a4 82 96 37 ce 7b 3f 00 a8 07 01 09 00 80 06 e8 74 7b 31 08 10 8b 47 6e a5 16 47 22 c4 0b ff e7 c7 87 fb cf 57 bc 1f 31 40 72 65 6c 3f 5e a4 7d 79 ed dd 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 0f 17 74 01 00 00 40 f3 75 ba bd f6 94 a7 6c 87 b6 a5 a7 26 ea 87 76 72 7c b8 7f aa 2b ce 4e 40 02 00 00 a0 a1 3a dd de 6e b8 f9 3a b4 1d bd 51 a9 93 d0 1e 1e 1f ee 1f e8 8a c5 09 48 00 00 00 34 4c 1a 0d f1 28 b4 96 de 58 aa 41 68 77 8e 0f f7 fb ba 62 7e 1f ea 02 00 00 80 e6 e8 74 7b 7b e1 e6 ff 64 d2 2f 56 21 f6 f1 ee b5 4f be b8 f0 f4 b7 9f fa ba 63 3e 02 12 00 00 00 0d d1 e9 f6 e2 a8 88 ff ad 27 56 ae 7d ed 93 2f 5a 4f 7f fb e9 07 5d 31 Data Ascii: 4*.)dY:nG%7{?t{1GnG"W1@rel?^}yXt@ul&vr\|+N@:n:QH4L(XAhwb~t{{d/V!Oc>'V}/ZO]1
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: f7 bf eb 74 7b e3 41 87 ed ac 7c 36 90 37 db 4a 53 8a b2 04 52 36 00 00 00 58 4b 29 18 10 d3 40 8e 66 78 7a 3f b4 cf d2 c8 8f b2 ed c5 00 c7 2c 23 1e de a4 a5 a8 1d b1 5c 46 48 00 00 00 b0 b6 52 50 e2 56 aa 1f 71 3b 1b a6 70 8c 6a 3c c4 c7 fa a1 fd 30 9e a6 31 61 7b 77 c3 b6 62 5d 88 98 ae 11 b7 b9 bd e8 b6 38 1b 01 09 00 00 00 d6 5e aa 5b 11 db 9d 0a b6 35 08 37 77 f5 ea f9 92 b2 01 00 00 00 ac 9c 80 04 00 00 00 45 ca ea 27 0c 74 0d 55 10 90 00 00 00 a0 c8 fd 92 e5 0f 75 0d 55 10 90 00 00 00 e0 3d c7 87 fb 71 66 8b 38 85 66 3f 2d 8a 7f 7f 66 e6 09 aa a2 a8 25 00 00 00 85 52 50 e2 48 4f 94 fa 58 17 2c ce 08 09 00 00 80 fa 1a 4c 78 ec 5f 74 cf d2 b5 75 c1 e2 04 24 00 00 00 6a 2a 4d 5f 79 5a f2 f0 4e a7 db 6b e9 a5 e5 08 7d db 0e 37 65 fd 2b ad 65 06 02 12 Data Ascii: t{A\|67JSR6XK)@fxz?,#\FHRPVq;pj<01a{wb]8^[57wE'tUuU=qf8f?-f%RPHOX,Lx_tu$j*M_yZNk}7e+e
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: e4 dd 04 00 00 9a 4a 40 82 46 49 33 55 fc 2d ab 5f 20 22 8e 80 88 01 88 fb c7 87 fb 03 ef 24 00 00 d0 74 02 12 34 cd a3 ac 5e c1 88 41 68 f7 43 3b 92 96 01 00 00 6c 12 01 09 1a 23 15 8c 6c d7 64 77 0f 32 45 2a 01 00 80 0d 26 20 41 93 ac fb c8 88 41 36 2c 52 79 20 2d 03 00 00 d8 74 02 12 34 5d 3f 5c fc df 5c 64 c5 4e b7 f7 24 4b 23 2e c2 36 2e e8 4a 00 00 80 ea 7c a0 0b 00 00 00 80 55 33 42 02 36 cf ed 4e b7 f7 55 ee 6f 53 8c 02 00 00 2b 27 20 01 9b a7 95 da 48 bb d3 ed dd 54 60 13 00 6a e9 52 f8 1d cf d7 d1 ba ac 4b 80 ba 10 90 00 a2 76 68 7d dd 00 00 b5 73 35 35 80 da 51 43 02 36 4f 3f 15 e9 bc a9 2b 00 a0 b6 5e cd f0 1c ff 7c 04 d6 9a 2f 29 00 00 a8 9f 18 90 b8 34 e5 39 9f 76 ba bd 78 7b 9a 9e ff 6a 74 ff f8 70 ff 95 2e 04 ce 9b 80 04 00 00 34 db d6 f8 Data Ascii: J@FI3U-_ "$t4^AhC;l#ldw2E*& AA6,Ry -t4]?\\dN$K#.6.J\|U3B6NUoS+' HT`jRKvh}s55QC6O?+^\|/)49vx{jtp.4
2024-04-05 23:18:25 UTC	173	IN	Data Raw: 00 50 ce b4 9f 30 d4 0f 6d 77 6c d9 bd 4e b7 77 4f d7 00 00 00 54 cf 08 09 18 fa b1 e2 ed 9d ea 52 00 00 80 72 02 12 30 74 94 55 17 44 18 a4 e9 44 01 00 00 28 21 20 01 d9 9b 5a 10 31 18 71 b7 82 4d c5 ed dc d2 a3 00 00 00 93 7d a8 0b 60 e8 e9 6f 3f 9d 5c fb e4 8b 5f c2 dd 2f 43 db 5a 60 13 fd d0 fe 97 d1 11 00 00 00 d3 5d d0 05 f0 be 4e b7 b7 9d cd 17 94 18 a4 d9 3a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 65 f8 6f 01 06 00 75 09 71 e7 d9 4a f0 54 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: P0mwlNwOTRr0tUDD(! Z1qM}`o?\_/CZ`]N:eouqJTIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.5	50027	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	626	OUT	GET /store/about/icon-languages.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/svg+xml Content-Length: 679 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-2a7" CF-Cache-Status: HIT Age: 3959 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d88be2da0b-MIA
2024-04-05 23:18:25 UTC	679	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 39 2e 37 32 33 22 20 68 65 69 67 68 74 3d 22 32 34 2e 38 32 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 2e 37 32 33 20 32 34 2e 38 32 38 22 3e 0d 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 31 31 32 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 31 31 32 32 22 20 64 3d 22 4d 36 36 36 38 2e 38 36 34 2c 36 37 30 35 2e 30 36 37 61 31 2e 38 36 31 2c 31 2e 38 36 31 2c 30 2c 30 2c 30 2d 33 2e 33 38 37 2e 30 34 31 6c 2d 39 2e 33 31 31 2c 32 31 2e 31 61 31 2e 38 36 31 2c 31 2e 38 36 31 2c 30 2c 30 2c 30 2c 2e 39 35 33 2c 32 2e 34 35 35 2c 31 2e 38 33 37 2c 31 2e 38 33 37 2c 30 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="39.723" height="24.828" viewBox="0 0 39.723 24.828"> <path id="Path_1122" data-name="Path 1122" d="M6668.864,6705.067a1.861,1.861,0,0,0-3.387.041l-9.311,21.1a1.861,1.861,0,0,0,.953,2.455,1.837,1.837,0,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.5	50028	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	624	OUT	GET /store/about/icon-payment.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/svg+xml Content-Length: 727 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-2d7" CF-Cache-Status: HIT Age: 879 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d8af099af2-MIA
2024-04-05 23:18:25 UTC	727	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 39 2e 37 32 34 22 20 68 65 69 67 68 74 3d 22 32 39 2e 37 39 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 2e 37 32 34 20 32 39 2e 37 39 33 22 3e 0d 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 31 31 32 33 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 31 31 32 33 22 20 64 3d 22 4d 35 34 36 2e 37 35 38 2c 32 30 38 30 48 35 31 36 2e 39 36 35 61 34 2e 39 37 32 2c 34 2e 39 37 32 2c 30 2c 30 2c 30 2d 34 2e 39 36 35 2c 34 2e 39 36 36 76 31 39 2e 38 36 32 61 34 2e 39 37 32 2c 34 2e 39 37 32 2c 30 2c 30 2c 30 2c 34 2e 39 36 35 2c 34 2e 39 36 36 68 32 39 2e 37 39 33 61 34 2e 39 37 32 2c 34 2e 39 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="39.724" height="29.793" viewBox="0 0 39.724 29.793"> <path id="Path_1123" data-name="Path 1123" d="M546.758,2080H516.965a4.972,4.972,0,0,0-4.965,4.966v19.862a4.972,4.972,0,0,0,4.965,4.966h29.793a4.972,4.97

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.5	50029	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	628	OUT	GET /store/about/icon-controllers.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/svg+xml Content-Length: 1345 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-541" CF-Cache-Status: HIT Age: 212 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41d8be158da2-MIA
2024-04-05 23:18:25 UTC	1071	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:25 UTC	274	IN	Data Raw: 31 38 2c 31 34 2e 37 7a 20 4d 32 35 2e 32 2c 38 2e 33 48 34 2e 38 0d 0a 09 63 2d 30 2e 39 2c 30 2d 31 2e 37 2c 30 2e 38 2d 31 2e 37 2c 31 2e 37 76 31 30 2e 32 63 30 2c 30 2e 39 2c 30 2e 38 2c 31 2e 37 2c 31 2e 37 2c 31 2e 37 68 32 30 2e 34 63 30 2e 39 2c 30 2c 31 2e 37 2d 30 2e 38 2c 31 2e 37 2d 31 2e 37 56 31 30 43 32 36 2e 39 2c 39 2e 31 2c 32 36 2e 31 2c 38 2e 33 2c 32 35 2e 32 2c 38 2e 33 20 4d 32 35 2e 32 2c 36 2e 36 0d 0a 09 63 31 2e 39 2c 30 2c 33 2e 34 2c 31 2e 35 2c 33 2e 34 2c 33 2e 34 76 31 30 2e 32 63 30 2c 31 2e 39 2d 31 2e 35 2c 33 2e 34 2d 33 2e 34 2c 33 2e 34 48 34 2e 38 63 2d 31 2e 39 2c 30 2d 33 2e 34 2d 31 2e 35 2d 33 2e 34 2d 33 2e 34 56 31 30 63 30 2d 31 2e 39 2c 31 2e 35 2d 33 2e 34 2c 33 2e 34 2d 33 2e 34 48 32 35 2e 32 4c 32 35 2e Data Ascii: 18,14.7z M25.2,8.3H4.8c-0.9,0-1.7,0.8-1.7,1.7v10.2c0,0.9,0.8,1.7,1.7,1.7h20.4c0.9,0,1.7-0.8,1.7-1.7V10C26.9,9.1,26.1,8.3,25.2,8.3 M25.2,6.6c1.9,0,3.4,1.5,3.4,3.4v10.2c0,1.9-1.5,3.4-3.4,3.4H4.8c-1.9,0-3.4-1.5-3.4-3.4V10c0-1.9,1.5-3.4,3.4-3.4H25.2L25.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.5	50017	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	1604	OUT	POST /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=906334581&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=270149841&browser-info=we%3A1%3Aet%3A1712359104%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011823%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359104&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 61 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:25 UTC	61	OUT	Data Raw: 0a 17 08 00 10 01 18 13 20 00 8a 01 0c 08 f6 09 10 8b 07 18 f6 09 20 d2 07 0a 1b 08 00 10 01 18 04 20 00 62 11 08 00 10 00 18 01 20 ff ff ff ff ff ff ff ff ff 01 0a 05 10 04 e0 01 02 Data Ascii: b
2024-04-05 23:18:25 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:25 GMT Expires: Fri, 05-Apr-2024 23:18:25 GMT Last-Modified: Fri, 05-Apr-2024 23:18:25 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.5	50030	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	395	OUT	GET /store/about/cta_hero_hardware_pt2.png?v=2 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	296	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/png Content-Length: 18662 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-48e6" CF-Cache-Status: HIT Age: 212 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41db5c904c01-MIA
2024-04-05 23:18:25 UTC	1073	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 ab 00 00 03 1a 08 06 00 00 00 60 74 d0 55 00 00 08 7e 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ed 98 59 72 23 3b 0e 45 ff b9 8a 5e 02 49 70 c2 72 38 46 f4 0e 7a f9 7d 90 1a 6c d9 aa 17 e5 7a bf 25 85 94 29 92 09 82 b8 18 2e e4 f6 ff fe 7b dc 7f 78 89 2f c5 a5 5c 5b d1 52 3c af a4 49 63 e7 a6 f9 db ab 5f df c1 a7 eb fb 36 34 bc dc 47 5f c6 5d e8 f7 89 c8 90 dd dd 7e f9 56 6e d7 f0 18 bf 3f f0 b8 f2 5c f0 f9 93 a0 36 ef 13 e3 75 42 d3 ed 1a db 17 41 f1 76 11 d3 c8 ee d7 5d 90 de 05 49 bc 4d 84 bb 80 7e 3b 96 2f da ea e7 23 8c 7d bb de 9f bf 99 81 8f b3 af d4 5e d5 fe f6 bb 62 bd 95 d9 47 62 dc 12 c4 f3 2d 12 6f 0a 88 7d c4 49 bf 6e 3a d3 85 85 e1 7e 7f fb Data Ascii: PNGIHDR`tU~zTXtRaw profile type exifxYr#;E^Ipr8Fz}lz%).{x/\[R<Ic_64G_]~Vn?\6uBAv]IM~;/#}^bGb-o}In:~
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 35 ee 1d a6 e7 f4 d2 96 95 f1 a6 74 36 78 fb dc be ee 0a 3b 94 58 75 38 ea e8 3a da 97 c6 41 e5 2f 7b 4f e8 33 db 37 5d 50 66 49 43 83 39 27 66 5c 35 c8 ce cc 04 65 eb 3a 4b e9 2d 51 3a 71 65 ed c9 71 8e e6 8b f0 c1 f7 a9 fe a7 e0 d9 3d e7 c9 5e a5 eb 04 b5 41 65 1c 49 1b 96 ac 13 4c 0e 07 52 aa ab 01 3f 57 32 23 06 85 b0 5f 63 8c 84 c7 32 82 03 ce 1f 7e 36 e3 fe e4 a1 77 33 ee 37 1f 6a ba f3 bc 06 ea 1e 91 73 87 dc 43 9c 33 c2 b8 06 1d 86 77 19 12 1c 13 e6 0d 90 a3 1c 3a dc e5 94 8d 9d 4f 5e dd 8c 96 3d a9 83 ec 50 6a db 3b aa 41 3e 8d 90 94 b2 c2 80 4e f5 b9 16 42 dc c6 77 80 da 77 43 7f 6c bc 0c 52 44 ff ba ad 4f d0 1a 76 29 57 ce 81 ce b5 7c 3c ea d4 d8 69 7a a0 55 18 7a e4 ca de 45 b4 38 7c 7d 41 de 71 e2 9a 04 2c 35 a4 05 7e 2b 3d d2 e8 1e 5b ce 61 Data Ascii: 5t6x;Xu8:A/{O37]PfIC9'f\5e:K-Q:qeq=^AeILR?W2#_c2~6w37jsC3w:O^=Pj;A>NBwwClRDOv)W\|<izUzE8\|}Aq,5~+=[a
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: ac 55 6a ac 75 4f fe c2 70 5e 5f 59 e6 3a cd 51 24 b0 88 25 a4 20 41 41 0d 65 54 60 23 4a ab 4e 8a 85 34 ed c7 7d fc 23 ae 3f 45 2e 85 5c 65 30 72 2c a0 0a 0d b2 eb 07 ff 83 df dd 5a 85 a9 49 2f 29 1c 07 ba 5f 1c e7 63 0c 08 ed 02 cd ba e3 7c 1f 3b 4e f3 04 08 3e 03 57 7a db 5f 6d 00 b3 9f a4 d7 db 5a e4 08 e8 df 06 2e ae db 9a b2 07 5c ee 00 c3 4f 86 6c ca ae 14 a4 29 14 0a c0 fb 19 7d 53 0e 18 ba 05 7a d7 bc de 5a fb 38 7d 00 32 d4 55 f2 06 38 38 04 c6 8b 94 bd ee f3 ee 9e ce de fe 3d d3 ea ef 07 2c 3c 72 8a 56 2d ba 18 00 00 0e 45 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 Data Ascii: UjuOp^_Y:Q$% AAeT`#JN4}#?E.\e0r,ZI/)_c\|;N>Wz_mZ.\Ol)}SzZ8}2U88=,<rV-EiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 3d 22 2f 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 62 61 64 64 61 65 39 2d 66 63 35 65 2d 34 63 33 64 2d 38 39 36 38 2d 35 36 37 62 64 37 62 65 39 30 66 36 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 47 69 6d 70 20 32 2e 31 30 20 28 4c 69 6e 75 78 29 22 0a 20 20 20 20 20 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 32 33 2d 30 32 2d 31 36 54 31 32 3a 31 32 3a 32 32 2d 30 38 3a 30 30 22 2f 3e 0a 20 20 20 20 3c 2f 72 64 66 3a 53 65 71 3e 0a 20 20 20 3c 2f 78 6d 70 4d 4d 3a 48 69 73 74 6f 72 79 3e 0a 20 20 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 0a 20 20 20 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a Data Ascii: ="/" stEvt:instanceID="xmp.iid:7baddae9-fc5e-4c3d-8968-567bd7be90f6" stEvt:softwareAgent="Gimp 2.10 (Linux)" stEvt:when="2023-02-16T12:12:22-08:00"/> </rdf:Seq> </xmpMM:History> <xmpMM:DerivedFrom stRef:documentID="xmp.did:
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 47 65 9a 80 55 fa 37 bf fb ef d2 79 7f 26 a5 f4 fe 3f fe dd ed ef ac f3 ef 02 00 00 56 2b d7 04 00 00 00 08 ab 00 00 00 20 ac 02 00 00 20 ac 02 00 00 Data Ascii: @GeU7y&?V+
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: ca 6e fe ce e1 1f 45 c4 9f 68 3e 00 00 d8 4c 45 af b7 d4 cf eb 15 e5 4a ae 33 8b b8 9e aa f8 0b 3d 26 ac be 3c a8 be 77 78 90 b2 e5 ee 53 05 00 00 2e d6 b2 cf 77 29 07 83 15 5e 6d 76 a8 1c 58 58 7d a9 b6 ca bf 1d ca 7f 01 00 60 a3 0d 86 a3 c8 b2 6c 39 a1 a2 28 a2 df 1f ae f4 7a 95 03 0b ab 2f f4 5b bf 77 78 2b 8b f4 47 9a 0d 00 00 36 5b 96 e5 31 da de 59 ca 67 0d 87 db 4b 0b be cf bd 5e e5 c0 c2 ea 8b 34 6d f6 97 9a 0c 00 00 ba 61 38 dc 8e de 82 e5 c0 65 d9 8f e1 68 eb a2 22 f6 e1 cd 77 0f 0f f5 9c b0 fa 05 8f 0f 55 3a d0 64 00 00 d0 1d bb 7b d7 e7 3e 6c a9 e8 95 b1 b3 b7 7f a1 d7 9b 52 f6 17 07 b7 0e bd 3e 53 58 7d e6 a6 70 a8 12 00 00 74 4e 96 e5 b1 77 ed b5 73 af 8e 0e 47 db b1 77 ed b5 95 97 ff fe 0a 07 fd dc 9b 49 84 d5 c7 6e be fb fb ef 87 55 55 00 Data Ascii: nEh>LEJ3=&<wxS.w)^mvXX}`l9(z/[wx+G6[1YgK^4ma8eh"wU:d{>lR>SX}ptNwsGwInUU
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 35 8b 07 f7 ee 2e b5 24 75 19 9e 2c 18 cc b3 5f 76 38 dc 8e 5e d9 5f e8 f7 97 65 3f 86 a3 ad 95 7e c7 cb be ce 61 4f b5 68 37 c3 6a e8 d8 65 6b 9a 26 8e 1f 7c be 16 ab a9 cf 33 9d 9c c6 83 7b 77 95 05 03 00 9d 30 19 9f ae c5 6a ea f3 b4 ed a3 f9 e1 f8 ec e4 dc 3f bb bb 77 3d 8a 39 5f 51 58 f4 ca d8 d9 db bf 90 ef 78 99 d7 99 da f8 6d 7f 05 1d 0b ab b7 1e 2d 97 5b 32 5f a2 ba ae e2 e1 83 cf a3 a9 ab b5 bf d6 b6 6d 1e 5d ab c0 0a 00 6c b0 d3 d3 e3 38 3b 7d b8 11 d7 3a 3e 3b 39 77 60 cd b2 3c f6 ae bd 76 ee 55 c7 e1 68 3b f6 ae bd 76 61 ef 82 bd cc eb 4c 99 05 b8 ae 78 fa b8 63 d2 8b 5b 5e af ba fc a0 ba 49 e5 b5 6d db c4 f1 fd 5f c4 ee b5 d7 a2 37 e7 93 30 00 80 cb 72 f2 f0 c1 a5 1c 60 b9 68 60 6d da 26 76 76 ae 9d 2b 08 6e 6d ef c5 60 38 8a b3 d3 93 17 96 Data Ascii: 5.$u,_v8^_e?~aOh7jek&\|3{w0j?w=9_QXxm-[2_m]l8;}:>;9w`<vUh;vaLxc[^Im_70r`h`m&vv+nm`8
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: fd da 3b bf 39 f7 cf 4f 96 f8 7a 1e 00 80 8b 9a 7b 6d ef ed 5f 78 50 7d 36 b0 ce bb e5 eb c9 5e 50 10 56 79 65 b3 d9 64 ee a7 51 37 de 78 7b a5 7b 54 5f 65 b0 be f1 c6 db 73 0f 98 f6 23 00 00 97 61 32 39 9d eb e7 8a 5e 2f de 5e e0 61 fd 32 bc fd f5 df 8a a2 98 6f 8f 6c b5 e4 bd a5 4f 83 40 be dc 83 33 73 07 71 22 ac ae 49 58 9d 4e e7 fa b9 fe 60 18 37 be fa f6 a5 5f ff af bd f5 ce dc 03 e6 6c 36 75 03 00 00 17 aa 69 9a b9 f7 58 de 78 e3 ed 4b a9 68 7b 56 39 18 c6 57 de f8 da 7c 61 b5 9a ad a4 14 b8 58 f2 01 53 bd a2 74 a3 22 ac ae 83 79 57 17 7f ed ad 77 2e 7d b0 7c 32 38 cd 3b 60 2a 45 01 00 36 65 ee d5 1f 0c 2f ad fc f7 97 42 f3 57 ff d5 dc 8b 05 ab 98 7f 95 65 7f c9 81 7c e0 46 45 58 bd f4 c1 b2 ae e6 2a 01 2e 8a 5e ec 5d 7f 7d 6d be c7 bc 03 66 4a ed Data Ascii: ;9Oz{m_xP}6^PVyedQ7x{{T_es#a29^/^a2olO@3sq"IXN`7_l6uiXxKh{V9W\|aXSt"yWw.}\|28;`E6e/BWe\|FEX.^]}mfJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.5	50031	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	392	OUT	GET /store/about/cta_hero_community_pt2.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	296	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/png Content-Length: 6427 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-191b" CF-Cache-Status: HIT Age: 5046 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41db6c704c1f-MIA
2024-04-05 23:18:25 UTC	1073	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 18 bd 49 44 41 54 78 da ec dd 4f 8c 55 d7 79 00 f0 7b df 7b 03 66 f8 6b 8f 8d 1d 30 66 9c 36 43 8a 13 81 ba 08 a2 9b 5a 66 d3 05 56 52 a9 f5 ae 32 6d ba b1 ba a9 dd 5d 1b a9 cd a2 cb 7a 87 a2 56 5d 38 bb ca 2c 1a 15 da ba 0b 48 ba 29 b2 ac b6 58 6a 90 8c 22 61 4c ec 10 db d8 fc 1d 18 60 e6 f6 9c 99 4b 32 e0 61 3c c0 fd 7f 7f 3f e9 ea be 81 99 f7 de 7c f3 de 99 73 be f9 ce 77 93 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<IDATxOUy{{fk0f6CZfVR2m]zV]8,H)Xj"aL`K2a<?\|sw
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 0e cd a9 85 a0 93 5e 16 02 28 71 e0 1c 0c e6 2b 24 00 a8 ce cc f4 d5 3f 0d a7 55 22 01 d0 a1 79 b5 10 74 4b 7e 99 cf 49 91 80 12 07 4e d5 11 00 95 9b 9b 9b fd bd 70 1a 13 09 80 0e cd ab 85 a0 73 9e 17 02 28 8f ab 6a 00 d4 66 c3 b9 0f 7e f6 0d 61 00 e8 0e 09 89 ee d9 25 04 50 0e 8d 2c 01 ea 75 eb e6 cc 73 a2 00 d0 1d 66 d6 dd 33 29 04 50 d2 80 69 ab 06 40 ad b2 b9 b9 6d a2 00 d0 a1 f9 b5 10 00 ac 60 b0 d4 c8 12 00 00 8a 9d 63 0b 01 c0 0a 06 4b d5 11 00 00 50 ec 1c 5b 08 00 be 64 a0 94 8c 00 00 80 e2 e7 d9 42 00 70 6f 71 9b 46 dc ae 01 00 00 14 cb 2c 1b 60 b9 41 52 75 04 00 00 94 33 d7 16 02 80 a5 c5 4b 7c 6a 64 09 00 00 e5 90 90 00 b8 87 e1 d0 10 09 00 00 65 31 db 06 58 6a 70 9c df aa a1 3a 02 00 00 4a 9b 73 0b 01 c0 9d 34 b2 04 00 80 f2 99 71 03 dc 3d 30 Data Ascii: ^(q+$?U"ytK~INps(jf~a%P,usf3)Pi@m`cKP[dBpoqF,`ARu3K\|jde1Xjp:Js4q=0
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 86 ce fb d1 43 7d 86 43 97 f9 04 00 80 be ab e5 4f 94 79 b3 ca d7 92 6a 92 11 8b c5 2a 8c ef 85 c7 df eb 47 0f 35 0d 3a 1a 59 02 00 00 49 0d 15 12 79 d3 ca 98 8c 18 af e9 7b 8e 8f 7b 20 3c 8f c7 d3 34 3d ec 25 00 d5 d2 3b 02 00 00 98 5f 1b 54 f9 60 0d 48 46 2c b6 3f 3c 9f 03 5e 02 50 1d 5b 35 00 00 80 db 2a 4b 48 34 2c 19 71 5b bc 12 c7 8b 5e 06 50 3e 8d 2c 01 00 80 c5 2a 59 1d e4 0d 2c 9b 96 8c b8 6d bf 9e 12 50 c1 60 33 50 1d 01 00 00 fc 5a 55 3d 24 5e 49 9a 99 8c b8 2d 5e 81 e3 94 ab 6f 34 df da f5 9b 92 b5 1b 1e 4d 46 63 ab 04 a3 45 d2 f9 1e 96 1a 59 02 14 e5 d6 cd 1b c9 cc b5 ab c9 95 8b 9f 09 06 00 ad 55 7a 42 22 df 12 31 d5 f0 38 cc 37 ba 0c c7 df 79 49 34 d3 ea 47 c6 93 27 b6 4e ce 9f 01 80 24 59 b7 f1 b1 64 e3 c4 93 c9 27 1f be 9f dc 98 b9 26 20 Data Ascii: C}COyjG5:YIy{{ <4=%;_T`HF,?<^P[5KH4,q[^P>,*Y,mP`3PZU=$^I-^o4MFcEYUzB"187yI4G'N$Yd'&
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 7b 45 5e 15 11 93 11 8b af ec b1 37 1c bb c2 ff 1d 8b 97 25 f5 f2 a0 0f 16 7a 47 00 00 00 54 ab d0 84 c4 dd 15 07 f7 10 2b 26 5e 08 9f fb 66 58 f4 1f af fa 1b ce 93 25 f1 4a 1e f7 6a 96 19 bf 87 fd e1 f3 e2 36 93 46 55 74 40 d1 62 df 88 58 21 01 00 00 50 b5 c2 12 12 f9 42 ff 95 e4 ce 8a 83 64 99 45 ff 81 f0 35 31 31 70 34 1c c7 cb ae 98 c8 2b 22 e2 16 92 95 5e b5 e3 57 15 1d aa 25 e8 2a d5 11 00 00 40 5d 0a 49 48 e4 89 85 fd 0f f0 a5 71 4b c7 4b c9 42 45 c2 bb 49 c1 97 eb cc 2f 1f 1a b7 61 ec 4e ee dc 3e 72 3f f6 e7 c9 96 1f b8 8a 07 5d 22 19 01 00 00 d4 e9 a1 12 12 2b dc a2 b1 12 f1 7e 62 e2 60 6f b8 cf b8 e8 8f 57 d5 f8 79 38 de 4b ee e3 72 9e 79 02 e2 e9 70 ec 48 16 2a 21 26 0a 8a 53 bc af bf 0d f7 ff ba 2d 1c 74 41 dc a6 e1 32 9f 00 00 40 9d 1e 38 21 Data Ascii: {E^7%zGT+&^fX%Jj6FUt@bX!PBdE511p4+"^W%@]IHqKKBEI/aN>r?]"+~b`oWy8KrypH!&S-tA2@8!
2024-04-05 23:18:25 UTC	1247	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.5	50032	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	392	OUT	GET /store/about/cta_hero_community_pt3.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/png Content-Length: 20936 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-51c8" CF-Cache-Status: HIT Age: 5046 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41db7f41741c-MIA
2024-04-05 23:18:25 UTC	1072	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 24 00 00 02 58 08 06 00 00 00 ba a6 37 89 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 51 6a 49 44 41 54 78 da ec dd 69 8c 65 e9 79 1f f6 e7 9c 73 97 da ab ab bb ba 7b a6 87 3d c3 99 21 87 c3 e1 36 22 29 71 11 45 89 92 2c 59 36 19 cb b2 2d 03 8e 01 c9 40 e2 24 08 82 04 fe 94 20 06 ec 4f 09 02 23 70 1c 20 31 90 04 30 ed d8 81 61 20 de e4 38 71 2c 7a 91 1d 93 23 89 8b b8 89 8b c8 e1 2c 9c e9 9e de 6a af bb 9d 73 72 de 73 6f 55 77 cf f4 ac ec a5 66 fa f7 93 ce dc 5a ee bd 67 a9 2a de fb fe fb 79 9f 37 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR$X7tEXtSoftwareAdobe ImageReadyqe<QjIDATxieys{=!6")qE,Y6-@$ O#p 10a 8q,z#,jsrsoUwfZg*y7
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 95 65 2e 01 dc 39 0f bf ff 13 6f 6f 6e d2 f6 78 b3 1d 73 45 00 b8 15 ea ba 8e b2 9c b8 10 c0 46 b3 7d 25 6d 4f 7d f3 89 0d 97 83 3b 4d 20 01 b7 d9 2c 84 f8 f5 66 fb b5 98 86 11 00 70 cb a5 Data Ascii: e.9oonxsEF}%mO};M ,fp
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: ae 9b 6b 3f 89 ba d9 ae 06 12 f5 2c 6d c8 0e 3f 4f ed 3e b2 2c 6f 6f 8b 3c 6b ab 5b b2 e6 76 52 77 9b a7 c8 0f 1e 05 f0 ba 09 24 00 00 b8 63 d2 b4 8d ba ae 9a cd 90 f6 56 bb ae 1a 22 5d ef 6a 1c e5 fe 46 8c f6 36 9a af a6 4a 95 ba bd ad eb 6c 9a 4b 64 d3 c7 74 b2 3a ba fd 6e fb b3 5a 5a c8 a3 db ed 44 b7 d3 89 ad c9 7a 8c a2 17 55 7d f8 ac 00 af 8b 40 02 00 80 3b 2a 55 49 94 e5 c4 85 b8 95 d7 38 ea b6 12 22 6d fb 3b 57 a2 9a 8c a6 21 50 fa 5a 5d 45 bf d7 dc 27 cb a3 d3 29 9a db 48 25 11 d1 29 66 c1 44 55 45 a7 3b ad 90 48 b1 c3 70 38 89 bd fd 32 f6 47 3f 6c 3e 6b 1e d3 ed 46 d6 59 8a ac bb 1c a5 8a 09 e0 75 10 48 00 00 70 47 b5 53 00 b2 69 a5 04 b7 50 9d 42 89 32 ca f1 a0 dd 52 1e 31 9d 8e 91 c2 88 d4 64 b4 19 1c 14 79 7b 9b be d6 ed e4 d3 42 8a 32 7d 7d Data Ascii: k?,m?O>,oo<k[vRw$cV"]jF6JlKdt:nZZDzU}@;*UI8"m;W!PZ]E')H%)fDUE;Hp82G?l>kFYuHpGSiPB2R1dy{B2}}
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: a1 8a 2f 7d 63 2b ca d1 7e 4c 9a ad d3 9d 6f 1b 5d d6 99 7f c0 00 04 12 00 00 1c 51 69 ea 86 06 97 2f a3 1a 47 94 e3 d8 b9 fc 5c d4 e5 20 56 96 8a f8 d9 8f 1c 8f 4f fd c4 5a fc c9 3f 79 6f e4 dd 5e f4 56 4e b4 15 0c 57 03 87 88 3a e5 07 d5 34 88 48 d3 36 a6 4b 84 5e 1f 40 dc 28 8f c8 66 ff ad 8b 4e 64 55 d5 ec bb 8c 6a 32 6e f6 3d be 7a 87 bc 79 be e6 fb bd 7e 2f 96 4e ad c5 1f fb b9 4b 31 1a 8c 62 34 ba 2f 7e ef db 5b f1 95 6f 6d c5 c6 85 a7 a3 d3 5b 88 95 93 0f b4 d3 3e 54 4a c0 dd 2d 77 09 00 00 38 8a a6 0d 2e 0d 58 5f 72 5d ea aa 0d 03 c6 a3 fd 94 4c c4 c2 7c 1e 0f bd 6d 3e ee bb 77 2e 4e 9d 9a 6b c3 88 ac d3 6d 2b 1e 52 e8 30 2d 60 68 6e ab 6b fa 46 bc f8 f6 b5 6a 97 65 ad a6 7d 25 ca 49 db 8f a2 fd f2 6c 68 51 45 d1 6e 91 17 d1 e9 76 a2 db eb c4 3d Data Ascii: /}c+~Lo]Qi/G\ VOZ?yo^VNW:4H6K^@(fNdUj2n=zy~/NK1b4/~[om[>TJ-w8.X_r]L\|m>w.Nkm+R0-`hnkFje}%IlhQEnv=
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: e8 2d c4 fc da 7c 64 b3 0a 88 6a 3c 68 9e 67 10 bb 1b e7 0f 8b 37 fa e9 39 16 d6 da ed 60 c9 50 d5 12 20 90 00 00 80 5b 3f 88 7f 0b 35 b8 ac c6 fb 51 8e f6 63 b0 7b a5 ad 54 e8 76 d2 80 bb 8e aa 1e c5 68 ef 52 94 d3 7c 20 b2 9d 8d b6 5a 20 a2 8c 4f 7e 78 25 4e 1e ef c4 2f fd ec e9 38 7e 72 31 3a fd 6e fb 5c d3 ea 89 3a be fa f5 cb f1 b5 66 fb 47 ff ec 5c ec ee 4d 0e 67 5f 4c b3 8f 3a be fb fd ed b8 74 69 3f 7a cd c3 3e b0 b3 12 27 8e ad 45 51 d4 d1 c9 eb ab 4b 79 56 65 4c c6 c3 36 d8 18 35 fb 4e d5 19 d5 64 78 4d 65 4a 1e 9b 3b dd d8 dc ed c5 ff f1 7f 6f c6 ef 3f 39 8a 27 9f 1b c7 ce 6e d9 56 45 b4 c1 47 73 7b 71 63 14 7f e7 9f 5e 8e d5 a5 22 fe c4 2f 9c 8a b7 9f ad e3 c1 b3 65 f4 e7 e7 e3 9e 7b aa f8 c8 fb 07 31 18 f6 63 7f 7f 25 fe dd 57 b7 a2 a8 f6 23 Data Ascii: -\|dj<hg79`P [?5Qc{TvhR\| Z O~x%N/8~r1:n\:fG\Mg_L:ti?z>'EQKyVeL65NdxMeJ;o?9'nVEGs{qc^"/e{1c%W#
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 1b 8f 7f e0 78 7c a0 d9 4e 9d 5e 8c 22 2d 8d 99 ee 93 2a 1b ca 2a f6 b7 a6 ab 74 f4 7a 9d 76 cd 89 3c 85 0f fb e3 f6 3e 29 80 a8 d3 b2 99 cd c7 93 e1 4e 7b bf c3 2d 66 03 fa 6b 96 f1 7c b5 30 a2 fd 6f 3d 89 72 52 b6 53 4f d2 f9 a4 9f 41 5a 86 33 05 02 e9 e3 ce fc d2 f4 f9 d2 f3 4e a6 15 18 d3 45 3c aa 69 81 c5 68 d0 6c bd 28 9a fb 45 a7 13 45 51 c4 9f fb 33 67 63 38 18 c5 85 e7 2f c7 3d 27 bb b1 7e b2 17 fd f9 5e fb b3 ad 9a e7 48 cd 3f d3 31 af af 0e e2 dd 0f 76 e2 a7 3e b4 1a ff e6 8b 57 e2 d2 e6 28 f6 36 9f 8f ce c2 5a b3 df 63 fe 28 40 20 01 dc ed d2 bf 84 00 11 93 f1 c8 45 80 5b ac 28 f2 76 4a c0 9b 45 aa 58 48 3d 1b 92 77 3c b8 18 8f be 73 35 d6 4e 2c 44 35 dc 8f c9 de 4e 8c d3 8a 1a 31 0d 08 3a 31 8e a2 53 c7 47 3f b8 16 0f 3e bc 14 f7 9d 99 6f 0b Data Ascii: x\|N^"-**tzv<>)N{-fk\|0o=rRSOAZ3NE<ihl(EEQ3gc8/='~^H?1v>W(6Zc(@ E[(vJEXH=w<s5N,D5N1:1SG?>o
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 4e a2 6e f6 b7 94 d7 b3 10 62 d8 06 13 29 53 b8 b0 31 8a af 7e 37 e2 b3 7f 7f 2f 3e f2 fe 61 7c e4 7d 17 e2 9e 33 ab 07 ff 2b 3a 7b e6 38 5c d6 b4 1c 37 8f 9d 8c a6 2b 8a 94 e3 18 0e fb b1 bd d7 8f e1 20 f5 ea a9 db 2a 8f 2c 04 12 20 90 00 78 d1 c0 ec ca 0b cf c5 f6 95 8b b1 b0 b4 1a 79 51 b8 28 bc a5 a5 de 29 7b db 9b 6f 9a b9 ec f0 56 93 56 6b 98 4c de 3c cb 80 96 93 71 33 d0 7e a5 29 07 d3 de 0f 69 20 3e 19 67 31 18 e5 d1 6b 06 df 8b 0b 59 cc f5 53 45 48 15 c3 14 46 34 e7 dd eb 76 63 69 61 a9 b9 cd da ca 88 a8 b7 db 56 0f a9 b7 c3 e9 7b ef 8b f5 13 27 9a d7 e2 a5 f6 31 a9 97 c4 b8 19 e8 0f c7 e3 d8 de de 8e 67 9e 7a 26 9e 1e 3f 1d d9 28 9f ad f0 51 c7 03 f7 bf 3d 56 56 96 e3 d4 e9 7b 9a 81 ff 20 5e 38 ff 7c 3c f9 f4 b3 b1 bb bb 17 9d 2c 2d df 99 37 fb Data Ascii: Nnb)S1~7/>a\|}3+:{8\7+ *, xyQ(){oVVkL<q3~)i >g1kYSEHF4vciaV{'1gz&?(Q=VV{ ^8\|<,-7
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 7f 6d a5 db 0c f2 87 ed c7 ed ea 16 65 39 eb 39 11 6d 95 c4 42 bf d7 56 24 2c f4 7a d3 61 7e 55 c7 6f 3f f1 f9 e8 74 8a 58 5e 5e 8e df fc dc 3f 8f af fd de ef 45 39 99 c4 7c 73 9f b5 a5 e5 e8 77 7b 6d 20 d1 29 ea 38 be b4 12 a3 b9 49 ec 6c 6c b6 81 c5 5a f3 98 e5 85 85 76 2a 48 1b 46 bc f4 e0 a6 99 41 5a b9 b3 ce ae 39 de e9 6d 6a 78 59 55 d3 29 26 69 95 91 6e a7 d9 4f 5e 37 c7 fa da ae db 70 d2 69 1e 9f c7 13 5f db 8f e7 2e 65 d1 e9 2f 46 de ed 47 96 02 1e 78 0b 69 fe c6 cf ce fe 7e 9e 11 48 00 00 c0 9b 50 db b8 31 cf db 81 f0 d1 0a 24 66 d3 1d 9a e3 db d8 9c c4 33 29 90 f8 fd 68 ab 23 1e b8 e7 9a 05 37 66 83 fb 97 b3 b6 dc 8d f9 fe b4 91 63 5a 39 a3 ad 92 68 ce 35 05 1d e9 b9 e7 0f 02 89 6e 37 f6 26 93 f6 7b 4f 3c f1 f9 58 5a 5e 8e 93 27 4f c7 e7 3e f7 Data Ascii: me99mBV$,za~Uo?tX^^?E9\|sw{m )8IllZv*HFAZ9mjxYU)&inO^7pi_.e/FGxi~HP1$f3)h#7fcZ9h5n7&{O<XZ^'O>
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: bf 7a 16 46 a4 66 96 f5 b5 95 15 b3 50 23 1d 57 d5 1e 5b dd 36 b3 6c 03 89 e5 22 d6 56 8a 36 70 79 25 fb c3 22 2e 5e 19 b7 81 c4 28 5b 99 ae a8 31 ab 8c a8 fd 5a 73 f4 c2 88 34 35 e3 d3 cd b6 70 04 0e 27 05 22 7f b1 39 a6 7f d2 fc 7d fe 86 40 02 00 00 ee a0 a3 d8 e0 32 3a fd 66 f4 5f 44 56 4e 62 52 e6 31 18 66 f1 85 af 6d c4 e6 4e 2f 2e 6f 1f 6f 06 ed 55 f4 3a e5 75 f3 24 b2 6c da 27 a2 df 2b e3 9d 0f cc c5 cf 7e 74 3e 3e f7 c4 a5 d8 dd 4b ab 58 ec 37 f7 ed 34 df 9e f6 8c 68 83 98 4e 6a 82 39 7d 70 5a 51 a3 1d 38 1d ac 86 71 b0 0a 46 4c fb 42 5c e7 9a a9 1a 2f 96 1a 64 be f8 fb 2f 7e 7c bb fa 47 55 c7 a4 9a 4e 11 29 9a eb 3f d7 cb 63 ae 9f c7 d9 7b b3 38 73 f2 d5 23 85 4b 5b bd 76 1a cb f9 4b 83 58 58 5e 88 a2 93 0b 22 38 8a 41 44 0a 20 fe 93 b8 73 55 11 Data Ascii: zFfP#W[6l"V6py%".^([1Zs45p'"9}@2:f_DVNbR1fmN/.ooU:u$l'+~t>>KX74hNj9}pZQ8qFLB\/d/~\|GUN)?c{8s#K[vKXX^"8AD sU
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 69 ed cf 88 c9 38 96 9a e7 5a ca 8b 38 3e 3f 1f 6b 73 f3 71 ac d9 ee 5d 5a 6a 43 8a b9 2c 8f 72 6f 3f ea b2 8c c9 68 d4 86 0c e3 e6 f1 db 69 ba 46 b3 7d 77 52 c5 c5 6a 14 17 aa 71 f3 79 15 e3 e6 6b 83 c9 b0 0d 40 da 70 a2 de 6b f6 39 89 cb 9b db 31 1c 4d fb 4d 7c e2 c7 d6 e2 d1 07 c7 cd 31 ee bd a6 ea 88 f6 67 94 aa 40 8a 3a 7a cd 68 a5 ed c9 d9 5e 97 2a 0e e7 af c0 ed f5 ab 31 5d b1 e2 ad e2 20 60 f9 ef 05 12 00 00 70 07 42 89 b2 3c 22 55 12 d9 74 9c 3d 18 ce 02 89 fa e0 36 6b 1b 3b 1e 34 96 bc de b4 d1 65 9a da f0 b6 93 9d f8 d5 9f 3f 15 5f f8 da 56 b3 6d c6 0b 57 ae b4 ab 75 2c ce 2f 46 3d 1e 47 d6 3c f8 c3 cd 0e d6 a3 1f eb 59 3f ee 3d 75 32 96 57 56 62 f5 d4 a9 e8 76 7b d1 6b b6 7e 67 ba 2c 6a de ec b8 dc db 6b 53 80 8d ef 7f 3f aa 49 19 93 e1 5e 8c Data Ascii: i8Z8>?ksq]ZjC,ro?hiF}wRjqyk@pk91MM\|1g@:zh^*1] `pB<"Ut=6k;4e?_VmWu,/F=G<Y?=u2WVbv{k~g,jkS?I^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.5	50033	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	597	OUT	GET /store/about/videos/about_hero_loop_web.webm HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://store.steampowered.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-04-05 23:18:25 UTC	329	IN	HTTP/1.1 206 Partial Content Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: video/webm Content-Length: 986085 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-f0be5" CF-Cache-Status: HIT Age: 2167 Content-Range: bytes 0-986084/986085 Server: cloudflare CF-RAY: 86fd41db8b7da527-MIA
2024-04-05 23:18:25 UTC	1040	IN	Data Raw: 1a 45 df a3 9f 42 86 81 01 42 f7 81 01 42 f2 81 04 42 f3 81 08 42 82 84 77 65 62 6d 42 87 81 04 42 85 81 02 18 53 80 67 01 00 00 00 00 0f 0b b5 11 4d 9b 74 bb 4d bb 8b 53 ab 84 15 49 a9 66 53 ac 81 6e 4d bb 8b 53 ab 84 16 54 ae 6b 53 ac 81 cb 4d bb 8c 53 ab 84 1f 43 b6 75 53 ac 82 01 0a 4d bb 8d 53 ab 84 1c 53 bb 6b 53 ac 83 0f 0b 62 ec ac 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 49 a9 66 d8 2a d7 b1 83 0f 42 40 44 89 84 46 a4 3a 00 44 61 88 07 ef 00 60 76 3e 58 00 4d 80 8f 6c 69 62 77 65 62 6d 2d 30 2e 32 2e 31 2e 30 57 41 aa 66 6e 6f 72 64 20 57 65 62 4d 20 66 6f 72 20 50 72 65 6d 69 65 72 65 2c 20 62 75 69 6c 74 20 4a 75 6e 20 31 35 20 32 30 31 37 16 54 ae 6b Data Ascii: EBBBBBwebmBBSgMtMSIfSnMSTkSMSCuSMSSkSbIf*B@DF:Da`v>XMlibwebm-0.2.1.0WAfnord WebM for Premiere, built Jun 15 2017Tk
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 25 8b 07 97 08 30 b0 c7 b1 02 d6 5a 76 9c 6c b3 f3 0d 2f f5 7e f6 e7 b8 4e 20 49 ef d6 5f d5 cd ec da 1f 1a a7 63 d0 36 83 7c 9f 1b 12 47 e6 b1 d3 aa 22 35 2a 0d f4 e4 50 7f 23 f2 5e 6b 94 01 06 21 06 5a 56 e0 27 18 9f 64 68 f4 d2 a5 20 26 78 29 8c 99 9a 6f 24 90 d9 a6 47 dd 85 47 9a 11 23 e9 ad 62 4a 04 b4 98 1c eb 38 80 e7 07 c8 91 87 24 3a 26 18 d5 b2 cf f8 0f 28 3b 40 13 2b e6 93 10 87 d0 eb 62 2f e2 3b 74 fa 1d 26 31 9c a7 2a 42 3a 98 f8 9a b3 11 99 ac 1a 2a a8 54 35 00 b6 d4 f2 65 65 c5 ab 17 b8 dd 80 fd f3 18 63 b9 5d 5e 11 e4 ec 6a e4 f6 84 75 58 1b 77 a6 72 67 eb 31 49 a6 f2 70 ad 7b 95 b8 3a 0a 3b e4 34 f2 cb 2d d0 3e c7 0d 8d 04 1a 49 3e 50 c3 4d ae 37 74 15 92 54 21 b6 83 9d 8a f4 22 3f 72 5f a3 bb f2 d8 5d 20 7d 8f 8e 19 96 99 ae bb da 34 e5 Data Ascii: %0Zvl/~N I_c6\|G"5P#^k!ZV'dh &x)o$GG#bJ8$:&(;@+b/;t&1B:*T5eec]^juXwrg1Ip{:;4->I>PM7tT!"?r_] }4
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 89 87 10 23 d6 90 1b e5 d1 18 59 e1 5e 31 a1 41 e4 4e 2d 4b e6 6a d3 77 1a bd 6d 88 84 ed 73 52 e1 02 75 e0 b1 87 1e 9a 65 22 a5 be bc ef d0 b9 d8 9d d7 1e f9 75 ec 49 8a d3 1b f1 c3 58 7d df c4 5a a2 1b f1 a1 33 bc 03 de 72 9c 8d 16 7b cd 4d c6 13 0e c5 68 c4 47 5a 4b 4f d4 b2 1d e7 0e b3 76 2e e3 bb 22 82 bc 97 a9 cc 11 28 00 24 3d 09 73 7e b0 6a 42 eb 9b d7 0d 44 98 ef 5b 85 00 0e 99 f7 3c 45 a8 05 b8 89 61 58 38 7c c8 25 9c 5f 06 0a ac 8f 62 b4 1b df 25 71 d0 fe 68 db ef 87 93 fe 72 b2 4a 25 e2 97 54 be a9 39 32 0e f3 75 1b 57 1b 06 dd c9 20 35 e2 16 cb af 6e b5 fc de d3 28 7d ae b9 b1 42 a1 2e 17 a8 93 8c cc 5c fe d9 24 83 e2 56 78 28 fc 5b 13 40 83 59 ba f8 93 7a e7 b0 68 5c 18 5d 63 7f 91 c4 74 a5 a7 0c e3 24 4c 40 c2 99 d8 38 99 80 1e 7c 80 62 dd Data Ascii: #Y^1AN-KjwmsRue"uIX}Z3r{MhGZKOv."($=s~jBD[<EaX8\|%_b%qhrJ%T92uW 5n(}B.\$Vx([@Yzh\]ct$L@8\|b
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 11 18 bd a5 24 10 0b b9 6e f3 19 1f 78 0f 9a 7a 94 24 65 5a 63 e0 a7 2a 49 10 f5 b9 7c 49 90 ea b9 52 50 1c 4a 9a 7e fd 1e 43 00 ed 33 97 d6 ca 03 96 51 6e a6 8a 6e 62 08 d1 92 d8 73 4a 86 10 1d bf 07 5c 03 74 d1 2c 83 2e bf 3e 58 74 2f 19 65 67 1c 71 b0 8a 50 99 9b e2 6f 81 b8 83 33 b3 d2 69 cd 77 4e a8 72 1f 0d b1 ef 9c f4 ee 1b 94 0c a0 c3 8b 2a 89 05 ac 7b ae 79 33 00 10 f6 1a 37 31 30 fa 8d 04 2f bf fa 1a 27 8d 8e 62 23 c9 a6 f2 68 23 40 c4 99 1e 18 3a be a3 f3 73 d7 a8 f0 b2 4b 4a 5d e7 1b 2b 7d 35 ab 19 73 ac 84 b2 39 78 80 d9 80 ed 48 6f 9f 3b fc bf 58 fb 53 41 a7 26 ca e4 6b 55 f1 51 3c 98 64 42 00 de b0 92 aa db b8 11 d1 60 82 cd c3 8d c6 86 68 c3 37 29 4c 60 c3 7f 02 84 13 d2 ef bd c7 af 25 a3 5d 07 68 a9 f5 f7 e6 f4 12 c0 7a 6a 0b 55 86 c5 9b Data Ascii: $nxz$eZcI\|IRPJ~C3QnnbsJ\t,.>Xt/egqPo3iwNr{y3710/'b#h#@:sKJ]+}5s9xHo;XSA&kUQ<dB`h7)L`%]hzjU
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 7b 9c 67 88 a8 26 70 83 8c 07 d6 4e 63 97 7f dd 2b 0a d6 d8 33 df d6 19 b6 a7 39 f2 73 1e c8 3c f3 46 ee e2 c4 50 cd 15 97 ce 04 28 7c f8 8f 4e 18 27 ef c6 74 5e fe e4 40 8e 5c 30 8f a9 5e 05 ce 28 d2 ca ff 7d bf ff 7b 27 2a 46 5d 91 d0 fa 3d d8 76 d9 e7 7c 2f 0a 71 44 b2 a0 aa ca 79 84 64 a8 93 6a 16 00 00 96 f7 3f 41 32 ac c2 07 d9 80 a2 1b ec ff 02 4f ac 27 17 6d c1 93 28 ef 01 97 01 2e 8f ea ca 94 ce d7 59 9a dc 46 23 a8 f3 b2 31 80 0c cd 7f 81 4b d5 b5 6a ef fd 19 88 26 ae ac 64 44 fe 1f 2e b7 ba 3e ae ff 24 74 37 ea d9 5b e8 25 ef d9 d4 95 01 ca a3 fa c9 f6 9c 1d b6 d9 66 ed ad e4 e8 05 98 43 da bc 1e 84 13 40 67 a7 bd ce 30 f6 25 e7 be 37 9c df a9 3f 3b 70 b4 61 c8 1f 49 12 d8 d5 17 8d 35 79 07 be 5b 2a 3a e5 04 e1 34 3d 4c ed ba bc de 08 b3 da d2 Data Ascii: {g&pNc+39s<FP(\|N't^@\0^(}{'F]=v\|/qDydj?A2O'm(.YF#1Kj&dD.>$t7[%fC@g0%7?;paI5y[:4=L
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 4f 47 ac 6b b9 9b d8 94 83 e2 23 20 e0 e6 b3 fc 45 9b 93 56 d0 ee ba 42 87 a4 61 e4 5d f8 0b 7e 4a 2e 3b 75 98 c1 a1 b5 be b0 53 a3 c0 d0 3d f6 09 10 1c 45 be 57 2b 36 19 45 b5 84 ee 47 1e 56 00 b1 cc c2 3a da 70 1d 5a bd 15 53 f0 ca 4b 4d d2 27 53 2f ad 8b 13 f4 48 be e9 80 cd f8 b4 88 50 df 32 2f 6c bd 38 5a 04 7b 02 66 e4 f2 a6 ea 63 60 60 c4 f3 27 cb c6 b2 7a ac a9 0a b0 2b 54 23 98 65 eb dc ba 3b f1 fb b8 fa 2c fd 33 c9 5f d3 e5 84 eb 5d ae 43 f0 4f 9e 7b aa dc 9e ce 8c 6d 88 a0 d0 b4 1f 71 0c 5d b1 0d bf 17 56 ae 9a e5 39 ad f5 52 7f 89 48 e9 eb 33 f4 de 35 e1 cb dc f4 fc 16 c3 6c 32 e0 32 2f 79 5d 49 40 59 cb 5c 09 53 e7 b4 62 85 50 8a fe b3 26 75 da 84 c7 db fa 92 1c e2 48 17 3f a5 5a 02 7a c0 4b 33 1a 5f e6 e6 38 6f cb 75 75 f7 a8 65 7f ee c1 01 Data Ascii: OGk# EVBa]~J.;uS=EW+6EGV:pZSKM'S/HP2/l8Z{fc``'z+T#e;,3_]CO{mq]V9RH35l22/y]I@Y\SbP&uH?ZzK3_8ouue
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 69 b8 71 0c da 86 fb f5 2a 86 f6 23 1e b3 10 d9 6c 03 c0 cc 13 ed 87 30 0b c1 e6 1f ec 0c 95 0a 9f 2d 31 40 47 b2 a6 8d 26 f0 98 8c 37 11 04 0d 76 da d1 21 30 ca cc 61 a0 94 9f b1 7a 92 15 2f a4 84 c1 a8 b9 c8 1a 7e 31 aa 55 6b 80 b5 e2 7c 66 ae d2 3e 4f 13 f1 3a bd 98 15 49 96 cb 31 13 37 9c 06 93 f5 37 c1 32 36 f7 a3 e2 f7 8f e9 03 d3 71 9b 2d ec 52 c1 fe ed dc 9c 08 d0 1f 14 86 f8 d9 b0 b9 a0 38 f2 8b 56 34 d7 de 27 4f cf d9 1e db 0a 21 41 45 9c e7 49 36 81 5a 05 68 13 cf e8 f1 ad 41 f6 5b 71 7c 00 13 77 45 7b 2d 69 09 c2 57 75 c1 4c 3f 79 6a 6d 0a 0d 3f df 17 dd 21 ce f1 c1 c6 e9 9e ce ba cc 9b ec d6 6d 04 5c 9d c4 f0 dd 0b 56 33 4d b0 8e 25 ec 6b ac d9 81 5d 26 64 95 da b2 06 68 3c 1a 28 1b 1f 5e e8 b9 ce 92 f2 86 01 df 2a 69 b2 53 df 23 76 72 a2 4f Data Ascii: iq#l0-1@G&7v!0az/~1Uk\|f>O:I17726q-R8V4'O!AEI6ZhA[q\|wE{-iWuL?yjm?!m\V3M%k]&dh<(^iS#vrO
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 29 2b e2 a1 7e 08 ee e0 2e 70 6e 7c 8f 9f 06 06 fd e0 00 01 4d 72 a6 6a af e2 03 39 fa 05 99 4d 9f 1e 0a a0 2f 2d 95 6b a5 cb bf 37 54 53 09 71 4f 29 4a 59 2b 77 5e 18 51 39 24 34 8a 62 4a 1b d6 b7 4c ba 17 a5 d4 f4 b7 f5 0b 1b e2 07 97 00 f0 d8 e4 08 56 ad 27 b7 43 72 61 1a d6 70 6b 49 04 5e bc 81 c1 66 48 b4 6a c9 18 70 00 43 75 b4 16 d5 fd 2a ce 11 0d 9a d5 dc 7e b4 98 b7 31 c9 27 de ef 8d 20 2e e4 83 dc f8 c0 f6 c9 c4 c4 da dd 1c 5e 55 e4 8b c1 2d 5e 3d 65 98 08 32 3f 0a df 05 fa 79 43 c4 7c 1c 01 fa 21 9a 7c 9b 9d b1 a0 17 92 32 bb 81 77 2d 8b 96 65 e7 e8 c5 b0 00 31 58 fb 92 5f 51 3d e3 90 ff 83 81 28 01 6a 43 f1 7f 48 17 7a 49 76 15 6c 7d ed 31 e9 ca c6 98 a8 b8 ff 72 9c 21 5f 17 f6 f3 2e 1a fa d0 38 26 ef 7e 34 80 cf 4e 1c 73 f1 c9 5f 32 49 70 b0 Data Ascii: )+~.pn\|Mrj9M/-k7TSqO)JY+w^Q9$4bJLV'CrapkI^fHjpCu*~1' .^U-^=e2?yC\|!\|2w-e1X_Q=(jCHzIvl}1r!_.8&~4Ns_2Ip
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 76 3e 58 04 1f 31 41 4d f1 44 20 df fb f2 e3 63 ab 0c 4a d1 43 ea a8 93 44 4f c4 65 ee e1 41 fc 45 04 74 bf 45 0a 4c 84 f0 22 ab 08 18 87 e0 e5 07 89 f2 47 2f 2c 05 89 34 5d 62 f5 5f 7c c6 a5 dd 04 cf 42 6f 27 88 49 87 8d 27 fa 4b 00 59 0b 61 a1 26 0b 1e 1e f8 c4 7e a4 f0 d5 b1 4f c9 54 ad d8 35 b8 eb 18 01 1a 39 10 23 2a 81 9e ba c0 72 5a df 9f d7 4b 94 35 0a 59 f1 0c 1f 78 38 d5 13 11 80 cf 38 88 95 f8 77 41 c6 5d 22 ec 57 b1 d0 a5 12 f4 5b a5 36 1e 8e 5d eb 7d 54 f4 25 c5 13 bd 20 f3 1a 9a 73 d0 8e 27 ab 00 c9 0a 6d 6c 6a 1b 5b 49 b9 13 bf 29 da 99 45 96 b0 aa 78 17 35 72 d5 b3 18 21 61 c0 4d 40 eb d8 e5 b4 b1 aa ec 7e df 02 48 7b d0 99 ff be 98 b3 fd 11 29 f0 aa 40 d2 e1 48 e3 54 f0 6b f3 af 4f f1 62 15 21 d8 ed d0 2d cf e6 59 cf f7 72 05 9f a9 1b ef Data Ascii: v>X1AMD cJCDOeAEtEL"G/,4]b_\|Bo'I'KYa&~OT59#*rZK5Yx88wA]"W[6]}T% s'mlj[I)Ex5r!aM@~H{)@HTkOb!-Yr
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: a3 ec 81 01 2c 00 86 00 40 96 f0 41 20 04 00 06 60 00 00 00 00 00 45 68 2c d5 bc 06 03 83 bf 07 77 ef 1a fb 6d ad 4c a6 e5 cf 15 f0 d5 89 44 47 7f d7 e7 31 f8 e8 ce 25 07 19 1b 43 7f 40 c4 41 21 19 9e 05 97 9f 0b ef df e4 8f 6a 48 f9 7e 7d f9 26 bc d3 06 08 52 60 33 f5 6a 40 69 3b 77 7e 20 4a de 95 d7 18 ed 1a e2 d8 14 64 68 60 a3 e2 81 01 4e 00 86 00 40 96 9c 10 48 01 00 01 80 60 00 00 00 00 00 3b 6a 2c 56 29 30 0e d1 ec 06 4c 64 f8 e0 90 04 43 b7 fa 0a eb fd 4e e8 36 1c 8b 5b 7d 64 72 11 89 ad 55 3e 04 0d 67 19 85 dc cd 33 d7 d2 bf d5 77 83 fc ea a1 ff 87 c1 f4 0c 36 00 6c 17 94 88 22 a1 94 cb 45 92 f4 b0 2e 7c f3 a7 5a a3 cc 81 01 6f 00 86 00 40 96 f0 41 20 04 00 06 60 00 00 00 00 00 24 68 2c d5 bc 06 03 af c8 7b b0 03 f7 93 08 db 7a d4 64 9e f7 38 ce Data Ascii: ,@A `Eh,wmLDG1%C@A!jH~}&R`3j@i;w~ Jdh`N@H`;j,V)0LdCN6[}drU>g3w6l"E.\|Zo@A `$h,{zd8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.5	50034	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	389	OUT	GET /store/about/cta_hero_steamworks.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/png Content-Length: 43398 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-a986" CF-Cache-Status: HIT Age: 2342 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41db9dc921d3-MIA
2024-04-05 23:18:25 UTC	1072	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 88 00 00 02 dc 08 06 00 00 00 8c e3 8b 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 a9 28 49 44 41 54 78 da ec dd 6f 6c 1c f9 99 27 f6 22 d9 64 8b a4 c8 91 34 9a 91 3d f2 0d e5 f3 dc ed 40 f6 e1 c6 40 76 05 2c 02 ac 1c 60 1d ec 2b 4f 12 04 01 92 c0 3b 41 f2 e2 92 7b b1 be 03 72 6f ed 7d 77 b8 37 de 7b 11 04 01 12 78 6d dc 9b 24 2f d6 17 e0 5e ec 1a 88 67 0f 8b c1 d9 3e c4 f6 9e c7 90 73 e3 8c a4 1d 8d 47 33 12 a5 21 29 52 cd bf e9 a7 d8 45 15 5b cd ee ea 66 93 ac ee fa 7c 80 36 67 46 d5 dd 55 bf ae 6a b9 be 7c 7e cf 2f 49 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 2a 9a 30 04 c0 b8 5b ba 7e e3 42 f3 c7 1b ad c7 05 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<(IDATxol'"d4=@@v,`+O;A{ro}w7{xm$/^g>sG3!)RE[f\|6gFUj\|~/I*0[~B
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: ee de f2 e1 03 00 c0 18 ab 19 02 80 e2 22 2c f9 e0 d6 4f ce 74 1f 22 ac 11 d8 00 00 00 c3 a4 82 08 00 00 00 a0 e2 04 44 00 00 00 00 15 27 20 02 00 00 00 a8 38 01 11 00 00 00 40 c5 09 88 00 00 00 00 2a 4e 40 04 00 00 00 50 71 02 22 00 00 00 80 8a ab 19 02 80 fe 9c bf f8 72 52 9f 5b 2c bc fd fa ca 72 b2 b1 ba 3c b4 f7 9f 5d b8 94 cc 2d 5e 2a ed f8 3c fa e8 76 b2 bb b3 dd 73 bb ff aa f6 72 b2 38 31 d5 75 9b 9f ec ac 25 ff 76 77 75 28 63 b2 d5 d8 48 56 1e dc eb f9 5a 5f 99 ba 90 bc 3e 39 db 75 9b 5b bb 1b c9 0f 77 1e bb 18 00 00 18 1b 02 22 80 3e 44 38 f4 d9 d7 be dc d7 73 2e bd f2 85 e4 f6 5f ff eb 34 a0 38 ae fa dc 42 f2 b9 d7 7f bb d4 63 34 7f e1 e5 e4 ee bb ef 74 dd e6 bf 9f fe 6c f2 0f 6a 9f ed f9 5a ff a0 f9 b7 d4 1f 3c fd 45 f2 e1 de e6 91 db 44 38 54 Data Ascii: ",Ot"D' 8@N@Pq"rR[,r<]-^<vsr81u%vwu(cHVZ_>9u[w">D8s._48Bc4tljZ<ED8T
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 0d 96 ca a4 36 a3 6a a8 2c a6 6a 7e 57 03 00 c0 d9 13 10 01 9c 02 d3 b8 00 00 80 32 13 10 01 00 00 00 54 9c 80 08 00 00 00 a0 e2 04 44 00 00 00 00 15 27 20 02 00 00 00 a8 38 01 11 00 00 00 40 c5 09 88 00 00 00 00 2a 4e 40 04 00 00 00 50 71 02 22 00 00 00 80 8a 13 10 01 9c 82 c6 fa 4a a9 f6 67 7b 73 23 d9 dd d9 f6 c1 94 c0 ce b6 cf 01 00 80 b3 57 33 04 00 c5 ad 3c b8 97 2c bc f8 4a 32 5d 9f 2d fc 9c c6 fa 6a b2 be b2 5c aa e3 d8 6a 6c 24 1f fe fb 9f 26 17 ae 2c 25 53 35 7f 15 9c e5 e7 f0 c9 dd 5b 06 02 00 80 33 e7 ae 00 a0 cf 1b fa db 7f fd af 93 d9 85 4b 85 b6 df dd d9 4a 03 a2 32 da 58 5d 4e 1f 00 00 00 02 22 80 01 08 56 00 00 80 71 a2 07 11 00 00 00 40 c5 09 88 00 00 00 00 2a 4e 40 04 00 00 00 50 71 02 22 00 00 00 80 8a 13 10 01 00 00 00 54 9c 80 08 00 Data Ascii: 6j,j~W2TD' 8@N@Pq"Jg{s#W3<,J2]-j\jl$&,%S5[3KJ2X]N"Vq@N@Pq"T
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: b6 65 0e 87 42 54 37 2d 5e be ea 04 06 00 60 e8 54 10 01 f4 29 c2 86 fa dc 62 e1 ed cb 38 2d a8 8c d3 ca 4e da 74 7d 76 2c 8e 63 aa 36 ed 22 04 00 60 e8 04 44 00 7d 88 90 e1 d5 2f fe 6e 1a 12 15 65 5a 10 00 00 50 76 a6 98 01 f4 21 a6 f7 f4 13 0e 85 98 16 34 b7 78 c9 e0 01 00 00 a5 25 20 02 38 05 fd 4c 49 03 00 00 38 6d 02 22 00 00 00 80 8a 13 10 01 00 00 00 54 9c 80 08 00 00 00 a0 e2 04 44 00 00 00 00 15 27 20 02 00 00 00 a8 38 01 11 00 95 b0 b3 bd 6d 10 00 00 e0 08 02 22 80 0a ba fd ee 66 f2 d1 ed 72 07 26 8f 3f d9 69 ee e3 56 d7 6d 36 56 97 0b bf de ea c3 7b 3d b7 e9 e7 f5 ce c2 ee ce 76 b2 f2 e0 9e 13 18 00 80 a1 ab 19 02 80 6a fa ee b7 96 93 37 6e ce 26 e7 e6 cb f7 bb 82 a7 4f 76 93 9f bd bd d1 fc b9 d7 75 bb 0f ff fd 4f 93 f3 17 af 24 d3 f5 d9 ae db Data Ascii: eBT7-^`T)b8-Nt}v,c6"`D}/neZPv!4x% 8LI8m"TD' 8m"fr&?iVm6V{=vj7n&OvuO$
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 6e e6 fe f9 4d c3 c1 a8 a9 cf 2d 14 de 76 ba 3e 6b c0 00 00 a0 02 04 44 d0 87 af ff e0 ab 37 9b 3f 2e e4 fe d3 d7 8c 0a 00 00 00 a3 4e 40 04 fd 69 0f 84 de 68 35 ad 06 00 00 80 91 25 20 82 fe dc ec f0 df 4c 33 03 00 00 60 a4 09 88 a0 a0 af ff e0 ab 31 b5 ac 53 53 6a cb dd 03 00 00 30 d2 04 44 50 dc 51 95 42 6f b6 c2 23 00 00 00 18 49 02 22 28 ae 5b a5 90 69 66 00 00 00 8c 2c 01 11 14 d7 2d 04 32 cd 8c ae 76 b6 b7 0c 02 00 00 50 5a 02 22 28 e0 eb 3f f8 6a f4 1e ea 36 8d 4c 05 51 45 34 d6 57 06 7a de 93 c7 1f 1b 3c 00 00 a0 b4 6a 86 00 0a e9 15 00 5d f8 fa 0f be fa e6 f7 7e ff 2f be 6f a8 c6 db da a3 8f 93 df bc f7 d3 a4 3e b7 58 f8 39 eb 2b cb c9 56 63 c3 e0 01 00 00 a5 25 20 82 62 be 56 60 9b 98 66 26 20 aa 80 08 89 e2 31 ca fb 3f bb 70 a9 f0 b6 00 00 c0 Data Ascii: nM-v>kD7?.N@ih5% L3`1SSj0DPQBo#I"([if,-2vPZ"(?j6LQE4Wz<j]~/o>X9+Vc% bV`f& 1?p
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: d5 d7 92 4b af 7c a1 d4 e7 dd 07 b7 7e 92 2e 0f 0f 00 00 27 c1 14 33 80 3e 44 28 b1 78 f9 6a a1 70 28 fd 92 6d 6e 17 cf 89 ea 94 b2 28 73 38 14 ce cd 4f 24 6f 7c a5 fb 3e c6 67 50 d4 e2 e5 57 7a 6e b3 f0 e2 2b a5 3f f7 e6 16 2f b9 00 01 00 38 31 02 22 80 3e 4c d5 06 9b 82 14 15 47 0c f1 2f af a9 e1 16 c0 4e d7 67 0d 2a 00 00 d5 fe ff d8 86 00 00 00 00 a0 da 04 44 00 00 00 00 15 27 20 02 00 00 00 a8 38 01 11 00 00 00 40 c5 09 88 00 00 00 00 2a 4e 40 04 00 00 00 50 71 02 22 00 00 00 80 8a 13 10 01 00 00 00 54 9c 80 08 e0 14 ec 6c 6f 19 84 3e 3c 7d b2 db f5 cf 77 77 b6 87 fa 7e 5b 8d 0d 83 0e 00 40 a5 09 88 00 fa 30 68 90 b0 b1 ba 5c 9a 63 f8 37 ff 6a bd d4 63 fc f4 c9 5e f2 b3 b7 bb 8f f3 c3 7b ef 15 7e bd 95 07 1f f6 dc 66 f9 c3 5f 97 7a 4c 22 10 5b 7b 74 Data Ascii: K\|~.'3>D(xjp(mn(s8O$o\|>gPWzn+?/81">LG/NgD' 8@N@Pq"Tlo><}ww~[@0h\c7jc^{~f_zL"[{t
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 0b 50 22 08 ca 2a 84 3a c9 2a 71 f2 d5 41 11 a4 9c b5 38 8e a3 aa 80 8a 84 46 93 ad 7f ce fe 2c 2f 8e 2f a6 c5 9d c1 31 67 53 d1 2a 11 16 2d 5e be 9a 5c 7a e5 0b 7d 3d 67 76 e1 52 72 f7 dd 77 92 c6 fa ea 50 f6 a1 df 80 0a da 7d 72 f7 56 d7 f3 f1 a5 57 5f 4f ea 73 0b 43 79 af 95 07 1f 36 1f f7 0c 3a 00 40 c9 09 88 e8 a9 d5 53 e8 ad 64 3f 18 ba 76 1a ef 99 05 23 f1 33 0b 84 8e 72 dc 30 68 bf ea e8 70 6f a0 a3 2a 72 3a 55 26 cd 5f 7a 39 59 7f f4 a0 f0 f4 af 38 a6 6c da 5b f4 3a ea 36 75 ac 68 68 94 1d 47 d2 16 9c 9d 41 50 96 0f 8b fe b4 f9 f3 5f 8e 5b cf a2 e9 fa ec 40 cf 8b 90 68 18 01 d1 f9 8b 2f f7 1d 50 41 bb cf be f6 e5 e4 f6 5f ff eb 8e 7f 76 e1 ca 52 fa 18 96 fd 73 7f 65 68 01 29 00 00 27 43 40 44 47 cd 9b fb ac 49 71 84 42 37 4f f2 bd 22 74 99 9a 99 Data Ascii: P":qA8F,//1gS-^\z}=gvRrwP}rVW_OsCy6:@Sd?v#3r0hpor:U&_z9Y8l[:6uhhGAP_[@h/PA_vRseh)'C@DGIqB7O"t
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 3d af 57 d5 4f 8c 55 fe bd d2 8a ac e6 73 da ab 89 da 9f 73 10 16 b5 1a 75 b7 af da 36 a0 b7 92 67 7d 8a fe d8 95 0d 00 00 70 32 04 44 63 66 d8 c1 50 bf 95 2a fb c1 c5 ca 73 a1 4d 04 0b 11 30 3c ab 60 59 e8 38 9d 2a eb 87 b3 b9 be da f1 7d b3 25 e3 bb 35 4c ee 27 30 e9 78 0c 6d 4d a9 b3 a0 66 10 31 d5 6c 3d 9d d6 b5 bf af 1b 9f 3e 4a e6 5f 7c a9 70 15 53 1a aa b5 82 97 a3 aa 8a d2 06 d2 cd c7 51 9f 55 84 34 31 e5 ae 7d f5 b4 f6 f7 c9 57 85 c5 18 44 ef a4 2c 44 ea 55 4d 74 e8 9c a9 4d 37 c7 6b fa c8 55 db 06 74 b3 f5 b8 ed 2a 07 00 00 18 3e 01 d1 98 18 76 30 34 48 c8 12 95 26 9b 4f d6 9e ab 1a 8a a0 a0 bd fa 26 3f 9d aa 53 33 e9 7c 85 4c ba e4 7b 6d ba 67 d5 4b 54 0a 45 c0 31 c8 34 b5 4c a7 a6 d4 b3 2f 5c 1c f8 f5 0e 9a 56 b7 7a 19 65 af 3f 7f f1 72 df af Data Ascii: =WOUssu6g}p2DcfPsM0<`Y8}%5L'0xmMf1l=>J_\|pSQU41}WD,DUMtM7kUt*>v04H&O&?S3\|L{mgKTE14L/\Vze?r
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 8f 6b a7 66 e0 c7 3e ae fa b9 f4 1c cc 4f 2d 4b 7b 3a ad ad a4 55 53 c7 0d 76 e2 dc 9b bf f4 f2 b1 aa 92 c2 c4 f4 6c 94 96 f9 d2 01 00 00 c8 ee e7 0c c1 d9 6b ad 4e 16 55 43 d7 06 79 fe 71 57 25 cb 3b ad aa a1 2c 38 38 ab 70 28 44 13 e4 4c 1c db 30 c6 af f0 85 57 af 27 13 6b 93 e9 18 44 68 12 41 d5 b0 c7 b7 93 93 ae 24 0a f1 3a b3 8b 17 4f ac 9a 28 3b e7 e3 d1 69 45 bd 42 26 a7 93 c9 73 2f 24 7b 5b 1b cd c7 7a df ef bf 78 f9 6a f3 f1 4a a1 6d 77 b6 b7 93 d5 87 f7 92 b5 47 1f fb b2 03 00 00 4a 4b 40 74 86 5a 4d a8 a3 cf d0 37 06 79 7e 04 0a d1 ff 66 18 c1 c2 69 f5 1a ca 9c 75 38 14 a1 4c 16 92 84 22 bd 87 86 29 c6 33 42 a2 6c 1f 22 ac 3a 8d 80 28 1b e7 fd f7 3c 1c 12 45 2f a4 a1 7e b9 44 35 d1 cc 4c 1a 12 65 d3 e9 b2 6a a2 f8 f7 e3 56 01 65 e7 67 ba ea d9 Data Ascii: kf>O-K{:USvlkNUCyqW%;,88p(DL0W'kDhA$:O(;iEB&s/${[zxjJmwGJK@tZM7y~fiu8L")3Bl":(<E/~D5LejVeg
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 28 f6 25 2a 88 32 33 67 dc 9c ba 5d 59 a6 99 65 ce 62 ba 59 c8 aa 89 d2 eb 21 17 06 65 d5 44 51 11 d7 d7 aa 64 5d 44 35 d1 20 53 2c 9f ac ad 26 1f de fe 55 7f fd 8c 00 00 00 4a 4e 05 d1 10 0c 3a a5 6c d8 53 bd ce ba 6a 28 f3 b4 6d fa ce 59 87 43 21 5f 91 12 61 d9 49 4f af eb 57 99 a6 99 65 22 a8 d9 d9 de 3e f8 2c 4f ab 92 28 fb 8c 3a 55 f9 c4 18 45 80 36 ac 95 fd 06 ad 26 da 68 6e 7b e7 df ff 75 f2 99 bf f5 5a 32 3b bf 90 00 00 00 8c 3a 15 44 c7 d4 9a 52 16 8d a8 fb 0a 87 86 d9 20 ba 0c 55 43 99 a8 32 c9 2f 29 5e 86 70 28 2a 3d f2 7d 98 ea 25 bc a1 4f a7 99 e5 ce 85 f6 be 51 67 21 02 aa b9 0b 97 9e db af d3 a8 24 ca 74 aa f2 89 cf 73 fd f1 c3 a1 57 13 f5 5b c5 17 fb 11 95 44 9f 3e bc 5f 68 fb f5 95 65 5f 98 00 00 40 69 09 88 8e 61 e9 fa 8d 08 85 fa 5a a5 Data Ascii: (%23g]YebY!eDQd]D5 S,&UJN:lSj(mYC!_aIOWe">,O(:UE6&hn{uZ2;:DR UC2/)^p(=}%OQg!$tsW[D>_he_@iaZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.5	50035	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	387	OUT	GET /store/about/cta_hero_hardware.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	296	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/png Content-Length: 54376 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-d468" CF-Cache-Status: HIT Age: 212 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41dbbbbf8dc4-MIA
2024-04-05 23:18:25 UTC	1073	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 ab 00 00 03 1a 08 06 00 00 00 60 74 d0 55 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec dd 69 b4 24 e7 7d df f7 df f3 54 55 6f 77 5f 66 01 66 30 18 00 03 80 04 b8 62 28 52 10 09 12 24 48 ca a2 25 25 11 03 5b 56 e4 c8 c7 3a a6 a2 a3 17 51 22 47 8e 65 27 51 f2 2a 91 2d cb 3e 89 e5 13 25 39 92 ce 51 e4 e4 40 b2 7d 94 48 54 68 51 02 69 91 a2 2c 2e 12 41 90 04 05 62 1f cc 7e 67 ee 7e bb ab ea 79 f2 a2 67 86 00 66 ee 4c 77 75 75 d7 d2 df cf d1 50 c0 ed ae aa 3f a6 fb 56 d5 af 9e cd 08 00 00 00 37 75 f7 db 1f 7d 9f 0d f4 98 a4 7b e5 cd 5d c6 f8 bb 24 73 5b d1 75 d5 9e d7 29 2f ff fb 32 fa 9a f7 fe 99 6f 7f e5 33 9f 2c ba 24 00 93 63 8a 2e 00 00 00 a0 8c 4e bc e3 03 8f cb Data Ascii: PNGIHDR`tUsBIT\|d IDATxi$}TUow_ff0b(R$H%%[V:Q"Ge'Q*->%9Q@}HThQi,.Ab~g~ygfLwuuP?V7u}{]$s[u)/2o3,$c.N
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 00 00 00 00 40 e9 10 56 01 00 00 00 00 a5 43 58 05 00 00 00 00 94 0e 61 15 00 00 00 00 50 3a 84 55 Data Ascii: CXaP:U@VCXaP:U@VCXaP:U@VCXaP:U@VCXaP:U@VCXaP:U@VCXaP:U@VCXaP:U
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 81 02 11 56 01 00 40 a5 1c bb ef 7d 77 37 5b e1 93 32 ea 0c b3 9d 77 9e b0 3a a5 8c b1 0a 82 c1 57 6c f4 de dd df dd d9 33 27 1e 7e ff 9f bd f2 f5 af ec 8e b1 34 00 37 71 eb 2e 33 00 00 00 25 d2 98 09 7f 59 d2 fc b0 db 79 96 ac 99 5e 19 3e fb 5e bc fb 93 c9 e6 de 3b c5 fd 32 50 18 7e f9 00 00 40 65 1c 7f f0 7b de 61 8c f9 de 6c 5b 13 56 a7 55 a6 4f de ab b5 b9 76 e1 c7 1f f9 a1 4f 1c ca bb 1e 00 83 19 bc 3f 04 00 00 40 c1 c2 28 fa 2f b2 6e 3b 6d 2d ab 0b 2b 87 35 33 b7 70 93 77 18 ed 6e 6f e8 d2 85 d3 99 5a 1e 2b 25 e3 7f 9f 4b e2 1f 4c 63 ff 4b 92 4e e7 5b 10 80 41 10 56 01 00 40 65 18 63 1e 29 ba 86 2a 38 74 ec 84 66 e7 96 6e f9 be f6 cc 9c c2 a8 a1 f3 af be 30 81 aa 8a e3 33 b6 aa 7b f9 99 bd 8d 4b 6f 79 f0 f1 c7 ff e2 e9 27 9e e8 e5 5c 16 80 5b a0 1b Data Ascii: V@}w7[2w:Wl3'~47q.3%Yy^>^;2P~@e{al[VUOvO?@(/n;m-+53pwnoZ+%KLcKN[AV@ec)*8tfn03{Koy'\[
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: e3 b9 1f af b4 ac d9 0c 65 e8 02 0c 14 84 b0 0a 00 00 2a c3 3b 3f f8 02 a2 35 b1 b4 7a 58 61 d4 b8 e1 6b 1b 17 cf e5 da aa 7a 55 9a c4 da 58 bb f1 12 38 9d d9 79 75 66 17 72 3f e6 b8 65 9c 7c 6a 43 c6 25 79 d7 02 60 30 84 55 00 00 50 19 ce 28 5b 58 ad 68 2f e0 20 8c b4 b8 7a db 0d 5f f3 de 6b 7d ed ec d8 8e bd 71 f9 c2 be af ad dc 76 4c 52 c5 d7 b2 19 80 91 dd 34 a1 b9 f1 7a 3e 00 c6 8e b0 0a 00 00 2a c3 7a ed 9f a0 6e a2 a2 59 55 ab 87 8f ed 3b 03 6f 77 67 4b 69 3a be 46 bf de de ce be eb ae 36 1a 2d 2d ac 4c c1 52 36 d6 ac fb 2e dd 80 81 a2 10 56 01 00 40 65 18 e3 cf 64 da 2e ef 42 26 a0 d5 9e d1 ec c2 f2 be af 6f 6f 8f 7f f8 ee ee d6 fa be af 2d 1f 38 72 c3 35 5f eb 24 90 b9 64 69 59 05 0a 43 58 05 00 00 95 91 b8 20 53 bf d7 8c e3 15 0b b5 ba cf 52 35 Data Ascii: e;?5zXakzUX8yufr?e\|jC%y`0UP([Xh/ z_k}qvLR4z>znYU;owgKi:F6--LR6.V@ed.B&oo-8r5_$diYCX SR5
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 98 32 84 55 00 00 50 49 dd 38 79 72 98 f7 0f d3 0d 14 35 34 e0 e7 6f 83 e0 1b 32 76 73 cc d5 00 18 00 61 15 00 00 54 d2 cb 5f fb fc b7 bd f7 97 07 7d 3f 93 2c 4d b7 41 1f 56 44 ad d6 d7 7d d8 26 ac 02 25 40 58 05 00 00 55 f6 85 81 df 49 cb 2a 6e c9 a4 73 73 07 be f6 27 4f fc 12 93 2b 01 25 40 58 05 00 00 95 95 7a f7 c7 83 be 97 6e c0 d3 cb 98 c1 6e 79 8d b1 df 0a 1b ba 30 e6 72 00 0c 88 b0 0a 00 00 2a cb 3b fb e9 41 df 4b 58 9d 5e 83 7e f6 d6 86 7f 11 c7 8d 8d 31 97 03 60 40 84 55 00 00 50 59 2f 7c f5 c9 7f 2f af 81 66 6e 1d b4 75 0d 35 34 e8 78 d5 66 f3 cf a3 a6 23 ac 02 25 c1 59 1b 00 00 54 99 f3 72 5f 1a e8 9d 34 ac 4e ad 41 5b 56 db b3 f3 7f fe e4 13 bf bc 35 e6 72 00 0c 88 b0 0a 00 00 2a 2d f5 fe 53 83 bc 8f 96 d5 e9 35 c8 67 6f 4d f0 cd ce 4c fb c5 Data Ascii: 2UPI8yr54o2vsaT_}?,MAVD}&%@XUInss'O+%@Xznny0r;AKX^~1`@UPY/\|/fnu54xf#%YTr_4NA[V5r*-S5goML
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 78 00 00 c6 26 08 23 85 51 a3 d0 1a bc 77 bf 93 f4 cc 4f bc f0 f4 93 67 0a 2d 24 07 84 55 00 98 02 27 de f9 d8 c3 c6 f8 ff 5d f2 0f 14 5d 4b 77 77 47 53 34 eb 3e 00 60 ca 34 9a 6d 19 6b 0b ad c1 7b 5d 96 49 ff e1 b3 5f fe ec 3f 2f b4 90 11 11 56 01 a0 c6 0e 1c 78 70 76 e1 e8 c1 5f b0 46 7f c7 4b 93 99 57 ff 26 58 53 15 00 50 77 13 59 7b 75 40 ce f9 cf b9 dd ad 1f 7f fe 99 2f 3e 53 74 2d 59 10 56 01 a0 a6 8e bd f3 b1 07 9a 72 bf 29 a3 b7 17 5d 8b 24 79 ef d4 db db 2d ba 0c 00 00 c6 6e 92 6b af 0e 60 23 8d 7b 3f f9 dc 53 9f fb cd a2 0b 19 56 01 d3 55 01 00 c6 ed de 87 1e fd 89 c0 98 df 36 46 77 14 5d cb 55 71 6f 4f f2 74 ff 05 00 d4 9f 73 a9 c2 b0 51 96 a6 c1 a6 0d 82 8f 2f 1e 3a 7e ef 42 4b bf 77 f9 f2 e5 a4 e8 82 06 55 8e bf 3e 00 40 2e 16 8f bf 63 71 65 Data Ascii: x&#QwOg-$U']]KwwGS4>`4mk{]I_?/Vxpv_FKW&XSPwY{u@/>St-YVr)]$y-nk`#{?SVU6Fw]UqoOtsQ/:~BKwU>@.cqe
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: f7 f0 91 49 1c 8f 41 38 00 50 12 27 1e fa d0 af 4b fe f1 a2 eb 18 56 9a 24 37 5c 36 60 e2 75 c4 bd a1 27 dd 18 8a f7 32 26 90 65 c2 a5 4a 48 93 44 de 39 a5 e9 95 b1 d4 be 3f a9 09 9f 5f bd 79 ef e4 d2 54 de 39 b9 24 96 73 fd 75 37 e5 5d e1 93 ea 60 78 49 af 3b de eb 8b f7 52 09 c6 af 16 7d fc 61 19 99 85 20 b4 3f 10 2c b4 7e 6d e7 e2 c5 b1 36 0f 57 66 54 2f 00 d4 d9 bd 27 3f fc 77 e5 d3 bf 59 74 1d 59 24 49 39 ba 31 c5 49 77 ec 8b 87 c7 f1 9e 82 70 76 cc 47 41 56 49 12 cb 25 b1 52 97 5c f7 5d b8 fa 18 a3 d7 fb ce da 8b 61 d4 98 74 89 18 03 ef 5d ff b3 4f 93 9b 3f b0 32 46 d6 86 0a 82 48 41 c8 2d 70 15 4c e2 bc 9e 24 dd 42 cf 05 69 12 2b 0c 1b 1a fb 7f 68 ce ac b5 f7 2e b4 0f ff ab 0b 7a e6 23 e3 3c 4e b5 62 3c 00 d4 d0 89 87 3e fc dd c6 a4 bf ae 0a 3e 40 Data Ascii: IA8P'KV$7\6`u'2&eJHD9?_yT9$su7]`xI;R}a ?,~m6WfT/'?wYtY$I91IwpvGAVI%R\]at]O?2FHA-pL$Bi+h.z#<Nb<>>@
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 1f 94 89 b4 ca 63 d2 e3 c4 6d 49 c3 cb b4 1a e7 79 3d 2c 69 ab ea 55 55 1f bb 2a 49 41 60 1f 39 f6 c0 7b ff 5a d6 ed f9 6d 04 80 31 b2 b1 fd 45 49 8b 45 d7 31 aa 2a 5d 30 9b ad 4e ae 37 36 c6 06 6a 34 c7 db 15 0d 00 b0 bf bc cf eb 32 b6 b4 dd 7f 5f ab 4a d7 de 9b 89 9a e1 3f d5 83 0f 36 b2 6c 4b 58 05 80 31 39 7e f2 83 ef f1 d2 c7 8b ae 63 54 de 55 6b 1a 7d 63 ac 9a ad 4e 2e 2d 63 36 88 d4 6c cd e4 50 15 f2 30 c9 16 2f 5a d7 4a 66 92 9f 47 89 96 31 41 df d5 f3 ba cd e9 bc de 6a cf 96 b6 fb ef 6b 95 75 b9 b8 61 59 63 6f bb 3b 58 fa b9 4c db e6 5d 0c 00 a0 af e1 cd 3f 91 7c e5 fb 12 56 f1 c9 6e ff c6 66 46 61 d8 54 a6 ce cb c6 28 6c b4 69 51 2d 99 49 ce da 69 26 b8 76 2f 6e 2d 98 60 b7 ec b2 2d 63 82 3e 63 ac 1a 23 9c d7 bd a4 30 6a 55 ee bc 5e c5 6b f0 8d Data Ascii: cmIy=,iUUIA`9{Zm1EIE1]0N76j42_J?6lKX19~cTUk}cN.-c6lP0/ZJfG1AjkuaYco;XL]?\|VnfFaT(liQ-Ii&v/n-`-c>c#0jU^k
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: dc f0 c7 93 ae 03 00 6a c3 9b 1f 2a ba 84 bc d4 a9 3b 11 00 00 d3 a0 4e 6b ae 06 81 79 ef 8d ba 02 13 56 01 20 83 bb 3f fc f8 82 91 3f 59 74 1d 79 e8 cf 00 4c 17 60 00 00 aa a6 2e 3d a3 8c 0d a2 66 3a fb bd 6f fc 39 61 15 00 32 b0 6b 6b df ef e5 1b 45 d7 91 07 47 ab 2a 00 00 95 54 a7 ae c0 51 23 fa c1 37 fe 8c b0 0a 00 19 58 eb af 7b fa 57 55 75 ba d0 01 00 30 4d ea d4 15 d8 5a fb d8 75 3f 2b a2 10 00 a8 38 6b bc fd ee a2 8b c8 43 bf 0b 30 00 00 a8 aa ba 74 05 b6 26 38 72 f8 4d ef 38 fe ba 9f 15 55 0c 00 54 d5 bd 0f 7d f8 7e e7 d2 13 45 d7 91 07 ba 00 03 00 50 6d b5 e9 21 65 a4 96 ed bc ae 2b 30 61 15 00 86 64 ac 7b 4c 46 a6 e8 3a f2 50 9b 0b 1c 00 00 53 aa 4e 5d 81 4d 18 7c ec b5 ff 4e 58 05 80 21 79 6f e8 02 0c 00 00 4a a3 36 5d 81 ad 7d dd 4a 0b 84 55 Data Ascii: j;NkyV ??YtyL`.=f:o9a2kkEGTQ#7X{WUu0MZu?+8kC0t&8rM8UT}~EPm!e+0ad{LF:PSN]M\|NX!yoJ6]}JU
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 2a 00 d4 0c 6b ef d5 57 a3 d5 51 b3 d5 29 ba 0c 00 35 d7 68 b6 15 35 9a da db dd 56 d2 eb 16 5d 0e 72 e4 9d 93 a9 d0 c4 7b 84 55 00 a8 19 5f c1 6e 3e b8 39 1b 84 6a cf cc 55 6e 62 0c 00 d5 65 8c 55 bb 33 a7 a4 d1 d2 de ce 26 bd 76 6a c2 b9 b4 52 b3 c4 13 56 01 a0 66 1c 13 64 d4 4a ab 33 ab a8 d1 2a ba 0c 00 53 2a 0c 23 cd cc 2f a9 b7 b7 a3 de de 6e d1 e5 60 44 55 7b e8 40 58 05 80 9a a9 da 85 08 37 d6 6f 4d 9d 97 b5 b6 e8 52 00 4c 39 23 a3 66 6b 46 61 d4 d0 ce d6 a6 c4 43 d1 ca aa da 24 4b 5c 01 01 a0 46 08 aa f5 d0 68 75 34 33 b7 48 50 05 50 2a 41 10 69 76 7e 51 61 d4 28 ba 14 8c c0 7b 5f 74 09 03 e3 2a 08 00 35 c2 e4 4a 15 67 ac 3a 73 0b 4c a2 04 a0 b4 8c b1 6a cf cc ab d5 9e 2b ba 14 64 54 a5 b9 2d e8 06 0c 00 35 52 a5 0b 10 5e cf da 40 ed b9 05 59 53 Data Ascii: kWQ)5h5V]r{U_n>9jUnbeU3&vjRVfdJ3S#/n`DU{@X7oMRL9#fkFaC$K\Fhu43HPPAiv~Qa({_t*5Jg:sLj+dT-5R^@YS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.5	50036	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	395	OUT	GET /store/about/cta_hero_hardware_pt1.png?v=2 HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:25 GMT Content-Type: image/png Content-Length: 66811 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-104fb" CF-Cache-Status: HIT Age: 5046 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41dbc91731e3-MIA
2024-04-05 23:18:25 UTC	1071	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 ab 00 00 03 1a 08 06 00 00 00 60 74 d0 55 00 00 0f 41 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ed 99 59 72 e4 b8 11 86 df 71 0a 1f 01 fb 72 1c 24 32 11 e1 1b f8 f8 fe 92 55 d2 a8 d5 d3 9e 68 cf 93 23 ac 0a 15 4b 2c 12 4b 2e ff 42 05 fb d7 3f 6f f8 07 3f 35 c5 18 6a 1b b3 af de 23 3f 75 d5 95 37 1f 66 7c fd ec e7 3d c5 fa bc bf 4e 49 2c ef b3 3f 9c 0f 69 bf bf c8 9c f2 4f af bf e2 ec af 63 fa 38 ff be e1 e3 c8 7d 29 b6 2f 03 cd f3 fe 42 7e fc 62 d5 d7 31 cf 6f 03 e5 d7 a1 f8 8a fc b3 be 07 5a ef 81 4a 7e 7d 91 de 03 ec d7 b6 62 5f 73 7c dd 82 d8 eb f8 be ff 15 06 7e 83 bf d5 f9 e3 b2 7f fa 7b 10 3d 6d cc 53 72 b6 92 4a e4 bd 94 fc 5a 40 f1 df 12 ca 7e 3e Data Ascii: PNGIHDR`tUAzTXtRaw profile type exifxYrqr$2Uh#K,K.B?o?5j#?u7f\|=NI,?iOc8})/B~b1oZJ~}b_s\|~{=mSrJZ@~>
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 5a 49 25 ac 72 2d 55 a1 74 db a1 04 95 ba 55 e9 4b c6 14 ed d4 0f bd d7 b7 c8 69 b9 92 56 2b bd f9 5a 50 79 99 5b a6 59 c9 32 c8 e6 0d 14 62 aa 4c 7e cd db a8 89 ec 0e 10 8c b9 87 56 bf a5 ec 3d bb d5 73 7b 56 12 d4 52 db 69 cd 96 e0 de 69 5a 9b 2b 2a fe 6a b0 08 8d b7 ed 4e c7 e8 73 33 39 67 6b 3e c4 36 c9 79 5f a3 95 d8 d6 8e 6b 19 f5 75 9f 15 51 8c 3b 11 45 19 a5 4d 3b 3e 10 bf 75 9e fc eb da ff 55 c9 43 06 93 f5 2e b2 2e 6d 0f 54 ad 75 b5 dd 87 51 f8 c7 c6 75 b8 81 f7 69 2b b5 9c fa ed 67 25 47 53 1a 93 e2 61 9c 06 42 b5 4e 48 c1 dd 56 3c 85 56 04 a1 75 c0 05 ca d1 aa 97 2b 7f e9 8a b5 17 01 8c ce 21 9c 92 ec 36 59 94 de 6c a7 12 f0 29 17 1e bb d1 b6 5e c2 9a ee 4e 9b 1c d1 b4 32 a7 d6 0d a4 d0 02 a3 19 85 45 72 5a 26 b6 75 96 6d f1 12 d2 44 6d 0d c4 Data Ascii: ZI%r-UtUKiV+ZPy[Y2bL~V=s{VRiiZ+*jNs39gk>6y_kuQ;EM;>uUC..mTuQui+g%GSaBNHV<Vu+!6Yl)^N2ErZ&umDm
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 90 6b 68 dc 1c 90 a4 14 d5 08 4a 8d c1 0b 88 11 c3 98 fb b3 ac 8b 0a 23 15 b8 b1 1e e1 8d 37 3b af ff c0 46 6f e9 f7 cb 0b 1a de 1b 25 9b db 00 1f e9 64 f6 41 87 01 eb 7b a1 f0 0b 20 a6 c7 10 28 14 47 6f 81 34 66 f4 18 85 7d c6 d2 e5 d2 d8 0b b8 e1 30 7b 43 d9 64 27 f9 d5 27 de 46 d0 2d 9a 5d 03 65 ef 67 ea 0c e0 9d d0 c0 c0 67 87 a7 31 51 c0 98 17 b4 a5 74 8d ee 6e 10 45 1b 6e 00 6c cf 45 f7 e2 39 5f ba 17 71 d2 bd cb 58 0b 30 cf 02 c8 1a c0 0e 3c 85 3b 4e c5 d2 0c 57 d3 07 31 57 e0 dc 6d c4 0f 14 40 f0 b8 cb 7d 8c 21 88 ad 76 d0 71 60 cf 45 4f 44 e4 33 e6 14 bc f0 ee 5c 29 80 7a 28 4b 28 02 e9 04 f4 dc c1 0a 27 15 0c dd a3 d0 0e a1 00 68 1d 32 58 97 3f 7b 42 4d 1e 17 74 cb 29 a4 55 fc b3 5d 7f 28 13 cc 21 7f d3 19 08 ec 24 c8 d3 02 75 3b 15 63 f3 d2 a1 Data Ascii: khJ#7;Fo%dA{ (Go4f}0{Cd''F-]egg1QtnEnlE9_qX0<;NW1Wm@}!vq`EOD3\)z(K('h2X?{BMt)U](!$u;c
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: f5 27 3d d7 9f d2 91 78 d0 8c 86 b9 4f d0 c6 13 34 7c 9c cf 39 f1 16 67 a3 de 86 40 de e6 f6 d8 28 17 75 5b 0f 4d 46 ea 88 af 70 64 de c7 30 43 91 04 b1 ef 8a 5e 14 b4 1f 6a 9c d4 b3 6b d6 cb 2b 81 93 59 e8 8f 5c 2f de 8d 89 90 d8 48 21 78 04 9d 2d 2e fd c7 c1 7c 63 c7 81 9d 5d 72 35 6f bc fe e8 a6 58 ce 7a cc dc 83 05 f0 8b e3 d4 8f 1e 38 3e c7 f0 f1 e1 ef 1e ff 3f d0 ff c6 40 f4 cc d5 15 fe 0d ca 01 36 53 fa 07 13 b6 00 00 01 83 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 9c 7d 91 3d 48 c3 40 1c c5 5f 53 a5 22 15 15 33 88 38 64 a8 4e 76 51 11 c7 5a 85 22 54 28 b5 42 ab 0e 26 97 7e 41 93 86 24 c5 c5 51 70 2d 38 f8 b1 58 75 70 71 d6 d5 c1 55 10 04 3f 40 5c 5d 9c 14 5d a4 c4 ff 25 85 16 31 1e 1c f7 e3 dd bd c7 dd 3b 40 68 54 98 66 75 c5 00 4d b7 Data Ascii: '=xO4\|9g@(u[MFpd0C^jk+Y\/H!x-.\|c]r5oXz8>?@6SiCCPICC profilex}=H@_S"38dNvQZ"T(B&~A$Qp-8XupqU?@\]]%1;@hTfuM
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 6d 61 74 3d 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 47 49 4d 50 3a 41 50 49 3d 22 32 2e 30 22 0a 20 20 20 47 49 4d 50 3a 50 6c 61 74 66 6f 72 6d 3d 22 4c 69 6e 75 78 22 0a 20 20 20 47 49 4d 50 3a 54 69 6d 65 53 74 61 6d 70 3d 22 31 36 37 36 35 38 30 30 37 31 31 31 30 38 30 31 22 0a 20 20 20 47 49 4d 50 3a 56 65 72 73 69 6f 6e 3d 22 32 2e 31 30 2e 33 32 22 0a 20 20 20 74 69 66 66 3a 4f 72 69 65 6e 74 61 74 69 6f 6e 3d 22 31 22 0a 20 20 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 47 49 4d 50 20 32 2e 31 30 22 0a 20 20 20 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3d 22 32 30 32 33 3a 30 32 3a 31 36 54 31 32 3a 34 31 3a 30 39 2d 30 38 3a 30 30 22 0a 20 20 20 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3d 22 32 30 32 33 3a 30 32 3a 31 36 54 Data Ascii: mat="image/png" GIMP:API="2.0" GIMP:Platform="Linux" GIMP:TimeStamp="1676580071110801" GIMP:Version="2.10.32" tiff:Orientation="1" xmp:CreatorTool="GIMP 2.10" xmp:MetadataDate="2023:02:16T12:41:09-08:00" xmp:ModifyDate="2023:02:16T
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 77 22 3f 3e d3 51 74 3f 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e7 02 10 14 29 0a 52 f0 f8 3c 00 00 20 00 49 44 41 54 78 da ec dd 59 70 5c 57 9e e7 f7 ef ff dc 4c 2c dc 29 92 a2 48 51 22 29 89 00 48 2d 25 11 5c 54 a5 92 98 50 4d f5 52 5d bd d4 f4 f4 b8 da d1 dd e3 18 cf b4 23 c6 6e 7b bc 3e 38 fa d1 e1 08 bf f8 c5 61 bf 39 c2 31 11 13 7e b1 3d 76 4c 8c c7 31 1e 17 d9 d5 d5 d5 a5 2e 92 6a Data Ascii: <?xpacket end="w"?>Qt?bKGDpHYstIME)R< IDATxYp\WL,)HQ")H-%\TPMR]#n{>8a91~=vL1.j
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 22 cb c5 5a 60 17 90 68 28 da d6 88 11 86 3d b8 96 00 8b 88 c2 aa 88 88 88 2c 7d db f7 1c 34 60 23 71 19 b0 96 00 b7 a7 1a f0 95 b9 dd 38 33 f8 53 85 55 11 51 58 15 11 11 91 65 a1 03 d8 0e 6c d2 7c a6 6d 8d 03 67 8c 30 a6 a1 10 11 85 55 11 11 11 59 2e ba 81 5e 60 a5 86 a2 6d dd 07 1b 0a 1e ea 1a 0a 11 51 58 15 11 11 91 e5 14 56 fb 80 b2 86 a2 6d dd 31 38 e3 8e 0e 58 15 11 85 55 11 11 11 59 fa 8a fd aa eb 81 37 50 73 a5 76 95 02 57 70 bb 7a 76 e8 a7 0a ab 22 a2 b0 2a 22 22 22 cb 42 09 78 05 78 09 35 57 6a 57 53 c0 69 23 dc d3 50 88 88 c2 aa 88 88 88 2c 17 65 e2 7e d5 35 0a ab 6d 6b 12 38 69 1e aa 1a 0a 11 51 58 15 11 11 91 e5 a2 13 78 b3 f8 2a ed 69 cc b0 21 c3 33 0d 85 88 28 ac 8a 88 88 c8 92 57 ec 57 5d 05 f4 a0 fd aa ed 2a 03 ae e1 76 31 37 d7 f9 aa 22 Data Ascii: "Z`h(=,}4`#q83SUQXel\|mg0UY.^`mQXVm18XUY7PsvWpzv""""Bxx5WjWSi#P,e~5mk8iQXxi!3(WW]*v17"
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 8a c8 dc 19 3d c4 63 6b ca f3 fc 9b 5f 05 b6 bb 16 80 89 c8 fc bf b7 bc a4 f9 4a db 72 62 27 e0 3b 98 3e 00 44 44 61 55 44 e6 a8 af 7f 60 05 71 09 f0 56 e6 77 ef 57 b1 6f d5 5e 76 67 a5 46 5a 44 e6 c3 f6 3d 07 13 e2 fe fa 0d 1a 8d b6 35 0a 5c 30 b7 fb 67 06 7f aa b4 2a 22 0a ab 22 32 67 5b 81 5e e2 b2 dd f9 b6 0a d8 9a 13 ba 35 cc 22 32 4f d6 00 3b 80 d5 a8 b9 52 bb ba 06 5c 34 0f 35 0d 85 88 28 ac 8a c8 9c ec 79 ef 50 c9 63 50 dd d1 c2 49 e5 2b 90 ab c9 92 88 cc 97 cd c4 ca 6a 87 86 a2 6d 5d 32 ec 72 e2 49 a6 a1 10 11 85 55 11 99 93 3c b1 55 cc 2c 01 6e 05 77 d8 e6 39 2f 6a b4 45 64 9e 6c 21 36 6f 4b 34 14 6d 6b 18 ec 06 6a ad 24 22 0a ab 22 32 17 7d 7b 2b 01 67 03 d0 43 3c 66 a6 25 ef 25 06 9b cd 6c f3 6b ef 1d 52 d7 4e 11 79 26 db f7 1c 34 62 17 e0 cd Data Ascii: =ck_Jrb';>DDaUD`qVwWo^vgFZD=5\0g*""2g[^5"2O;R\45(yPcPI+jm]2rIU<U,nw9/jEdl!6oK4mkj$""2}{+gC<f%%lkRNy&4b
2024-04-05 23:18:25 UTC	1369	IN	Data Raw: 96 69 28 44 44 61 55 44 e6 92 56 57 11 97 cc 6e 6a f1 1d e5 c0 15 9c e3 43 c7 0f 8f cf f5 97 bc 79 e0 50 c8 dd d6 d6 53 fb 08 f8 01 f0 11 f1 8c c5 32 cf 7f df 9a cd 0a b3 eb 8b 5b 23 c8 56 81 29 c3 aa c4 e5 71 53 66 dc 03 6e 03 37 3d b5 eb 9e da 65 e0 3a f8 ad e0 dc e9 dd 5b b9 e7 c6 a4 1b f7 cd 7d ec d4 b1 bf d0 52 62 91 68 15 71 2f 7a a2 a1 68 4b 39 70 d3 b0 61 42 ae e6 4a 22 a2 b0 2a 22 4f a7 b7 7f c0 80 97 89 cb 66 57 b5 f8 ee ea 0e e7 30 3f 39 d7 5f b0 7b 5f a5 3b cb ed 75 77 7e 1f f8 21 d0 43 ec f2 bb 18 96 00 1a b1 02 d4 35 6b 32 47 11 b2 bd 08 b0 f7 88 d5 88 51 37 46 80 6b c0 2d 73 1f 81 70 ab a7 7f 60 c4 f0 1b b8 5d 06 ae 0d 1d 3f 3c b9 67 e0 c3 24 af 05 f2 ba f9 a9 bf 51 87 62 59 fa b6 ef 39 98 00 9b 89 5b 18 d4 5c a9 3d d5 81 f3 e6 36 72 f6 a4 Data Ascii: i(DDaUDVWnjCyPS2[#V)qSfn7=e:[}Rbhq/zhK9paBJ"*"OfW0?9_{_;uw~!C5k2GQ7Fk-sp`]?<g$QbY9[\=6r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.5	50037	23.61.62.148	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:25 UTC	740	OUT	POST /IClientMetricsService/ReportClientError/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive Content-Length: 1353 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryxpZvybuVHVlT9RnO sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://store.steampowered.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:25 UTC	1353	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 78 70 5a 76 79 62 75 56 48 56 6c 54 39 52 6e 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 6e 70 75 74 5f 70 72 6f 74 6f 62 75 66 5f 65 6e 63 6f 64 65 64 22 0d 0a 0d 0a 43 67 56 54 64 47 39 79 5a 52 49 48 4f 44 67 77 4f 44 45 78 4f 42 72 77 42 67 70 42 49 43 41 67 49 47 46 30 49 45 68 55 54 55 78 45 62 32 4e 31 62 57 56 75 64 43 34 38 59 57 35 76 62 6e 6c 74 62 33 56 7a 50 69 41 6f 4c 32 78 76 5a 32 6c 75 4c 7a 6f 79 4e 6a 55 36 4d 7a 41 70 49 47 59 79 4f 44 5a 6a 4d 6d 5a 68 4e 47 49 33 5a 6a 51 33 59 54 63 53 71 41 5a 62 49 6c 52 35 63 47 56 46 63 6e 4a 76 63 6a 6f 67 51 32 46 75 62 6d 39 30 49 48 4a 6c Data Ascii: ------WebKitFormBoundaryxpZvybuVHVlT9RnOContent-Disposition: form-data; name="input_protobuf_encoded"CgVTdG9yZRIHODgwODExOBrwBgpBICAgIGF0IEhUTUxEb2N1bWVudC48YW5vbnltb3VzPiAoL2xvZ2luLzoyNjU6MzApIGYyODZjMmZhNGI3ZjQ3YTcSqAZbIlR5cGVFcnJvcjogQ2Fubm90IHJl
2024-04-05 23:18:26 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Content-Length: 0 Access-Control-Allow-Origin: https://store.steampowered.com Vary: Origin Access-Control-Expose-Headers: X-eresult, X-error_message Expires: Fri, 05 Apr 2024 23:18:26 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Apr 2024 23:18:26 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.5	50039	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	393	OUT	GET /store/about/cta_hero_steamworks_pt1.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:26 UTC	296	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:26 GMT Content-Type: image/png Content-Length: 12815 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-320f" CF-Cache-Status: HIT Age: 751 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41dedcf731f2-MIA
2024-04-05 23:18:26 UTC	1073	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 88 00 00 02 dc 08 06 00 00 00 8c e3 8b 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: 8d cb 57 ae 3e b7 7f f7 6b fb b7 5f dc bf 65 ff 3d 6b cf 03 00 00 87 b8 b9 7f 7b 73 ff f6 ed fd db 37 d6 df b9 76 73 9c 37 f6 e1 67 53 4f f8 90 6a 88 69 9c 03 d1 f2 95 ab 5f dc bf fb 9d f4 c3 28 04 00 00 70 1c df d8 bf fd f1 fa 3b d7 5e 1d c7 8d 13 88 20 b8 71 0c 44 cb 57 ae be b8 7f f7 47 49 18 02 00 00 06 2f 0b 45 bf 3b 6e 67 14 3d ec 42 3e 83 08 18 0b cb 57 ae be b4 7f f7 ad 24 0e 01 00 00 8f 47 f6 f1 15 d7 f7 df 7b fc da 38 6e 9c 33 88 20 a8 71 3a 83 68 ff 09 fa eb fb 77 5f b4 57 01 00 80 13 f2 a5 f5 77 ae bd 3c 0e 1b e2 0c 22 60 2c 88 43 00 00 c0 29 f8 fa 8f 3e fb 74 6c 08 44 c0 c8 da 7f 42 ce 3e 6f e8 8b 46 02 00 00 38 05 5f 1f a7 cb cd 5c 62 06 41 8d fa 25 66 3f 7a 22 fe 33 7b 12 00 00 38 45 3b fb b7 e7 47 f9 83 ab 5d 62 06 8c ac e5 2b 57 67 f7 ef Data Ascii: W>k_e=k{s7vs7gSOji_(p;^ qDWGI/E;ng=B>W$G{8n3 q:hw_Ww<"`,C)>tlDB>oF8_\bA%f?z"3{8E;G]b+Wg
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: 1e 39 cd c6 ee 83 f4 ad dd 9d 81 8d 49 16 87 b2 fd 71 90 ff dc 7e 3f bd de bd 9f 7e ae 70 f6 d1 cb d9 eb f6 02 57 16 89 00 00 60 5c 08 44 00 39 65 01 a4 9f 08 f2 b8 0c f2 8c a4 d3 f4 e7 dd 7b 29 75 87 6f 4c b2 b3 88 fa 3d 93 08 00 00 c6 85 4b cc 00 00 00 00 82 13 88 00 00 00 00 82 13 88 00 00 00 00 82 13 88 00 00 00 00 82 13 88 00 00 00 00 82 13 88 00 00 00 00 82 f3 35 f7 00 47 50 ae cc f7 35 5d ab 51 4b bb dd ce c0 1f 7f aa 54 4e c5 33 e5 b1 1a d3 dd 6e 7b 60 5f 55 7f f1 67 ce 8c dd 31 b7 73 a7 9b 76 ee 76 8f bd 9c c9 42 31 95 a6 67 8e bd 9c e3 1e db 83 5a 0f 60 78 0d e2 35 b0 df d7 db 83 74 1e 34 53 bb d5 b4 43 00 0e 21 10 01 e4 50 9a ae a4 a7 2e bf d0 7b 73 db f7 1b fb cd f5 74 f7 d6 ea c0 d6 61 e1 d2 b3 69 e6 fc d2 58 8e 6f f6 07 fc c6 0f 5e 3f f2 1f Data Ascii: 9Iq~?~pW`\D9e{)uoL=K5GP5]QKTN3n{`_Ug1svvB1gZ`x5t4SC!P.{staiXo^?
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: a6 fc c8 69 b2 33 9f 86 31 6e 01 00 00 83 25 10 01 e4 b4 b3 b9 3e 36 db 92 c5 ae ec 06 00 00 c4 e6 12 33 00 00 00 80 e0 04 22 00 00 00 80 e0 04 22 00 00 00 80 e0 04 22 00 00 00 80 e0 04 22 00 00 00 80 e0 04 22 00 00 00 80 e0 7c cd 3d 40 50 e7 96 56 52 b9 32 37 b4 eb 77 f7 d6 6a 6a 35 ea 07 4e 33 73 7e 69 ff b6 78 e8 b2 9a f5 ed 74 6f 63 ed d0 e9 a6 7e e1 97 d3 99 fd 1b 47 d7 59 fd 5e 6a 7d e3 4f 0f 9d ae df 7d 77 5a 76 36 d7 d3 fd ed 3b 76 28 00 10 86 40 04 90 43 69 ba 92 9e 78 fa 72 2a 57 e6 fb 9a be dd 6a a6 ea ed 1b a9 b6 b5 31 54 db 91 bd 39 9f 5f 7c 66 a8 c7 fa a9 cb 2f a4 1b 6f bc 72 e0 be 58 b8 f4 6c 5f cb ca f6 57 a3 56 4d cd 7a f5 91 d3 14 9e 7e 26 95 7f f3 2b 0e f2 63 2a 5c fe 5c ea de 5a 4b 9d 37 fe 6a 20 fb ee b4 64 c7 cc cd ef 7f a7 f7 3b 0c Data Ascii: i31n%>63"""""\|=@PVR27wjj5N3s~ixtoc~GY^j}O}wZv6;v(@CixrWj1T9_\|f/orXl_WVMz~&+c\\ZK7j d;
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: 06 00 80 40 04 22 80 1c b2 b3 81 de 5f bb 3e 92 eb 5e db da e8 dd 4f 95 ca 07 4e d7 a8 55 47 ee 8c 27 00 00 e0 78 04 22 80 40 1e 46 22 00 00 80 8f f3 19 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 f9 9a 7b 80 1c 26 0b c5 f4 c4 d3 97 d3 54 a9 dc d7 f4 dd 4e 27 55 6f af a5 56 a3 6e f0 00 00 80 a1 25 10 01 e4 90 c5 a1 99 f3 4b b9 e6 99 9e 99 4f 37 de 78 c5 e0 01 00 00 43 4b 20 02 c8 a1 df 33 87 3e 2e 3b eb a8 5c 99 4f cd 7a 75 28 b6 21 5b 97 d9 85 e5 54 28 7a 09 00 c8 2b 3b 33 b4 7e 6f 23 dd df be 13 f2 b9 b8 59 df 4e db 1f dc 4c bb dd 8e 83 01 60 cc 78 77 00 10 48 16 b8 9e ba fc 73 06 02 e0 18 ce ce 5d 48 b7 de 7e ed c8 97 0f 8f f2 73 71 16 b6 b2 7f f8 b8 7b 6b d5 81 00 30 66 7c Data Ascii: @"_>^ONUG'x"@F"DDDDDD{&TN'UoVn%KO7xCK 3>.;\Ozu(![T(z+;3~o#YNL`xwHs]H~sq{k0f\|
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: e6 ef 47 6d eb 76 ee b3 04 01 00 c6 81 40 04 10 4c 16 61 ee de 5a 1d e9 6d c8 de c0 0f 72 1b b2 33 5f 3e fa ef ff c9 c1 31 82 fb 0e 00 80 c1 f0 19 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 09 44 00 00 00 00 c1 f9 16 33 80 9c b2 af 88 9f 2a 95 fb 9a b6 db 69 f7 f5 b5 ed 27 e9 97 bf 58 49 3f ff 2b d3 43 39 b6 1f 7d b8 97 be fd bf ee a7 bf fe 8b c6 a1 fb e0 89 a7 2f a7 c9 c2 c1 2f 63 cd 7a 35 dd fe bb eb 87 8e 7f bf cb 3b 2d 3b 9b eb be f9 0b 00 80 c7 4a 20 02 c8 e1 dc d2 4a 9a 5f 7c 26 d7 3c 59 7c b8 f5 f6 6b 43 b1 fe 9f ba 58 1c da 38 94 f9 c4 27 27 7a 01 6b f5 bb ad b4 73 b7 fb 53 a7 c9 22 ce c2 a5 67 fb 5a 5e b9 32 9f e6 3e 75 31 dd db 58 3b 70 ba 7e 97 77 5a 66 17 96 d3 fd ed 3b bd e0 05 00 00 8f 83 4b cc 00 72 28 Data Ascii: Gmv@LaZmr3_>1DDDDD3*i'XI?+C9}//cz5;-;J J_\|&<Y\|kCX8''zksS"gZ^2>u1X;p~wZf;Kr(
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 df 62 06 90 d3 54 a9 9c 8a 67 ca 7d 4f ef db a0 00 00 80 61 27 10 01 e4 70 76 ee 42 7a 72 e5 f9 5c f3 64 81 e8 bd d5 d7 07 b6 0e 93 85 62 9a 39 bf 94 0a c5 a9 13 d9 e6 76 ab 99 ee 6f 6f a6 dd 6e e7 d0 69 9f 7b b1 9c 66 2f 14 4e 64 bd 3e fa 70 37 ad 7e b7 95 76 ee 76 0f 9d b6 5c 99 4f d3 33 f3 8f fc 79 b7 d3 4e 1f ee dc e9 6d eb 41 4a d3 95 fd 63 60 c1 2f 02 03 3f 6e b2 df b1 56 a3 6e 50 01 80 53 23 10 01 e4 30 bb b0 9c 7b 9e 2c 4e 64 67 1d 1d f6 26 b2 1f 59 1c 7a ea f2 0b bd 37 9c 27 bd dd b7 de 7e ed c0 69 be f0 d2 5c ba f8 33 67 4e 74 bd 7e f1 37 ce a6 ff f2 6f ef 1d 18 89 ce 2d ad a4 f9 c5 67 0e 5d 56 36 dd 7b ab df 7d e4 9b f4 a3 c4 41 c6 5f 76 dc 64 bf 1b Data Ascii: 8 8 8 8 8bTg}Oa'pvBzr\db9vooni{f/Nd>p7~vv\O3yNmAJc`/?nVnPS#0{,Ndg&Yz7'~i\3gNt~7o-g]V6{}A_vd
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 00 00 00 20 38 81 08 e0 04 ec 76 db 06 01 00 00 18 5a 02 11 40 0e cd fa 76 ee 79 5a 8d 7a ef 76 5a 8f 7f d2 da ad e6 a1 d3 fc 60 b7 d9 d7 b2 ea 7b dd f4 37 bb f5 81 8d 49 a3 56 3d f0 e7 b7 f7 5a 7d 2f 2b cf b4 00 00 30 ec 8a 86 00 a0 7f f7 36 d6 7a 91 61 7a 66 be af e9 bb 9d 76 aa 6d 6d 0c f4 f1 b3 65 9e 9d bb 30 94 e3 93 85 b0 6c 1d 0f f3 e5 07 37 d2 6f 4d 3d 99 16 27 4a 8f 9c 26 0b 30 ff b5 73 67 60 63 b2 b3 b9 9e 9a f5 83 03 d1 1f b6 df db 7f dc 07 e9 67 27 2b 8f 9c a6 be d7 49 df ec 56 7b d3 01 00 c0 b8 98 d8 db db 33 0a 10 f1 97 7f 62 62 e4 d6 79 f9 ca d5 97 f6 ef be 7a dc e5 ec 36 ee 39 00 00 00 80 9f 30 Data Ascii: 8 8 8 8 8 8 8 8vZ@vyZzvZ`{7IV=Z}/+06zazfvmme0l7oM='J&0sg`cg'+IV{3bbyz690
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: ec 4a 08 68 62 62 62 e4 b7 61 f9 ca d5 eb e9 98 df 68 06 00 00 70 0c 5f 5b 7f e7 da ef 8e f2 06 3c ec 42 ce 20 02 46 d9 e7 f7 6f 3b 86 01 00 00 38 05 df 18 f5 38 f4 71 02 11 30 b2 f6 9f 8c b3 38 24 12 01 00 00 27 ed d5 34 26 97 96 3d e4 12 33 08 6a 1c 2e 31 7b 68 f9 ca d5 d9 fd bb 6f 25 97 9b 01 00 00 8f df cb eb ef 5c 1b 9b 38 f4 b0 0b 09 44 10 d4 38 05 a2 87 96 af 5c 7d 69 ff ee ab f6 2e 00 00 f0 18 64 57 2e 7c 69 fd 9d 6b df 18 a7 8d f2 19 44 c0 d8 d9 7f a2 7e 69 ff ee d2 fe ed 65 a3 01 00 00 0c 48 16 86 b2 6f 51 be 34 6e 71 e8 e3 9c 41 04 41 8d e3 19 44 1f b7 7c e5 ea c5 fd bb 5f db bf 7d 21 b9 f4 0c 00 00 c8 2f 8b 41 df 4c 3f fc 30 ea b1 fd dc 53 97 98 41 70 e3 1e 88 fe be e5 2b 57 5f dc bf cb 3e ab 48 2c 02 00 00 1e e5 d5 fd db ce fa 3b d7 de 8c b2 Data Ascii: Jhbbbahp_[<B Fo;88q08$'4&=3j.1{ho%\8D8\}i.dW.\|ikD~ieHoQ4nqAAD\|_}!/AL?0SAp+W_>H,;
2024-04-05 23:18:26 UTC	790	IN	Data Raw: 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c 40 04 00 00 00 10 9c Data Ascii: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.5	50041	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	393	OUT	GET /store/about/cta_hero_steamworks_pt2.png HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:26 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:26 GMT Content-Type: image/png Content-Length: 36605 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-8efd" CF-Cache-Status: HIT Age: 5047 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41df0ddc8dd6-MIA
2024-04-05 23:18:26 UTC	1072	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 88 00 00 02 dc 08 06 00 00 00 8c e3 8b 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 Data Ascii: @N@p"4D' h8@N@p"4D' h8@N@p"4D' h8@N@p"4D' h8@N@p
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 34 9c 80 08 00 00 00 a0 e1 04 44 00 00 00 00 0d 27 20 02 00 00 00 68 38 01 11 00 00 00 40 c3 09 88 00 00 00 00 1a 4e 40 04 00 00 00 d0 70 02 22 00 00 00 80 86 13 10 01 00 00 00 Data Ascii: p"4D' h8@N@p"4D' h8@N@p"4D' h8@N@p"4D' h8@N@p"
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: bc fb c7 a7 dd 8f dc 0f 86 7c c9 71 fa 87 d7 ff d7 75 eb f1 1f 6e a7 df ef 6e c2 8f fc fb f8 b2 21 ff df 77 f9 b7 ec fe 39 fb fd 37 5f 7d f9 f7 5e 25 00 00 00 96 49 40 c4 da 79 f2 ec c5 71 fb 97 3c 04 fa a0 75 1f 06 3d ef fe ff cb f6 7c c8 ff 77 3c e6 f1 e7 bf cd 83 a5 af db 1f df 74 7f cd 3e be f9 ea cb af bd d2 00 00 00 cc 8b 80 88 5a 7a f2 ec 45 84 2e 4f 5b 9d f0 e5 49 f2 fb c7 6b f4 34 9f 8f 79 fe f1 4b 1e 20 fd 75 eb 3e 38 fa c2 d9 01 00 00 40 59 02 22 2a 2d 69 07 8b 8f 3f 6a 75 82 a0 63 47 26 93 07 48 c7 c9 f1 8a 5f be ee 7e 44 70 14 21 d2 df ab 38 02 00 00 60 1c 01 11 95 d2 6d 0f cb c3 a0 f8 fd 53 47 a5 b4 a7 ad 81 20 ad 7d 5c f3 39 47 79 68 f4 c5 37 5f 7d f9 da a1 02 00 00 20 08 88 58 99 6e 75 d0 71 ab 13 08 fd a0 a5 32 68 91 f2 63 7d 9c 1c ff af Data Ascii: \|qunn!w97_}^%I@yq<u=\|w<t>ZzE.O[Ik4yK u>8@Y"*-i?jucG&H_~Dp!8`mSG }\9Gyh7_} Xnuq2hc}
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: b0 f5 e0 c9 7d 05 d2 60 40 14 9f 9b 0e ad 8e 00 e6 f0 c3 ef 8d 6d ef ba be 38 ef 0b 67 06 45 50 93 b6 bb 15 3a 06 33 84 46 21 da e3 86 1d 9b 08 b4 22 2c 1a d5 9e 37 a3 5f b4 3a 55 45 5f b8 5a a9 12 01 11 00 00 eb 4e 40 d4 10 4f 9e bd 78 da fe e5 b3 d6 9c db c8 22 b0 88 e0 62 b0 25 2b 35 d8 76 f5 de 49 d8 ad 60 99 36 0c ba 5f c0 75 2a 5d c6 cd d1 29 53 95 93 05 3d af be ed 85 36 f1 f9 47 1f ff 5e eb 3f fc f1 d5 d8 80 28 0c 0b 96 8e 3e fc de c4 e7 30 cf aa a2 61 ca 84 46 f1 fd 77 8f 1e f4 b5 c8 0d 7b bc 0b 0a 8b be 68 75 e6 14 fd d2 d5 4b 15 08 88 00 00 58 77 02 a2 35 97 cc 17 7a 39 af ef 99 b5 8f ed 1f 0c ad 14 4a 45 08 71 fe f6 bb 42 33 6c f2 a0 29 be 6f 59 11 72 44 f5 4d 54 0b 0d 3d c9 0b cc f5 19 66 b0 ea 29 02 9e f8 fa ff e0 3f bf 98 18 10 85 c1 d6 b4 Data Ascii: }`@m8gEP:3F!",7_:UE_ZN@Ox"b%+5vI`6_u*])S=6G^?(>0aFw{huKXw5z9JEqB3l)oYrDMT=f)?
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: b3 a9 43 87 ad ad 2c bc 99 a5 8a 23 2c a3 6a 28 0f 19 16 15 0e 8d 93 86 27 f1 33 0f 3e f8 70 e2 d7 fc 47 ff ea a6 f5 f0 e9 fd 62 f1 6f 3e 2b 37 db 27 5e 93 93 6f ff b1 f7 5c 0f 1e 7d 38 53 80 57 f6 79 e6 cf 75 d8 0e 6d b3 b8 3c 3b c9 e6 11 2d e2 3c 9c 53 50 f4 45 ab 13 14 fd bd bb 0c 65 09 88 00 00 58 77 86 54 57 cc ac ed 64 f3 68 25 eb 2c 86 96 53 35 94 2d fe 57 14 0e 85 08 1d 72 31 b4 bb 48 90 b1 b1 71 d1 fe df 9b be 63 52 fa c2 db db eb 85 1d d7 97 ef 16 1e 10 e5 e7 43 1e 12 c5 b1 8e 63 1e c7 79 5e 21 51 cc 1e 8a 2a a8 b4 9a 28 82 9d d8 1d 6e d6 6a a2 3c 68 8a 73 7b 86 a0 e8 b8 fd f1 77 ed 6b ec cf 5a 9d 41 d6 da ce 00 00 00 f2 75 97 43 50 0d d1 4e d6 fe f8 cb f6 6f e3 e3 e9 b4 0b e8 a3 8f be 3f 73 38 14 a1 d0 e9 6f 7f d3 17 0e c5 c2 7e ef c1 a3 d6 e1 Data Ascii: C,#,j('3>pGbo>+7'^o\}8SWyum<;-<SPEeXwTWdh%,S5-Wr1HqcRCcy^!Q*(nj<hs{wkZAuCPNo?s8o~
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: 1d d0 bd 5b b1 ea a1 ec 42 ac 58 9b d9 a8 d7 6f 99 21 51 58 66 35 d1 94 d7 ca e7 76 39 03 00 00 d6 81 80 68 06 ed 45 e1 cf 5a 25 77 29 8b 05 e8 e0 30 de 69 e5 0b e5 f7 aa 86 b6 77 96 5a 35 94 3f 96 2a 86 43 21 9d 3d 14 c7 3f 0d 62 aa 24 0d ae ae e6 54 21 33 0f c3 42 a2 f3 ef 5e 2d ed e7 2f ab 9a 28 ad b6 2b e9 65 fb e3 d7 ed fb c1 53 77 45 00 00 a0 ae 04 44 53 e8 ce 1b 8a 60 e8 b3 32 5f b7 77 f4 30 5b 80 ce a3 bd 69 d4 e2 38 7e c6 d1 12 ab 86 42 95 c3 a1 a8 30 49 67 fa 54 b1 7a 28 b7 bd b7 d7 f7 b8 d3 e3 b9 6a 83 af 67 9c 7f ef de be 5e f2 f1 e9 54 13 a5 8f a3 af 9a 68 4e c7 2b ce 91 b8 86 4a 5e a7 51 41 68 2e 11 00 00 50 5b 02 a2 92 ba 55 02 d1 52 f6 49 d1 af 89 aa 87 08 86 76 0f 1f cc fc f3 47 b5 d7 44 55 4c 2c 6a e7 f1 33 ca 3e 9e aa 86 43 e1 fa e2 3e Data Ascii: [BXo!QXf5v9hEZ%w)0iwZ5?*C!=?b$T!3B^-/(+eSwEDS`2_w0[i8~B0IgTz(jg^ThN+J^QAh.P[URIvGDUL,j3>C>
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: 51 3b 0c 96 79 ed e2 3a 2f 31 c8 5e 48 04 00 00 ac 6e fd d9 b4 27 3c 4d 38 34 cd 2c 9b 3a 55 0d 85 3a 87 43 11 c4 c5 47 ef b1 1f 1c ae d5 39 bb d3 37 ac fa ac 76 8f 7f 58 48 74 71 fa b6 ef 7c ab c4 cd 70 01 d5 44 c3 9e fb 04 42 22 00 00 60 35 6b a2 26 3d d9 65 84 43 75 ab 1a 0a 75 0e 87 42 1a c2 45 05 c8 ba 54 0f f5 ce 9d 64 0e 51 3c d7 34 0c ab 8b 61 41 c9 e0 79 57 15 f3 ae 26 12 12 01 00 00 75 d0 98 80 a8 4c 38 d4 59 d0 7d 5c 3a 1c 8a b6 99 d3 df fd 53 5f 60 91 57 25 54 b1 6a 68 d8 22 3d 16 b1 75 0a 87 c2 cd d5 7d db d5 f6 ee de fa 5d a4 ed 73 28 0d 17 ea 34 ac fa fd eb aa 1e 21 d1 bc ab 89 84 44 00 00 40 e5 d7 9e 4d 78 92 e5 c3 a1 8f fa aa 07 26 b9 bd be 6a 9d be fa 36 6b 9b 49 0d ab 44 a8 92 61 e1 50 3c f7 ba 19 ac 20 5a 47 69 58 59 c5 40 a5 a8 3a 85 Data Ascii: Q;y:/1^Hn'<M84,:U:CG97vXHtq\|pDB"`5k&=eCuuBETdQ<4aAyW&uL8Y}\:S_`W%Tjh"=u}]s(4!D@Mx&j6kIDaP< ZGiXY@:
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: 99 61 70 68 75 a8 4b 50 34 18 0e 0d 6b a7 5b 37 4d 9f 3f 94 4b cf d9 a8 20 ca cf e7 b5 bd 59 d5 30 24 8a fb c8 f9 9b 57 59 30 94 06 9b 83 af 5f ba 9b e2 a0 ec 9a 7e f8 41 d1 6b fa 33 43 ab 01 00 80 a9 d6 5c 35 7c cc 3f 6f 15 18 4a 1d ad 1c a3 06 4c c7 62 2c dd ad 2c aa 8c a2 95 e3 e8 a3 ef d7 2a 28 1a 16 0e 8d 6a a7 5b 27 2a 88 ba 17 ef f6 4e df 6b bd ce b3 88 d2 e7 5c 87 90 28 bd 6f 0c b6 ff c5 3d 26 ee 35 71 cf 89 10 3b 77 71 f2 66 64 c8 17 cf 3b 2a 89 0a 8a 79 44 4f fd f3 06 00 00 94 5a 6f d5 e9 c1 b6 17 3d 2f db bf bc 2c b2 88 dc 7f f8 c1 c8 bf bf 3c 7b 7b ff b9 c9 b0 ea f8 7d 5d 82 a2 91 e1 50 cd 06 6b 4f b3 f0 6e fa fc a1 54 df b0 ea cb 77 8d 78 ce 55 0e 89 e2 b1 5c 9e 9d 64 bb 93 0d de 27 b2 41 d5 8f 3f ce ee 31 79 b0 b7 73 70 d8 f7 3c ae ce cf 46 Data Ascii: aphuKP4k[7M?K Y0$WY0_~Ak3C\5\|?oJLb,,(j['Nk\(o=&5q;wqfd;*yDOZo=/,<{{}]PkOnTwxU\d'A?1ysp<F
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: 0b 14 96 d5 1e 52 44 1e 14 45 68 15 55 4e a3 2a 3d 22 30 ba 68 bd c9 9e ef e6 f6 76 d6 5a b5 b1 b9 d5 da 6a ff be 49 55 45 aa 87 4a 5c d0 d1 66 d6 2d 9c cb db cc 9a 5e 81 16 c1 4a 3e c4 3b 3f 97 b2 9d de 06 2a 86 e2 ef e7 b1 5d fd bc c4 bc b4 3c 18 ca 86 ed 9f 9e 14 0a c7 23 d8 ba ba 78 57 a4 c5 30 36 02 f8 97 ae 1a 00 00 20 5b 4f 56 e1 41 3c 79 f6 e2 69 ab 40 cb 43 b4 88 15 09 08 62 11 98 86 0a 05 df 51 5f ba 5e 50 d4 7e 5e 51 c9 30 6e 81 3b f8 9c f2 05 6d 7c 8f 08 00 b6 da 1f 11 22 6d ac 61 c5 91 f9 43 c5 65 83 d8 f7 0f 7a a1 63 b4 2d 16 19 e6 be 0e b2 d0 27 ab 36 bb ee 7e dc bc 77 cd 0c 13 d7 51 dc 23 aa 16 3e 66 f3 8f 1e 3c ca 2a 9d f2 d7 72 a7 7d af 28 12 60 1d 3c fc 60 ec 3d a5 eb 79 cc 7c fb e6 ab 2f 7f e6 ca 01 00 00 aa 52 41 14 ad 65 63 57 b1 d9 Data Ascii: RDEhUN="0hvZjIUEJ\f-^J>;?]<#xW06 [OVA<yi@CbQ_^P~^Q0n;m\|"maCezc-'6~wQ#>f<*r}(`<`=y\|/RAecW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.5	50040	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	385	OUT	GET /store/about/logo-steamworks.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:26 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:26 GMT Content-Type: image/svg+xml Content-Length: 4298 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-10ca" CF-Cache-Status: HIT Age: 751 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41deeaa4da27-MIA
2024-04-05 23:18:26 UTC	1070	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: 30 22 20 64 3d 22 4d 31 36 2e 36 2c 32 31 2e 34 76 39 2e 38 68 2d 32 2e 33 76 2d 39 2e 38 68 2d 33 76 2d 32 2e 31 68 38 2e 33 76 32 2e 31 48 31 36 2e 36 7a 22 2f 3e 0d 0a 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 33 2e 31 2c 33 31 2e 33 56 31 39 2e 33 68 37 2e 36 76 32 2e 31 68 2d 35 2e 33 76 32 2e 38 68 34 2e 35 76 32 2e 31 68 2d 34 2e 35 76 32 2e 39 68 35 2e 33 76 32 2e 31 48 32 33 2e 31 7a 22 2f 3e 0d 0a 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 34 31 2e 31 2c 33 31 2e 33 6c 2d 30 2e 37 2d 32 2e 31 68 2d 34 2e 31 6c 2d 30 2e 37 2c 32 2e 31 68 2d 32 2e 33 6c 34 2e 32 2d 31 31 2e 39 68 31 2e 38 6c 34 2e 32 2c 31 31 2e 39 48 34 31 2e 31 7a 20 4d 33 38 2e 34 2c 32 32 2e 38 6c 2d 31 2e 35 Data Ascii: 0" d="M16.6,21.4v9.8h-2.3v-9.8h-3v-2.1h8.3v2.1H16.6z"/><path class="st0" d="M23.1,31.3V19.3h7.6v2.1h-5.3v2.8h4.5v2.1h-4.5v2.9h5.3v2.1H23.1z"/><path class="st0" d="M41.1,31.3l-0.7-2.1h-4.1l-0.7,2.1h-2.3l4.2-11.9h1.8l4.2,11.9H41.1z M38.4,22.8l-1.5
2024-04-05 23:18:26 UTC	1369	IN	Data Raw: 33 2c 30 2e 32 2c 30 2e 36 2c 30 2e 33 2c 30 2e 38 63 30 2e 31 2c 30 2e 32 2c 30 2e 33 2c 30 2e 35 2c 30 2e 35 2c 30 2e 37 63 30 2e 36 2c 30 2e 36 2c 31 2e 33 2c 30 2e 39 2c 32 2e 32 2c 30 2e 39 73 31 2e 36 2d 30 2e 33 2c 32 2e 32 2d 30 2e 39 63 30 2e 32 2d 30 2e 32 2c 30 2e 34 2d 30 2e 34 2c 30 2e 35 2d 30 2e 37 0d 0a 09 09 09 09 73 30 2e 32 2d 30 2e 35 2c 30 2e 33 2d 30 2e 38 73 30 2e 31 2d 30 2e 37 2c 30 2e 31 2d 31 2e 31 63 30 2d 30 2e 34 2c 30 2d 31 2c 30 2d 31 2e 37 43 38 32 2e 39 2c 32 34 2e 36 2c 38 32 2e 39 2c 32 34 2c 38 32 2e 39 2c 32 33 2e 36 7a 22 2f 3e 0d 0a 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 39 34 2e 38 2c 33 31 2e 33 6c 2d 32 2e 37 2d 35 2e 35 68 2d 33 2e 32 76 35 2e 35 48 38 38 56 31 39 2e 33 68 34 Data Ascii: 3,0.2,0.6,0.3,0.8c0.1,0.2,0.3,0.5,0.5,0.7c0.6,0.6,1.3,0.9,2.2,0.9s1.6-0.3,2.2-0.9c0.2-0.2,0.4-0.4,0.5-0.7s0.2-0.5,0.3-0.8s0.1-0.7,0.1-1.1c0-0.4,0-1,0-1.7C82.9,24.6,82.9,24,82.9,23.6z"/><path class="st0" d="M94.8,31.3l-2.7-5.5h-3.2v5.5H88V19.3h4
2024-04-05 23:18:26 UTC	490	IN	Data Raw: 2c 32 39 2e 31 2c 31 31 38 2e 34 2c 32 39 2e 39 2c 31 31 37 2e 37 2c 33 30 2e 35 7a 22 2f 3e 0d 0a 09 09 3c 2f 67 3e 0d 0a 09 3c 2f 67 3e 0d 0a 09 3c 67 3e 0d 0a 09 09 3c 72 65 63 74 20 78 3d 22 31 33 37 22 20 63 6c 61 73 73 3d 22 73 74 30 22 20 77 69 64 74 68 3d 22 31 33 22 20 68 65 69 67 68 74 3d 22 31 33 22 2f 3e 0d 0a 09 09 3c 72 65 63 74 20 78 3d 22 31 32 37 2e 37 22 20 79 3d 22 31 32 2e 39 22 20 63 6c 61 73 73 3d 22 73 74 30 22 20 77 69 64 74 68 3d 22 39 2e 34 22 20 68 65 69 67 68 74 3d 22 39 2e 34 22 2f 3e 0d 0a 09 09 3c 72 65 63 74 20 78 3d 22 31 30 30 2e 31 22 20 79 3d 22 33 2e 31 22 20 63 6c 61 73 73 3d 22 73 74 30 22 20 77 69 64 74 68 3d 22 36 2e 37 22 20 68 65 69 67 68 74 3d 22 36 2e 37 22 2f 3e 0d 0a 09 3c 2f 67 3e 0d 0a 09 3c 67 3e 0d 0a 09 Data Ascii: ,29.1,118.4,29.9,117.7,30.5z"/></g></g><g><rect x="137" class="st0" width="13" height="13"/><rect x="127.7" y="12.9" class="st0" width="9.4" height="9.4"/><rect x="100.1" y="3.1" class="st0" width="6.7" height="6.7"/></g><g>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.5	50042	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	384	OUT	GET /store/about/icon-steamchat.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:26 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:26 GMT Content-Type: image/svg+xml Content-Length: 775 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-307" CF-Cache-Status: HIT Age: 1043 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41dfdf3f6db0-MIA
2024-04-05 23:18:26 UTC	775	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.5	50043	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	385	OUT	GET /store/about/icon-broadcasts.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:26 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:26 GMT Content-Type: image/svg+xml Content-Length: 1536 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-600" CF-Cache-Status: HIT Age: 5047 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41e02d5e5d10-MIA
2024-04-05 23:18:26 UTC	1070	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:26 UTC	466	IN	Data Raw: 30 2e 38 56 31 30 2e 36 43 32 31 2e 38 2c 31 30 2e 31 2c 32 31 2e 34 2c 39 2e 37 2c 32 30 2e 39 2c 39 2e 37 4c 32 30 2e 39 2c 39 2e 37 7a 0d 0a 09 20 4d 32 34 2e 33 2c 31 30 2e 36 63 30 2e 35 2c 30 2c 30 2e 38 2c 30 2e 34 2c 30 2e 38 2c 30 2e 38 63 30 2c 30 2e 35 2d 30 2e 34 2c 30 2e 38 2d 30 2e 38 2c 30 2e 38 63 2d 30 2e 35 2c 30 2d 30 2e 38 2d 30 2e 34 2d 30 2e 38 2d 30 2e 38 43 32 33 2e 34 2c 31 31 2c 32 33 2e 38 2c 31 30 2e 36 2c 32 34 2e 33 2c 31 30 2e 36 20 4d 32 34 2e 33 2c 39 2e 37 0d 0a 09 63 2d 30 2e 39 2c 30 2d 31 2e 37 2c 30 2e 38 2d 31 2e 37 2c 31 2e 37 73 30 2e 38 2c 31 2e 37 2c 31 2e 37 2c 31 2e 37 73 31 2e 37 2d 30 2e 38 2c 31 2e 37 2d 31 2e 37 53 32 35 2e 32 2c 39 2e 37 2c 32 34 2e 33 2c 39 2e 37 4c 32 34 2e 33 2c 39 2e 37 7a 20 4d 32 34 Data Ascii: 0.8V10.6C21.8,10.1,21.4,9.7,20.9,9.7L20.9,9.7z M24.3,10.6c0.5,0,0.8,0.4,0.8,0.8c0,0.5-0.4,0.8-0.8,0.8c-0.5,0-0.8-0.4-0.8-0.8C23.4,11,23.8,10.6,24.3,10.6 M24.3,9.7c-0.9,0-1.7,0.8-1.7,1.7s0.8,1.7,1.7,1.7s1.7-0.8,1.7-1.7S25.2,9.7,24.3,9.7L24.3,9.7z M24

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.5	50044	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	383	OUT	GET /store/about/icon-gamehubs.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:26 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:26 GMT Content-Type: image/svg+xml Content-Length: 1693 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-69d" CF-Cache-Status: HIT Age: 5047 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41e03b570a02-MIA
2024-04-05 23:18:26 UTC	1070	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 39 2e 37 32 34 22 20 68 65 69 67 68 74 3d 22 33 39 2e 37 32 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 2e 37 32 34 20 33 39 2e 37 32 36 22 3e 0d 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 31 31 32 34 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 31 31 32 34 22 20 64 3d 22 4d 31 35 37 31 2e 38 38 35 2c 32 35 37 33 2e 33 34 33 61 34 2e 39 36 36 2c 34 2e 39 36 36 2c 30 2c 31 2c 30 2d 37 2e 32 2c 30 2c 37 2e 35 2c 37 2e 35 2c 30 2c 30 2c 30 2d 31 2e 33 2e 39 31 37 2c 38 2e 37 34 39 2c 38 2e 37 34 39 2c 30 2c 30 2c 30 2d 33 2e 34 38 34 2d 33 2e 33 33 38 2c 36 2e 32 30 37 2c 36 2e 32 30 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="39.724" height="39.726" viewBox="0 0 39.724 39.726"> <path id="Path_1124" data-name="Path 1124" d="M1571.885,2573.343a4.966,4.966,0,1,0-7.2,0,7.5,7.5,0,0,0-1.3.917,8.749,8.749,0,0,0-3.484-3.338,6.207,6.207
2024-04-05 23:18:26 UTC	623	IN	Data Raw: 2e 39 34 2c 32 35 38 30 2e 34 38 33 5a 6d 32 32 2e 33 34 35 2d 31 33 2e 30 33 34 61 32 2e 34 38 33 2c 32 2e 34 38 33 2c 30 2c 31 2c 31 2d 32 2e 34 38 33 2c 32 2e 34 38 33 41 32 2e 34 38 32 2c 32 2e 34 38 32 2c 30 2c 30 2c 31 2c 31 35 36 38 2e 32 38 34 2c 32 35 36 37 2e 34 34 38 5a 6d 2d 31 32 2e 34 31 34 2d 34 2e 39 36 35 61 33 2e 37 32 34 2c 33 2e 37 32 34 2c 30 2c 31 2c 31 2d 33 2e 37 32 34 2c 33 2e 37 32 34 41 33 2e 37 32 35 2c 33 2e 37 32 35 2c 30 2c 30 2c 31 2c 31 35 35 35 2e 38 37 31 2c 32 35 36 32 2e 34 38 33 5a 6d 36 2e 32 30 37 2c 32 34 2e 38 32 37 68 2d 31 2e 32 34 31 76 2d 38 2e 30 36 39 61 2e 36 32 31 2e 36 32 31 2c 30 2c 31 2c 30 2d 31 2e 32 34 31 2c 30 76 31 38 68 2d 33 2e 31 76 2d 39 2e 39 33 31 61 2e 36 32 31 2e 36 32 31 2c 30 2c 30 2c 30 Data Ascii: .94,2580.483Zm22.345-13.034a2.483,2.483,0,1,1-2.483,2.483A2.482,2.482,0,0,1,1568.284,2567.448Zm-12.414-4.965a3.724,3.724,0,1,1-3.724,3.724A3.725,3.725,0,0,1,1555.871,2562.483Zm6.207,24.827h-1.241v-8.069a.621.621,0,1,0-1.241,0v18h-3.1v-9.931a.621.621,0,0,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.5	50038	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	1431	OUT	GET /webvisor/95654225?wv-part=1&wv-type=7&wmode=0&wv-hit=906334581&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=270149841&browser-info=we%3A1%3Aet%3A1712359104%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011823%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359104&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:26 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:26 GMT Expires: Fri, 05-Apr-2024 23:18:26 GMT Last-Modified: Fri, 05-Apr-2024 23:18:26 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.5	50045	23.47.27.74	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	1163	OUT	GET /IClientMetricsService/ReportClientError/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
2024-04-05 23:18:26 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Content-Type: text/html; charset=UTF-8 Content-Length: 147 Allow: POST Expires: Fri, 05 Apr 2024 23:18:26 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Apr 2024 23:18:26 GMT Connection: close
2024-04-05 23:18:26 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 54 68 69 73 20 41 50 49 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 61 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Method Not Allowed</title></head><body><h1>Method Not Allowed</h1>This API must be called with a HTTP POST request</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.5	50046	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	388	OUT	GET /store/about/icon-steamworkshop.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:27 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:26 GMT Content-Type: image/svg+xml Content-Length: 1472 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-5c0" CF-Cache-Status: HIT Age: 5047 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41e25a1f370b-MIA
2024-04-05 23:18:27 UTC	1070	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:27 UTC	402	IN	Data Raw: 2e 34 63 30 2c 30 2e 39 2c 30 2e 38 2c 31 2e 37 2c 31 2e 37 2c 31 2e 37 68 33 2e 34 63 30 2e 39 2c 30 2c 31 2e 37 2d 30 2e 38 2c 31 2e 37 2d 31 2e 37 0d 0a 09 76 2d 33 2e 34 43 32 38 2e 36 2c 31 38 2e 39 2c 32 37 2e 38 2c 31 38 2e 31 2c 32 36 2e 39 2c 31 38 2e 31 7a 20 4d 32 36 2e 31 2c 37 2e 31 63 30 2e 35 2c 30 2c 30 2e 39 2c 30 2e 34 2c 30 2e 39 2c 30 2e 39 63 30 2c 30 2e 35 2d 30 2e 34 2c 30 2e 39 2d 30 2e 39 2c 30 2e 39 63 2d 30 2e 35 2c 30 2d 30 2e 39 2d 30 2e 34 2d 30 2e 39 2d 30 2e 39 0d 0a 09 43 32 35 2e 32 2c 37 2e 35 2c 32 35 2e 36 2c 37 2e 31 2c 32 36 2e 31 2c 37 2e 31 7a 20 4d 33 2e 39 2c 38 2e 38 63 2d 30 2e 35 2c 30 2d 30 2e 39 2d 30 2e 34 2d 30 2e 39 2d 30 2e 39 63 30 2d 30 2e 35 2c 30 2e 34 2d 30 2e 39 2c 30 2e 39 2d 30 2e 39 63 30 2e 35 Data Ascii: .4c0,0.9,0.8,1.7,1.7,1.7h3.4c0.9,0,1.7-0.8,1.7-1.7v-3.4C28.6,18.9,27.8,18.1,26.9,18.1z M26.1,7.1c0.5,0,0.9,0.4,0.9,0.9c0,0.5-0.4,0.9-0.9,0.9c-0.5,0-0.9-0.4-0.9-0.9C25.2,7.5,25.6,7.1,26.1,7.1z M3.9,8.8c-0.5,0-0.9-0.4-0.9-0.9c0-0.5,0.4-0.9,0.9-0.9c0.5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.5	50047	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	386	OUT	GET /store/about/icon-steammobile.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:27 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:26 GMT Content-Type: image/svg+xml Content-Length: 1032 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-408" CF-Cache-Status: HIT Age: 213 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41e26fbbdaf9-MIA
2024-04-05 23:18:27 UTC	1032	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.5	50048	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	386	OUT	GET /store/about/icon-earlyaccess.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:27 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:27 GMT Content-Type: image/svg+xml Content-Length: 909 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-38d" CF-Cache-Status: HIT Age: 5048 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41e2cf228758-MIA
2024-04-05 23:18:27 UTC	909	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.5	50049	23.61.62.148	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	744	OUT	POST /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive Content-Length: 193 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryQrutZMdu1iwf2QhU sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://store.steampowered.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:26 UTC	193	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 51 72 75 74 5a 4d 64 75 31 69 77 66 32 51 68 55 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 6e 70 75 74 5f 70 72 6f 74 6f 62 75 66 5f 65 6e 63 6f 64 65 64 22 0d 0a 0d 0a 43 49 6a 36 36 66 32 4c 7a 39 76 76 78 41 45 53 45 50 76 4f 35 72 76 58 65 65 48 42 66 68 61 65 50 47 75 6a 52 6c 45 3d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 51 72 75 74 5a 4d 64 75 31 69 77 66 32 51 68 55 2d 2d 0d 0a Data Ascii: ------WebKitFormBoundaryQrutZMdu1iwf2QhUContent-Disposition: form-data; name="input_protobuf_encoded"CIj66f2Lz9vvxAESEPvO5rvXeeHBfhaePGujRlE=------WebKitFormBoundaryQrutZMdu1iwf2QhU--
2024-04-05 23:18:27 UTC	337	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 2 Access-Control-Allow-Origin: https://store.steampowered.com Vary: Origin Access-Control-Expose-Headers: X-eresult, X-error_message X-eresult: 1 Expires: Fri, 05 Apr 2024 23:18:27 GMT Date: Fri, 05 Apr 2024 23:18:27 GMT Connection: close
2024-04-05 23:18:27 UTC	2	IN	Data Raw: 28 00 Data Ascii: (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.5	50051	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	384	OUT	GET /store/about/icon-languages.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:27 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:27 GMT Content-Type: image/svg+xml Content-Length: 679 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-2a7" CF-Cache-Status: HIT Age: 3961 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41e35abb127b-MIA
2024-04-05 23:18:27 UTC	679	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 39 2e 37 32 33 22 20 68 65 69 67 68 74 3d 22 32 34 2e 38 32 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 2e 37 32 33 20 32 34 2e 38 32 38 22 3e 0d 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 31 31 32 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 31 31 32 32 22 20 64 3d 22 4d 36 36 36 38 2e 38 36 34 2c 36 37 30 35 2e 30 36 37 61 31 2e 38 36 31 2c 31 2e 38 36 31 2c 30 2c 30 2c 30 2d 33 2e 33 38 37 2e 30 34 31 6c 2d 39 2e 33 31 31 2c 32 31 2e 31 61 31 2e 38 36 31 2c 31 2e 38 36 31 2c 30 2c 30 2c 30 2c 2e 39 35 33 2c 32 2e 34 35 35 2c 31 2e 38 33 37 2c 31 2e 38 33 37 2c 30 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="39.723" height="24.828" viewBox="0 0 39.723 24.828"> <path id="Path_1122" data-name="Path 1122" d="M6668.864,6705.067a1.861,1.861,0,0,0-3.387.041l-9.311,21.1a1.861,1.861,0,0,0,.953,2.455,1.837,1.837,0,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.5	50052	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	386	OUT	GET /store/about/icon-controllers.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:27 UTC	298	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:27 GMT Content-Type: image/svg+xml Content-Length: 1345 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-541" CF-Cache-Status: HIT Age: 214 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41e399402251-MIA
2024-04-05 23:18:27 UTC	1071	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 33 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-04-05 23:18:27 UTC	274	IN	Data Raw: 31 38 2c 31 34 2e 37 7a 20 4d 32 35 2e 32 2c 38 2e 33 48 34 2e 38 0d 0a 09 63 2d 30 2e 39 2c 30 2d 31 2e 37 2c 30 2e 38 2d 31 2e 37 2c 31 2e 37 76 31 30 2e 32 63 30 2c 30 2e 39 2c 30 2e 38 2c 31 2e 37 2c 31 2e 37 2c 31 2e 37 68 32 30 2e 34 63 30 2e 39 2c 30 2c 31 2e 37 2d 30 2e 38 2c 31 2e 37 2d 31 2e 37 56 31 30 43 32 36 2e 39 2c 39 2e 31 2c 32 36 2e 31 2c 38 2e 33 2c 32 35 2e 32 2c 38 2e 33 20 4d 32 35 2e 32 2c 36 2e 36 0d 0a 09 63 31 2e 39 2c 30 2c 33 2e 34 2c 31 2e 35 2c 33 2e 34 2c 33 2e 34 76 31 30 2e 32 63 30 2c 31 2e 39 2d 31 2e 35 2c 33 2e 34 2d 33 2e 34 2c 33 2e 34 48 34 2e 38 63 2d 31 2e 39 2c 30 2d 33 2e 34 2d 31 2e 35 2d 33 2e 34 2d 33 2e 34 56 31 30 63 30 2d 31 2e 39 2c 31 2e 35 2d 33 2e 34 2c 33 2e 34 2d 33 2e 34 48 32 35 2e 32 4c 32 35 2e Data Ascii: 18,14.7z M25.2,8.3H4.8c-0.9,0-1.7,0.8-1.7,1.7v10.2c0,0.9,0.8,1.7,1.7,1.7h20.4c0.9,0,1.7-0.8,1.7-1.7V10C26.9,9.1,26.1,8.3,25.2,8.3 M25.2,6.6c1.9,0,3.4,1.5,3.4,3.4v10.2c0,1.9-1.5,3.4-3.4,3.4H4.8c-1.9,0-3.4-1.5-3.4-3.4V10c0-1.9,1.5-3.4,3.4-3.4H25.2L25.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.5	50053	172.64.145.151	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:26 UTC	382	OUT	GET /store/about/icon-payment.svg HTTP/1.1 Host: cdn.cloudflare.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:27 UTC	297	IN	HTTP/1.1 200 OK Date: Fri, 05 Apr 2024 23:18:27 GMT Content-Type: image/svg+xml Content-Length: 727 Connection: close Last-Modified: Wed, 28 Jun 2023 04:07:12 GMT ETag: "649bb1f0-2d7" CF-Cache-Status: HIT Age: 881 Accept-Ranges: bytes Server: cloudflare CF-RAY: 86fd41e3bbc9a4ca-MIA
2024-04-05 23:18:27 UTC	727	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 39 2e 37 32 34 22 20 68 65 69 67 68 74 3d 22 32 39 2e 37 39 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 39 2e 37 32 34 20 32 39 2e 37 39 33 22 3e 0d 0a 20 20 3c 70 61 74 68 20 69 64 3d 22 50 61 74 68 5f 31 31 32 33 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 50 61 74 68 20 31 31 32 33 22 20 64 3d 22 4d 35 34 36 2e 37 35 38 2c 32 30 38 30 48 35 31 36 2e 39 36 35 61 34 2e 39 37 32 2c 34 2e 39 37 32 2c 30 2c 30 2c 30 2d 34 2e 39 36 35 2c 34 2e 39 36 36 76 31 39 2e 38 36 32 61 34 2e 39 37 32 2c 34 2e 39 37 32 2c 30 2c 30 2c 30 2c 34 2e 39 36 35 2c 34 2e 39 36 36 68 32 39 2e 37 39 33 61 34 2e 39 37 32 2c 34 2e 39 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="39.724" height="29.793" viewBox="0 0 39.724 29.793"> <path id="Path_1123" data-name="Path 1123" d="M546.758,2080H516.965a4.972,4.972,0,0,0-4.965,4.966v19.862a4.972,4.972,0,0,0,4.965,4.966h29.793a4.972,4.97

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.5	50050	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:27 UTC	2058	OUT	POST /watch/95654225/1?page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&charset=utf-8&hittoken=1712359091_259858c908bfc3ca8ba1a9cbe64dc7c441cb071ec0930695c27d959f5f357d7f&browser-info=nb%3A1%3Acl%3A1385%3Aar%3A1%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1290%3Acn%3A1%3Adp%3A1%3Als%3A1173339980762%3Ahid%3A906334581%3Az%3A120%3Ai%3A20240406011825%3Aet%3A1712359106%3Ac%3A1%3Arn%3A484849618%3Arqn%3A15%3Au%3A1712359037123674141%3Aw%3A1270x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2644%2C2644%2C2%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1712359087549%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1712359106&t=gdpr(14)clc(0-0-0)rqnt(2)eco(21037572)lt(87100)aw(0)rcm(0)cdl(na)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:27 UTC	757	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:27 GMT Expires: Fri, 05-Apr-2024 23:18:27 GMT Last-Modified: Fri, 05-Apr-2024 23:18:27 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.5	50054	23.47.27.74	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:27 UTC	1168	OUT	GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
2024-04-05 23:18:27 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Content-Type: text/html; charset=UTF-8 Content-Length: 147 Allow: POST Expires: Fri, 05 Apr 2024 23:18:27 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Apr 2024 23:18:27 GMT Connection: close
2024-04-05 23:18:27 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 54 68 69 73 20 41 50 49 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 61 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Method Not Allowed</title></head><body><h1>Method Not Allowed</h1>This API must be called with a HTTP POST request</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.5	50055	23.61.62.148	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:28 UTC	744	OUT	POST /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive Content-Length: 193 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundary04V5vdiS4sXWGm8g sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://store.steampowered.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://store.steampowered.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-05 23:18:28 UTC	193	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 30 34 56 35 76 64 69 53 34 73 58 57 47 6d 38 67 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 69 6e 70 75 74 5f 70 72 6f 74 6f 62 75 66 5f 65 6e 63 6f 64 65 64 22 0d 0a 0d 0a 43 4a 76 32 6e 66 4b 65 77 4b 76 5a 77 41 45 53 45 4d 6e 34 47 70 36 51 32 33 67 77 4a 56 6e 36 65 48 46 6b 6a 73 30 3d 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 30 34 56 35 76 64 69 53 34 73 58 57 47 6d 38 67 2d 2d 0d 0a Data Ascii: ------WebKitFormBoundary04V5vdiS4sXWGm8gContent-Disposition: form-data; name="input_protobuf_encoded"CJv2nfKewKvZwAESEMn4Gp6Q23gwJVn6eHFkjs0=------WebKitFormBoundary04V5vdiS4sXWGm8g--
2024-04-05 23:18:29 UTC	337	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 2 Access-Control-Allow-Origin: https://store.steampowered.com Vary: Origin Access-Control-Expose-Headers: X-eresult, X-error_message X-eresult: 1 Expires: Fri, 05 Apr 2024 23:18:29 GMT Date: Fri, 05 Apr 2024 23:18:29 GMT Connection: close
2024-04-05 23:18:29 UTC	2	IN	Data Raw: 28 00 Data Ascii: (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.5	50056	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:29 UTC	1619	OUT	POST /webvisor/95654225?wv-part=1&wv-check=54053&wv-type=0&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=572967889&browser-info=we%3A1%3Aet%3A1712359108%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011827%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359108&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 20 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://steamfiller.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://steamfiller.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049
2024-04-05 23:18:29 UTC	20	OUT	Data Raw: 77 76 2d 64 61 74 61 3d 44 31 51 4f 56 41 2d 39 41 51 5f 5f Data Ascii: wv-data=D1QOVA-9AQ__
2024-04-05 23:18:29 UTC	467	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://steamfiller.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:29 GMT Expires: Fri, 05-Apr-2024 23:18:29 GMT Last-Modified: Fri, 05-Apr-2024 23:18:29 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.5	50057	23.47.27.74	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:29 UTC	1168	OUT	GET /IAuthenticationService/PollAuthSessionStatus/v1 HTTP/1.1 Host: api.steampowered.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ak_bmsc=6723C50C03B111CFB1C0DABC5073B3A5~000000000000000000000000000000~YAAQuQYsF4UDwayOAQAAwuqNsBfE1ub/ctAZ5wIyIP/svMNiygeyp7vHFoFNTDP7XIAY49Mz/wa4OVPgPV5NnqjkmzewsZwNVI1NSSmvCsLzUj8/kneAdFdGm8dTzOOYsKFtjQCmEsRfa4TtLlivkK7PYvtYBf5sarHc0BvV1Dys7h40LLIpbF3lLPvH6JBdW5gKyTqWDYMeJtF7DF0aSiFKcgNdSPUGzmBpiwvzQKRjDUXhlst9i9mcyaaoHUfLRU0i7rjRNc/kK40aZdDOOuPJUtlTy9qMVUEGpYID30B1C8pkVsDdCZmih0lYJ1dcHrZw8cEpalCfO4hp1jVJsNRWR7/QRMr+EI1vL9lz1auK/8xqH2eAsUoFB7vGU/eVh26p; bm_sv=7DBAC4EBAC149DE806C7AA3398F0CF61~YAAQrgYsF379U5yOAQAAJD2OsBetWeY2FBhOXlzGUO/r2Pq6J8ubeFfsmSAeA4FPjiN3vo/kKGa/NOKezoAk/0AaFBuCmsEgpFg9tQSrdif4mjuP/d5YyLyE+4lMvHB/aDSi9q6ohDOfoiIOovwCPwYeQiKCgKJTQILVrEX5ixg+C/4B4eqsqsgryhT64qrXSBdygn7JjShMusQAUoX2Rn2KfGpq2EaHFKHITAAeHVJTQFJTAAnVmnN0k6N8lqwzNZt3dVAp~1
2024-04-05 23:18:29 UTC	284	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Content-Type: text/html; charset=UTF-8 Content-Length: 147 Allow: POST Expires: Fri, 05 Apr 2024 23:18:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 05 Apr 2024 23:18:29 GMT Connection: close
2024-04-05 23:18:29 UTC	147	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 54 68 69 73 20 41 50 49 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 61 20 48 54 54 50 20 50 4f 53 54 20 72 65 71 75 65 73 74 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Method Not Allowed</title></head><body><h1>Method Not Allowed</h1>This API must be called with a HTTP POST request</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.5	50058	93.158.134.119	443	6584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-05 23:18:30 UTC	1446	OUT	GET /webvisor/95654225?wv-part=1&wv-check=54053&wv-type=0&wmode=0&wv-hit=825216580&page-url=https%3A%2F%2Fsteamfiller.ru%2Fpages%2Ffaq%2F&rn=572967889&browser-info=we%3A1%3Aet%3A1712359108%3Aw%3A1270x907%3Av%3A1290%3Az%3A120%3Ai%3A20240406011827%3Au%3A1712359037123674141%3Avf%3A6q5vo8idydw3m5q59jr2ws8gr%3Ast%3A1712359108&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=1334679616fake; yashr=4645585121712359039; yabs-sid=610093571712359040; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjEzMiIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xMzIiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjEzMiIi; yandexuid=2756805351712359034; yuidss=2756805351712359034; i=Z4ptqQDTancA6jhMxN6bfY7/E+sOLSvoJE/hlzgBS9ohHhIhq9Ig+evKhX59OdvIyEfSl01vTfs6nz3ZMrJA1ptl5jY=; sync_cookie_ok=synced; _yasc=Yo1Wpzkau4cxK/weGQBt/t9bEFkHyuyd/EnnCcbBn/bmS4ZCYnHq7J/14FJd0o2jsg==; yp=1712445442.yu.2756805351712359034; ymex=1714951042.oyu.2756805351712359034#1743895049.yrts.1712359049; receive-cookie-deprecation=1
2024-04-05 23:18:30 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Fri, 05 Apr 2024 23:18:30 GMT Expires: Fri, 05-Apr-2024 23:18:30 GMT Last-Modified: Fri, 05-Apr-2024 23:18:30 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-04-05 23:18:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Target ID:	0
Start time:	01:17:00
Start date:	06/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	01:17:02
Start date:	06/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2348 --field-trial-handle=2304,i,12457500954807628585,7784865807783938357,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	01:17:06
Start date:	06/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://steamfiller.ru/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	01:18:16
Start date:	06/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s.team/q/1/13885351924452522779
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	01:18:17
Start date:	06/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1228 --field-trial-handle=1992,i,13542767117627433101,2361943962461226785,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://steamfiller.ru/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Windows Analysis Report
https://steamfiller.ru/